Nss ldap - Revision history

Jciccone: /* Configuring */

2009-03-23T00:25:54Z

Configuring

← Older revision		Revision as of 00:25, 23 March 2009
Line 162:		Line 162:

	ldapadd -f temp.ldif -x -D "cn=Manager,'''''<BASE DN>'''''" -W		ldapadd -f temp.ldif -x -D "cn=Manager,'''''<BASE DN>'''''" -W

	[[Category:Security]]		[[Category:Security]]

Jciccone at 21:08, 22 March 2009

2009-03-22T21:08:21Z

← Older revision		Revision as of 21:08, 22 March 2009
Line 95:		Line 95:
	# Begin /etc/ldap.conf		# Begin /etc/ldap.conf

	uri ldap://''<fqdn of ldap server>''/		uri ldap://'''''<fqdn of ldap server>'''''/
	base ''<BASE DN>''		base '''''<BASE DN>'''''

	ldap_version 3		ldap_version 3
Line 106:		Line 106:
	# NSS Section		# NSS Section

	nss_base_passwd ou=People,''<BASE DN>''		nss_base_passwd ou=People,'''''<BASE DN>'''''
	nss_base_group ou=Groups,''<BASE DN>''		nss_base_group ou=Groups,'''''<BASE DN>'''''
	nss_base_shadow ou=People,''<BASE DN>''		nss_base_shadow ou=People,'''''<BASE DN>'''''

	nss_base_hosts ou=Hosts,''<BASE DN>''		nss_base_hosts ou=Hosts,'''''<BASE DN>'''''
	nss_base_networks ou=Networks,''<BASE DN>''		nss_base_networks ou=Networks,'''''<BASE DN>'''''

	nss_base_protocols ou=Protocals,''<BASE DN>''		nss_base_protocols ou=Protocals,'''''<BASE DN>'''''
	nss_base_services ou=Services,''<BASE DN>''		nss_base_services ou=Services,'''''<BASE DN>'''''
	nss_base_rpc ou=Rpc,''<BASE DN>''		nss_base_rpc ou=Rpc,'''''<BASE DN>'''''

	nss_reconnect_tries 3		nss_reconnect_tries 3
Line 152:		Line 152:
	Rpc Services; do		Rpc Services; do
	echo		echo
	echo "dn: ou=$ou,''<BASE DN>''"		echo "dn: ou=$ou,'''''<BASE DN>'''''"
	echo "objectClass: top"		echo "objectClass: top"
	echo "objectClass: organizationalUnit"		echo "objectClass: organizationalUnit"
Line 161:		Line 161:
	Verify the ldif in a text editor then import the ldif with the following command:		Verify the ldif in a text editor then import the ldif with the following command:

	ldapadd -f temp.ldif -x -D "cn=Manager,''<BASE DN>''" -W		ldapadd -f temp.ldif -x -D "cn=Manager,'''''<BASE DN>'''''" -W

	[[Category:Security]]		[[Category:Security]]

Jciccone at 01:20, 25 December 2008

2008-12-25T01:20:50Z

← Older revision		Revision as of 01:20, 25 December 2008
Line 55:		Line 55:

	CC="gcc ${BUILDN32}" USE_ARCH=n32 \		CC="gcc ${BUILDN32}" USE_ARCH=n32 \
	./configure --prefix=/usr --exec-prefix= \ \		./configure --prefix=/usr --exec-prefix= \
	--libdir=/lib32 \		--libdir=/lib32 \
	--sysconfdir=/etc --mandir=/usr/share/man \		--sysconfdir=/etc --mandir=/usr/share/man \
Line 72:		Line 72:

	CC="gcc ${BUILD64}" USE_ARCH=64 \		CC="gcc ${BUILD64}" USE_ARCH=64 \
	./configure --prefix=/usr --exec-prefix= \ \		./configure --prefix=/usr --exec-prefix= \
	--libdir=/lib64 \		--libdir=/lib64 \
	--sysconfdir=/etc --mandir=/usr/share/man \		--sysconfdir=/etc --mandir=/usr/share/man \

