Installation guide

64 NetIQ eDirectory 8.8 SP8 Installation Guide
NOTE: The method names should exactly match those listed in the above table, as options to the
Methods key. The Installer matches the exact string (with case) for choosing the NMAS methods to
install.
The NDS NMAS method is mandatory and will be installed automatically if no NMAS methods list
is provided. However, if you are creating an explicit list, do not remove this method from the list.
If the NMAS methods are configured using this methodology in the response file, eDirectory shows a
status message while installing, without prompting for user input.
The following is sample text in the response file for choosing the NMAS methods:
[NWI:NMAS]
Choices=12
Methods=X509 Advanced Certificate,CertMutual,Challenge Response,DIGEST-
MD5,Enhanced Password,Entrust,GSSAPI,NDS,NDS Change Password,Simple
Password,Universal Smart Card,X509 Certificate
HTTP Ports
eDirectory listens on preconfigured HTTP ports for access through the Web. For example, iMonitor
accesses eDirectory through Web interfaces. They need to specify certain in order to access the
appropriate applications. There are two keys that can be set prior to installation to configure
eDirectory on specific ports:
 Clear Text HTTP Port: The port number for the HTTP operations in clear text.
 SSL HTTP Port: HTTP port number for operations on the secure socket layer.
The following is sample text in the response file for configuring HTTP port numbers:
[eDir:HTTP]
Clear Text HTTP Port=8028
SSL HTTP Port=8030
LDAP Configuration
eDirectory supports LDAP operations. It listens for LDAP requests in clear text and SSL, on two
different ports. These ports can be configured in the response file prior to installation so that when
eDirectory is started, it listens on these configured ports.
There are three keys in the
[NWI:NDS] tag that configure the LDAP ports:
 LDAP TLS Port: The port on which eDirectory should listen for LDAP requests in clear text.
 LDAP SSL Port: The port on which eDirectory should listen for LDAP requests in SSL. You can
also use a key to configure whether eDirectory should mandate secure connections when bind
requests send the password in clear text.
 Require TLS: Whether eDirectory should mandate TLS when receiving LDAP requests in clear
text.
The following is sample text in the response file for LDAP configuration:
[NWI:NDS]
Require TLS=No
LDAP TLS Port=389
LDAP SSL Port=636