Changing host resolution

 

To resolve host names and realm names, specify an LDAP server, a Domain Name System (DNS), and static mappings.

With network authentication service, you can specify an LDAP server, a Domain Name System (DNS), and static mappings that are added to the configuration file to resolve host names and realm names. You can also select all three of these methods to resolve host names. If you select all of these methods, network authentication service checks the directory server first, the DNS entries second, and finally the static mappings to resolve host names.

To change host resolution...

  1. In iSeries™ Navigator, expand your system > Security.

  2. Right-click Network Authentication Service and select Properties.

  3. On the Host Resolution page, select Use LDAP lookup, Use DNS lookup, or Use static mappings.

  4. If you select Use LDAP lookup as the host resolution type, enter the name of the directory server and its corresponding port. For example, ldapsrv.myco.com might be a valid name for the directory server. A valid port number can be 1-65535. The default port for the directory server is 389. After you have indicated that you will use an LDAP server to handle host name resolution, ensure that the realm has been properly defined in the LDAP server. See Defining realms in the LDAP server for more information.

  5. If you select Use DNS lookup as the host resolution type, have configured the DNS to map to realm names. After you have indicated that you will use a DNS server to handle host name resolution, ensure that the realm has been properly defined in the DNS. See Defining realms in the DNS database for more information.

  6. If you select Use static mappings as the host resolution type, enter the realm name and its corresponding DNS name. For example, the host name might be mypc.mycompanylan.com and the realm name might be MYCO.COM. You can also map generic host names to a specific realm. For instance, if all machines that end with myco.lan.com are part of the MYCO.COM, you might enter myco.lan.com as the DNS name and MYCO.COM as the realm. This creates an association between the realm name and the DNS name in the configuration file. Click Add to create a static mapping between the DNS name and realm name in the configuration file.

  7. After you have entered the pertinent information for the selected host resolution type, click OK.

 

Parent topic:

Managing network authentication service