0

Is it normal to make LDAP authorization on Linux OS (CentOS 6.3) when LDAP server will run on same machine? I think I can't make authetication through LDAP when I start operating system, because my LDAP server will be still not loaded at boot time.

My purpose is to make authetication through LDAP on my DB2 database. And I read on IBM docs that I need to configure LDAP auth (or PAM..I don't understand differences, i'm newb) on opearating system first..

sysadmin1138
  • 133,124
  • 18
  • 176
  • 300
MyTitle
  • 551
  • 1
  • 8
  • 18

1 Answers1

1

You should be fine. LDAP isn't a complete replacement for local auth, but a supplement to it. Certain users, especially root, can always log in locally and are always present. LDAP auth allows a central resource for authentication for multiple systems, but there is nothing stopping it being used in a single system.

If the user that runs under is a local user, it should be no problem at all. Especially if DB2 us only using LDAP to provide auth-support internal to DB2 itself.

If the user that runs under is supposed to be an LDAP user, then the LDAP service needs to start before the DB2 one starts.

sysadmin1138
  • 133,124
  • 18
  • 176
  • 300
  • `If the user that db2 runs under is supposed to be an LDAP user, then the LDAP service needs to start before the DB2 one starts.` Here I can get an problem: LDAP server(TDS) uses DB2 database instance as data storage) – MyTitle Sep 30 '12 at 16:34