AIX 5.3 basic questions

[Tim Bolshaw]

Background
=========

I have been asked to enable PAM and LDAP based user authentication
through PAM for AIX 5.3.

Why not use the builtin LDAP support in AIX?  I suggested that, but
was told they want to use specifically PAM.  I now just want to do
what I am told.


Steps So Far
==========

Insofar as people have used LDAP through PAM on AIX, they mostly seem
to have done this using PADL's pam_ldap module.

The web page at http://www.padl.com/OSS/pam_ldap.html mentions AIX 5L
support.  An LDAP client library appears to be the key prerequisite.
I initially assumed that the AIX ldap.client LPP would meet the
requirement, but have changed my mind (see below).

I installed the AIX ldap.client.

I installed the Gnu Linux tools that seem to be needed (using the
Linux Toolkit for AIX if that is relevant).

When I ran
   ./configure --with-ldap-dir=/usr/ldap

I received an error "configure: error: could not locate a valid LDAP library"

I noted that "ibmldap" was not one of the alternatives searched for,
at which point I strongly suspected I had a problem.  However, it
seemed worth trying
   ln -s /usr/ldap/lib/libibmldap.a libldap.a
   ./configure --with-ldap-dir=/usr/ldap
--with-ldap-conf-file=/etc/pam-ldap.conf
to see what happened.

The configure ran clean, but compiling showed mismatched parameters.


Questions
=======

  1.  Am I correct that the IBM AIX LDAP client library cannot be used?

  2.  Is the latest version of openldap known to compile and work with
pam_ldap on AIX 5.3?

  3.  Any other suggestions?


Thank you in advance for your help.




--
Tim Bolshaw

timothybolshaw@...
Mobile: [phone]

[Chapman, Kyle]

Openldap compiles on aix 5.3.  is pam your only requirement?  Padl
Nssldap can do both auth and name lookups on aix if you cant use the
secldapclntd daemon and associated items.

-----Original Message-----
From: owner-pamldap@... [mailto:owner-pamldap@...] On Behalf
Of Tim Bolshaw
Sent: Friday, January 30, 2009 7:54 PM
To: pamldap@...
Subject: [pamldap] AIX 5.3 basic questions

Background
=========

I have been asked to enable PAM and LDAP based user authentication
through PAM for AIX 5.3.

Why not use the builtin LDAP support in AIX?  I suggested that, but was
told they want to use specifically PAM.  I now just want to do what I am
told.


Steps So Far
==========

Insofar as people have used LDAP through PAM on AIX, they mostly seem to
have done this using PADL's pam_ldap module.

The web page at http://www.padl.com/OSS/pam_ldap.html mentions AIX 5L
support.  An LDAP client library appears to be the key prerequisite.
I initially assumed that the AIX ldap.client LPP would meet the
requirement, but have changed my mind (see below).

I installed the AIX ldap.client.

I installed the Gnu Linux tools that seem to be needed (using the Linux
Toolkit for AIX if that is relevant).

When I ran
   ./configure --with-ldap-dir=/usr/ldap

I received an error "configure: error: could not locate a valid LDAP
library"

I noted that "ibmldap" was not one of the alternatives searched for, at
which point I strongly suspected I had a problem.  However, it seemed
worth trying
   ln -s /usr/ldap/lib/libibmldap.a libldap.a
   ./configure --with-ldap-dir=/usr/ldap
--with-ldap-conf-file=/etc/pam-ldap.conf
to see what happened.

The configure ran clean, but compiling showed mismatched parameters.


Questions
=======

  1.  Am I correct that the IBM AIX LDAP client library cannot be used?

  2.  Is the latest version of openldap known to compile and work with
pam_ldap on AIX 5.3?

  3.  Any other suggestions?


Thank you in advance for your help.




--
Tim Bolshaw

timothybolshaw@...
Mobile: [phone]
 
NOTICE: This E-mail may contain confidential information. If you are not
the addressee or the intended recipient please do not read this E-mail
and please immediately delete this e-mail message and any attachments
from your workstation or network mail system. If you are the addressee
or the intended recipient and you save or print a copy of this E-mail,
please place it in an appropriate file, depending on whether
confidential information is contained in the message.