Sponsored Content
Top Forums UNIX for Dummies Questions & Answers Need help in setting access to unix server Post 302421293 by zaxxon on Friday 14th of May 2010 03:52:26 AM
Old 05-14-2010
There are accounts/users needed to access the AIX servers by ssh sessions. There is no way around. If they don't want temp users in LDAP, they need local users. There is only those two ways.

If they decide to use LDAP users for access, they have to use the following bold marked attribute in their LDAP:
Code:
hostsallowedlogin      SEC_LIST        hostsallowedlogin       m

If they use another name for this attribute in their MetaDirectory, it has to be changed accordingly in /etc/security/ldap/2307user.map or whatever map file for users is being pointed at in ldap.cfg at
Code:
userattrmappath:/etc/security/ldap/2307user.map

As you can see this attribute is a multi value attribute (m). They have to add in that attribute all the hostnames (the actual names you get on the AIX hosts when you type in the command hostname) that should be allowed to login to. It is a simple filter that works well. The AIX hosts have need a LDAP client up and running, connected to their MetaDirectory (LDAP-server) of course. The config etc. is for AIX LDAP, not openLDAP.

If they have chosen to leave LDAP out at all - they simply need a local account on the boxes that are being used.

For the network thingy, keep all servers behind the firewall for sure and set up a rule that ssh protocl connections from a specific host for a specific host after successful authentication of course is allowed. If the authentication thing at firewall level is a problem, you have at least the authentication against the AIX hosts.
 

10 More Discussions You Might Find Interesting

1. Solaris

setting up unix and 2000 server on network

i have a question i want to setup a unix server and 2000 server with an xp client i want to run bind can i still setup a primary dns on the 2000 box or can u use secondary dns on 2000 also i want to setup an exchange server on the 2000 server for email between the windows machines? basically i... (2 Replies)
Discussion started by: rmuhammad
2 Replies

2. UNIX for Dummies Questions & Answers

Ways to Access Files on Unix Server via Web

Hi all! I'm a web developer with a question. We have a contractor that is working on a project that requires the user to access a ton of files on the clients Unix server. He has plans to built a VB interface for on site windows users to access those files and wants us to develop a web based... (4 Replies)
Discussion started by: Imhotep1963
4 Replies

3. UNIX for Advanced & Expert Users

terminal setting in unix server

hi all, i have connected a new dump terminal to unix server.the connection is not direct.it is through a board. that is a board which contain lot of ports is connected to server. the terminals are connected to the board.when i connected the terminal to the server the message in terminal is like... (0 Replies)
Discussion started by: sujesh
0 Replies

4. Filesystems, Disks and Memory

Unix Sco Open Server, Windows Computers Problem Access Unix Shared Files Help!!!!!

Hello Moto I hope someone can help We's here at work, have a unix box with sco openserver 5 on it, so it has a nice gui interface.. and also a fair few windows computers.. a system admin guy b4 me, has set up a user called neil, which can, when u try to access the unix box using windows... (2 Replies)
Discussion started by: haggo
2 Replies

5. UNIX for Advanced & Expert Users

accessing ms access from unix server...

Hello, I have a databse stored in my Unix server. I can't change the database because is used by a third party software. How Can I make some queries to this database (I want to extend the information for all the users using Apache + php on the unix server.) I looked at unixODBC but I... (0 Replies)
Discussion started by: ncatdesigner
0 Replies

6. IP Networking

Access Unix server over the Internet

:(:confused: i am going to ask a silly question. is it possible to setup a unix server at home. once i have setup successfully, can i provide access to that server via internet. i do not have any commercial intent, behind this. (3 Replies)
Discussion started by: sudhiroracle
3 Replies

7. Shell Programming and Scripting

To access UNIX server from Tk application running on Windows

Hi, I am new to this forum and this is my first post. I want to know that if I make an application in Tk (version of Tcl to create GUI) in windows and want to run to UNIX server, is it possible ? In other words, can I access a UNIX server through a Tk application running on windows ? ... (1 Reply)
Discussion started by: ratneshnagori
1 Replies

8. UNIX for Dummies Questions & Answers

Access of Microsoft Team Foundation Server (TFS) repository from Unix Server

Hello, Some of our application team uses Microsoft Team Foundation server (TFS) reposity tool for their .NET projects , I would like to access it form Unix/Linux machine. Please let me know how can access the TFS from unix. Thanks (0 Replies)
Discussion started by: posix
0 Replies

9. UNIX for Dummies Questions & Answers

Access UNIX server based on windows

I want to look up log files on the unix server. My machine is windows 7 pro. I can view them from windows explorer but it is slow because huge amount logs files there. Is there a way or tools to quickly access it? Thanks. (7 Replies)
Discussion started by: zhshqzyc
7 Replies

10. Shell Programming and Scripting

Do I require remote login access to a windows server to transfer files from a UNIX server

Hi All I need to transfer a file from a UNIX server to a windows server. I saw that it is possible to do this using scp command by looking at the forum listed below: ... (2 Replies)
Discussion started by: vx04
2 Replies
AFP_LDAP.CONF(5)						   Netatalk 2.2 						  AFP_LDAP.CONF(5)

NAME
afp_ldap.conf - Configuration file used by afpd(8) to configure a LDAP connection to an LDAP server. That is needed for ACL support in order to be able to query LDAP for UUIDs. DESCRIPTION
/etc/netatalk/afp_ldap.conf is the configuration file used by afpd to set up an LDAP connection to an LDAP server. Any line not prefixed with # is interpreted. Note You can use afpldaptest(1) to syntactically check your config The required parameters and their meanings are: PARAMETER
ldap_server Name or IP address of your LDAP Server ldap_auth_method Authentication method: none | simple | sasl none anonymous LDAP bind simple simple LDAP bind sasl SASL. Not yet supported ! ldap_auth_dn Distinguished Name of the user for simple bind. ldap_auth_pw Distinguished Name of the user for simple bind. ldap_userbase DN of the user container in LDAP. ldap_userscope Search scope for user search: base | one | sub ldap_groupbase DN of the group container in LDAP. ldap_groupscope Search scope for user search: base | one | sub ldap_uuuid_attr Name of the LDAP attribute with the UUIDs. Note: this is used both for users and groups. ldap_name_attr Name of the LDAP attribute with the users short name. ldap_group_attr Name of the LDAP attribute with the groups short name. EXAMPLES
Example. afp_ldap.conf setup with simple bind ldap_server = localhost ldap_auth_method = simple ldap_auth_dn = cn=admin,dc=domain,dc=org ldap_auth_pw = notthisone ldap_userbase = ou=users,dc=domain,dc=org ldap_userscope = one ldap_groupbase = ou=groups,dc=domain,dc=org ldap_groupscope = one ldap_uuid_attr = some_attribute ldap_name_attr = cn ldap_group_attr = cn SEE ALSO
afpd(8), AppleVolumes.default(5), afpldaptest(1) Netatalk 2.2 30 Mar 2011 AFP_LDAP.CONF(5)
All times are GMT -4. The time now is 07:06 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy