NIS+PAMKerberos HP-UX client | HP UX LDAP-UX Integration Software

NIS+PAM_Kerberos:

HP-UX client

login

PAM Library

PAM_Kerberos

getpwnam()

NSS engine

NSS_NIS

Windows 2000 server

Kerberos protocol

Kerberos Services

NIS protocol		Server for NIS				Active
		Server for NIS				Active
		(SFU 2.0)				Directory
		(SFU 2.0)				Directory

8

Image 8

HP UX LDAP-UX Integration Software manual NIS+PAMKerberos HP-UX client

Contents

White Paper Legal Notices Copyright Notices Introduction PAM Kerberos HP-UX and Windows 2000 Integration ProductsPAM and NSS Kerberos Services Services for Unix SFUWindows Active Directory AD NIS Server How HP-UX and Windows 2000 Products Integrate NIS IntegrationHP-UX Client Windows 2000 Server NIS+PAMKerberos HP-UX client Ldap + PAMKerberos HP-UX Client Windows 2000 Server Ldap IntegrationHP-UX Client Windows 2000 Server NIS vs. Ldap Integration Common Authentication Benefits of IntegrationCommon Data Repository Single Point of Account Management Configuring Windows 2000 and HP-UX Using NIS Integration Install Active Directory into your Windows 2000 serverInstall SFU 2.0, including Server for NIS Add an account for HP-UX client machine to AD NIS Client Configuration PAM Kerberos Configuration Add a host key to the /etc/krb5.keytab file Add the Kerberos services to /etc/servicesCreate /etc/krb5.conf Change /etc/pam.conf to use PAM Kerberos Synchronize the HP-UX clock to the Windows 2000 clock Password sufficient /usr/lib/security/libpamunix.1 Active Directory Configuration Configuring Windows 2000 and HP-UX Using Ldap IntegrationSoftware Installation Verify profile cache LDAP-UX Client Services ConfigurationRun the setup tool Configure a proxy user Change Name Service Switch NSS to use Ldap Security Add and delete user accounts AdministrationAdd and delete groups Manage account and password policies Password expirationUser forced to change password Login procedure Migration Appendix a Setting a Proxy User’s Access Rights Read memberUid Read msSFUPassword Read msSFUName