LDAP

[cpjitservices]

Hi folks,

 

Im wondering if someone can point me in the right direction, I've been trying to set something up regarding LDAP/Samba 4 for the past week and nothing seems to work.

 

What I'm trying to achieve is build another authentication method for servers in the Data Center, I already have an existing AD setup for the main offices, but I want this to be separate from the Data Center. I went down the OpenLDAP route on CentOS 6.3 using PHPLdapAdmin and it seemed to work but non of my servers would join to the directory, I used the authentication setup on Centos and configured the LDAP server settings but still couldn't use an LDAP account to login.

 

I need to keep the LDAP & AD separate as I dont want users in the AD to be able to login to servers, and vice versa. All my servers are either CentOS or Fedora 18. I've even been trying Samba 4 and used Samba_Internal for DNS on the Samba 4 server, I can get CentOS nslookup successfully with the right hostnames etc but no joy when joining CentOS to the Samba 4 domain.

 

has anyone got CentOS to join an LDAP domain ?

[pogson]

I don't do RedHat/CentOS these days but Debian GNU/Linux and others need /etc/nsswitch.conf to point to ldap after changing the PAM (pluggable authentication modules) settings to use ldap. Presumably, you have a select bunch of users in /etc/shadow, /etc/passwd on the servers. There are scripts to pump them into LDAP.

 

generally, see LDAP authentication using pam_ldap and nss_ldap

 

specifically for RedHat, see Authentication using LDAP