LDAP-UX Integration B.04.20 Release Notes (April 2010 Update)

You can download the Enhanced Publickey-LDAP software bundle from the following Software
Depot web site:
• Go to the HP Software Depot website:
http://www.hp.com/go/softwaredepot
• Click on the Enhancement releases and patch bundles link.
• Select the following links:
— HP-UX Software Pack (Optional HP-UX 11i v1 Core Enhancements) for HP-UX 11i
v1→HP-UX Public Key LDAP for HP-UX 11i v1
Select and download the following software bundle:
Enhkey B.11.11.01 HP-UX B.11.11 64+32 depot for HP-UX 11i v1
— HP-UX Software Pack (Optional HP-UX 11i v2 Core Enhancements) for HP-UX 11i
v2→HP-UX Public-Key LDAP for HP-UX 11i v2
Select and download the following software bundle:
Enhkey B.11.23.01 HP-UX B.11.23 IA+PA depot for HP-UX 11i v2
For detailed information, see the ONC With Publickey LDAP Support Software Pack Release Notes
available at the following website:
http://www.hp.com/go/hpux-networking-docs (click on HP-UX 11i v2 Networking Software)
NOTE: If publickey support with LDAP is not required in your environment, installation of
the Enhkey software bundle is not required.
3.3.1.4.4 Kerberos Support on HP-UX 11i v1 or v2
In order to support integration with Active Directory Server, a specific version of the
PAM-Kerberos product is required. On HP-UX 11i v1, version 1.11 or later of the PAM-Kerberos
product is required. On HP-UX 11i v2, version 1.23 or later of the PAM-Kerberos product is
required.
If you wish to also use SASL/GSSAPI for proxied authentication, version 1.3.5.03 or later of the
Kerberos Client product is required, which is a replacement for the KRB5-Client components of
the core of HP-UX OS. Kerberos Client version 1.0 was originally bundled on HP-UX 11i v1 and
v2. Kerberos Client version 1.3.5.03 is bundled on HP-UX 11i v3.
Please also note that the KRB5CLIENT product is a superior product to previous KRB5-Client
patches (such as PHSS_36286). Although patch PHSS_36286 is required, and designed to install
over the core Kerberos client patch, and it will not overwrite the KRB5CLIENT product.
Both "PAM Kerberos" (J5849AA) and "Kerberos Client" (KRB5CLIENT) products can be
downloaded from http://software.hp.com. They are available at: http:// software.hp.com/portal/
swdepot/displayProductInfo.do?productNumber=J5849AA and http://software.hp.com/portal/
swdepot/displayProductInfo.do?productNumber=KRB5CLIENT
3.4 Installing and Configuring the LDAP-UX Client Services
This section provides basic instructions for installing and configuring the LDAP-UX Client
Services.
3.4.1 Installing LDAP-UX Client Services
Use the SD-UX facility for installation. See the swinstall(1M) manpage for details.
1. Log in to your system as root.
2. Run swinstall and install the LDAP-UX Client Services (LdapUxClient subproduct). It
installs the product software in /opt/ldapux and /etc/opt/ldapux directories.
18 LDAP-UX Client Services