Jciccone at 01:19, 25 December 2008

2008-12-25T01:19:34Z

@@ Line 35: / Line 35: @@
 === 32Bit ===
-todo
+Compile the package:
 === N32 ===
-todo
+Compile the package:
 === 64Bit ===
-todo
+Compile the package:
 == Configuring ==

Gibbon: /* Configuration Files */

2008-12-13T08:50:29Z

Configuration Files

← Older revision		Revision as of 08:50, 13 December 2008
Line 85:		Line 85:
	Create a new nsswitch.conf that knows to look at nss_ldap for information:		Create a new nsswitch.conf that knows to look at nss_ldap for information:

	cat > /etc/nsswitch.conf		cat > /etc/nsswitch.conf << "EOF"
	# Begin /etc/nsswitch.conf		# Begin /etc/nsswitch.conf

Jciccone: /* Configuring */

2008-11-16T00:59:48Z

Configuring

@@ Line 46: / Line 46: @@
 == Configuring ==
 When the package was installed the Makefile would have created a example ldap.conf in /etc. This configuration serves as more then a configuration for just nss_ldap. It also configures [[pam_ldap]] and [[Sudo]] among other packages.
@@ Line 102: / Line 104: @@
 {{Note|The <nowiki>[UNAVAIL=return]</nowiki> condition on the hosts line will prevent a circular condition that would loop indefinitely if the dns server is down.}}
 [[Category:Security]]

Jciccone: /* Configuring */

2008-11-15T23:15:28Z

Configuring

← Older revision		Revision as of 23:15, 15 November 2008
Line 101:		Line 101:
	EOF		EOF

	{{Note\|The [UNAVAIL=return] condition on the hosts line will prevent a circular condition that would loop indefinitely if the dns server is down.}}		{{Note\|The <nowiki>[UNAVAIL=return]</nowiki> condition on the hosts line will prevent a circular condition that would loop indefinitely if the dns server is down.}}

	[[Category:Security]]		[[Category:Security]]

Jciccone: /* Configuring */

2008-11-15T23:15:13Z

Configuring

@@ Line 80: / Line 80: @@
   # End /etc/ldap.conf
   EOF
 [[Category:Security]]

Jciccone at 23:01, 15 November 2008

2008-11-15T23:01:14Z

← Older revision		Revision as of 23:01, 15 November 2008
Line 66:		Line 66:

	nss_base_passwd ou=People,''<BASE DN>''		nss_base_passwd ou=People,''<BASE DN>''
	nss_base_group ou=~~Group~~,''<BASE DN>''		nss_base_group ou=Groups,''<BASE DN>''
	nss_base_shadow ou=People,''<BASE DN>''		nss_base_shadow ou=People,''<BASE DN>''

Jciccone at 22:55, 15 November 2008

2008-11-15T22:55:04Z

← Older revision		Revision as of 22:55, 15 November 2008
Line 65:		Line 65:
	# NSS Section		# NSS Section

	nss_base_passwd ou=People,~~dc=ciccone,dc=local~~		nss_base_passwd ou=People,''<BASE DN>''
	nss_base_group ou=Group,~~dc=ciccone,dc=local~~		nss_base_group ou=Group,''<BASE DN>''
	nss_base_shadow ou=People,~~dc=ciccone,dc=local~~		nss_base_shadow ou=People,''<BASE DN>''

	nss_base_hosts ou=Hosts,~~dc=ciccone,dc=local~~		nss_base_hosts ou=Hosts,''<BASE DN>''
	nss_base_networks ou=Networks,~~dc=ciccone,dc=local~~		nss_base_networks ou=Networks,''<BASE DN>''

	nss_base_protocols ou=Protocals,~~dc=ciccone,dc=local~~		nss_base_protocols ou=Protocals,''<BASE DN>''
	nss_base_services ou=Services,~~dc=ciccone,dc=local~~		nss_base_services ou=Services,''<BASE DN>''
	nss_base_rpc ou=Rpc,~~dc=ciccone,dc=local~~		nss_base_rpc ou=Rpc,''<BASE DN>''

	nss_reconnect_tries 3		nss_reconnect_tries 3