Name

nnmldap.ovpl — reload or view LDAP configuration.

SYNOPSIS

nnmldap.ovpl -reload | -info | -diagnose <username> | -encrypt <password>

DESCRIPTION

nnmldap.ovpl is a script that enables you to reload, view or diagnose changes to the Lightweight Directory Access Protocol (LDAP) sign-in configuration without restarting jboss.

Parameters

nnmldap.ovpl supports the following options:

-info

Displays the LDAP configuration, such as

Configuration=providerURL:"ldap://example.com:636/". Number of available Incident assignment users:0

-reload

Reloads the LDAP configuration.

-diagnose <username>

Verifies configuration in the ldap.properties file by attempting to access <username> in the Directory Service using the LDAP configuration parameters. This command will respond with information to help you diagnose LDAP configuration problems.

<username> must be a valid username in the Directory Service. It is the same name that is used in the NNMi console username prompt of the NNMi login screen.

-encrypt <password>

Encrypts the supplied LDAP bind password so that it can be safely stored in the ldap.properties file.

The output of this command should be copied into the bindCredential property in the ldap.properties file. Encrypted passwords start with the {ENC} prefix.

Encrypted passwords can only be decrypted by the same NNMi which created them. If the database is reset or the properties are copied to a new NNMi system then this command will need to be re-run to generate a new encrypted password. The exception to this is if you are using NNMi in an application failover or High Availability (HA) configuration. In application failover or HA configurations, the encrypted password generated by the nnmldap.ovpl script is valid on both NNMi management servers (since the database is the same on both NNMi management servers).

EXAMPLES

nnmldap.ovpl -info

Returns the current LDAP configuration.

nnmldap.ovpl -reload

Reads modifications to the ldap.properties file (such as enabling or disabling LDAP).

nnmldap.ovpl -diagnose <username>

Shows configuration parameters for the ldap.properties file, and verifies that information can be extracted from the Directory Service.

nnmldap.ovpl -encrypt password

Returns the encrypted value of the supplied password string. For example: {ENC}Mgnb1w007XYYenHvAFf3dQ==

AUTHOR

nnmldap.ovpl was developed by Hewlett Packard Enterprise.

SEE ALSO

nnmsso.ovpl(1M), ldap.properties(4).

Return to Reference Pages Index