LDAP-UX Client Services B.04.15 Administrator's Guide

Table 1-1 Examples of Commands and Subsystems that use PAM and NSS (continued)
Commands that use PAM and NSSCommands that use NSS
remshgroups
2
newgrp
2
pwget
2
grget
2
listusers
2
logins
2
nslookup
1 nsquery(1) is a contributed tool included with the ONC/NFS product.
2 These commands enumerate the entire passwd or group database, which may reduce network and directory server
performance for large databases.
Figure 1-3 A Simplified LDAP-UX Client Services Environment
In addition, the getpwent(3C) and getgrent(3C) family of system calls get user and group
information from the directory.
After you install and configure an LDAP directory and migrate your name service data into it,
HP-UX client systems locate the directory from a "start-up file." The start-up file tells the client
system how to download a "configuration profile" from the LDAP directory. The configuration
profile is a directory entry containing configuration information common to many clients. Storing
it in the directory lets you maintain it in one place and share it among many clients rather than
storing it redundantly across the clients. Because the configuration information is stored in the
directory, all each client needs to know is where its profile is, hence the start-up file. Each client
downloads the configuration profile from the directory.
The profile is an entry in the directory containing details on how clients are to access the directory,
such as:
• where and how clients should search the directory for user, group and other name service
information.
1.1 Overview of LDAP-UX Client Services 17