LDAP-UX Client Services B.04.00 with Microsoft Windows 2000/2003 Active Directory Administrator's Guide

Active Directory Multiple Domains

Resolving Duplicate Entries

Chapter 368

Example

The following example explains what to expect when your user accounts

are not unique in the forest.

Assume the user account jimmy resides in domainA, domainB, and

domainC simultaneously:

• If domain A is the local domain, jimmy in domainA will log into

HP-UX client.

• If all three domains are remote domains, and are conﬁgured in the

sequence: domainB, domainC, domainA, then jimmy in domainB, the

ﬁrst domain in the conﬁguration, will log into HP-UX client.

• If all three domains are remote domains, and the GCS is selected,

then jimmy cannot log into HP-UX client at all since LDAP-UX

cannot distinguish which jimmy is preferred (when duplicate entries

exist for GCS, none is valid).

• If all three domains are remote domains, domainC is included in

your remote domain conﬁguration, and GCS is selected, then jimmy

in domainC logs into HP-UX client.

If the user name jimmy is unique in the forest, but the uid number is not

unique, jimmy can log into the HP-UX client, but depending on if the uid

number can be returned, he may have problems changing his password

using the passwd command.