LDAP-UX Client Services B.05.00 with Microsoft Windows Active Directory Server Administrator's Guide (obsolete beyond B.05.00)

Glossary
Access Control
Instruction
A specification controlling access to entries in a directory.
Access Control List One or more ACIs.
ACI See See Access Control Instruction.
ACL See See Access Control List..
Configuration
profile
An entry in a directory server containing information common to many clients, that allows clients
to access user, group and other information in the directory. Clients download the profile from
the directory.
See also See also Client Configuration File..
Global Catalog
Server (GCS)
This refers to the domain controller, which hosts the global catalog for a forest. The global catalog
contains partial information of each domain. LDAP-UX utilizes this feature to find out which domain
a queried data belongs to. The root domain is the default GCS.
IETF Internet Engineering Task Force; the organization that defines the LDAP specification. See http://
www.ietf.org.
KDC Key Distribution Center. A computer that issues the session key necessary for the client and server
to communicate in a Kerberos environment.
Kerberos An authentication protocol designed for open, hostile networks. Developed by MIT.
LDAP See See Lightweight Directory Access Protocol.
LDAP Data
Interchange
Format (LDIF)
The format used to represent directory server entries in text form.
LDIF See See LDAP Data Interchange Format.
Lightweight
Directory Access
Protocol (LDAP)
A standard, extensible set of conventions specifying communication between clients and servers
across TCP/IP network connections.
See also See also SLAPD..
Local Domain This refers to the domain that you first configure using the LDAP-UX setup tool and after choosing
Windows 2003 R2 or 2008 ADS as your directory server. This is also the only domain you
configure if you just choose a single domain in which to store your POSIX information. When
LDAP-UX retrieves POSIX information, the local domain is always the first domain searched. If
the entry is found in the local domain, searching stops, therefore, the local domain will be the
primary domain in which you store frequently accessed information. Its profile configuration is
/etc/opt/ldapux/ldapux_profile.bin
Multiple Domains The supported multiple domains refer to domains in an ADS forest. Domains from different forests
are not supported.
Name Service
Switch (NSS)
A framework that allows a host to get name information from various sources such as local files
in /etc, NIS, NIS+, or a directory server without modifying applications. See switch(4) for more
information.
Network
Information Service
(NIS)
A distributed database system providing centralized management of common configuration files,
such as /etc/passwd and /etc/hosts.
NIS See See Network Information Service.
NSS See See Name Service Switch.
PAM See See Pluggable Authentication Mechanism.
Pluggable
Authentication
Mechanism (PAM)
A framework that allows different authentication service modules to be made available without
modifying applications. For more information, see the pam_ldap(5), pam(3), and pam.conf(4)
manpages.
Profile See See Configuration profile.
Remote Domains All domains in the forest, other than the local domain, are referred to as remote domains. When
you choose multiple domain support during setup, you will be guided to configure profiles for
158 Glossary