OpenLDAP : Configure LDAP Client2018/11/09 |
Configure LDAP Client in order to share users' accounts in your local networks.
|
|
[1] | Install OpenLDAP Client. |
[root@www ~]#
dnf -y install openldap-clients sssd sssd-ldap oddjob-mkhomedir # swicth authentication provider to sssd [root@www ~]# authselect select sssd with-mkhomedir --force
Backup stored at /var/lib/authselect/backups/2018-11-09-01-36-11.CztlDo Profile "sssd" was selected. The following nsswitch maps are overwritten by the profile: - passwd - group - netgroup - automount - services Make sure that SSSD service is configured and enabled. See SSSD documentation for more information. - with-mkhomedir is selected, make sure oddjobd service is enabled - systemctl enable oddjobd.service - systemctl start oddjobd.service
[root@www ~]#
vi /etc/openldap/ldap.conf # add to the end: your LDAP server's URL and Suffix URI ldap://dlp.srv.world/ BASE dc=srv,dc=world
[root@www ~]#
vi /etc/sssd/sssd.conf # create new # replace [ldap_uri], [ldap_search_base] to your own environment value [domain/default] id_provider = ldap autofs_provider = ldap auth_provider = ldap chpass_provider = ldap ldap_uri = ldap://dlp.srv.world/ ldap_search_base = dc=srv,dc=world ldap_id_use_start_tls = True ldap_tls_cacertdir = /etc/openldap/certs cache_credentials = True ldap_tls_reqcert = allow [sssd] services = nss, pam, autofs domains = default [nss] homedir_substring = /home chmod 600 /etc/sssd/sssd.conf [root@www ~]# systemctl restart sssd oddjobd [root@www ~]# systemctl enable sssd oddjobd
[root@www ~]#
logout Fedora 29 (Server Edition) Kernel 4.18.16-300.fc29.x86_64 on an x86_64 (ttyS0) Web console: https://www.srv.world:9090/ or https://10.0.0.31:9090/ www login: redhat # LDAP user Password: # password [redhat@www ~]$ # just logined # changing LDAP password is common way with passwd [redhat@www ~]$ Changing password for user redhat. Current Password: # current password New password: # new password Retype new password: passwd: all authentication tokens updated successfully. |
Sponsored Link |
|