PAM_LDAP and NSS_LDAP Post: 302507283

Sponsored Content

Operating Systems AIX PAM_LDAP and NSS_LDAP Post 302507283 by juredd1 on Wednesday 23rd of March 2011 11:29:17 AM

03-23-2011

Registered User

I don't fully understand the term "LDAP for AIX" as you mention the LDAP server being Novell eDirectory server. I am guessing you are meaning you are using secldapclntd on the client side and the backend LDAP server is Novell. We are using IBM's flavor of LDAP on AIX 5.3 and AIX 6.1. Fileset being ldap.client.rte (secldapclntd) the client side and idsldap.clt64bit61.rte on the server side which I think is officially called Identity Directory Server but not sure. Our database servers are running Informix 11.50. The Informix db serves are not using LDAP locally as they are use normal AIX security. So basically we have 8 application servers that are using LDAP to authenticate the users into the system. Then we the users start running the application which starts talking to the db servers there is a trust set up (/etc/hosts.equiv) between the application servers and the Informix db servers. The users running the application are not real users on the db side we have generic entries in the /etc/passwd and /etc/security/password file for each user. The user does not have a password or home dir on the db side. the only real users on the db side is the the admin accounts and the db admin accounts.

Not sure my environment was anything like you were looking for but wanted to respond in-case I could be of any assistance. If not sorry to have wasted the space.

This User Gave Thanks to juredd1 For This Post:

juredd1

View Public Profile for juredd1

Find all posts by juredd1

2 More Discussions You Might Find Interesting

1. Solaris

nss_ldap by padl on Solaris 10

Hi all! (I don't know whether this question should go here or not. I'm newbie on forum) So, i have trouble using nss_ldap by padl with Openldap database. I've installed nss_ldap by padl(padl.com) and i think it installed ok. It was not easy because i had to fix some source files a little by...

2. Debian

nss_ldap failed to bind to LDAP server

Hi every body! I have an debian lenny server with samba and openldap on it. 1. Problem: i can not login ldap user auth.log: nss_ldap: could not connect to any LDAP server as cn=admin,dc=innsbruck,dc=sti,dc=at - Can't contact LDAP server 2. Problem: auth.log: nss_ldap: failed to bind to...

LEARN ABOUT XFREE86

afp_ldap.conf

AFP_LDAP.CONF(5)						   Netatalk 2.2 						  AFP_LDAP.CONF(5)

NAME

       afp_ldap.conf - Configuration file used by afpd(8) to configure a LDAP connection to an LDAP server. That is needed for ACL support in
       order to be able to query LDAP for UUIDs.

DESCRIPTION

       /etc/netatalk/afp_ldap.conf is the configuration file used by afpd to set up an LDAP connection to an LDAP server.

       Any line not prefixed with # is interpreted.

	   Note
	   You can use afpldaptest(1) to syntactically check your config
       The required parameters and their meanings are:

PARAMETER

       ldap_server
	   Name or IP address of your LDAP Server

       ldap_auth_method
	   Authentication method: none | simple | sasl

	   none
	       anonymous LDAP bind

	   simple
	       simple LDAP bind

	   sasl
	       SASL. Not yet supported !

       ldap_auth_dn
	   Distinguished Name of the user for simple bind.

       ldap_auth_pw
	   Distinguished Name of the user for simple bind.

       ldap_userbase
	   DN of the user container in LDAP.

       ldap_userscope
	   Search scope for user search: base | one | sub

       ldap_groupbase
	   DN of the group container in LDAP.

       ldap_groupscope
	   Search scope for user search: base | one | sub

       ldap_uuuid_attr
	   Name of the LDAP attribute with the UUIDs.

	   Note: this is used both for users and groups.

       ldap_name_attr
	   Name of the LDAP attribute with the users short name.

       ldap_group_attr
	   Name of the LDAP attribute with the groups short name.

EXAMPLES

       Example. afp_ldap.conf setup with simple bind

	   ldap_server	    = localhost
	   ldap_auth_method = simple
	   ldap_auth_dn     = cn=admin,dc=domain,dc=org
	   ldap_auth_pw     = notthisone
	   ldap_userbase    = ou=users,dc=domain,dc=org
	   ldap_userscope   = one
	   ldap_groupbase   = ou=groups,dc=domain,dc=org
	   ldap_groupscope  = one
	   ldap_uuid_attr   = some_attribute
	   ldap_name_attr   = cn
	   ldap_group_attr  = cn

SEE ALSO

       afpd(8), AppleVolumes.default(5), afpldaptest(1)

Netatalk 2.2							    30 Mar 2011 						  AFP_LDAP.CONF(5)