Sponsored Content
Operating Systems AIX AIX LDAP client authenticate against Linux Openldap server over TLS/SSL Post 302958845 by paco699 on Monday 26th of October 2015 07:51:31 PM
Old 10-26-2015
From my Openldap server (Suse12) I have generated 3 files (.key, .csr, .crt.) with openssl command, files that i copy to the linux clients side. Then, i just need configure the /etc/ldap.conf file. No more.

Can i use the same 3 files from my OpenLDAP server (.key, .csr, .crt.) and put them on the AIX clients side?

---------- Post updated at 05:51 PM ---------- Previous update was at 04:51 PM ----------

Hi MichaelFelt,

oslevel of my AIX clients:
7100-03-04-1441

Like says agent.kgb, the filesets are:
Code:
idsldap.clt_max_crypto32bit62.rte
idsldap.clt_max_crypto64bit62.rte

GSKit8.gskcrypt32.ppc.rte
GSKit8.gskcrypt64.ppc.rte
GSKit8.gskssl32.ppc.rte
GSKit8.gskssl64.ppc.rte

Moderator's Comments:
Mod Comment Please use CODE tags when displaying sample input, sample output, and code segments.

Last edited by Don Cragun; 10-26-2015 at 11:23 PM.. Reason: Add CODE tags.
 

9 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

AIX v5.3 LDAP CLIENT and AD

Has anyone successfully authenticated unix users via Active Directory using LDAP client on AIX v5.2 or v5.3?? ldapsearch from our unix box retrieves info from AD but having trouble authenticating unix id when I logon - get a msg ': 3004-318 Error obtaining the user's password information'. Not... (0 Replies)
Discussion started by: DANNYC
0 Replies

2. AIX

can not mount from aix client to linux nfs server

Hi, I am trying to mount a nfs folder from AIX client to Linux NFS Server, but I got the following error: # mount 128.127.11.121:/aix /to_be_del mount: 1831-010 server 128.127.11.121 not responding: RPC: 1832-018 Port mapper failure - RPC: 1832-008 Timed out mount: retrying... (1 Reply)
Discussion started by: victorcheung
1 Replies

3. UNIX for Dummies Questions & Answers

TLS/SSL Openldap Centos 5.5

hi guys I configured my openldap but now I want to implement SSL-TLS This is my basic slapd.conf configuration include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include ... (2 Replies)
Discussion started by: karlochacon
2 Replies

4. UNIX for Advanced & Expert Users

ldap over tls -- ssl cert help

Hey Guys, I am trying to setup ldap over tls in our lab. I am generating a self signed cert on the ldap server and importing that into the ldap system so it will use ldap over port 636. The clients will be a mix of solaris and redhat. I am lost on what I need to do on the client side to get... (0 Replies)
Discussion started by: s ladd
0 Replies

5. IP Networking

Linux Client To Authenticate using TACACS

I have customer who controls access to the internet via TACACS server, basically a PIX firewall uses authentication from the TACACS to say if traffic is allowed to pass out of the gateway. I can't find anything on how to configure a linux client of TACACS authentication only how to set up a linux... (1 Reply)
Discussion started by: metallica1973
1 Replies

6. UNIX for Advanced & Expert Users

SSL/TLS with openldap

Hello to all, I'm beguinner in Linux instalations and I'm trying to Communicate from Web Sites that i have running under apache with openLDAP for users authentication using SSL mediation that seems to be connected with LDAPS. Can someone advise me how to do this, I have already installed... (1 Reply)
Discussion started by: CPMarco
1 Replies

7. AIX

AIX 5.2 ldap client AD

I have been able to configure on an AIX 5.2 ldap.cfg so service starts correctly. but when I try to log on with a windows user after entering the password login hangs and get no response. I have set it up on Aix 5.3 with no problem but in Aix 5.2 I have not been able to log in. ldap.cfg... (1 Reply)
Discussion started by: laxtnog
1 Replies

8. AIX

How to integrate AIX Client LPAR to make use of existing MS AD LDAP ?

