How to setup CIFS in HPUX 11.31 to use Windows passwords?

[Jan Shu]

Hi All,

Greetings. I upgraded a HPUX 11.23 server to 11.31 OE recently. It used to have /etc/pam.krb5 setup and I am able to login using my windows password. Now it won't take my windows password. How to fix it? Can you please help? HP support sent me a doc http://docs.hp.com/en/16322/CIFSUnifiedLoginV2.pdf , the Windows IDMU configuration is confusing me (Do I have to have IDMU in order to get CIFS PAM to work??)

Below is a list of 11.31 products on my server.

Version 3.0.30 based HP CIFS Server A.02.04
CIFS-CLIENT A.02.02.02 HP CIFS Client
CIFS-SERVER A.02.04 HP CIFS Server
KRB5CLIENT E.1.6.2.05 Kerberos V5
Client Version 1.6.2.05
PAMKerberos D.01.26 PAM-Kerberos Ver 1.26
PRMKernelSW C.03.05 HP PRM Kernel Software
LDAPUX B.04.20 LDAP-UX Integration
NisLdapServer B.04.20 The NIS/LDAP Gateway (ypldapd)

Thank you.

Regards,
Jan Shu

[Steven E. Protter · Accepted solution]

Shalom,

http://www.docs.hp.com/en/J4269-90084/ch02s05.html

The doc I'm providing makes thins a little easier.

SEP

[Jan Shu]

Dear SEP,

Thanks for sending me the info on SFU. But I prefer to get CIFS Kerberos working on my HPUX server, then mess with 20+ Windows ADS worldwide (which belongs to my colleagues).

Have a nice weekend.

Regards,
Jan

[Steven E. Protter]

Okay,

I hate ADS as well.

Don't use the net join ads parameter then.

These docs will help.

http://docs.hp.com/en/B8725-90103/index.html
http://www.docs.hp.com/en/B8725-90103/ch08s03.html

This CAN be done without ldap-ux which is also painful to work with and requires you mess with the Windows servers.

But if you follow the samba part and do a net join and present a windows domain admin user and password, you will have proper integration.

SEP

[Jan Shu]

Dear SEP,

I will read those 2 documents and let you know the result next week.

Thank you.

Regards,
Jan

[Jan Shu]

Hi All,
This is resolved. HP backline CE helped me to configure Kerberos and samba using this http://www.docs.hp.com/en/B8725-90103/ch08s03.html also modified the /etc/pam.conf e.g. # Authentication management
#
login auth required libpam_hpsec.so.1
login auth sufficient libpam_krb5.so.1
login auth required libpam_unix.so.1 try_first_pass


Regards,
Jan Shu

[Jan Shu]

see above info.