LDAP & Trusted sytem

[Pepe Jimenez Muñoz]

Hi,

we have a HP-UX 11.11 machine with Netscape Directory Server 6.11 and LDAP-UX 3.30 installed.

In page 74 of Client Services manual says that “supports coexistence with Trusted Mode”.

In the migration scripts (migrate_passwd.pl) we see that no “trusted data” go to the ldif file because the comment in this scripts say: “does not support the /etc/shadow file”.

How we can get the same behavior that Trusted System with LDAP-UX and LDAP ???

and

how we can migrate the actual trusted data to the directory ??

[Muthukumar_5]

We can try with ldif file's with the object class of "shadowAccount"

Try to create the user ldif format and try. I am not sure about the huge file tranmission from /etc/shadow file,

But you can do it with ldap interchange format index (ldif) with shadow* attributes.

They are given over,
http://docs.sun.com/source/816-6682-10/oc_hpu14.htm#1278282

[Doug Lamoureux_2 · Accepted solution]

TCB data is not stored in the Directory.

The users TCB data (/tcb/...) will be generated on each local system when the user is identified by the NSS_LDAP module. This means that a user could (most likely will) have a different Audit ID on each system. The TCB data for each user will be unique to each system.

What features of Trusted Mode are you looking for? Netscape Directory Server does allow you to set a password policy if that's what you are looking for. In addition you could run Shadow Password to hide LOCAL password entries from non-root users.

Please NOTE that Shadow Password is for LOCAL users only. You can not store Shadow data in the Directory for an LDAP based user.