3 doubts about solaris 10 ldap native client

i have a client solaris 10 autenticating with a ldap directory (S1 DS 5.2) and
the comunication between them is "working" ok.
but the login is denied because the user haven't a home directoy, so lookin documents
i keep this this doubts:
1) in all documents that i can see, users home directory are mounted, but if i dont
want mount de homes because i "want" to do like linux, �how i can config this? (i
looking in smc but when i set a option to keep mounted he launch a exception)?
�why i musn't to do this?
3) if i can't do (1) or its not recomended, i must to resolve mounting home
directory from localhost using automount schema (expended with automountKey), but
�these requiered that exist a home directory for the users?
3) if the user login for firts time, he dont have a home directory, so somebody must
create this home for this user, �who must have the responsabilities of them?
�when i must start see to resolve?
Salu2

Hi Lister
Please provide more information on what you're trying to achieve. By the way, I'm in Perth and I've done some JES work out there at Curtin before - let me know if you'd like to get in touch! I'm available at tom.shaw [at] solidsystems.com.au
In general, I see several inconsistencies here.
1. I can't tell whether you're trying to use SSL or not. You have an ldapsearch using SSL and you have a certificate database but your ldap_client_file is using "simple" not "tls:simple". (You should try and get it working without SSL first though.)
2. The objectclassmap entries look like they aren't needed.
3. You haven't listed nsswitch.conf - are you using local files for passwd, group and shadow entries, or are you using LDAP?
4. I'm not sure about the BindDN you have. I believe it needs to be the full DN, not just the RDN, and it needs to have the right ACI permissions.
Useful information would be: the output of a command like "ldaplist passwd" (obviously with sensitive information censored), and the relevant lines of the LDAP access log. But again, I'm in Perth so let me know if you'd like arrange some more direct assistance.
Regards
Tom

Similar Messages

  • Patching solaris LDAP client

    i will have to patch a solaris LDAP client box. What do I expect for that? Do I have to rel-initialize the client using ldapclient command after patching?
    solaris 8 + LDAP server 5.2 unbundled version.
    Thanks

    From previous experience if your slapd is not running on your LDAP server then your clients will not boot if they are setup for ldap domain authentication. This is the same in NIS and NIS+. The only way to bring them up is to boot -s and change the nsswitch.conf file back to standalone i.e files and reboot machine.
    In short if ldap server goes down clients are too, multi ldap servers are required to prevent single point failure.

  • Proxy agent in solaris ldap client

    Since ldap service provides naming service, that is supposed to be accessed by anyone who needs it, I don't know why we need a proxy agent when we set up solaris ldap client. The anoymous credential level is enough.
    Also in order to use proxy agent, this agent needs to have at least read access to all naming entries, including userPassword, encrypted or clear-text. This adds some sort of in-security. While service authentication method "simple" will simply bind to the ldap server using provided password. Of course, you can still add another layer of security by using TLS.
    So, can anyone explain this design a little more?
    Thanks.

    My input on this subject may seem a bit paranoid, but that's what I get paid for, so take this with a gain of salt 8-)
    The proxy agent does not need to have read access to the userPassword attribute if you configure your clients to use pam_ldap instead of pam_unix. pam_unix retrieves the userPassword attribute by making a call to getspnam. With pam_ldap, the user dn and password are sent to the directory server in an auth structure, and the directory server will return success or failure to the client for that login attempt. More info on this can be found at http://docs.sun.com, or in the book "LDAP in the Solaris Operating Environment, Deploying Secure Directory Services" by Michael Hains and Tom Bialaski (ISBN 0-13-145693-8) pgs 177-179.
    Use of the proxy agent can actually increase the level of security for your directory server. With the proper ACI's in place not allowing anonymous binds to view the data in the tree (or only view a small subset of the tree), you can prevent anyone from dropping a laptop or other device on your network and data mining your LDAP tree for information (ie vendors, guests, etc). That won't stop those same people from snooping the traffic on your network, so the use of secure protocols are the other side of that, but implementing tls:simple authentication for the directory server and clients is not that difficult, and should be considered for any deployment of LDAP for use as a naming server.
    I do agree with your assessment that in an environment where anonymous binds are accecptable the use of the proxyagent is probably not warrented, but in my experience having the proxyagent has allowed me to tighten the security of my directory implementation .

