LDAP-UX integration into eDirectory

[Angela Cotter_2]

Hi,
I'm looking to setup PAM/LDAP to Novell eDirectory. We are trying to configure for central authentication and account management via Novell Identity Manager.

We have already manually extended or schema to suppoport RFC2307. I've install ldap-ux package and it's required patches. But when I execute the set-up package for LDAP-UX the only options where to configure for Active Directory or Netscape.

With that I manually configured the pam/ldapclient conf files. I copied my cert's into cert7.db as we are using SSL, once that was completed I did a quick test with ldapsearch and communication is OK there.

But when I start up the ldapclientd daemon I receive the following within syslog.

Sep 28 06:11:37 idmgt3 syslog: pid:8869.4 - connection.c:339:init_ldap_conn(): _hp_ldap_load_config(/etc/opt/ldapux/ldapux_profile.bin) failed:Directory based profile (configuration) not cached: run /opt/ldapux/config/get_profile_entry -s nss.

Going through manual (LDAP-UX Client Services B.03.20 Administrator’s Guide) I find that I need to define a profile. Since the setup only specifies Netscape or Active Directory this is not created. Does anybody know how to manually create this profile, and or do I need to add this configuration into eDirectory.

Can some body point me in the right direction?

Ray

[RolandH]

I'm not very familiar with LDAP, but perhaps the attached File which I found on my system helpful for you. BTW the newest LDAP Client is Version 4.10/4.15

See this Web-Site:
http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=J4269AA

Regards
Roland

[Angela Cotter_2]

Hi,

Thanks for your reply.

I had open a ticket with HP support and they had forwarded me the below doc. Which does into more detail about integrating ldap/pam into Novell's eDirectory.(Deploying LDAP-UX with Novell eDirectory, Oracle Internet Directory & OpenLDAP)

[Ruben Maarsen]

Hello Ray,

Can you please upload this document? I'm trying to intergrate LDAP-ux with eDirectory without success :(

Thank you in advance, regards, Ruben.

[Steven E. Protter]

Shalom Ray,

Due to the requirements of changes on server LDAP shema and the difficulty of doing it, I wonder if LDAP-UX is the right tool for the job.

openldap has been ported from open source and should work similar to linux ldap. Normally its available as part of Internet Express from http://software.hp.com

Not today though.

SEP

[Ruben Maarsen]

Hi Steven,

Thanks for this tip. I tried to configure openldap but I was unsuccessful. Do you have any clues regarding pam.conf, nsswitch.conf etc.?

Regards, Ruben.