Jump to content United States-English
HP.com Home Products and Services Support and Drivers Solutions How to Buy
» Contact HP
More options
HP.com home

LDAP-UX Client Services B.03.30 with Microsoft Windows 2000 Active Directory Administrator's Guide: HP-UX 11.0 and 11i v1
» 

Technical documentation

Complete book in PDF
» Feedback
Content starts here

 » Table of Contents

 » Glossary

 » Index

spacerspacerspacer
spacer
spacer
   
 

HP Part Number: J4269-90039

Published: E0704

© Copyright 2004 Hewlett-Packard Development Company, LP.

Table of Contents

Preface
About This Document
Intended Audience
New and Changed Documentation in This Edition
Publishing History
What’s in This Document
Typographical Conventions
Related Documents
HP Encourages Your Comments
1 Introduction
Overview of LDAP-UX Client Services
How LDAP-UX Client Services Works
2 Installing LDAP-UX Client Services
Before You Begin
Summary of Installing and Configuring LDAP-UX Client Services
Planning Your Installation
Installing LDAP-UX Client Services on a Client
Configuring Active Directory for HP-UX Integration
Step 1: Install Active Directory
Step 2: Install SFU 2.0 or 3.0 including Server for NIS
Step 3: Create a Proxy User
Step 4: Add an HP-UX Client Machine Account to Active Directory
Step 5: Use ktpass to Create the Keytab File for the HP-UX client machine
Step 6: Add POSIX Attributes into the Global Catalog
Importing Name Service Data into Your Directory
Configuring the LDAP-UX Client Services with SSL Support
Configuring the LDAP-UX Client to Use SSL
Configuring LDAP-UX Client Services
Step 1: Run the Setup Program
Step 2: Install the PAM Kerberos Product
Step 3: Configure Your HP-UX Machine to Authenticate Using PAM Kerberos
Step 4: Configure the Name Service Switch (NSS)
Step 5: Configure the Disable Login Flag
Step 6: Verify LDAP-UX Client Services for Single Domain
Step 7: Configure Subsequent Client Systems
Downloading the Profile Periodically
3 Active Directory Multiple Domains
Domain Term Definitions
Multiple Domains
Local Domains
Remote Domains
Global Catalog Server
Retrieving Data from a Remote Domain
Choosing Remote Domain Configuration or GCS
Downloading an Automatic Profile
Understanding the ldapux_client.conf Configuration File
Resolving Duplicate Entries
When there are duplicate entries in the local domain
When there are duplicate entries in remote domains
When there are duplicate entries in both local and remote Domains
Example
Changing Multiple Domain Configurations
Removing a Remote Domain from the Search Scope
Adding a Remote Domain to the Search Scope
Re-ordering the Remote Domain Search Sequence
Adding the GCS into the Search Scope
Removing the GCS from the Search Scope
Adding POSIX Attributes to the Global Catalog
Limitations of Multiple Domains in Version B.03.00 or later
4 Administering LDAP-UX Client Services
Using the LDAP-UX Client Daemon
Overview
The ldapclientd Administration Tool
The ldapclientd.conf Configuration File
Integrating with Trusted Mode
Overview
Features and Limitations
Configuration Parameter
Adding Additional Domain Controllers
Adding Users, Groups, and Hosts
Displaying the Proxy User’s Distinguished Name
Verifying the Proxy User
Creating a New Proxy User
Example
Displaying the Current Profile
Creating a New Profile
Modifying a Profile
Changing Which Profile a Client is Using
Creating an /etc/krb5.keytab File
Considering Performance Impacts
Enumeration Requests
Search Limits
Search Filter
Troubleshooting
Enabling and Disabling LDAP-UX Logging
Enabling and Disabling PAM Logging
Viewing Active Directory Service Log Files
User Cannot Log on to Client System
5 Modifying User Information
Changing Passwords
Changing Personal Information
6 Netscape LDAP C SDK
Overview
The Netscape LDAP C SDK File Components
A Configuration Worksheet
B LDAP-UX Client Services Object Classes
Profile Attributes
C Command, Tool, and Migration Script Reference
LDAP-UX Client Services Components
Client Management Tools
create_profile_entry
create_profile_cache
create_profile_schema
display_profile_cache
get_profile_entry
ldap_proxy_config
beq Search Tool
Certutil
LDAP Directory Tools
ldapsearch
ldapmodify
ldapdelete
Name Service Migration Scripts
Naming Context
Migrating All Your Files
Migrating Individual Files
D Sample PAM Configuration File
E Sample /etc/krb5.conf File
F Sample /etc/pam.conf File
Glossary
Index

List of Figures

1-1 A Simplified NIS Environment
1-2 A Simplified LDAP-UX Client Services Environment
1-3 HP-UX Client Login Sequence with Windows 2000 (SFU 2.0)
1-4 The Local Start-up File and the Configuration Profile
2-1 Example Directory Structure for a Single Domain
2-2 Example Directory Structure for Multiple Domains

List of Tables

1 Publishing History Details
1-1 Examples of Commands that use PAM and NSS
6-1 Netscape LDAP C SDK File Components on the PA machine
6-2 Netscape LDAP C SDK File Components on the IA machine
6-3 Netscape LDAP C SDK API Header Files
A-1 LDAP-UX Client Services Configuration Worksheet
A-2 LDAP-UX Client Services Configuration Worksheet Explanation
C-1 LDAP-UX Client Services Components
C-2 LDAP-UX Client Services Libraries on the PA machine
C-3 LDAP-UX Client Services Libraries on the IA machine
C-4 Title not available (Syntax)
C-5 Default Naming Context
C-6 Migration Scripts
   


Preface  
Printable version
Privacy statement Using this site means you accept its terms Feedback to webmaster
© 2004 Hewlett-Packard Development Company, L.P.