HP UX LDAP-UX Integration Software manual Read memberUid Read msSFUPassword Read msSFUName

Page 25

b)Click the container which contains the proxy user, usually it is "Users", choose "Delegate Control..." from the Action menu.

c)The Delgation of Control Wizard starts, click "Next".

d)A screen for you to select users and groups, click "Add” a list of users and groups are displayed, choose the proxy user from the list or type in the proxy user name, then click "Add" and "OK"(same as the above screen).

e)Back to the screen to select users and groups, click "Next".

f)You are given the screen to identify the scope of the task you want to delegate. Choose "Only the following objects in folder", check "Group objects", click "Next".

g) You are given a screen to select the permissions, choose "Property-specific" and the following permissions: Read gidNumber

Read memberUid

Read msSFUPassword

Read msSFUName

then click “Next”.

h)You are given the screen which confirms your configuration, click on "finish" if everything is correct, otherwise, click "Back" to change.

25

Image 25
Contents White Paper Copyright Notices Legal NoticesIntroduction PAM and NSS HP-UX and Windows 2000 Integration ProductsPAM Kerberos Services for Unix SFU Kerberos ServicesWindows Active Directory ADNIS Server NIS Integration How HP-UX and Windows 2000 Products IntegrateHP-UX Client Windows 2000 ServerNIS+PAMKerberos HP-UX client HP-UX Client Windows 2000 Server Ldap IntegrationLdap + PAMKerberos HP-UX Client Windows 2000 Server NIS vs. Ldap Integration Benefits of Integration Common AuthenticationCommon Data Repository Single Point of Account ManagementInstall Active Directory into your Windows 2000 server Configuring Windows 2000 and HP-UX Using NIS IntegrationInstall SFU 2.0, including Server for NIS Add an account for HP-UX client machine to ADPAM Kerberos Configuration NIS Client ConfigurationCreate /etc/krb5.conf Add the Kerberos services to /etc/servicesAdd a host key to the /etc/krb5.keytab file Synchronize the HP-UX clock to the Windows 2000 clock Change /etc/pam.conf to use PAM KerberosPassword sufficient /usr/lib/security/libpamunix.1 Software Installation Configuring Windows 2000 and HP-UX Using Ldap IntegrationActive Directory Configuration Run the setup tool LDAP-UX Client Services ConfigurationVerify profile cache Change Name Service Switch NSS to use Ldap Configure a proxy userSecurity Add and delete groups AdministrationAdd and delete user accounts Password expiration Manage account and password policiesUser forced to change password Login procedureMigration Appendix a Setting a Proxy User’s Access Rights Read memberUid Read msSFUPassword Read msSFUName
Related manuals
Manual 214 pages 54.35 Kb Manual 65 pages 7.83 Kb