LDAP-UX Integration B.04.17 Release Notes

Changing authentication methods
If you wish to switch from your current authentication method, such as SIMPLE or
SASL/DIGEST-MD5 to SASL/GSSAPI, TLS:SIMPLE or TLS:SASL/DIGEST-MD5, you must restart
the ldapclientd daemon after making the configuration changes. This step is required to assure
that the proper GSS API, Kereros and/or SSL initialization is completed.
Supported Features For Particular Directory Servers
The following shows the supported fearures for particular directory servers:
Feature Netscape/Red Hat Microsoft ADS
Directory
-------------------------------------------------------------
passwd name service Supported Supported
group name service Supported Supported
netgroup name service Supported Not Supported
hosts name service Supported Supported
networks name service Supported Supported
protocols name service Supported Supported
rpc name service Supported Supported
automount name service Supported Not Supported
aliases name service Not Supported[1] Not Supported
services name service Supported Supported
publickey name service Supported Not Supported
printer configurator Supported Not Supported[2]
pam_authz Supported Supported[3]
X.500-style group syntax Supported Supported
pam_ldap Supported Not Supported[4]
Trusted Mode Security[5] Supported Supported
Standard Mode Security Supported Supported
LDAP Command-line Utils. Supported Supported
ldapentry editor tool Supported Supporte
NIS Migration Tools Supported Supported
NIS+ Migration Tools Supported Supported
Multiple Domains Not Supported Supported
NIS/LDAP Gateway Supported Not Supported
Authentication Methods
Simple Password NSS[6] & PAM[7] NSS Only
SASL/DIGEST-MD5 NSS & PAM NSS Only
SASL/GSSAPI Not Supported NSS Only
SSL Server Certs. NSS & PAM NSS Only
SSL Client Certs. Not Supported Not Supported
Caching
passwd Supported Supported
group Supported Supported
netgroup Supported Not Supported
X.500-style group- Supported Supported
membership
NOTE:
1. Equivalent feature available directly in sendmail.
2. The setup program does not support configuration of ADS-based printers. If the printer
entry in ADS contains a "printer-uri" type attribute (see RFC3712) the configuration profile
can be modified to change the attribute mapping forprinter-name and printer-uri to
match that of printer descriptions in ADS. However this feature is not officially supported.
3. netgroups may not be stored in ADS.
4. pam_kerberos has been integrated with LDAP to fully support Windows domain
authentication and should be used instead of pam_ldap.
5. LDAP-UX supports coexistence Trusted Mode and Standard Mode security features. Identities
stored in the local host are controlled by the local security policy. Identities stored in an
LDAP directory are controlled by the LDAP security policy.
LDAP-UX Client Services 23