LDAP-UX Client Services B.05.01 Administrator Guide for HP directory servers and Windows ADS

login auth required libpam_hpsec.so.1
login auth required libpam_updbe.so.1
login auth sufficient libpam_ldap.so.1
login auth required libpam_unix.so.1 try_first_pass
# Account management
#
login account required libpam_hpsec.so.1
login account required libpam_updbe.so.1
login account sufficient libpam_ldap.so.1
login account required libpam_unix.so.1
# Session management
#
login session required libpam_hpsec.so.1
login session required libpam_updbe.so.1
login session required libpam_ldap.so.1
login session required libpam_unix.so.1
# Password management
#
login password required libpam_hpsec.so.1
login password required libpam_updbe.so.1
login password sufficient libpam_ldap.so.1
login password required libpam_unix.so.1 try_first_pass
For more information, see the pam.conf(4) and pam_updbe(5) manpages.
For more information, see the pam.conf(4) and pam_updbe(5) manpages, and the Managing
Systems and Workgroups: A Guide for HP-UX System Administrators document at the following
location:
http://www.hp.com/go/hpux-core-docs (click HP-UX 11i v2)
2.5.7 Configuring subsequent client systems
Once you have configured your directory and one client system, you may configure subsequent
client systems by performing the following steps. These steps are applicable to both HP directory
server and Windows ADS environments (readers of “Installing and configuring LDAP-UX Client
Services for a Windows ADS environment” (page 114) are referred to this section for information
about configuring subsequent client systems).
NOTE: If you used autosetup to create your LDAP-UX domain, you can configure subsequent
client systems by using autosetup; you can run autosetup in silent mode, as described in
Section 2.3.6.2 (page 57) (for an HP directory server environment) or Section 3.3.4.2 (page 127)
(for a Windows ADS environment).
Use the following steps only if you used setup. With autosetup, a unique proxy credential is
created for each host. The proxy credential (pcred) file is not supposed to be shared across hosts
in environments configured by autosetup.
1. Use swinstall to install LDAP-UX Client Services on the client system. This does not require
rebooting the client system.
Alternatively, use the guided installaton (autosetup), for a simpler, automated process. If
you use autosetup, you may skip to the last step to verify the installation and configuration
on the client.
2. Copy the following files from a configured client to the client being configured:
• /etc/opt/ldapux/ldapux_client.conf
• /etc/opt/ldapux/ldapux_profile.ldif
• /etc/opt/ldapux/pcred only if you have configured a proxy user, not if you are
using only anonymous access (Windows ADS supports proxy bind access only)
110 Installing and configuring LDAP-UX Client Services for an HP server environment