A.0 Extending the OpenLDAP Schema to Support SecureLogin

Copy SecureLoginSSO.schema and SecureLoginSSO2.schema to the /etc/openldap/schema folder. The OpenLDAP schema files can be found on the SecureLogin CD in the path of <CD>/SecureLogin/Tools/Schema/OpenLDAP.

Edit the slapd.conf file, and ensure that the following lines are included:

#include    /etc/openldap/schema/core.schema
include /etc/openldap/schema/core.schema 
include /etc/openldap/schema/cosine.schema 
include /etc/openldap/schema/inetorgperson.schema 
include /etc/openldap/schema/misc.schema 
include /etc/openldap/schema/openldap.schema 
# NetIQ  ADDED THE FOLLOWING LINE
include /etc/openldap/schema/SecureLoginSSO.schema
include /etc/openldap/schema/SecureLoginSSO2.schema

Edit the ldap.conf file and ensure that the following lines are included:

#
# LDAP Defaults
# See ldap.conf(5) for details
# This file should be world readable but not world writable.

#BASE  dc=example, dc=com
#URI  ldap://ldap.example.com ldap://ldap-master.example.com:666

#SIZELIMIT  12
#TIMELIMIT  15
#DEREF    never

HOST openldap.com 
PORT 636 
TLS_CACERT /ssl/certs/cacert.pem 
TLS_REQCERT demand

Open the core.schema file and make the following changes:

objectclass ( 2.5.6.4 NAME 'organization'
  DESC 'RFC2256: an organization'
  SUP top STRUCTURAL
  MUST o
  MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $
    x121Address $ registeredAddress $ destinationIndicator $
    preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $
    telephoneNumber $ internationaliSDNNumber $
    facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $
    postalAddress $ physicalDeliveryOfficeName $ st $ l $ description $ protocom-SSO-Entries $ protocom-SSO-Auth-Data $ protocom-SSO-Security-Prefs $ protocom-SSO-Entries-Checksum $ protocom-SSO-Security-Prefs-Checksum $ protocom-SSO-Profile ) )

objectclass ( 2.5.6.5 NAME 'organizationalUnit'
  DESC 'RFC2256: an organizational unit'
  SUP top STRUCTURAL
  MUST ou
  MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $
    x121Address $ registeredAddress $ destinationIndicator $
    preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $
    telephoneNumber $ internationaliSDNNumber $
    facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $
    postalAddress $ physicalDeliveryOfficeName $ st $ l $ description $ protocom-SSO-Entries $ protocom-SSO-Auth-Data $ protocom-SSO-Security-Prefs $ protocom-SSO-Entries-Checksum $ protocom-SSO-Security-Prefs-Checksum $ protocom-SSO-Profile ) )

objectclass ( 2.5.6.6 NAME 'person'
  DESC 'RFC2256: a person'
  SUP top STRUCTURAL
  MUST ( sn $ cn )
  MAY ( userPassword $ telephoneNumber $ seeAlso $ description $ protocom-SSO-Entries $ protocom-SSO-Auth-Data $ protocom-SSO-Security-Prefs $ protocom-SSO-Entries-Checksum $ protocom-SSO-Security-Prefs-Checksum $ protocom-SSO-Profile ) )