AIX

AIX

Connect with fellow AIX users and experts to gain knowledge, share insights, and solve problems.

 View Only
Expand all | Collapse all

AIX 6.1 and LDAP authentication

Archive User

Archive UserThu February 20, 2014 05:49 AM

Archive User

Archive UserTue March 04, 2014 02:15 PM

  • 1.  AIX 6.1 and LDAP authentication

    Posted Thu February 20, 2014 05:49 AM

    Originally posted by: dado32123


    Hello to all 
     
    I'm trying to configure AIX 6.1 with LDAP authentication 

     

    oslevel -s
    6100-08-02-1316 

     

    package installed trought AIX 6 Expansion Pack :

      idsldap.clt32bit62.rte     6.2.0.3    C     F    Directory Server - 32 bit
      idsldap.clt64bit62.rte     6.2.0.3    C     F    Directory Server - 64 bit
      idsldap.cltbase62.adt      6.2.0.3    C     F    Directory Server - Base Client
      idsldap.cltbase62.rte      6.2.0.3    C     F    Directory Server - Base Client
     

    After I performed the following steps :

     

    1 ) Insert into the /etc/hosts 

    192.168.39.90 vm-ldap

     

    2) mksecldap -c -h vm-ldap  -a uid=uid,ou=People,dc=slapd,dc=cs,dc=poste,dc=it -p passwd -A ldap_auth

     

    3) chsec -f /etc/security/user -s default -a "SYSTEM=LDAP or files"

    4) chsec -f /etc/security/user -s default -a "registry=LDAP"

     

    5) stop-secldapclntd

     

    6) start-secldapclntd

     

    7) stopsrc -s sshd

    8) startsrc -s sshd

     

    9) chsec -f /etc/security/login.cfg -s usw -a mkhomeatlogin=true

     

    10 ) i have test ldap query with this command :

     

    lsuser -R LDAP acim                          
    acii id=50487 pgrp=postaff groups=postaff home=/home/aci shell=/bin/bash login=true su=true rlogin=true daemon=true admin=false sugroups=ALL admgroups= tpath=nosak ttys=ALL expires=0 auth1=SYSTEM auth2=NONE umask=22 registry=LDAP SYSTEM=LDAP or files logintimes= loginretries=0 pwdwarntime=0 account_locked=false minage=0 maxage=0 maxexpired=21914 minalpha=0 minloweralpha=0 minupperalpha=0 minother=0 mindigit=0 minspecialchar=0 mindiff=0 maxrepeats=8 minlen=0 histexpire=0 histsize=0 pwdchecks= dictionlist= default_roles= fsize=2097151 cpu=-1 data=262144 stack=65536 core=2097151 rss=65536 nofiles=2000 roles=

    1) i have test the process secldapclntd :

     

     ps -ef | grep secld
        root 4128946       1   0 11:27:37      -  0:00 /usr/sbin/secldapclntd

     

    Despite all these settings access via LDAP does not work? 
     
    can someone help me?

     

    with the same configuration on AIX 5.3 works

     

     

     

     

     

     

     

     

     

     

     

     



  • 2.  Re: AIX 6.1 and LDAP authentication

    Posted Tue March 04, 2014 02:15 PM

    Originally posted by: PeterBehrik


    Hello,

     

    have you found a solution ?

     

    I'm trying very same on AIX 7.1 with the latest LDAP client, I can authenticate to dev TDS where there is no password encryption set. but when doing the same to TDS where there is salted SSH512 used, I can't logon. the same server, the same client, the only difference between dev and prod TDS server is that one is with no encryption for password and second is with encryption. I need to be able to BIND to one with password encryption ...

     

    I would be very thankfull for any advice ..

    Peter