Preparing your LDAP Directory for HP-UX Integration

6
replaced by LDAP features, if you are willing to make some architectural changes. Directory
consultants can often help in that type of decision. HP is working to provide support for additional
databases in future releases.
• No caching: The initial version of the LDAP-UX Client Services product does not perform caching of
directory data on the client. If you have a limited number of LDAP directory servers available, you may
find that installing "front-end" NIS/LDAP Gateway servers, local to the NIS clients, as a better solution,
to reduce load on your directory servers.
• Only available on OS 11.00: LDAP-UX Client Services is available only on the 11.00 operating
system and planned for future releases. Because of very limited support for the NSS (Name Service
Switch) and PAM architectures on earlier operating systems, the LDAP-UX Client Services product is
not expected to be "back-ported" to earlier releases. LDAP-UX Client Services is expected to be
available to customers in the first half of 2000
• Passwords subject to network snooping: Although using the LDAP directory as the trusted
authentication source for HP-UX provides the best integration between HP-UX and other LDAP enabled
applications, current specifications of the LDAP authentication methods leave LDAP authentication
subject to password snooping attacks. This can occur because LDAP "simple" authentication causes
passwords to be passed "in the clear" through the network. HP is working to provide secure password
based authentication in future releases.