Chapter 3 System Configuration 23
Refer to the Solaris OS documentation collection for more information on LDAP
servers.
If the LDAP client is configured and enabled on the Service Processor, lookups are
first performed locally, and then through the LDAP server. If you execute the
setprivileges command for a user without specifying privileges, the command
deletes any local privilege data for that user. Subsequently, the user’s privileges will
be looked up in LDAP, if LDAP privilege lookup is enabled. If you specify privilege
as none, that user will have no privileges, regardless of privilege data in LDAP.
These commands manage the Service Processor LDAP service:
■ setlookup
■ setldap
Note that passwords stored in the LDAP repository must use either UNIX crypt or
MD5 encryption schemes.
Once you have configured the Service Processor to use the LDAP service, it does not
require day-to-day management.
Time Synchronization and NTP Service
The Network Time Protocol (NTP) provides the correct timestamp for all systems on
a network by synchronizing the clocks of all the systems. NTP service is provided by
an NTP daemon.
To use the NTP service, the Service Processor can be set up as an NTP client, using
the services of a remote NTP server. The Service Processor also can be set up as an
NTP server, as can an external resource.
Note – Check the Product Notes for your server, which may contain important
information about using the XSCF as NTP server.