| Red Hat Linux 9: Red Hat Linux Reference Guide | ||
|---|---|---|
| Prev | Chapter 13. Lightweight Directory Access Protocol (LDAP) | Next |
13.7. Configuring Your System to Authenticate Using OpenLDAP
is provided here. Please refer to the references provided in Section 13.9 Additional Resources for more information.
- Install the Necessary LDAP Package
openldap-servers package.
The openldap, openldap-clients, and nss_ldap packages need to be installed on all LDAP client machines.
- Edit the Configuration Files
On the server, edit the /etc/openldap/slapd.conf file on the LDAP server to make sure it matches the specifics of your organization. Please refer to Section 13.6.1 Editing /etc/openldap/slapd.conf for instructions on editing slapd.conf.
On the client machines, both /etc/ldap.conf and /etc/openldap/ldap.conf need to contain the proper server and search base information for your organization.
The simplest way to do this is to run the Authentication Configuration Tool (authconfig-gtk) and select Enable LDAP Support under the User Information tab.
You can also edit these files by hand.
On the client machines, the /etc/nsswitch.conf must be edited to use LDAP.
The simplest way to do this is to run the Authentication Configuration Tool (authconfig-gtk) and select Enable LDAP Support under the User Information tab.
If editing /etc/nsswitch.conf by hand, add ldap to the appropriate lines.
For example:
passwd: files ldap shadow: files ldap group: files ldap
13.7.1. PAM and LDAP
To have standard PAM-enabled applications use LDAP for authentication, run the Authentication Configuration Tool (authconfig-gtk) and select Enable LDAP Support under the the Authentication tab. For more on configuring PAM consult, Chapter 14 Pluggable Authentication Modules (PAM) and the PAM man pages.
13.7.2. Migrating Old Authentication Information to LDAP Format
The /usr/share/openldap/migration/
First, modify the migrate_common.ph
$DEFAULT_MAIL_DOMAIN = "your_company"; |
The default base should also be changed, to something like:
$DEFAULT_BASE = "dc=your_company,dc=com"; |
Table 13-1, decide which script to run in order to migrate your user database.
| Existing name service | Is LDAP running? | Script to Use |
|---|---|---|
| /etc flat files | yes | migrate_all_online.sh |
| /etc flat files | no | migrate_all_offline.sh |
| NetInfo | yes | migrate_all_netinfo_online.sh |
| NetInfo | no | migrate_all_netinfo_offline.sh |
| NIS (YP) | yes | migrate_all_nis_online.sh |
| NIS (YP) | no | migrate_all_nis_offline.sh |
Table 13-1. LDAP Migration Scripts
Run the appropriate script based on your existing name service.
 | Note |
|---|---|
You must have Perl installed on your system to use some of these scripts. |
The README and the migration-tools.txt files in the /usr/share/openldap/migration/ directory provide more details on how to migrate the information.
| Главная |