  • BCP-style bulk insert from remote C++ ODBC Native client application

    I am trying to find documentation or sample code for performing bulk inserts into SQL Server 2012 from a remote client using the ODBC native client driver from Linux.  We currently perform INSERT statements on blocks of data, wrapping it in BEGIN/COMMIT,
    and achieving through approximately half of bcp reading from a delimited text file.  While there are many web pages talking about bulk inserts via the native driver, this page (http://technet.microsoft.com/en-us/library/ms130792.aspx) seems closest to
    what I'm after but doesn't go into any detail or give API calls.  The referenced header file is just a bunch of options and constants, so presumablyone gains access to bulk functions via the standard ODBC mechanism, the question is how.
    For clarity, I am NOT interested in:
    BULK INSERT: because it requires a server-side data file or a UNC path with appropriate permissions (doesn't work from Linux)
    INSERT ... SELECT
    * FROM OPENROWSET(BULK...): same problem as above
    IRowsetFastload: OLEDB, but I need ODBC on Linux.
    Basically, I want to emulate BCP.  I don't want to *run* BCP because it requires landing data to disk. 
    Thanks
    john
    John Lilley Chief Architect RedPoint Global Inc.

    Other than block inserts within BEGIN/COMMIT transaction blocks or running bcp, is there anything else that can be done on Linux?
    No other option from Linux that I am aware of.  The SQL Server Native Client ODBC driver also supports table-valued-parameters, which can be used to stream data but the Linux ODBC driver API doesn't have a way to do that either.  That said, I would
    still expect file-based BCP to significantly outperform inserts with large batches.  I've seen a rate of 100K/sec. with this technique, including the file create overhead but much depends on the particulars of your use case.
    Consider voting for this on Connect.  BCP is on the roadmap but no date yet: 
    https://connect.microsoft.com/SQLServer/SearchResults.aspx?SearchQuery=linux+odbc+bcp
    Also, I filed a Connect item for TVP support:
    https://connect.microsoft.com/SQLServer/feedback/details/874616/add-tvp-support-to-sql-server-odbc-driver-for-linux
    Dan Guzman, SQL Server MVP, http://www.dbdelta.com

  • Doubts about BP number in SRM and SUS

    Hello everyone,
    I have some doubts about the BP number, especially for Vendors.
    I am working with the implementation of SRM 5.0 with SUS in an extended classic scenario. We will use one server for SRM and other for SUS. We will use the self registration for vendor (in SUS). My questions are:
    - Can I have the same BP number in SRM and SUS?? Or is it going to be different??
    - When a vendor accesses at the site to make a self registration in SUS, the information is sent to SRM as prospect (by XI) and there the prospect is changed as vendor? After that, is it necessary to send something from SRM to SUS again? (to change the prospect to vendor)
    - When is it necessary to replicate vendors from SRM to SUS??
    Thanks
    Ivá

    Dear Ivan,
    Here is answer to all your questions. Follow these steps for ROS configuration:
    Pls note:
    1. No need to have seperate clients for ROS and SUS. Create two clients for EBP and (SUS+ROS).
    2. No need of XI to transfer new registered vendor from ROS to EBP
    Steps to configure scenario:
    1. Make entries in SPRO --> "Define backend system" on both clients.
        You will ahev specify logical systems of both the clients (ROS as well as EBP)
    2. Create RFCs on both clients to communicate with each other
    3. In ROS client create Service User for supplier registration service with roles:
        SAP_EC_BBP_CREATEUSER
        SAP_EC_BBP_CREATEVENDOR
        Grant u201CS_A.SCONu201D profile to the user.
    4. Maintain service user in u201CLogon Datau201D tab of service : ros_self_reg in ROS client
    5. Create Purchasing and vendor Organizational Structure in EBP client and maintain necessary
        attributes. create vendor org structure in ROS client
    6. Create your ROS registration questionnaires and assign to product categories- in ROS client
    7. To transfer suppliers from registration system to EBP/Bidding system, Supplier pre-screening has to be
        defined as supplier directory in SRM server - EBP client.
        Maintain your prescreen catalog in IMG --> Supplier Relationship Management u2192 SRM Server u2192
        Master Data u2192 Define External Web Services (Catalogs, Vendor Lists etc.) 
    8. Maintain this catalog Id in purchasing org structure under attribure "CAT" - in EBP client
    9. Modify purchaser role in EBP client:
        Open node for u201CROS_PRESCREENu201D and maintain parameter "sap-client" and ROS client number
    10.Maintain organizational data in make settings for business partner
    Supplier Relationship Management -> Supplier Self-Services -> Master Data -> Make Settings for the Business Partners. This information is actually getting getting stored in table BBP_MARKETP_INFO.
    11. Using manage Business partner node with purchasers login (BBPMAININT), newly registsred vendors are pulled from Pre-screen catalog and BP is created in EBP client. If you you have SUS scenario, ensure to maintain "portal vendor" role here.
    I hope this clarifies all your doubts.
    Pls reward points for helpful answers
    Regards,
    Prashant

