HP UX Kerberos Data Security Software Integrating a Kerberos Principal in to the Ldap Directory

Overview

Introduction to LDAP

How is the Kerberos Principal Integrated in to the LDAP

Directory?

A directory contains a collection of objects organized in a tree structure. You can arrange entries within the DIT based on their Distinguished Names (DNs). A DN is composed of a sequence of RDNs separated by commas, such as cn=alex,ou=R&D,o=bambi.

Figure 1-2, displays how a Kerberos principal is integrated in to the

LDAP directory.

Figure 1-2 Integrating a Kerberos Principal in to the LDAP Directory

Figure 1-2 illustrates data related to the user Alex Mathew, who is located in the LDAP directory at cn=Alex, ou=accounts, o=BAMBI.COM. With both the POSIX account and LDAP information integrated, like Alex’s UNIX identity, his Kerberos identity, and any other attributes related to Alex under a single LDAP directory entry.

34 Chapter 1