Integrating HP-UX and Active Directory - restricting login

[David Sickmiller]

I have been researching how to have HP-UX systems authenticate against Active Directory. I have read the HP documentation and am planning to use Kerberos and LDAP.

In the documentation, I read that "the default is to allow all users stored in the LDAP directory to login." The recommended solution is to configure ldapux_client.conf to disable certain range(s) of UIDs.

I have about 20 HP-UX servers. Each of them has a different combination of user accounts. I want to be able to centrally control (from Active Directory) which users can access which servers instead of separately maintaining ldapux_client.conf on each server. So far I have not seen documentation explaining how to do this..... does anyone have the same problem?

I have an idea how to solve this situation, but I am unsure and have not tested it. I think I could configure each server to use a different serviceSearchDescriptor. e.g. password: (&(objectclass=user)(uidnumber=*)(memberOf=CN=SERVER1_Users,CN=Users,DC=mydomain,DC=mycorp,DC=com))

Has anyone experienced this problem before? Any solutions?

[someone_4]

Hi

I have done this before and it works.

here is the link to the doc.

http://www1.itrc.hp.com/service/cki/search.do?category=c0&mode=id&searchString=WHBKBRC00011164&searchCrit=allwords&docType=Security&docType=Patch&docType=EngineerNotes&docType=BugReports&docType=Hardware&docType=ReferenceMaterials&docType=ThirdParty&search.x=46&search.y=5


Richard

[Steven E. Protter]

A thread.

http://search.hp.com/redirect.html?url=http%3A//forums.itrc.hp.com/cm/QuestionAnswer/1,,0x49632d88ce9cd711abdc0090277a778c,00.html&qt=HP-UX+%2BActive+%2BDirectories+%2BIntegration&hit=4

Sorry no experience.

Another thread.

http://search.hp.com/redirect.html?url=http%3A//forums.itrc.hp.com/cm/QuestionAnswer/1,,0xce7842308663d611abdb0090277a778c,00.html&qt=HP-UX+%2BActive+%2BDirectories+%2BIntegration&hit=3

Another

http://search.hp.com/redirect.html?url=http%3A//forums.itrc.hp.com/cm/QuestionAnswer/1,,0x08973f9a15add711abdc0090277a778c,00.html&qt=HP-UX+%2BActive+%2BDirectories+%2BIntegration&hit=18

SEP

[David Sickmiller]

Richard,

I clicked the link you provided, but I got a page that said "Note: Your search produced no results. It is either too specific or has spelling errors. Try a different search string or change your search criteria selection."

Any ideas?

Thanks,
David

[someone_4 · Accepted solution]

Hi David

Check out the attachment ..
it is the same thing ..

Richard