LDAP-UX Integration B.04.20 Release Notes (April 2010 Update)

2 New in LDAP-UX Integration B.04.20

LDAP-UX Integration B.04.20 offers the following new features:

• Windows 2008:

Supports Active Directory Server for Windows 2008

• IBM TDS:

Supports IBM Tivoli Directory Server v6.2

• Larger NGROUPS:

As part of the effort to increase the NGROUPS limit, HP-UX now includes a new kernel

tunable, ngroups_max, that specifies the maximum number of supplementary groups that

can be associated with a user or process. LDAP-UX Integration now uses the kernel tunable

ngroups_max and is no longer limited by the value of the constant NGROUPS where user

accounts were limited to being members of at most 20 groups. For more information, refer

to the HP-UX 11i Version 3 September 2008 Release Notes at the following website:

http://www.hp.com/go/hpux-core-docs (click on HP-UX 11i v3)

• The pam_ldap module was enhanced to support the following options:

— ignore: Use this option in conjunction with the pam_user.conf file to skip

LDAP-based authentication for specific users.

— deny_local: Instructs pam_ldap not to authenticate any users found in the LDAP

directory server that have either the same account name or same account number as

any account defined in the /etc/passwd file.

• Updates the LDAP SDK to Mozilla version 6.0.5.

NOTE: Version 6.0.5 of the Mozilla LDAP SDK includes changes to improve compliance

with the LDAP C API specification defined by the IETF document

draft-ietf-ldapext-ldap-c-api-05.txt. These changes modify lower-level BER

structures. While the majority of these changes are maintained within the SDK itself, or

opaque to the applications, those applications that use or modify binary data stored in the

directory server or that make direct use of non-integrated LDAP extensions or controls, will

likely be impacted. These impacted applications will be incompatible with version 6.0.5

unless re-compiled. If you have a third-party application that no longer functions after

upgrading to LDAP-UX version B.04.20, contact HP support. SAP customers should review

SAPnote 1451598.