LDAP-UX Integration B.05.01 Release Notes

• User and Group Migration
sAMAccountName must be unique across the entire domain. This attribute, used for
pre-Windows 2000 clients, is set by the migration scripts to the value of the common name
(CN).
For example, if a new group in a different section of the dictionary is created to contain all
UNIX users and the common name (CN) of this group is a duplicate of an existing name, the
migration will fail because the sAMAccountName attribute is not unique. You can work around
this limitation by modifying the LDIF file to use a unique value for sAMAccountName.
• Support of Referrals with Active Directory
Referrals with Active Directory are currently not certified.
• Changing the Password for a Disabled User
When a user whose account is stored in ADS is disabled by setting the disable_uid_range
flag in the /etc/opt/ldapux_client.conf file on an HP-UX client system, and
PAM_Kerberos is used as the authenticating method, the passwd command will allow you
to change the password for the disabled user, since LDAP does not control this subsystem.
2.7 Limitations in LDAP-UX Client Services 25