Security Software

Hi all,

I have done the following so far:
Removed the IPLT* packages.
Installed DS 5.2 P4 from the tar file on Sun's site.
Installed the DS 5.2 Resource Kit
Modified the /usr/lib/ldap/idsconfig file to exclude the example.com naming context which gives the error "ERROR: Can not determine the top of tree"
Run idsconfig and run the vlvindex commands by hand (idsconfig tells you to run the directoryserver wrapper for this, but since I removed the previous IPLT packaged version of DS and installed using the tar the directoryserver wrapper no longer exists)

So far I think I'm on the right track. My question and request for direction comes as I am about to populate the directory. I currently run NIS. I saw that the idsconfig script added the nisDomainObject which I require, however from here I have seen sparse and differing accounts of how to add the NIS data to the directory. Also I have read the blueprint entitled "Demystifying the LDAP Directory Information Tree (2001)", which gives three different options for where to store the NIS maps (under the main suffix, under a subtree of the main suffix, and under a completely new suffix)

Given the pros and cons of these three I was leaning towards either the subtree or new suffix option. Does anyone know of an up-to-date reference on this topic? I'm just about Googled, Sunsolved, and docs.sun.com'd out and have read way too many posts and PDF's on the topic of using LDAP and honestly it seems like most people are just sort of wandering aimlessly because there really doesn't seem to be a solid source of information on how to get this all working.

I'm also wondering if I should have just stuck with the IPLT packages as most of the documentation is geared towards this type of installation as opposed to the tar installation. Any thoughts on this are appreciated as well. I have two systems to play with so if you all suggest I start over, that is also an option. I'm just looking for the easiest and most straight forward implementation so I can document it and perhaps others who are starting with LDAP from scratch.