User Tools
авторизация_с_использованием_ldap_сервера
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
|
авторизация_с_использованием_ldap_сервера [2021/01/14 13:39] val [OpenLDAP] |
авторизация_с_использованием_ldap_сервера [2022/10/18 17:09] val [Настройка библиотеки nsswitch] |
||
|---|---|---|---|
| Line 3: | Line 3: | ||
| ===== Установка LDAP клиента ===== | ===== Установка LDAP клиента ===== | ||
| - | !!! Не требуется для nss_ldap, удобен для отладки | + | * !!! Не требуется для nss_ldap, удобен для отладки |
| ==== Debian/Ubuntu ==== | ==== Debian/Ubuntu ==== | ||
| Line 33: | Line 33: | ||
| gate# LDAPTLS_REQCERT=never ldapsearch -x -D "cn=Administrator,cn=Users,dc=corpX,dc=un" -w 'Pa$$w0rd' -H ldaps://server.corpX.un -b "dc=corpX,dc=un" "sAMAccountName=user1" | gate# LDAPTLS_REQCERT=never ldapsearch -x -D "cn=Administrator,cn=Users,dc=corpX,dc=un" -w 'Pa$$w0rd' -H ldaps://server.corpX.un -b "dc=corpX,dc=un" "sAMAccountName=user1" | ||
| + | |||
| + | или с Kerberos GSSAPI аутентификацией | ||
| + | |||
| + | gate# apt install libsasl2-modules-gssapi-mit | ||
| + | gate# kinit Administrator | ||
| + | gate# ldapsearch -h server -b "dc=corpX,dc=un" "sAMAccountName=user1" | ||
| </code><code> | </code><code> | ||
| ... | ... | ||
| Line 50: | Line 56: | ||
| </code> | </code> | ||
| ===== Установка библиотеки nss ldap ===== | ===== Установка библиотеки nss ldap ===== | ||
| - | |||
| - | ==== FreeBSD ==== | ||
| - | <code> | ||
| - | [gate:~] # pkg install nss_ldap | ||
| - | |||
| - | [gate:~] # cat /usr/local/etc/nss_ldap.conf | ||
| - | </code> | ||
| ==== Debian/Ubuntu ==== | ==== Debian/Ubuntu ==== | ||
| <code> | <code> | ||
| - | root@gate:~# apt install libnss-ldap | + | root@gate:~# DEBIAN_FRONTEND=noninteractive apt install libnss-ldap |
| </code><code> | </code><code> | ||
| ... | ... | ||
| Line 69: | Line 68: | ||
| debian# cat /etc/libnss-ldap.conf | debian# cat /etc/libnss-ldap.conf | ||
| + | </code> | ||
| + | |||
| + | ==== FreeBSD ==== | ||
| + | <code> | ||
| + | [gate:~] # pkg install nss_ldap | ||
| + | |||
| + | [gate:~] # cat /usr/local/etc/nss_ldap.conf | ||
| </code> | </code> | ||
| Line 148: | Line 154: | ||
| </code><code> | </code><code> | ||
| ... | ... | ||
| - | passwd: files ldap | + | passwd: files systemd ldap |
| - | group: files ldap | + | group: files systemd ldap |
| shadow: files ldap | shadow: files ldap | ||
| ... | ... | ||
| Line 155: | Line 161: | ||
| debian# service nscd restart && service nscd reload | debian# service nscd restart && service nscd reload | ||
| - | # getent passwd | + | # getent passwd user1 |
| # id user1 | # id user1 | ||
| Line 162: | Line 168: | ||
| ===== Установка сертификатов ===== | ===== Установка сертификатов ===== | ||
| - | ==== FreeBSD ==== | + | * [[Пакет OpenSSL#Импорт сертификата центра сертификации]] |
| - | <code> | + | |
| - | # setenv LDAPTLS_REQCERT never | + | |
| - | или | + | |
| - | # pkg install ca_root_nss | + | |
| - | # setenv LDAPTLS_CACERT /usr/local/etc/ssl/cert.pem | + | |
| - | </code> | + | |
| - | ==== Linux ==== | + | |
| <code> | <code> | ||
| # export LDAPTLS_REQCERT=never | # export LDAPTLS_REQCERT=never | ||
| </code> | </code> | ||
авторизация_с_использованием_ldap_сервера.txt · Last modified: 2024/01/26 13:06 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
