Attached unzip pkzip bzip for AIX How to install it 1) download the attachment 2) ftp it to AIX machines in binary mode ftp it to /tmp/unzip 3) cd /tmp/unzip.

# ftp public.dhe.ibm.com Connected to dispby-112.boulder.ibm.com. 220-********************************************************************** 220-* * 220-* IBM's internal systems must only be used for conducting IBM's * 220-* business or for purposes authorized by IBM management.

* 220-* * 220-* Use is subject to audit at any time by IBM management. * 220-* * 220-* Important Please read * 220-* * 220-* Machine Code updates provided through this site are available * 220-* only for IBM machines that are under warranty or an IBM hardware * 220-* maintenance service agreement Code for operating systems or other * 220-* software products is available only where entitled under the * 220-* applicable software warranty or IBM software maintenance * 220-* agreement. All code (including Machine Code updates, samples, * 220-* fixes or other software downloads)provided through this site * 220-* is subject to the terms of the license agreements which * 220-* govern the use of the associated code. Some exceptions may * 220-* apply.IBM reserves the right to change, modify or withdraw its * 220-* offerings,policies and practices at any time. * 220-********************************************************************** 220- 220 service.boulder.ibm.com FTP server (Version wu-2.6.2.1(5) Custom Tue Aug 17 13:28:23 MDT 2010) ready.

Name (public.dhe.ibm.com:root): ftp 331 Guest login ok, send any password. Password: 230 Guest login ok, access restrictions apply. Jb4 interface program. Ftp> cd aix/freeSoftware/aixtoolbox/RPMS/ppc/wget/ 250 CWD command successful. Ftp> bin 200 Type set to I. Ftp> get wget-1.9.1-3.aix6.1.ppc.rpm 200 PORT command successful. 150 Opening BINARY mode data connection for wget-1.9.1-3.aix6.1.ppc.rpm (465606 bytes). 226 Transfer complete.

465606 bytes received in 2.523 seconds (180.2 Kbytes/s) local: wget-1.9.1-3.aix6.1.ppc.rpm remote: wget-1.9.1-3.aix6.1.ppc.rpm ftp.

Contents • • • • • • • • • • • • • • Introduction First a little background information regarding sudo on AIX: As you might or might not know, sudo can be installed on AIX from various packages coming from various sources. IBM provides its own version of the sudo package through the, but there are several [newer/better] packages out there. The problem with integrating sudo on AIX with freeIPA is that most sudo packages compiled for AIX are NOT compiled with LDAP support. Although, other than OpenLDAP, I suppose it doesn’t work well with AIX’s LDAP filesets. That’s just my guess why most sudo packages for AIX aren’t compiled with LDAP support.

The good news is that, has successfully compiled a sudo package with LDAP support, however it is compiled against OpenLdap and not AIX’s LDAP fileset. This means that you'll have to install OpenLdap as a dependency on you AIX LPAR. Important Notices I cannot assure you that the procedures described on this article will work 100% of the time across all the AIX installations out there. Please proceed with caution and preferably try this out in a non-production environment before doing this in your production AIX environment. What I can assure you: None of my LPARs have presented LDAP/Kerberos authentication or SSH issues (performed with IBM's filesets) after the execution of this procedure. So from my perspective its safe to say that: • The OpenLDAP package being installed with the following RPM package will not interfere with other LDAP packages, such as the IBM LDAP fileset, you might have installed on yout AIX LPAR.

• The OpenSSL package being installed with the following RPM pacakge will not interfere with OpenSSL packages, such as the IBM OpenSSL fileset, you might have installed on yout AIX LPAR. Compatibility I have successfully implemented the procedures described on this article on AIX LPARs runnning the following versions of AIX: • 5.3 • 6.1 • 7.1 I have not tested the procedures described on this article on VIO LPARs and I advise you all against it as it might void IBM's warranty. However, technically speaking, it should work just fine on the oem_setup_env environment level. Getting started This section describes the things you need to check, download and setup before you can continue. Check your current sudo setup If you are interested in this article its very likely that you already have sudo installed on you AIX LPAR and perhaps you inadvertently, or luckly, might already be running a LDAP ready sudo binary. If you don't have sudo installed on your LPAR yet, you should disregard the following check.