[Contents] [Prev] [Next] [Index] [Report an Error] [No Frames]


Enabling LDAP Authentication

Use this procedure to enable authentication through the LDAP directories. The SRC software requires that the LDAP be enabled as an external database. The LDAP host is used for authentication.

NOTE: The LDAP is not required for integration with just the JUNOSe router.


To enable an LDAP host as an external database used by the Steel-Belted Radius/SPE server.

  1. Log in as root.
  2. Return to the working directory (directory into which the installation files were originally copied; for example, /tmp/funk).
  3. Unconfigure the initial configuration of Steel-Belted Radius/SPE by running install.sh script with the -unconfig option. Enter the server directory.
  4. # sh install.sh -unconfig
    
    Enter server directory [<working-directory>/radius]: /opt/UMC/SPE
    
    Removing  /etc/rc2.d/S90radius /etc/rc2.d/K90radius
    
    Removing RADIUS entries from /etc/services
    
    Removing RADIUS entries from /etc/inetd.conf
    
    kill -HUP 124
    
    Unconfig completed.
    
    
    
  5. Configure Steel-Belted Radius/SPE with the external database by running install.sh with the -config option. You must enter the server directory again. In addition, you must select LDAP as the external database, and you must enter the path /opt/UMC/SPE as the location of the LDAP libraries. In the following example, no SNMP support is configured (see the Steel-Belted Radius/SPE server manuals for more information about SNMP support).
  6. # sh install.sh -config
    
    Enter server directory [[<working-directory>/radius]: /opt/UMC/SPE
    
    Creating S90radius.
    
    Setting the default radius directory /opt/UMC/SPE
    
    Do you want to configure SNMP? [n]: n
    
    Do you want to configure for use with External SQL Databases? [n]: n
    
    Do you want to configure LDAP? [n]: y
    
    Enter path for LDAP library files. [/usr/lib/]: /opt/UMC/SPE
    
    Configuration of LDAP complete. Copying S90radius to /opt/UMC/SPE
    
    Creating link.
    
    Radius server configuration completed. Configuring admin...
    
    Modifying  /etc/services  ... 
    
    Modifying  /etc/inetd.conf  ... 
    
    kill -HUP 133
    
    Admin configuration completed.
    
    
    
  7. Copy the dictionary and vendor files (dictiona.dcm, juniper.dct and vendor.ini) for the JUNOSe release from the folder steel_belted_radius in the SRC software distribution, into the installation directory (/opt/UMC/SPE).

[Contents] [Prev] [Next] [Index] [Report an Error] [No Frames]