HP UX LDAP-UX Integration Software manual

Integrating HP-UX 11.x Account Management and

Authentication with Microsoft Windows 2000

White Paper

Printed in: U.S.A.

Contents

White Paper Legal Notices Introduction HP-UXand Windows 2000 Integration Products PAM: NSS: Windows Active Directory (AD): Kerberos Services: Page How HP-UXand Windows 2000 Products Integrate NIS+PAM_Kerberos: HP-UXclient Windows 2000 server LDAP Integration: Windows 2000 as LDAP server + HP-UXas LDAP Client + HP-UXPAM_Kerberos LDAP: LDAP + PAM_Kerberos: NIS vs. LDAP Integration: Benefits of Integration Configuring Windows 2000 and HP-UXUsing NIS Integration Step 1: Install Active Directory into your Windows 2000 server Step 2: Add an account for HP-UXclient machine to AD Step 3: Use ktpass to create the keytab file for HP-UXclient machine Step 4: Install SFU 2.0, including Server for NIS Step 1: Configure HP-UXas a NIS client Step 2: Change Name Service Switch (NSS) to use NIS Step 3: Start HP-UXas a NIS client Step 1: Download and install the PAM Kerberos product Step 2: Configure your HP-UXmachine to authenticate using PAM Kerberos Step 3: Change /etc/pam.conf to use PAM Kerberos Page Configuring Windows 2000 and HP-UXUsing LDAP Integration Step 2: Install Active Directory administrative tools Step 3: Install SFU 2.0 to extend the posix schema into AD Step 1: Add a proxy user to AD Step 1: Install the LDAP-UXClient Services product into your HP-UXmachine Step 2: Configure your HP-UXmachine to use AD as the directory server Step 3: Configure a proxy user Step 4: Change Name Service Switch (NSS) to use LDAP Security Administration Manage account and password policies Known problems and limitations Slow performance on object enumeration Password expiration End user Login procedure Password change Shell/finger information change Migration Appendix A: Setting a Proxy User’s Access Rights