topic LDAP Integration in Operating System - HP-UX

LDAP Integration

David Zifchock — Wed, 03 Sep 2008 16:42:29 GMT

I am trying to do some automation for account creation/deletion/folder access between a helpdesk system which runs on HPUX 11.11 and Active Directory. I have been playing around with ldapux but I am not sure I will be able to modify/add/delete accts automatically. From what I have read ldapux brings up a vi editor in order to modify an account in a Directory Server which is going to cause some issues with this particular automation.

Does anyone have a suggestion to another ldap client that may be useful in querying/updating AD ?

Re: LDAP Integration

Steven E. Protter — Wed, 03 Sep 2008 17:31:26 GMT

Shalom,

The only ldap client you have a chance with is ldapux.

I tried the port of openldap that ships with Internet Express. It is limited in capabilities and simply can not do the job.

If you do the integration right according to the document, you won't have to add accounts to the HP-UX system, you will add them to Windows and windows will handle authentication, much as that annoys me.

SEP

Re: LDAP Integration

David Zifchock — Wed, 03 Sep 2008 17:38:39 GMT

Hi Steven,

Thanks for the response. In order to update information in AD, is applying the hpux profile schema a must, even though I won't be entering home directories, uids, and other unix specific things? I am not using AD for authentication at all, nor do I want to..I am just trying to update information in AD from a Unix Server. Basically, the application that I am using has the functionality to kick off scripts once something has been approved via some workflow, and I am trying to have the application pass parameters to a script that uses the ldap client in order to update AD.

Thanks,
Dave

Re: LDAP Integration

Heironimus — Thu, 04 Sep 2008 21:16:51 GMT

You only need to configure LDAP-UX if you're getting your user accounts from LDAP. I think you can update AD using almost any LDAP client ("ldapadd" and "ldapmodify" in most toolkits), as long as you have a privileged account.