Hello Lukas,
IBM provides a free access to AIX cloud servers together with your choice
of OS to port your application. I've used the service some years back and
it works really well. The free service is intended to encourage porting of
applications to AIX. Here is a link:
https://www-304.ibm.com/partnerworld/wps/servlet/ContentHandler/stg_com_s...
Just pick your hardware platform, OS and server memory/disk requirements
and the server is configured for you. You then connect remotely using VPN
and upload your code and compile/test.
At present we are using different solutions for Linux (older PAM modules
and moving to SSSD) and AIX (commercial product, but prefer to standardize
on SSSD if that becomes an option).
On a side note - I'm looking to do some testing with SSSD and ad_provider
in the coming week on FreeBSD/PCBSD. I've only found notes of ldap provider
examples, but would like to adapt and document ad_provider functionality.
Cheers,
Frank Pikelner
On Wed, Jul 8, 2015 at 2:05 AM, Lukas Slebodnik <lslebodn(a)redhat.com> wrote:
On (07/07/15 19:26), Frank Pikelner wrote:
>We run a relatively large environment at work of Linux, Windows and AIX
>servers - in the high thousands for each. Currently we are moving to use
>SSSD to authenticate Linux admins with AD. Any opportunity to port SSSD
for
>support for AIX 6.x/7.x?
>
We (sssd developers) do not have an access to machines with AIX.
I had a conversation with some user on IRC few months ago
and the basic functionality (ldap + krb5) should not be problem to port
because winbind works on AIX. However you mentioned you would like to
authenticate with Active Directory. So if you would like to use ad provider
(or ipa provider with trust) then recent versions of some projects are
required (samba, kerberos ...).
sssd has many features optional. That's the reason why sssd works also on
FreeBSD but it would be good to know version of basic libraries on AIX.
samba libraries (libtalloc libtevent libtdb libldb)
- and libraries from samba4 are required for ad provider)
dbus library
nss or openssl (one of them is required)
kerberos (sssd works fine with MIT kerberos >= 1.9)
c-ares (C library for asynchronous DNS requests )
glib2 or libunistring
LS
_______________________________________________
sssd-users mailing list
sssd-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users