Hi All, Its regarding the LDAP in AIX. we already have Microsoft Active Directory (LDAP) Server. And would like to integrate My client AIX LPAR to this LDAP server. So' that we can directly use Active directory crdentials to login. (instead of creating USERs on AIX) from my AIX LPAR. ... (4 Replies)
Discussion started by: System Admin 77
4 Replies

9. Solaris

LDAP Client not connecting to LDAP server

I have very limited knowledge on LDAP configuration and have been trying fix one issue, but unsuccessful. The server, I am working on, is Solaris-10 zone. sudoers is configured on LDAP (its not on local server). I have access to login directly on server with root, but somehow sudo is not working... (9 Replies)
Discussion started by: solaris_1977
9 Replies
lldptool(8)							       Linux							       lldptool(8)

NAME
evb - Show / manipulate EVB TLV configuration SYNOPSIS
lldptool -t -i ethx -V evbCfg -c enableTx lldptool -T -i ethx -V evbCfg -c enableTx=[yes|no] lldptool -t -i ethx -V evbCfg -c fmode lldptool -T -i ethx -V evbCfg -c fmode=[bridge|reflectiverelay] lldptool -t -i ethx -V evbCfg -c capabilities lldptool -T -i ethx -V evbCfg -c capabilities=[rte|ecp|vdp|none] lldptool -t -i ethx -V evbCfg -c rte lldptool -T -i ethx -V evbCfg -c rte=[<rte>] lldptool -t -i ethx -V evbCfg -c vsis lldptool -T -i ethx -V evbCfg -c vsis=[<number of vsis>] DESCRIPTION
The EVB TLV is a TLV to announce the station and bridge's edge virtual bridging (evb) capabilities and request the bridge forwarding mode. If both sides have agree on edge control protocol (ECP), VSI discovery protocol (VDP) capabilities, both sides can exchange VDP TLV using ECP frames. The vsis parameter will set the maximum number of VSIs and show the number of currently configured VSIs. ARGUMENTS
enableTx Enables the EVB TLV to be transmitted fmode shows or sets the forwarding mode between bridge (default) or reflectiverelay (RR). capabilities shows or sets the local capabilities that are announced to the adjacent switch in the TLV. This parameter will accept any combina- tion of rte, vdp or ecp, separated by ",". Use the keyword "none" if you do not want to set any capabilities. rte shows or set the local run time exponent (RTE). The RTE will be used as the base for the timing of the ECP and VDP protocols. vsis shows or sets the number of virtual station interfaces (VSIs) that are announced to the adjacent switch in the TLV. This parameter expects a number between 0 and 65535. Theory of Operation The EVB TLV is used to announce and exchange supported parameters between the station and an adjacent switch. If "reflectiverelay" is set as forwarding mode, the switch will allow "reflection" of frames coming from different sources at the same port back to the port. This will allow communication between virtual machines on the same host via the switch. The capabilities parameter is used to set RTE, ECP and VDP support. VDP TLVs in ECP frames can only be exchanged if both sides agree on ECP and VDP as capabilities. RTE will be used as the base timing parameter for ECP and VDP. EXAMPLE &; USAGE Display locally configured values for eth8 lldptool -t -i eth8 -V evbCfg Display remotely configured values for eth8 lldptool -n -t -i eth8 -V evbCfg Display wether evb tlv is configured for tx on eth8 lldptool -t -i eth8 -V evbCfg -c enableTx Display the currently requested forwarding mode for eth8 lldptool -t -i eth8 -V evbCfg -c fmode Set the forwarding mode to reflective relay lldptool -T -i eth8 -V evbCfg -c fmode=reflectiverelay Display the currently configured capabilities lldptool -t -i ethx -V evbCfg -c capabilities Set the locally possible capabilities to RTE, ECP and VDP lldptool -T -i ethx -V evbCfg -c capabilities=rte,ecp,vdp Resets the locally possible capabilities to "none" lldptool -T -i ethx -V evbCfg -c capabilities=none Display the locally configured value for RTE lldptool -t -i ethx -V evbCfg -c rte Set the value for RTE lldptool -T -i ethx -V evbCfg -c rte=[<rte>] Display the configured maximum number of VSIs lldptool -t -i ethx -V evbCfg -c vsis Set the maximum number of VSIs lldptool -T -i ethx -V evbCfg -c vsis=[<number of vsis>] SOURCE
o IEEE 802.1Qbg (http://www.ieee802.org/1/pages/802.1bg.html) NOTES
Currently the code in lldpad reflects draft 0 of the upcoming standard. EVB TLVs on the wire can be decoded with wireshark > v1.6. SEE ALSO
lldptool-vdp(8), lldptool(8), lldpad(8) AUTHOR
Jens Osterkamp open-lldp February 2010 lldptool(8)
All times are GMT -4. The time now is 09:08 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy