LGILDAP, System_Mgmt, LDAP External Authentication Module for OpenVMS

Open Source Software

Version 1.1


News: Tested together with Active Directory running on W2K. If AD4Unix is
installed on W2K server no modifications are needed to get it to work. License

This program is free software; you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by the Free Software
Foundation; either version 2 of the License, or (at your option) any later
version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY
WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with
this program; if not, write to the Free Software Foundation, Inc., 59 Temple
Place, Suite 330, Boston, MA 02111-1307 USA

Author

Jonas Lindholm, 2004-05-25, <jlhmATusaDOTnet>

Why

Why doing this when HP very soon will release its own LDAP authentication
software?  Well, why not doing it? It is fun and perhaps this software has
functions that the software from HP lacks.  And, you do not need to use it.

Download

You can download the latest version here:

http://vms.dnsalias.com

The zipped file contains 4 zip files with the source code.

There is currently no precompiled version available.

This software enable LDAP authentication to OpenVMS using loginout callable
interface.

It can add users automatically whenever a user, specified during login, is
allowed to logon to the host. This addition is done even if the user specifies
an invalid password.

Users added by the LGI LDAP Server process is target for removal if the DN used
when adding the user is no longer available on the LDAP server. Note that the
removal is done only if the LDAP server is fully reachable and the DN is
missing. This removal process is run at 00:15 or at another time specified by a
logical name.

When a user is added a command procedure can be executed to create the login
directory for the user and/or any other required operations for a new user.

When a user is the target to be removed from SYSUAF.DAT another command file can
be executed to do any additional steps such as initiate a backup of the users
files.

When a user change the password during login or with SET PASSWORD the password
on the LDAP server can be updated. This allow common user administration for
single and cluster OpenVMS hosts and Unix / Linux hosts.

Prerequisites

You must have installed Compaq/HP SSL version 1.0 or later before you can use
this software as it protect all data transfer between the OpenVMS host and the
LDAP server using SSL.

This software has been tested against an OpenLDAP server running on Linux.