13
12

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?

More than 5 years have passed since last update.

CentOS 6.5 で OpenLDAP(4)クライアント環境設定

Last updated at Posted at 2014-04-21

必要パッケージインストール

yum -y install authconfig openldap-clients nss-pam-ldapd

OpenLDAPクライアント設定

authconfig \
 --enableldap \
 --enableldapauth \
 --ldapserver="ldap://192.168.0.10/" \
 --ldapbasedn="dc=example,dc=com" \
 --enablemkhomedir \
 --update
chkconfig nslcd on

/etc/ssh/ldap.conf 確認

/etc/ssh/ldap.conf
uri ldap://192.168.0.10/
base dc=example,dc=com
host 192.168.0.10
ssl no

/etc/pam_ldap.conf 確認

/etc/pam_ldap.conf
uri ldap://192.168.0.10/
base dc=example,dc=com
host 192.168.0.10
ssl no

/etc/nslcd.conf 確認

/etc/nslcd.conf
uid nslcd
gid ldap
uri ldap://192.168.0.10/
base dc=example,dc=com
ssl no

/etc/openldap/ldap.conf 確認

/etc/openldap/ldap.conf
URI ldap://192.168.0.10/
BASE dc=example,dc=com
オプション名 説明
--enableldap LDAPを有効にする
--enableldapauth LDAP認証を有効にする
--ldapserver LDAPサーバーを指定する
--ldapbasedn LDAP検索のベースを指定する
--enablemkhomedir ホームディレクトリを自動的に作成する

クライアント確認

id takahiko.takeda
uid=1001(takahiko.takeda) gid=1000(system) 所属グループ=1000(system)

SSH確認

ユーザーID パスワード
takahiko.takeda 5k9eC2H5
shinya.yokoyama QaEiE46y
osamu.inoue 6ofgjZDu
naoki.ishikawa QBe6pGUV
kazuo.tamura 4PM8nGuX

上記、それぞれSSHにてログイン出来るか確認する

13
12
0

Register as a new user and use Qiita more conveniently

  1. You get articles that match your needs
  2. You can efficiently read back useful information
  3. You can use dark theme
What you can do with signing up
13
12

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?