LDAP directory server

[Todd McDaniel_1]

My specific case is with AIX, but I would think LDAP can be used on multiple unix flavors. I dont have any prior exposure to using LDAP so I need some assistance here.

We have a client who uses LDAP directory server where apparently none of their servers have accounts present, unlike NIS where there is a master server that has user accounts visible in the passwd file.

I am trying to understand how you would audit the users of such servers since there is no actual account to audit other than in the database, even on the actual LDAP directory server.

How would you audit users for password aging/complexity/length etc... obsolete users and such under normal unix based auditing?

I need to understand how this works so I can apply it to our server management software.

regards,

Todd McDaniel

[Steven E. Protter]

Shalom Todd,

The options in this case depend on what LDAP server is in use.

The Red Hat Directory server does have a GUI that lets you configure such options as password complexity.

Audits would have to take place on the directory server. There are reports that can be run from the command line.

SEP