[linux] System s LDAP autentifikaciou

[Milan Hromada]

Dňa Po, 2003-11-03 at 10:37, Matus UHLAR - fantomas napísal:
> On 03.11 10:14, Milan Hromada wrote:
> > Nastavil so sytem aby sa autentifikoval proti LDAP serveru
> 
> autentizoval.
> 
> > Vsetko funguje.
> > Moj problem je co v pripade, ze nefunguje LDAP server.
> > Ked nefunguje LDAP neda sa prihlasit ani na konta ktore su
> > v /etc/passwd
> 
> co mas v /etc/pam.d/login a /etc/pam.d/ssh ?
> (pripadne inych ekvivalentnych suboroch). 
v /etc/pam.d/system-auth
#%PAM-1.0

auth       required /lib/security/pam_env.so
auth       sufficient   /lib/security/pam_unix.so likeauth nullok
nodelay
auth       sufficient   /lib/security/pam_ldap.so use_first_pass
auth       required /lib/security/pam_deny.so

account    required /lib/security/pam_unix.so
account    [default=bad success=ok user_unknown=ignore
service_err=ignore system_err=ignore] /lib/security/pam_ldap.so


password   required /lib/security/pam_cracklib.so retry=3
password   sufficient   /lib/security/pam_unix.so nullok md5 shadow
use_authtok
password   sufficient   /lib/security/pam_ldap.so use_authtok
password   required /lib/security/pam_deny.so

session    required /lib/security/pam_mkhomedir.so skel=/etc/skel/
umask=0027
session    required /lib/security/pam_limits.so
session    required /lib/security/pam_unix.so
session    optional /lib/security/pam_ldap.so
> 
> ak chces aby isli pouzivatelia aj cez LDAP aj cez passwd, asi nebude dobry
> napad nastavit LDAP autentizaciu ako required - mozno ako sufficient.
> 
> co mas v /etc/nsswitch.conf?
> 
> passwd:         files ldap
> group:          files ldap
> shadow:         files ldap
passwd,group,shadow mam nastavene takto
> 
> toto by mohlo fungovat aj bez pam, ale nie som si isty - treba vyskusat.
>  
-- 
+--------------------------------------------------------------+
| Milan Hromada Unix Admin  ,,,    tel: +421 (0)46 5151 335    |
|     Elas Ltd., SK        (o o)    E-mail:mhromada na elas.sk    |
+---------------------oOOo--(_)--oOOo--------------------------+
Give a small boy a hammer and he will find that everything he encounters
needs pounding.


------------- další část ---------------
Netextová příloha byla odstraněna...
Jméno: [žádný popis není k dispozici]
Typ: application/pgp-signature
Velikost: 189 bytes
Popis: Toto je =?ISO-8859-1?Q?digit=E1lne?=
	=?ISO-8859-1?Q?_podp=EDsan=E1?= =?iso-8859-2?Q?_=E8as=BB?=
	=?ISO-8859-1?Q?_spr=E1vy?=
Url : http://lists.linux.sk/pipermail/linux/attachments/20031103/36784672/attachment.bin