LDAP-UX Integration B.05.00 Release Notes

In this situation, profiles can still be downloaded manually using the get_profile_entry
command, as long as a principal and password provided on the command line.The following
command shows an example of how to download the profile manually. If your profile changes
frequently, you may wish to place this in a script that is called periodically by cron:
/opt/ldapux/config/get_profile_entry -s NSS -D \
"<[e-mail]>" -w "<adminpassword>"
2.6.14 Changing authentication methods
If you wish to switch from your current authentication method, such as SIMPLE or
SASL/DIGEST-MD5 to SASL/GSSAPI, TLS:SIMPLE or TLS:SASL/DIGEST-MD5, you must restart
the ldapclientd daemon after making the configuration changes. This step is required to assure
that the proper GSS API, Kereros and/or SSL initialization is completed.
2.6.15 Supported features for particular directory servers
The following shows the supported features for particular directory servers:
Feature HP-UX Directory Microsoft ADS
-------------------------------------------------------------
passwd name service Supported Supported
group name service Supported Supported
netgroup name service Supported Not Supported
hosts name service Supported Supported
networks name service Supported Supported
protocols name service Supported Supported
rpc name service Supported Supported
automount name service Supported Not Supported
aliases name service Not Supported[1] Not Supported
services name service Supported Supported
publickey name service Supported Not Supported
printer configurator Supported Not Supported[2]
pam_authz Supported Supported[3]
X.500-style group syntax Supported Supported
pam_ldap Supported Not Supported[4]
Trusted Mode Security[5] Supported Supported
Standard Mode Security Supported Supported
LDAP Command-line Utils. Supported Supported
ldapentry editor tool Supported Supporte
NIS Migration Tools Supported Supported
NIS+ Migration Tools Supported Supported
Multiple Domains Not Supported Supported
NIS/LDAP Gateway Supported Not Supported
Authentication Methods
Simple Password NSS[6] & PAM[7] NSS Only
SASL/DIGEST-MD5 NSS & PAM NSS Only
SASL/GSSAPI Not Supported NSS Only
SSL Server Certs. NSS & PAM NSS Only
SSL Client Certs. Not Supported Not Supported
Caching
passwd Supported Supported
group Supported Supported
netgroup Supported Not Supported
X.500-style group- Supported Supported
membership
NOTE:
1. Equivalent feature available directly in sendmail.
2. The setup program does not support configuration of ADS-based printers. If the printer
entry in ADS contains a "printer-uri" type attribute (see RFC3712) the configuration profile
can be modified to change the attribute mapping forprinter-name and printer-uri to
match that of printer descriptions in ADS. However this feature is not officially supported.
2.6 Limitations in LDAP-UX Client Services 23