LDAP-UX Client Services B.04.15 with Microsoft Windows Active Directory Server Administrator's Guide (edition 8)

Glossary
Access Control
Instruction
A specification controlling access to entries in a directory.
Access Control
List
One or more ACIs.
ACI See See Access Control Instruction.
ACL See See Access Control List..
Configuration
profile
An entry in an LDAP directory containing information common to many clients, that allows
clients to access user, group and other information in the directory. Clients download the profile
from the directory.
See also See also Client Configuration File..
Global Catalog
Server (GCS)
This refers to the domain controller, which hosts the global catalog for a forest. The global
catalog contains partial information of each domain. LDAP-UX utilizes this feature to find out
which domain a queried data belongs to. The root domain is the default GCS.
IETF Internet Engineering Task Force; the organization that defines the LDAP specification. See
http://www.ietf.org.
KDC Key Distribution Center. A computer that issues the session key necessary for the client and
server to communicate in a Kerberos environment.
Kerberos An authentication protocol designed for open, hostile networks. Developed by MIT.
LDAP See See Lightweight Directory Access Protocol.
LDAP Data
Interchange
Format (LDIF)
The format used to represent directory server entries in text form.
LDIF See See LDAP Data Interchange Format.
Lightweight
Directory Access
Protocol (LDAP)
A standard, extensible set of conventions specifying communication between clients and servers
across TCP/IP network connections.
See also See also SLAPD..
Local Domain This refers to the domain that you first configure using the LDAP-UX setup tool and after
choosing Windows 2000 or 2003 ADS as your directory server. This is also the only domain
you configure if you just choose a single domain in which to store your POSIX information.
When LDAP-UX retrieves POSIX information, the local domain is always the first domain
searched. If the entry is found in the local domain, searching stops, therefore, the local domain
will be the primary domain in which you store frequently accessed information. Its profile
configuration is /etc/opt/ldapux/ldapux_profile.bin
Multiple
Domains
The supported multiple domains refer to domains in an ADS forest. Domains from different
forests are not supported.
Name Service
Switch (NSS)
A framework that allows a host to get name information from various sources such as local
files in /etc, NIS, NIS+, or an LDAP directory without modifying applications. See switch(4) for
more information.
Network
Information
Service (NIS)
A distributed database system providing centralized management of common configuration
files, such as /etc/passwd and /etc/hosts.
NIS See See Network Information Service.
NSS See See Name Service Switch.
PAM See See Pluggable Authentication Mechanism.
Pluggable
Authentication
A framework that allows different authentication service modules to be made available without
modifying applications. See pam_ldap(5), pam(3), and pam.conf(4) for more information.
Mechanism
(PAM)
Profile See See Configuration profile.
279