LDAP-UX Authentication

[Jason Tan]

Is there a way to configure LDAP-UX client to use authentication only instead of full directory feature ?

[Steve Steel]

Hi


See

http://www.software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=J4269AA

and

http://docs.hp.com/hpux/internet/#LDAP-UX%20Integration

Steve Steel

[Jason Tan]

I did look through all the documentation before. However, what i want is to configure the LDAP-UX client to use authentication from the LDAP server only, not all the directory feature.

I able to configure our linux machine to use password from the LDAP server, however the configuration between LDAP-UX Client and Linux PAM is so much different.

[Bob Neal-Joslin]

If I understand your request, simply follow the steps defined in the documentation for configuring the LDAP-UX product. However, when the step suggests adding "ldap" to the /etc/nsswitch.conf file, skip that step. But do add pam_ldap to the pam.conf file. If this isn't enough information, let me know.

Bob

[Steven E. Protter]

Linux Server setup:
http://www.direct-to-linux.com/TUTORIALS/LinuxTutorialLDAP.html

http://www.tldp.org/HOWTO/LDAP-HOWTO/

http://www.metaconsultancy.com/whitepapers/ldap-linux.htm

SEP

[Bhaskar Regmi]

Only for user authentication, LDAP-UX is not a option. Better use pam_ldap from PADL, then configuration is similar to Linux box.

Bhaskar

[Bob Neal-Joslin]

Yes, you can use LDAP-UX. Please see my reply to "pam_ldap for user authentication only"

[Jason Tan]

thanks for all the reply, i might try the LDAP-UX client method before i re-compile the PAM module.

[Bhaskar Regmi]

If you can get the profile from LDAP server, the LDAP-UX client authentication should be no problem.

In my case I cannot create profile on the LDAP directory. Without profile, I do not know how to configure LDAP-UX for authentication.

Bob, can you share some sample configurations.
Your help is highly appreciated.

Thanks
Bhaskar

[Jason Tan]

Hi Bhaskar Regmi,

i have the exact scenario as you here as i cannot create profile in LDAP as well. The LDAP server is not belong to us.

[Bob Neal-Joslin]

See the reply under "pam_ldap for user authentication only" for information about creating a profile without storing it in the directory server.