IBM recommends people use Tivoli Directory Server for LDAP authentication with AIX. Which is free for AIX use and contains all the proprietary schemas necessary. But, if you already have OpenLDAP, IBM uses a proprietary schema that makes full integration difficult. Or if you want to use the LDAP server for more than just AIX authentication, you have to buy the full product.

You can authenticate in RFC 2307 mode, but you miss most of the AIX specific user attributes. This schema works with RFC 2307AIX mode in AIX. Some modifications had to be made, mainly boolean attributes don’t work well between OpenLDAP and AIX. I don’t know if AIX or OpenLdap is more RFC compliant, but it’s broken. So, those are converted to text attributes, and seem to work well.

This schema is provided as-is, if it breaks free and destroys your world, it’s not my fault. If you fix anything broken, please send me the changes.

rfc2307aix

IBM recommends people use Tivoli Directory Server for LDAP authentication with AIX. Which is free for AIX use and contains all the proprietary schemas necessary. But, if you already have OpenLDAP, IBM uses a proprietary schema that makes full integration difficult. Or if you want to use the LDAP server for more than just AIX authentication, you have to buy the full product.<\/p>\n

You can authenticate in RFC 2307 mode, but you miss most of the AIX specific user attributes. This schema works with RFC 2307AIX mode in AIX. Some modifications had to be made, mainly boolean attributes don’t work well between OpenLDAP and AIX. I don’t know if AIX or OpenLdap is more RFC compliant, but it’s broken. So, those are converted to text attributes, and seem to work well.<\/p>\n

This schema is provided as-is, if it breaks free and destroys your world, it’s not my fault. If you fix anything broken, please send me the changes.<\/p>\n

rfc2307aix<\/a><\/p>\n","protected":false},"excerpt":{"rendered":null,"protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8,1],"tags":[],"class_list":["post-102","post","type-post","status-publish","format-standard","hentry","category-ldap-notes","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/rootuser.ninja\/index.php\/wp-json\/wp\/v2\/posts\/102","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rootuser.ninja\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rootuser.ninja\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rootuser.ninja\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rootuser.ninja\/index.php\/wp-json\/wp\/v2\/comments?post=102"}],"version-history":[{"count":0,"href":"https:\/\/rootuser.ninja\/index.php\/wp-json\/wp\/v2\/posts\/102\/revisions"}],"wp:attachment":[{"href":"https:\/\/rootuser.ninja\/index.php\/wp-json\/wp\/v2\/media?parent=102"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rootuser.ninja\/index.php\/wp-json\/wp\/v2\/categories?post=102"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rootuser.ninja\/index.php\/wp-json\/wp\/v2\/tags?post=102"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}