  • Doubt about proxies implementation

    hi experts i have small doubt about proxies implementation
    1. if we r implementing client proxies, it means sap r/3(proxy)->>xi->>>file
         system.here where we have to execute the SPROXY  transaction. in sap r/3 or
         in the xi server.and the next thing is where we have to write the report program
         to trigger the interface.in sap r/3 or in the xi server.
    2. if we r implementing server proxies, it means File->>xi->>>sap r/3
        (proxy).here where we have to execute the SPROXY  transaction. in sap r/3 or
         in the xi server.
    please clear me
    Regards
    giri

    Sreeram,
    The Integration Server and the client on which you generate the proxies should not be the same. If they are different then yes, you can use another client in your XI box itself to generate proxies and trigger the call to XI.
    If you see this blog by Ravi ( incidentally he is my boss as well ) this is exactly what we have done as well.
    /people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
    When you say XI, you mean the Client on which the Integration Server is running! XI is basically a R3 instance with more functionality and its own Integration Engine.
    Regards
    Bhavesh

  • Doubt about ccm.log error= 0x8004100E

    Hello guys,
    I have a doubt about when ccm.log display error = 0X8004100E.
    So, some my desktops scan by SCCM display error= 0x8004100E but client sccm is installed with sucess. My doubt is what reason display this error?
    Maybe can I don't worry about this,but I need know reasons display this messages.
    Thanks a lot.

    This will be displayed if your site server cannot connect to ccm WMI namespace on the worksation. CCM wmi namespace will only be available if the workstation has ConfigMgr client, hence this will eventualy fail for the workstation that are new to
    ConfigMgr.  I guess sccm uses this to check if the client is already present or not.
    Kindly mark as answer/Vote as helpful if a reply from anybody helped you in this forum. Delphin

  • Doubt about Oracle Acess Manager Identity System

    Hi , I have a doubt about the identity system , when I configure the Identity System to use the Data Anywhere where the user is create when I create one in administrative console ? as I know the Data Anywhere is managed by OVD.
    Thanks.

    And I could connect to the database.With which tool?
    >
    I wanted to mimic the connection to another system by just copying the c:\oracle folder. The connection was established and works fine.What type of client installation is this? Can you cross check in inventory/logs?

  • Doubt about diference between SAPconsole and SAPmobile

    Hello,
         I have been many doubts about diference between sapconsole and sapmobile, if anyone could help me I appreciate.
    1) I have ECC6 instaled, the SAP Mobile is compatible with ECC6 or I need of Netweaver Instaled ?
    2) If Possible to Install Sap Mobile in ECC6 , I have to Buy a license of sap mobile ?
    3) in any product instaled Windows CE have possible to install sap mobile ?
    4) In sap console what is the requirement for to do this configuration?
    I Anybody to know about this informations please explain for me ?
    Thanks

