This shows you the differences between two versions of the page.
Next revision | Previous revision | ||
aix:aix_adconnect [2021/01/01 21:21] 127.0.0.1 external edit |
aix:aix_adconnect [2021/10/04 16:42] (current) manu |
||
---|---|---|---|
Line 2: | Line 2: | ||
http://aerostitch.github.io/linux_and_unix/AIX/AIX-Security-Kerberos_Authentication.html | http://aerostitch.github.io/linux_and_unix/AIX/AIX-Security-Kerberos_Authentication.html | ||
+ | |||
+ | <color #ed1c24>The following attribute mappings are defined for Active Directory with service for UNIX: sfu30user.map | ||
+ | </color> | ||
+ | |||
+ | <color #ed1c24> | ||
+ | The following attribute mappings are defined for Active Directory with Windows 2003 R2 schema: sfur2user.map</color> | ||
+ | |||
+ | AIX® supports multiple base DNs. Up to 10 base DNs for each entity can be specified in the /etc/security/ldap/ldap.cfg file. The base DNs are prioritized in the order they appear in the file. | ||
+ | |||
+ | **Important File Locations** | ||
+ | /etc/krb5/krb5.conf | ||
+ | /etc/methods.cfg | ||
+ | /etc/security/user | ||
+ | /etc/security/ldap/ldap.cfg | ||
+ | /etc/security/ldap/sfur2user.map | ||
+ | /etc/resolv.conf | ||
+ | /etc/hosts | ||
+ | /etc/ntp.conf | ||
If you select this method to authenticate/authorise you may notice that a user group membership is missing – a user with multiple groups will be shown to belong to only one group! | If you select this method to authenticate/authorise you may notice that a user group membership is missing – a user with multiple groups will be shown to belong to only one group! |