Front cover -- Contents -- Figures -- Notices -- Trademarks -- Preface -- The team that wrote this redbook -- Become a published author -- Comments welcome -- Chapter 1. Identification and authentication -- 1.1 User security mechanisms -- 1.1.1 AIX security -- 1.1.2 Linux security -- 1.2 Pluggable Authentication Modules (PAM) -- 1.2.1 PAM configuration -- 1.2.2 PAM keywords -- 1.3 Linux PAM implementation -- 1.4 AIX PAM implementation -- 1.4.1 PAM modules and AIX -- 1.4.2 PAM applications and AIX -- Chapter 2. Centralized user management -- 2.1 Lightweight Directory Access Protocol (LDAP) -- 2.1.1 Introduction to LDAP -- 2.1.2 Using LDAP for authentication -- 2.2 Planning for LDAP authentication -- 2.3 LDAP servers -- 2.3.1 IBM Directory Server -- 2.3.2 The OpenLDAP directory server -- 2.4 Migrating user information to LDAP -- 2.4.1 Migrating users on Linux -- 2.4.2 Migrating users on AIX -- 2.5 LDAP authentication clients -- 2.5.1 AIX LDAP authentication client -- 2.5.2 Linux LDAP authentication client -- 2.5.3 PAM and NSS LDAP modules on AIX -- 2.6 Deploying LDAP for authentication -- 2.6.1 OpenLDAP server setup -- 2.6.2 AIX LDAP client setup -- 2.6.3 Linux LDAP client setup -- 2.7 Security considerations -- 2.7.1 Host access control -- 2.7.2 LDAP servers access and database backup -- 2.7.3 Encryption and PKI -- Chapter 3. Single sign-on -- 3.1 The Kerberos way -- 3.2 Kerberos configuration -- 3.2.1 Kerberos configuration files -- 3.2.2 Kerberos database -- 3.2.3 Controlling access to Kerberos -- 3.2.4 Starting Kerberos -- 3.3 Kerberos administration -- 3.3.1 Kerberos principals -- 3.3.2 Kerberos policies -- 3.3.3 Kerberos database management -- 3.3.4 Kerberos database replication -- 3.4 AIX Network Authentication Service (NAS) -- 3.4.1 Installing required packages -- 3.4.2 AIX Kerberos master server -- 3.5 Linux Kerberos support.

3.5.1 Red Hat Linux Kerberos packages -- 3.5.2 Configuring Kerberos on Linux -- 3.6 Discovering Kerberos services -- 3.6.1 Discovering Kerberos services using AIX NAS and LDAP -- 3.6.2 Discovering Kerberos services using DNS -- 3.7 Integrating Kerberos authentication -- 3.7.1 KDC setup -- 3.7.2 Standard Kerberos services -- 3.7.3 Kerberos authentication clients -- 3.8 Migrating users to Kerberos -- 3.9 Security considerations -- 3.10 Enterprise Identity Mapping (EIM) -- 3.10.1 EIM concepts -- 3.10.2 Using Enterprise Identity Mapping -- Chapter 4. Networking services -- 4.1 Protocols -- 4.1.1 Domain Name System (DNS) -- 4.1.2 Dynamic Host Configuration Protocol (DHCP) -- 4.1.3 Network Time Protocol (NTP) -- 4.1.4 Network Information Service (NIS) -- 4.2 Data transfers -- 4.2.1 rsync -- 4.2.2 rdist -- 4.3 Network management -- 4.3.1 SNMP -- 4.3.2 IBM Tivoli® Netview -- 4.3.3 ntop -- 4.3.4 UNIX network performance management commands -- Chapter 5. Sendmail -- 5.1 Sendmail overview -- 5.1.1 Installing Sendmail -- 5.1.2 Configuration file: sendmail.cf -- 5.1.3 Start and stop Sendmail -- 5.1.4 Mail aliases file -- 5.1.5 Mail queue -- 5.1.6 Mail logging -- 5.2 Mail server on AIX -- 5.2.1 Configuring mail server on AIX -- 5.2.2 Sending mail from Linux through an AIX hub -- 5.3 Mail server on Linux -- Chapter 6. Samba file and print server -- 6.1 Installing Samba on AIX -- 6.2 Installing Samba on Linux -- 6.3 Samba file and print server on AIX and client on Linux -- 6.3.1 Configuring a Samba server on AIX -- 6.3.2 Configuring a client on Linux -- 6.4 Samba file and print server on Linux and client on AIX -- 6.4.1 Configuring Samba server on Linux -- 6.4.2 Configuring a Samba client on AIX -- Chapter 7. NFS -- 7.1 What NFS is -- 7.2 Installing NFS on AIX -- 7.3 Installing NFS on Linux -- 7.4 Configuring an NFS server on AIX and an NFS client on Linux.

7.4.1 Configuring an NFS server on AIX -- 7.4.2 Configuring NFS client on Linux -- 7.5 Configuring an NFS server on Linux and an NFS client on AIX -- 7.5.1 Configuring an NFS server on Linux -- 7.5.2 Configuring the NFS client on AIX -- 7.6 Other NFS topics -- 7.6.1 NFS automount -- 7.6.2 User and group ID mapping -- 7.6.3 Access control lists -- 7.6.4 NFS locking -- Chapter 8. File systems and data archiving -- 8.1 Journaled File System (JFS) -- 8.1.1 Converting a existing ext3 file system to JFS -- 8.1.2 Using ACL on JFS -- 8.2 Universal Disk Format (UDF) -- 8.3 Backup and file systems -- 8.4 Data archiving -- Chapter 9. Security -- 9.1 IPSec -- 9.1.1 Security associations (SA) -- 9.1.2 Tunnels and key management -- 9.1.3 Installing IPSec on Linux -- 9.1.4 Installing IPSec on AIX -- 9.2 Security tools -- 9.2.1 OpenSSL -- 9.2.2 OpenSSH -- 9.2.3 tcp_wrapper -- Chapter 10. System administration applications -- 10.1 Web-based System Manager -- 10.1.1 Web-based System Manager architecture -- 10.1.2 Installing Web-based System Manager -- 10.1.3 Modes of operation -- 10.2 Web-based System Manager Client for Linux -- 10.2.1 Implementing a secure connection in server-client mode -- 10.2.2 Viewing configuration properties -- 10.3 Webmin -- 10.3.1 How to obtain Webmin -- 10.3.2 Installing Webmin -- 10.3.3 Starting the Webmin interface -- 10.3.4 Logging in to Webmin -- 10.3.5 Webmin panels/categories -- 10.3.6 Webmin security features -- Chapter 11. Printer sharing -- 11.1 Printing from Linux to a printer attached to AIX -- 11.1.1 Printing on AIX -- 11.1.2 Configuring remote printing on Linux -- 11.2 Printing from AIX to a printer attached to Linux -- 11.2.1 Installing a printer on Linux -- 11.2.2 Configuring remote printing on AIX -- 11.3 Configuring Directory-Enabled (LDAP) System V printing on AIX -- Chapter 12. Linux for IBM eServer pSeries and RS/6000.

12.1 Linux on a logical partition (LPAR) -- 12.2 AIX toolbox for Linux applications -- Abbreviations and acronyms -- Related publications -- IBM Redbooks -- Other resources -- Referenced Web sites -- How to get IBM Redbooks -- IBM Redbooks collections -- Index -- Back cover.