User Tools

Site Tools


авторизация_с_использованием_ldap_сервера

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
авторизация_с_использованием_ldap_сервера [2023/02/28 13:09]
val [Microsoft Active Directory]
авторизация_с_использованием_ldap_сервера [2025/10/08 09:12] (current)
val
Line 21: Line 21:
 <​code>​ <​code>​
 gate# ldapsearch -x -b"​dc=corpX,​dc=un"​ -H ldap://​server "​uid=user1"​ gate# ldapsearch -x -b"​dc=corpX,​dc=un"​ -H ldap://​server "​uid=user1"​
 +</​code>​
 +==== FreeIPA ====
 +<​code>​
 +gate# ldapsearch -x -b"​dc=corpX,​dc=un"​ -H ldap://​server "​uid=user1"​
 +
 +gate# ldapsearch -x -D "​uid=admin,​cn=users,​cn=accounts,​dc=corp13,​dc=un"​ -W -H ldap://​server -b "​dc=corp13,​dc=un"​ "​uid=user1"​
 +...
 +mail: user1@corp13.un
 +...
 </​code>​ </​code>​
  
Line 29: Line 38:
  
 <​code>​ <​code>​
-gate# ldapsearch -x -D "​cn=Administrator,​cn=Users,​dc=corpX,​dc=un"​ -W -server -b "​dc=corpX,​dc=un"​ "​sAMAccountName=user1"​+gate# ldapsearch -x -D "​cn=Administrator,​cn=Users,​dc=corpX,​dc=un"​ -W -H ldap://server -b "​dc=corpX,​dc=un"​ "​sAMAccountName=user1"​
  
 или через ldaps: или через ldaps:
Line 49: Line 58:
 ... ...
 </​code><​code>​ </​code><​code>​
-# ldapsearch -x -D "​cn=Administrator,​cn=Users,​dc=corpX,​dc=un"​ -W -server -b "​dc=corpX,​dc=un"​ "​sAMAccountName=guser1"​+# ldapsearch -x -D "​cn=Administrator,​cn=Users,​dc=corpX,​dc=un"​ -W -H ldap://server -b "​dc=corpX,​dc=un"​ "​sAMAccountName=guser1"​
 </​code><​code>​ </​code><​code>​
 ... ...
Line 173: Line 182:
 <​code>​ <​code>​
 # export LDAPTLS_REQCERT=never # export LDAPTLS_REQCERT=never
 +</​code>​
 +
 +===== Дополнительные материалы =====
 +
 +==== Изменения в Debian 12 ====
 +<​code>​
 +debian12# apt install libnss-ldapd
 +
 +debian12# grep "​^[^#​]" ​ /​etc/​nslcd.conf
 +uid nslcd
 +gid nslcd
 +uri ldap://​server/​
 +base dc=corp20,​dc=un
 +tls_cacertfile /​etc/​ssl/​certs/​ca-certificates.crt
 +
 +service nslcd restart
 +
 +gate# chown -R user1:user1 /home/user1
 +gate# chown -R user2:user2 /home/user2
 </​code>​ </​code>​
авторизация_с_использованием_ldap_сервера.1677578984.txt.gz · Last modified: 2023/02/28 13:09 by val