LDAP: Difference between revisions

From NURDspace
No edit summary
Line 16: Line 16:


It can be accessed on http://nurdservices/fusiondirectory from within the network.
It can be accessed on http://nurdservices/fusiondirectory from within the network.
= Logging in to workstations with LDAP users =
To get this to work you need to install libnss-ldapd, configure the ldap in nss and pam (no ssl, so ldap://nurdservices/), and add a line to /etc/pam.d/common-account:
<code>
session    required  pam_mkhomedir.so skel=/etc/skel/ umask=0022
</code>

Revision as of 01:35, 30 March 2013

For use with SpaceNet we've installed OpenLDAP on nurdserver. We can use this LDAP for many more purposes. This page can serve as documentation for both working implementations and future plans.

Working implementations

Future plans

  • wiki logins
  • NFS for homedirs and other dirs (MP3 etc) on NURDServer
  • System users for all infra-machines
  • Maintain sudo'ers through the LDAP and remove all local root accounts

Status of future plans

I've installed FusionDirectory on a new VM called nurdservices on the proxmox system of Nurdserver v2. Now I need to add all users into it.

It can be accessed on http://nurdservices/fusiondirectory from within the network.

Logging in to workstations with LDAP users

To get this to work you need to install libnss-ldapd, configure the ldap in nss and pam (no ssl, so ldap://nurdservices/), and add a line to /etc/pam.d/common-account:

session required pam_mkhomedir.so skel=/etc/skel/ umask=0022