Overview of NIS+ to LDAP Migration

Overview of the LDAP-UX Integration Product

Overview of the LDAP-UX Integration

Product

The LDAP-UX Integration product uses the Lightweight Directory Access Protocol (LDAP) to centralize user, group and network information management in an LDAP directory. The LDAP-UX Integration product includes the following subproducts:

•LDAP-UX Client Services. Provides both an LDAP-based Pluggable Authentication Module (PAM) and Name Service Switch (NSS) module.

—PAM is the Pluggable Authentication Model, which allows the HP-UX OS and its applications to perform authentication of users, without detailed knowledge about the particular method used to manage user data. (LDAP, Kerberos, /etc/passwd file, etc...)

—NSS is the Name Service Switch, which is a pluggable name resolution service. It is used by various C library APIs, such as getpwname() and others to discover user, group and other POSIX-related information.

•LDAP-UX Client Administrator’s Tools and Migration Scripts. These administrator’s tools manage data in the LDAP directory server. The migration scripts are used to migrate NIS or NIS+ service data to the LDIF files or to the LDAP directory.

•Mozilla LDAP Software Development Kit (SDK). This kit contains the LDAP Application Programming Interfaces (APIs) for building LDAP-enabled clients.

LDAP Directory Server and LDAP-UX Client Services

LDAP directory servers provide services to their clients as a data repository to centralize and to delegate the administration of applications, networks, and user data.

The LDAP directory server offers the following security features:

•Centralized management of user, group, and network information.

4

Chapter 1