Enabling LDAP directory services

NoteLDAP is only supported with reentrant libraries. You must use isql_r, instead of isql, when connecting to a server using LDAP directory services.

StepsSetting up to use a directory service

  1. Configure the LDAP server according to the vendor-supplied documentation.

  2. Add the LDAP library directory to your path for your platform. For example:

    PATH=%PATH%:%SYBASE%\%SYBASE_OCS%\lib3p
    
  3. Configure the libtcl*.cfg file to use directory services. Use any standard ASCII text editor to:

    1. ldap=libsybdldap.dll ldap://host:port/ditbase??scope????
           bindname=username password
      

      For example:

      [DIRECTORY] 
      
      ldap=libsybdldap.dll ldap://huey:11389/dc=sybase,dc=com??
           one????bindname=cn=Manager,dc=sybase,dc=com secret
      

      one” indicates the scope of a search that retrieves entries one level below the DIT base. Table 5-3 defines the keywords for the ldapurl variables.

      Table 5-3: ldapurl variables

      Keyword

      Description

      Default

      CS_* property

      host (required)

      The host name or IP address of the machine running the LDAP server

      None

      port

      The port number on which the LDAP server is listening

      389

      ditbase (required)

      The default DIT base

      None

      CS_DS_DITBASE

      username

      Distinguished name (DN) of the user to authenticate

      NULL (anonymous authentication)

      CS_DS_PRINCIPAL

      password

      Password of the user to be authenticated

      NULL (anonymous authentication)

      CS_DS_PASSWORD

    2. Verify that the PATH environment variable points to %SYBASE%\%SYBASE_OCS%\lib3p.

    3. Add your server entry to the LDAP server using dsedit. See “Making and modifying server entries” and “Adding a server to the directory services”.