    My apology, 
        The Basic Diference beteween SAPConsole and SAPMobile is :
    SAPConsole ==>  
    1 ) Don' t need a new Hardaware for to configurate
    2 ) Only need a Machine with the IIS service installed
    3 ) The SAPGui CD content the SAPCOnsole.exe for configuration
    4 ) The equipment like Pocket and datacolletor has been to configurated in a Network( but if to have a entrance in the SAPGUi indicate a SAProuter in another factory is possible to have acesses.. ) is a mandatory. Cause the SAPCOnsle folow the SAPGUI entrances and need a LAN or a WAN configurated.
    Advantage
    simple to congurated and chip.
    Easy to create to new window cause the SAPConsole only plubish this window in Browser.
    Disadvantage
    Need a lincense for each Poket or Datacolletor, wherever the equipment you will use.
    Doesn't have a Database  using through Browser (IE6 or IE7) this way , during the processes lost network you go to lost the information not saved.
    SAPMobile
    1 ) Need the a good Machine  with a instance of SAP configurate
    2 ) Have to found the EXE in the MarketPlace
    3 ) is not publish, and yes a client with the database configurate in equipment
    4 ) The equipment like Pocket and datacolletor has been to configurated in a Network
    Advantage
    Need only one SAP License, doesn't metter how many equipment  in use you have.
    As the SAPMobile has a Database in the client , if you lost the network it goes to save in the local database and when the network come back , it will to synchronize. This way you don't need to work online every moment, you get to synchronize after.
    Disadvantage
    You profit in license is your lost in the Machine cause the price of Machine is expensive.
    is configurate only in windows Mobile.
    The window only can be create for a Developement and not in the SAP, have been created in windows Mobile.
    A tip, the both is good but you can do a simple mathematics.
    In the SAPConsole how much money you go to spend is the least of the Machine s Price.
    If yes confurate the SAPConsole , if not configurate the SAPMobile

  • Native Client for Symbian Mobiles

    I've a Sony-ericsson 910i with Symbian and the proprietary as well as
    Opera browser.
    I'm looking for a native client to use on this so that I may access our
    SAP system. I've seen some reference to a client being available for the
    Nokia 9210 (which runs Symbian) but can't seem to find any more info or
    the download for this.

    Jason Roesler wrote:
    II am interested to know,
    Is there an native client for enterprise eddition or enterprise 3 for
    Solaris x86?
    thanks
    Hi.
    There should be in the upcoming 4.1 release of SGD EE.
    Native Clients should be available for Windows, Linux (Intel x86), Sparc
    Solaris, x86 Solaris, MAC OS/X.
    Best,
    Rob
    Roberto Zini - r.zini<@AT@>strhold.it
    "Has anybody around here seen an aircraft carrier?"
    (Pete "Maverick" Mitchell - Top Gun)

  • SSGD 4.31.905 and Native Client with HTTPS and firewall forwarding

    Hi everyone.
    I've just installed SSGD 4.31.905 on a SLES9/SP3 box and configured it as to use HTTPS connections only and firewall forwarding.
    I managed to handle X509 certs as to avoid having confirmation requests on the screen on every access and everything is working fine.
    Just a question: when I fire up a browser and try to connect to https://IP/sgd, the browser informs me about a potential security risk since I accessed a web server using its IP address instead of using its FQDN.
    If I confirm the dialog box, access is granted and everything else works fine (and this is expected).
    If I use the Native Client and try to access https://IP/tarantella, I got a "connection refused" message; if I change the URL as to read https://FQDN/tarantella, everything is fine.
    So it seems the Native Client cannot connect to a secured SSGD server by using an IP/hostname differente from the one recored into the X509 cert.
    Is it expected or what?
    Thanks,
    Rob

    Looks like the native client is less forgiving when it comes to certificates. Obviously, the best way to "resolve" this is to make sure that your client devices can resolve the FQDN of the SGD server.

