Introduction

Overview of LDAP-UX Client Services

passwords may not only be stored in any syntax but also means that passwords may remain hidden from view (preventing a decryption attack on the hashed passwords). Because passwords may be stored in any syntax, HP-UX will be able to share passwords with other LDAP-enabled applications.

With LDAP-UX Client Services B.03.20 or later versions, the client daemon, ldapclientd, becomes the center of the product. It supports all NSS backend services for LDAP and data enumeration. It also supports PAM_LDAP for authentication and password change.

With LDAP-UX Client Services, HP-UX commands and subsystems can transparently access name service information from the LDAP directory through ldapclientd. The following table shows some examples of commands and subsystems that use PAM and NSS:

Table 1-1

Examples of Commands and Subsystems

 

that use PAM and NSS

 

 

 

Commands that use

Commands that use PAM and

 

NSS

 

NSS

 

 

 

 

 

ls

 

login

 

 

 

 

 

nsquerya

 

passwd

 

who

 

ftp

 

 

 

 

 

whoami

 

su

 

 

 

 

 

fingerb

 

rlogin

 

id

 

telnet

 

 

 

 

 

logname

 

dtlogin

 

 

 

 

 

groupsb

 

remsh

 

newgrpb

 

 

 

pwgetb

 

 

 

grgetb

 

 

 

listusersb

 

 

 

4

Chapter 1