You can use /usr/sbin/nxdrv-config to change the driver shim configuration. When you run this command, you are prompted for the function to perform.
> nxdrv-config Which configuration do you want to perform? 1) Set the Remote Loader and Driver object passwords 2) Configure the driver for Secure Sockets Layer (SSL) 3) Configure the driver to allow for remote client publishing, such as NIS or NIS+ clients 4) Extend the schema for Identity Manager (must be run on a Metadirectory server) 5) Configure PAM for publishing password changes 6) Configure LAM for publishing password changes Select one configuration option [q/?]:
Enter the number of the function you want to configure, then respond to the prompts as discussed in the following toopic:
The nxdrv-config command prompts you to enter and confirm the Remote Loader password and the Driver object password.
Enter Remote Loader password: Confirm Remote Loader password: Enter Driver object password: Confirm Driver object password:
The Remote Loader password is used by the Metadirectory engine to authenticate itself to the driver shim (embedded Remote Loader). The Driver object password is used by the driver shim to authenticate itself to the Metadirectory engine.
The Remote Loader and Driver object passwords set by nxdrv-config are stored on the connected system. The Remote Loader and Driver object passwords set for the driver using iManager are stored in the Identity Vault. Each password on the connected system must exactly match its counterpart in the Identity vault.
To change the passwords after driver installation:
In iManager, navigate to the Driver Overview for the driver.
Click the driver icon.
Specify the Driver object password.
Specify the Remote Loader password.
The Remote Loader password is below the Authentication heading.
Click .
Restart the driver.
The nxdrv-config command prompts you to enter the LDAP server host address and port, then displays the Certificate Authority for that server and asks you if you accept it.
You are about to connect to the eDirectory LDAP server to retrieve the eDirectory Tree Trusted Root public certificate. Enter the LDAP Server Host Address [localhost]: sr.digitalairlines.com Enter the LDAP Server Port [636]: Certificate Authority: Subject: ou=Organizational CA,o=TREENAME Not Before: 20050321144845Z Not After: 20150321144845Z Do you accept the Certificate Authority? (Y/N) y
Enter the host name or IP address and TCP port number of an LDAP server for your Identity Vault. The LDAP server must be configured for SSL, and it must be listening on the SSL port. The default SSL port is 636.
The driver shim connects to the specified server and displays information about the Certificate Authority. If you accept the Certificate Authority, the driver shim saves it to the local file system.
If you do not have LDAP configured for SSL, you can use a manual process to configure the driver for SSL. For details, see Section A.2.4, Driver Certificate Setup Failure.
The nxdrv-config command generates a new certificate and key, used to authenticate remote publishing clients, such as NIS and NIS+ clients.
New certificate authority keys were generated: Subject: /CN=soap api certificate authority Serial Number: 0 Valid From: 20060411002823Z Valid To: 20160409002823Z
The keys are 2048-bit, Base64-encoded, RSA public/private key pairs. They are written to /usr/local/nxdrv/keys/soap-ca-cert.pem (public certificate) and /usr/local/nxdrv/keys/soap-ca-key.pem (private key). These keys are used to issue and sign certificates for remote publishing when you configure PAM on a remote client. The default time duration for the certificate authority is 10 years. You can change the time duration and other remote publisher parameters in the configuration file /usr/local/nxdrv/conf/remote-publisher.conf. For details about the configuration file, see Section C.2, The Remote Publisher Configuration File.
The nxdrv-config command asks you if you are configuring PAM on a remote client.
If you are configuring PAM on a remote client, the nxdrv-config command does the following:
Prompts you for the host name or IP address and port number of the Linux or UNIX connected system.
Calls the command to mint a security certificate for the remote client. This command requires you to enter the Remote Loader password.
Sets up the PAM configuration file.
If you are configuring PAM on the connected system, the nxdrv-config command sets up the PAM configuration file.
Are you configuring PAM from a remote NIS client? (Y/N) [N] Configuring PAM... Using PAM configuration file: [/etc/pam.conf] Inserting line [/usr/lib/security/pam_nxdrv.so.1 mechanism=api] original PAM file backed up to /etc/pam.conf.nxdrv.04152006151641
The nxdrv-config command locates the PAM configuration file, makes a backup copy, and inserts a line for the Linux and UNIX driver PAM module.
The nxdrv-config command makes a backup copy of the /usr/lib/security/methods.cfg file, then appends the stanza for the Linux and UNIX driver to the methods.cfg file.
original methods.cfg backed up to /usr/lib/security/methods.cfg.nxdrv.04152006154047