Re: Understanding LDAP or MS Active Directory authentication and Informix
FYI, IDS supports 64Bit PAM beginning in 10.00.FC6 ----- Original Message ---- From: Martin Fuerderer <MARTINFU@de.ibm.com> To: Darren_Jacobs@carmax.com Cc: informix-list-bounces@iiug.org; informix-list@iiug.org Sent: Thursday, March 8, 2007 3:55:40 AM Subject: Re: Understanding LDAP or MS Active Directory authentication and Informix Hi, that is (unfortunately) true. As far as I know, IDS supports PAM on HP-UX, but only HP-UX 32-bit (on PA-Risc that is). One possibility to get this to work anyway is to find some software that does LDAP authentication transparently. In the standard scenario (no PAM) IDS uses normal system library calls to retrieve OS user information (normally from /etc/passwd and /etc/shadow) and do the check. There are some implementations existing that let these normal system library calls do an LDAP look-up very much the way NIS/NIS+ works. This would be transparent to the IDS server and thus would work with IDS. I've never searched for and much less tried any such things for HP-UX. So you will have to do some research yourself. Regards, Martin -- Martin Fuerderer IBM Informix Development Munich, Germany Information Management Sorry, but the following text is now required by German law: IBM Deutschland GmbH Vorsitzender des Aufsichtsrats: Hans Ulrich Maerki Geschäftsführung: Martin Jetter (Vorsitzender), Rudolf Bauer, Christian Diedrich, Christoph Grandpierre, Matthias Hartmann, Andreas Kerstan Sitz der Gesellschaft: Stuttgart Registergericht: Amtsgericht Stuttgart, HRB 14562 WEEE-Reg.-Nr. DE 99369940 informix-list-bounces@iiug.org wrote on 08.03.2007 02:27:15: > Darren_Jacobs@carmax.com wrote: > > PAM is not available for 9.40 FCx on HPUX 64 bit which is a problem for me. > > I'm just trying to understand what type of user id is needed in the > > database to support an LDAP/AD user. > > > > Does that make sense? > > IDS will use OS authentication. If HPUX/64 allows for OS > users to be authenticated in a LDAP server this should work > for Informix. > Currently there is no user id inside the database server. > > PAM allows for other ways to authenticate users (only limited > by the availability of PAM itself and the appropriate module(s) ) > I believe that 10.00.FC6 may support PAM on HP-UX (PA-RISC) > but the machine notes are not on the page yet. > For 10.00.FC5 on HP-UX (Itanium) the machine notes > ( http://publib.boulder.ibm.com/epubs/html/22963440.html ) > state it supports PAM. > If you think PAM could help, you can contact support for clarification. > > For OS/LDAP integration maybe this will help: > > http://docs.hp.com/en/internet.html#LDAP-UX%20Integration > > -- > Fernando Nunes > Portugal > > http://informix-technology.blogspot.com > My email works... but I don't check it frequently... > _______________________________________________ > Informix-list mailing list > Informix-list@iiug.org > http://www.iiug.org/mailman/listinfo/informix-list _______________________________________________ Informix-list mailing list Informix-list@iiug.org http://www.iiug.org/mailman/listinfo/informix-list