  • Difference between native client and workstation client.

    hi,
    I am confused with the difference between native client and workstation client.In
    some docs,it is said that native client is one which run on the same system as
    the server,in other it is said running on other machine in the same domain.So
    what about workstation client?So can anyone please helpme out in knowing this
    difference?

    subhash wrote:
    hi,
    I am confused with the difference between native client and workstation client.In
    some docs,it is said that native client is one which run on the same system as
    the server,in other it is said running on other machine in the same domain.So
    what about workstation client?So can anyone please helpme out in knowing this
    difference?The simple answer is that /WS clients are compiled with the -w option.
    The complicated answer has to do with how the client connects to Tuxedo during the
    tpinit(), and all subsequent traffic. A Tuxedo Domain (instance) has a Bulletin
    Board, which is a chunk of shared memory with all kinds of information about Servers
    and Clients. A Native Client, since it is running on the same machine that the
    Bulletin Board exists on, can directly access the shared memory. However, /WS client
    (also called a remote client) cannot access this shared memory. Instead, we have the
    WSL server to make connections with, and then WSH processes that access the Bulletin
    Board on behalf of the remote client.
    So Native Clients run on the same machine as the Servers and where the Bulletin Board
    is located, and have direct access to shared memory and other IPCs. Workstation
    Clients/WS Client/Remote Clients (all the same thing) cannot access IPCs and have the
    WSH do it on their behalf.
    In NT, the Tuxedo IPC Service mimics Unix IPCs, and so all the above is still true.
    Brian Douglass
    Transaction Processing Solutions, Inc.
    8555 W. Sahara
    Suite 112
    Las Vegas, NV 89117
    Voice: 702-254-5485
    Fax: 702-254-9449
    e-mail: [email protected]
    [briand.vcf]

  • NAtive Client Problems

    Hi,
    I have just started working on SGD 4.2.
    I installed SGD on Solaris 10 environment and have problems accessing the
    server over Windows XP.
    I am able to access the SGD server through the webserver but when using
    the Native Client I get the error that the port 3144 could not be accessed.
    Any help on this issue would be much appreciated.
    zainab

    David,
    I used http://<server>.com
    i.e. I downloaded it from my own server.
    Thank You.
    Zainab
    David W. Fong wrote:
    Zainab,
    What URL did you use when accessing from the Native Client? Did you use
    http://<server>/tarantella ?
    Regards,
    David
    Zainab wrote:
    Hi,
    I have just started working on SGD 4.2.
    I installed SGD on Solaris 10 environment and have problems accessing the
    server over Windows XP.
    I am able to access the SGD server through the webserver but when using
    the Native Client I get the error that the port 3144 could not be accessed.
    Any help on this issue would be much appreciated.
    zainab

  • Doubt about the distribution system

    I have a doubt about the distribution system.
    We have made a publication and download it and have it in our iPad. The client does not want tosell or that anyone other than its 15 commercial rest her ipad. How can we host it in those 15ipads?, Do I need any of the subscription programs adobe?
    Thanks!

    function(){return A.apply(null,[this].concat($A(arguments)))}
    function(){return A.apply(null,[this].concat($A(arguments)))}Matthew Laun wrote:
    Yeah... Someone did that yesterday with 70-something users all trying to get the updated folio at once, and it caused server outages. I've got a feeling we may modify the user agreement to limit this. Not saying for sure, just a word of caution.
    Matthew
    I don't understand this reply at all.  Many of us have been using acrobat.com in exactly this fashion, and I've posted about it many times; including a full review:
    http://forums.adobe.com/message/3853106#3853106
    Did Adobe not see this coming? How would you limit the download amount without gutting the functionality?  Would this apply to paid acrobat.com accounts as well?
    I'm about to upgrade my acrobat.com account this week to host more than 1 folio.  You need to clarify what you mean by 'modify the user agreement' ASAP.

  • [Microsoft][SQL Server Native Client 11.0][SQL Server]The text, ntext, and image data types cannot be compared or sorted, except when using IS NULL or LIKE operator.  'Items' (OITM) (OITM)

    Dear Experts,
    i am getting the below error when i was giving * (Star) to view all the items in DB
    [Microsoft][SQL Server Native Client 11.0][SQL Server]The text, ntext, and image data types cannot be compared or sorted, except when using IS NULL or LIKE operator.  'Items' (OITM) (OITM)
    As i was searching individually it is working fine
    can any one help me how to find this..
    Regards,
    Meghanath.S

    Dear Nithi Anandham,
    i am not having any query while finding all the items in item master data i am giving find mode and in item code i was trying to type *(Star) and enter while typing enter the above issue i was facing..
    Regards,
    Meghanath

Maybe you are looking for