LDAP-UX Integration B.05.01 Release Notes

• IBM IDS 6.2 - Verified and supported
Manual schema installation required◦
• Oracle Internet Directory 9.04 - Minimally verified
Required to index all attributes◦
◦ Bypass setup with ldapmodify to manually load the profile schema
• Computer Associates eTrust 4.0 - Minimally verified
Manual schema installation required◦
• Sun SunOne 6.3 - Minimally verified
If you have another directory, you may be able to use that directory if it meets the following
requirement:
• Supports version 3 of the LDAP specification as defined by IETF RFCs 2251 through 2256
• Supports the Posix name service schema (RFC 2307) or a similar schema
• The schema can be extended to include the DUAConfigProfile object classes and required
attributes (see above)
• For security, the directory should support an access control mechanism that can restrict
modification rights of entries and attributes to specific users
• For security, the directory should support at least ldap_simple_bind authentication
2.7.6 Supported name service databases
LDAP-UX Client Services using HP-UX Directory Server supports the following name services data:
• passwd
• group
• netgroup
• automount
• publickey
• services
• rpc
• hosts
• networks
• protocols
LDAP-UX Client Services using Windows 2003 R2/2008 Active Directory Server in a single domain
supports the same name services data except netgroup, publickey, and PAM. In multiple domains,
it only supports the passwd and group service data.
The LDAP-UX Client Services daemon /opt/ldapux/bin/ldapclientd only caches passwd,
group, netgroup, automount service data. If offline (longterm) caching is enabled (HP directory
server environments only), offline caching of hashed authentication passwords is supported.
2.7.7 Duplicated data entries in ADS multiple domains
To better integrate with HP-UX, it is highly recommended that you maintain unique user names and
uid numbers in the forest, or undesired behaviors may occur. For example:
• If an ADS Global Catalog server is configured to retrieve data from remote domains, LDAP-UX
won’t return data if there are duplicate entries in any remote domains
2.7 Limitations in LDAP-UX Client Services 21