Enabling LDAP Authentication
Use this procedure to enable authentication through the LDAP directories. The SRC software requires that the LDAP be enabled as an external database. The LDAP host is used for authentication.
NOTE: The LDAP is not required for integration with just the JUNOSe router.
To enable an LDAP host as an external database used by the Steel-Belted Radius/SPE server.
- Log in as
root
.- Return to the working directory (directory into which the installation files were originally copied; for example, /tmp/funk).
- Unconfigure the initial configuration of Steel-Belted Radius/SPE by running install.sh script with the -unconfig option. Enter the server directory.
# sh install.sh -unconfigEnter server directory [<working-directory>/radius]: /opt/UMC/SPERemoving /etc/rc2.d/S90radius /etc/rc2.d/K90radiusRemoving RADIUS entries from /etc/servicesRemoving RADIUS entries from /etc/inetd.confkill -HUP 124Unconfig completed.- Configure Steel-Belted Radius/SPE with the external database by running install.sh with the -config option. You must enter the server directory again. In addition, you must select LDAP as the external database, and you must enter the path /opt/UMC/SPE as the location of the LDAP libraries. In the following example, no SNMP support is configured (see the Steel-Belted Radius/SPE server manuals for more information about SNMP support).
# sh install.sh -configEnter server directory [[<working-directory>/radius]: /opt/UMC/SPECreating S90radius.Setting the default radius directory /opt/UMC/SPEDo you want to configure SNMP? [n]: nDo you want to configure for use with External SQL Databases? [n]: nDo you want to configure LDAP? [n]: yEnter path for LDAP library files. [/usr/lib/]: /opt/UMC/SPEConfiguration of LDAP complete. Copying S90radius to /opt/UMC/SPECreating link.Radius server configuration completed. Configuring admin...Modifying /etc/services ...Modifying /etc/inetd.conf ...kill -HUP 133Admin configuration completed.- Copy the dictionary and vendor files (dictiona.dcm, juniper.dct and vendor.ini) for the JUNOSe release from the folder steel_belted_radius in the SRC software distribution, into the installation directory (/opt/UMC/SPE).