LDAP-UX Client Services B.05.01 Administrator Guide for HP directory servers and Windows ADS

fi
rm -f /etc/opt/ldapux/ldapux_profile.sav
rm -f /tmp/profile.upd$$
3. Use the crontab command to create a crontab file (or edit your existing crontab file)
and specify how frequently you want the profile to be downloaded. For example, assuming
the script written to download the profile is in the file /ldapux/download_ldap_profile,
the following crontab specification specifies that /ldapux/download_ldap_profile
be executed nightly at midnight:
0 0 * * * /ldapux/download_ldap_profile
For more information about the crontab command, see the crontab(1) manpage.
4. Log in as root and schedule the job with the crontab command. For example, assuming the
crontab entry is in the file crontab.profile, the following schedules the profile
downloading:
crontab crontab.profile
2.5.9 Enabling use of r-commands for PAM_LDAP
LDAP-UX supports use of r-commands (commands for remote execution, such as rlogin, rcp,
and so forth) with LDAP account users whose password is hidden, or not in clear text or crypt
syntax.
To enable the use of r-commands, follow these steps, which are applicable to both HP directory
server and Windows ADS environments (readers of “Installing and configuring LDAP-UX Client
Services for a Windows ADS environment” (page 114) are referred to this section for information
about enabling use of r-commands).
1. Comment out the following line in the /etc/opt/ldapux/ldapux_client.conf file:
#password_as = "x"
2. Modify the account management section in the /etc/pam.conf file for PAM_LDAP and add
the "rcommand" option as follows:
# Account management
#
login account required libpam_hpsec.so.1
login account sufficient libpam_unix.so.1
login account required libpam_ldap.so.1 rcommand
su account required libpam_hpsec.so.1
su account sufficient libpam_unix.so.1
su account required libpam_ldap.so.1
dtlogin account required libpam_hpsec.so.1
dtlogin account sufficient libpam_unix.so.1
dtlogin account required libpam_ldap.so.1
dtaction account required libpam_hpsec.so.1
dtaction account sufficient libpam_unix.so.1
dtaction account required libpam_ldap.so.1
ftp account required libpam_hpsec.so.1
ftp account sufficient libpam_unix.so.1
ftp account required libpam_ldap.so.1
rcomds account required libpam_hpsec.so.1
rcomds account sufficient libpam_unix.so.1
rcomds account required libpam_ldap.so.1 rcommand
sshd account required libpam_hpsec.so.1
sshd account sufficient libpam_unix.so.1
sshd account required libpam_ldap.so.1
112 Installing and configuring LDAP-UX Client Services for an HP server environment