Integrate Logins with HP CIFS Server, HP-UX, and Windows 2003R2/2008

Introduction

The Multi-OS enterprise often must maintain multiple operating system login credentials for a single

user on various OS platforms. Management of user accounts over several OS platforms often requires

coordination of administration from separate internal organizations. This can be inefficient, costly,

and prone to error.

Unified Login on HP-UX is a method of integrating user account data for separate applications and

operating systems. Shown here is configuration data that explains how to use a Windows 2003R2

or 2008 Domain Controller and Key Distribution Center (KDC) as a central user credential repository,

and then provide logon credentials from this repository to a Windows domain, HP-UX system logons,

HP-UX Internet Services logons, and HP CIFS Server client authentication.

This solution is delivered from an HP CIFS Server (Samba) perspective. User and group mapping

from Windows to Unix has long been a convoluted and inefficient task. The Samba utility winbind is

complex and less efficient than LDAP. Using flat files to map users and groups is an administrative

impossibility in all but the most simple deployments. With the advancements of Windows 2003R2

and 2008, Unified Login has become easier to implement, manage, and support.

The time has come to make Unified Login the default configuration for HP CIFS Server and Samba

server membership in a Windows domain.

Overview

Solution Components

Solution Configuration

Solution Operation

Appendices

NOTE: Many graphics and screenshots are used. While difficult to read in printed form, electronic

copies may use the Zoom feature to display the graphic detail in a more readable size.