« Return to Thread: AIX 5.3 basic questions

AIX 5.3 basic questions

by Tim Bolshaw :: Rate this Message:

Reply to Author | View in Thread

Background
=========

I have been asked to enable PAM and LDAP based user authentication
through PAM for AIX 5.3.

Why not use the builtin LDAP support in AIX?  I suggested that, but
was told they want to use specifically PAM.  I now just want to do
what I am told.


Steps So Far
==========

Insofar as people have used LDAP through PAM on AIX, they mostly seem
to have done this using PADL's pam_ldap module.

The web page at http://www.padl.com/OSS/pam_ldap.html mentions AIX 5L
support.  An LDAP client library appears to be the key prerequisite.
I initially assumed that the AIX ldap.client LPP would meet the
requirement, but have changed my mind (see below).

I installed the AIX ldap.client.

I installed the Gnu Linux tools that seem to be needed (using the
Linux Toolkit for AIX if that is relevant).

When I ran
   ./configure --with-ldap-dir=/usr/ldap

I received an error "configure: error: could not locate a valid LDAP library"

I noted that "ibmldap" was not one of the alternatives searched for,
at which point I strongly suspected I had a problem.  However, it
seemed worth trying
   ln -s /usr/ldap/lib/libibmldap.a libldap.a
   ./configure --with-ldap-dir=/usr/ldap
--with-ldap-conf-file=/etc/pam-ldap.conf
to see what happened.

The configure ran clean, but compiling showed mismatched parameters.


Questions
=======

  1.  Am I correct that the IBM AIX LDAP client library cannot be used?

  2.  Is the latest version of openldap known to compile and work with
pam_ldap on AIX 5.3?

  3.  Any other suggestions?


Thank you in advance for your help.




--
Tim Bolshaw

timothybolshaw@...
Mobile: +66-(0)87 072 5009

 « Return to Thread: AIX 5.3 basic questions