UNIX for Advanced & Expert Users

hi,

is it possible to link users on a LDAP-Server from one container to another?

we have two trees, one for AIX and one for solaris-linux

but we have a few users in both trees, they should have the same password and a password change must affect both entries

we use IBM Directory Server 6, but this shouldn't matter

thanks in advance

funksen

Edit: ldap v3

Check out something called metadirectory, it is made by a company called CriticalPath. It may be able to do what you need.

-S

thanks for your answer, but I cannot get away from ibm tivoli directory server, I hoped there's a basic ldap solution, just an additional attribute in ldif file or something like that

if it's not I have a big problem, then I have to split our users in a lot of different containers and totally remake the acls

any other ideas?

the solution is called alias

here the alias for the user uid=funksen,ou=People,cn=aixsecdb,cn=aixdata,ou=whatever :

Code:

dn: uid=newuser,......
uid: newuser
objectClass: alias
objectClass: extensibleObject
aliasedObjectname: uid=funksen,ou=People,cn=aixsecdb,cn=aixdata,ou=whatever

just import, thats it

the windows tool "ldapbrowser" has problems with aliases, for the linux-tool luma everything works fine

you have to change the client behaviour for following aliases:

for AIX:

edit /etc/security/ldap/ldap.cfg

change the attribute
FollowAlias:NEVER

to

FollowAlias:ALWAYS

just can't tell how the client setup for following aliases works on other os, perhaps someone can complete this thread for other os

tried on rhel4, didn't work