Skip to main content

Installing the LDAP password filter plugin

To install the LDAP password filter plugin (psldap) on a Unix-based LDAP server:

  1. If you did not select Unix Installation Packages when you installed the Connector Pack, run setup on the Bravura Security Fabric server to modify your Connector Pack installation.

    Ensure that appropriate Unix package is selected on the component selection page.

    Click Next , then complete the installation procedure.

    See Install the psunix installation package for more detail.

  2. Copy the psunix-<os>.<cpu>.tar.gz file from the unix directory to a scratch directory (such as /tmp) on the Unix server.

  3. Log in to the LDAP server with administrative privileges and extract the files from the psunix archive.

    For example, type:

    cd /tmp
tar -zxvf psunix-linux-glibc-2.28.x64.tar.gz

  4. Run install.sh and select the LDAP Transparent Sync option.

    sh install.sh [ -inf <path>/idmsetup.inf ]

  5. Follow the instructions displayed by the installer script.

    In the installation process, follow the instructions and input the information prompted by each input field. To skip a field, press Enter to use the default value.

  6. Verify that the following shared object files are copied to /usr/local/psunix/default/.

    The psldap shared object files are named using the format:

    psldap-<ldap-type>.so

    Where the <ldap-type> is:

    • sunldap if you are running Oracle DSEE, Sun ONE Directory Server, or Red Hat Directory Server

    • openldap if you are running OpenLDAP

    • ibmldap if you are running IBM Directory Server

  7. Ensure that the psunix folder and all files and plugins inside are readable and executable.

    For example, run the following commands:

    chmod -R a+rx /usr/local/psunix/
chmod a+rx /usr/local/psunix/default/psldap-openldap.so

  8. Also ensure that /etc/psunix.cfg and /etc/psunix.d/ have read and execute permissions:

    chmod a+rx /etc/psunix.cfg
chmod -R a+rx /etc/psunix.d/

  9. Stop the LDAP service.

  10. Start the LDAP service.

In this section: