HP-UX Directory Server 8.1 administrator guide

The Directory Server uses these LDAPI connections to allow users to bind immediately to the
Directory Server or to access the Directory Server using tools which support connections over
UNIX sockets. Autobind uses the uid:gid of the UNIX user and maps that user to an entry in
the Directory Server, then allows access for that user.
Autobind allows mappings to three directory entries:
• User entries, if the UNIX user matches one user entry
• Directory Manager (or the super user defined in nsslapd-ldapimaprootdn), if the UNIX
user is root
Figure 7-1 Autobind connection path
The special autobind users are entries beneath a special autobind suffix (outside the regular user
subtree). The entries underneath are identified by their user and group ID numbers:
gidNumber=gid+uidNumberuid, autobindsuffix
If autobind is not enabled but LDAPI is, then Unix users are anonymously bound to the Directory
Server, unless they provide other bind credentials.
314 Managing user authentication