This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| ubuntu_14.04_ldap_client [2015/03/04 08:36] – herwarth | ubuntu_14.04_ldap_client [2015/03/05 08:48] (current) – herwarth | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====LDAP client on Ubuntu 14.04==== | + | ======LDAP client on Ubuntu 14.04====== |
| - | ===Install and configure packages=== | + | =====Installation===== |
| apt-get install sssd libnss-sss libpam-sss auth-client-config | apt-get install sssd libnss-sss libpam-sss auth-client-config | ||
| - | vi / | + | =====Configuration===== |
| - | + | ====sssd==== | |
| - | <code> | + | <code - / |
| [sssd] | [sssd] | ||
| config_file_version = 2 | config_file_version = 2 | ||
| Line 34: | Line 33: | ||
| wget http:// | wget http:// | ||
| - | vi / | + | <code - / |
| - | + | ||
| - | <code> | + | |
| [sssd] | [sssd] | ||
| nss_passwd= | nss_passwd= | ||
| Line 68: | Line 65: | ||
| auth-client-config -a -p sssd | auth-client-config -a -p sssd | ||
| | | ||
| - | ===Enable homedir creation=== | + | ====Enable homedir creation==== |
| - | | + | <code - / |
| - | + | ||
| - | <code> | + | |
| Name: activate mkhomedir | Name: activate mkhomedir | ||
| Default: yes | Default: yes | ||
| Line 80: | Line 75: | ||
| </ | </ | ||
| - | ===Enable allow change of password using passwd tool=== | + | ====Enable allow change of password using passwd tool==== |
| remove use_authok | remove use_authok | ||
| | | ||
| - | vi / | + | <code - / |
| - | + | # | |
| - | | + | # / |
| - | # / | + | # -- removed comment header talking about various options -- |
| - | # -- removed comment header talking about various options -- | + | |
| - | + | ||
| - | # here are the per-package modules (the " | + | |
| - | password [success=2 default=ignore] pam_unix.so obscure sha512 | + | |
| - | password [success=1 user_unknown=ignore default=die] pam_ldap.so use_authtok try_first_pass | + | |
| - | # here's the fallback if no module succeeds | + | |
| + | # here are the per-package modules (the " | ||
| + | password [success=2 default=ignore] pam_unix.so obscure sha512 | ||
| + | password [success=1 user_unknown=ignore default=die] pam_ldap.so use_authtok try_first_pass | ||
| + | # here's the fallback if no module succeeds | ||
| + | </ | ||
| pam-auth-update | pam-auth-update | ||
| Line 102: | Line 96: | ||
| service sssd restart | service sssd restart | ||
| + | |||
| + | |||
| + | {{tag> | ||