Integrate Logins with HP CIFS Server, HP-UX, and Windows 2003R2/2008

Overview

An enterprise multi-OS data center will often have concurrently running Windows server versions,

Linux, and multiple vendor UNIX operating systems. Some of these OS platforms will require

interoperability, which creates a problem for user logon data that must span multiple operating

systems and multiple vendors. This is a problem that results in duplicate information, duplication of

effort, and is prone to error for synchronization and version control.

A common objective of the data center manager is to simplify the management of diverse machines

and OS platforms. One way to do this is to consolidate user login data into a single repository where

it is managed centrally. The following configuration details and examples pertain to these OS

platforms and applications:

 Windows 2003R2 or 2008

 HP-UX 11iv2 or 11iv3

 HP CIFS Server A.02.04 (Samba 3.0.30)

The Windows 2003R2/2008 Active Directory will be the common directory server repository for all

user login data across these platforms. The W2003R2/2008 AD schema utilizes RFC2307 attributes

to store non-Windows user data on the common user object. While subsequent examples and tasks

are specific to HP-UX, the RFC2307 attributes can also be utilized for Linux and other UNIX platforms.

Therefore, this design can be built upon to serve a multi-vendor and multi-OS enterprise data center.

There are existing HP-UX white papers that describe the Unified Login environment for HP-UX and

Windows. The existing documents are not current with the technology, but more importantly, do not

factor in the HP CIFS Server participation in the Unified Login design. This paper approaches all

configuration details from an HP CIFS Server perspective.

NOTE: The primary technical distinction of Unified Login between a CIFS Server environment and

non-CIFS-Server environment is the creation of the krb5.keytab file. In this example, the CIFS Server is

used to create the keytab file and the associated HP-UX Service Principal keys. Other designs use the

Windows utility ktpass.exe to create the krb5.keytab file.