LDAP-UX - proxy server account for each server?

[dev44]

I have ldap up and running on one of our servers and want to set it up on the rest. My question is - do I have to create the proxy server account for each server, or can the one account be used by all?

[Don Mallory · Accepted solution]

Hi again dev44,

Happy New Year!

One LPAD Proxy user for them all. If you were using Kerberos, you would need one user for each service (ftp and host), but since you are sticking to LDAP, no worries there.

It actually doesn't techically support multiple proxy users unless you make up a huge mess of additional ldapuxprofiles, but it will work if you really want it to.

Only warning is, if you lock out, change the password, expire, disable the proxy user account, ALL LDAP enabled servers will no longer be able to bind to the AD. So if you have to change the password, plan for it.

Don