User Tools
ldap_авторизация_в_microsoft_ad
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
ldap_авторизация_в_microsoft_ad [2010/08/10 18:56] val |
— (current) | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== LDAP авторизация в Microsoft AD ====== | ||
| - | ===== Получение информации о пользователе в AD по протоколу LDAP ===== | ||
| - | <code> | ||
| - | gate# ldapsearch -x -h ad -b "dc=corpX,dc=un" -D "cn=Administrator,cn=Users,dc=corpX,dc=un" -W "sAMAccountName=user" | ||
| - | </code> | ||
| - | ===== Модификация схемы AD ===== | ||
| - | |||
| - | Устанавливаем NIS server из пакета SFU | ||
| - | |||
| - | Опции инсталяции: | ||
| - | <code> | ||
| - | Custom: | ||
| - | Server for NIS | ||
| - | </code> | ||
| - | Добавляем группу "guser" | ||
| - | |||
| - | Устанавливаем ее UNIX свойство | ||
| - | <code> | ||
| - | gid: 10001 | ||
| - | </code> | ||
| - | |||
| - | Добавляем UNIX атрибуты пользователю "user" | ||
| - | <code> | ||
| - | uid: 10001 | ||
| - | группа по умолчанию: guser | ||
| - | home dir: /home/user | ||
| - | </code> | ||
| - | ===== Удаляем учетную запись user из системы и все его файлы (домашний каталог, почту) ===== | ||
| - | |||
| - | ==== FreeBSD ==== | ||
| - | <code> | ||
| - | [gate:~] # rmuser user | ||
| - | </code> | ||
| - | ==== Ubuntu ==== | ||
| - | <code> | ||
| - | root@gate:~# userdel user | ||
| - | </code> | ||
| - | |||
| - | ==== FreeBSD/Ubuntu ==== | ||
| - | <code> | ||
| - | gate# id user | ||
| - | id: user: No such user | ||
| - | </code> | ||
| - | |||
| - | ===== Настройка nss ldap на использование AD ===== | ||
| - | |||
| - | ==== FreeBSD ==== | ||
| - | <code> | ||
| - | [gate:~] # pkg_add -r nss_ldap | ||
| - | |||
| - | [gate:~] # cat /usr/local/etc/nss_ldap.conf | ||
| - | </code> | ||
| - | |||
| - | ==== Ubuntu ==== | ||
| - | <code> | ||
| - | root@gate:~# apt-get install libnss-ldap | ||
| - | Ответы по умолчанию | ||
| - | |||
| - | root@gate:~# cat /etc/ldap.conf | ||
| - | </code> | ||
| - | |||
| - | ==== FreeBSD/Ubuntu ==== | ||
| - | <code> | ||
| - | host 192.168.X.20 # for restart local dns | ||
| - | base dc=corpX,dc=un | ||
| - | binddn cn=Administrator,cn=Users,dc=corpX,dc=un | ||
| - | bindpw password | ||
| - | scope sub | ||
| - | nss_base_passwd cn=Users,dc=corpX,dc=un?one | ||
| - | nss_base_group cn=Users,dc=corpX,dc=un?one | ||
| - | nss_map_objectClass posixAccount User | ||
| - | nss_map_attribute uid msSFU30Name | ||
| - | nss_map_attribute uniqueMember msSFU30PosixMember | ||
| - | nss_map_attribute homeDirectory msSFU30HomeDirectory | ||
| - | nss_map_objectClass posixGroup Group | ||
| - | nss_map_attribute gidNumber msSFU30GidNumber | ||
| - | nss_map_attribute uidNumber msSFU30UidNumber | ||
| - | nss_map_attribute loginShell msSFU30LoginShell | ||
| - | </code> | ||
| - | |||
| - | ===== Настройка nsswitch на использование ldap ===== | ||
| - | <code> | ||
| - | gate# cat /etc/nsswitch.conf | ||
| - | ... | ||
| - | group: files ldap | ||
| - | passwd: files ldap | ||
| - | shadow: files ldap #для linux | ||
| - | ... | ||
| - | </code> | ||
| - | |||
| - | ===== Настройка pam на автоматическое создание домашних каталогов ===== | ||
| - | |||
| - | ==== FreeBSD ==== | ||
| - | <code> | ||
| - | [gate:~] # pkg_add -r pam_mkhomedir | ||
| - | |||
| - | [gate:~] # cat /etc/pam.d/sshd | ||
| - | ... | ||
| - | # session | ||
| - | session required /usr/local/lib/pam_mkhomedir.so | ||
| - | ... | ||
| - | </code> | ||
| - | ==== Ubuntu ==== | ||
| - | <code> | ||
| - | root@gate:~# apt-get install libpam-modules | ||
| - | |||
| - | root@gate:~# cat /etc/pam.d/sshd | ||
| - | ... | ||
| - | session required pam_mkhomedir.so | ||
| - | # Standard Un*x session setup and teardown. | ||
| - | ... | ||
| - | </code> | ||
ldap_авторизация_в_microsoft_ad.1281452212.txt.gz · Last modified: 2013/05/22 13:50 (external edit)
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
