HP-UX LDAP auth documentation

[Gerard Taylor]

Hi

I am looking for documentation on setting up HP-UX servers to do LDAP
authentication against eDirectory through PAM.

The documentation I have seen so far on HP's website is for LDAP auth
against AD.

Can anyone point me in the right direction?

Thanks

Gerard Taylor (CNI, CLA11, CLP11, CLE10, RHCE RHCX, LPIC1)
Senior Consultant
Ubusha Technologies
ger...@ubusha.co.za

[a...@novell.com]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

LDAP is a standard. There may be some things to do within eDirectory for
the users to be what HP-UX i s looking for but those same changes would
likely be the ones made in MAD for HP-UX to see users there. In
eDirectory you can also easily watch the LDAP events via ndstrace to see
what is happening with regard to the queries made and attributes returns
to help determine how the users should "look" within eDirectory. Besides
those points LDAP is a standard that should work regardless of the client
or backend.

Good luck.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=m0bv
-----END PGP SIGNATURE-----

[Jim Willeke]

HP_UX does a nice job of utilizing the DUAConfigProfile perhaps because
they were on the rfc4876.txt. (Wish SLES did).

Sure LDAP is LDAP, but there are sure a lot of differences when
integrating applications. you will need to add the schema for the
DUAConfigProfile. We have one we used with eDirectory:
http://ldapwiki.willeke.com/wiki/DUAConfigProfile

We have some more info on PAM at:
http://ldapwiki.willeke.com/wiki/PAMSchemaModifications

Hope this helps and let us know how it works out.
-jim