IZ36581: LDAP USERS AREN'T AUDITED WHEN CLIENT IS SET WITH RFC2307 SCHEMA

APAR status

• Closed as Permanent restriction.

Error description

• In AIX 5.2 if auditclasses attribute was not found on the
  ldap server,the auditclasses attribute for the local
  default
  entry was being taken. In AIX 5.3 it is not being taken
  into
  account because of which we cannot audit ldap users
  belonging to rfc2307 schema. For all the other attributes
  like minlen,data,core etc if the attribute is not found
  on the ldap server the default entry is being taken in
  AIX
  5.3.
  

Local fix

Problem summary

• LDAP users aren't audited when client is set with RFC 2307
      schema.
  

Problem conclusion

• Currently, auditing support is there for the LDAP user for the
  schema type RFC2307AIX and AIX. However it is not supported for
  the schema  type RFC2307.  RFC2307 schema does not support the
  auditclasses attribute. This attribute is part of AIX schema.
  Hence, This APAR is closed as permanent restriction as this is
  not a problem.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels