HPUX user authentication for an NT domain?

[Darren MacKenzie]

Is it possible to authenticate users in HPUX11i against their NT domain accounts? IE: /username as the username, as opposed to a local or NIS username?

I have a mixed environment, and would like to be able to authenticate users via their NT domain accounts. DNS doesn't take into account usernames, just hostnames. I can't find any info on how this could be done, if at all. Can someone please help me out with this?

Thanks in advance.

[Hai Nguyen_1]

You may want to look at the usage of CIFS software. Look at the link below:

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B8725-90021/B8725-90021_top.html&con=/hpux/onlinedocs/B8725-90021/00/00/5-con.html&toc=/hpux/onlinedocs/B8725-90021/00/00/5-toc.html&searchterms=cifs&queryid=20030115-142110

Hai

[Steven E. Protter]

You can also integrate into an LDAP environment and authenticate users with the LDAP server.

With CIFS/9000 it is possible to follow an advanced procedure and use HP-UX as a PDC or primary domain controller.

Fun!

Steve

[Darren MacKenzie]

I don't need it to be a PDC (or BDC), but just need it to be able to authenticate login by querying a preexisting PDC. I know that Samba (and the new version, mentioned) will do it for files...but I need the ability to be able to do it off the actual LOGIN (much like NIS control).

It was mentioned to use Samba as an LDAP. How is that possible?

[Keith Lautenschlager · Accepted solution]

Darren,

Part of the CIFS/9000 Client software is PAM_NTLM. You can configure PAM_NTLM such that users that are trying to login to the Unix system have their username/password sent to a designated Windows domain controller for authentication. The user still has to have an account on the Unix system, whether it's in /etc/passwd or NIS, but the actual password verification can be done strictly by the Windows system.

There is a section on PAM_NTLM in the CIFS/9000 Client Installation and Administration Guide which is available from http://www.docs.hp.com.

[Darren MacKenzie]

Thanks.

[Stefan Pendl]

Darren,

it is also possible to install "Services for UNIX" on the PDC to let him act as a NIS server.

---
steve