Differences

This shows you the differences between two versions of the page.

--- classes:la_slapd_l3 [2016/12/15 19:57] – curry_searle
+++ classes:la_slapd_l3 [2016/12/15 20:22] (current) – curry_searle
@@ Line 5: / Line 5: @@
 Logon to the client system (''ssh user@cls-kvm2'') and install required dependencies:
 <code>
-sudo apt-get -y install ldap-auth-client nscd autofs
+sudo apt-get install ldap-auth-client nscd autofs
-</code>
-Configure ldap-auth-config:
-<code>
-sudo dpkg-reconfigure ldap-auth-config
 </code>
@@ Line 22: / Line 17: @@
 LDAP account for root: cn=admin,dc=itsm,dc=unt,dc=edu
 LDAP root account password
+</code>
+Configure ldap-auth-config using the answers below:
+<code>
+sudo dpkg-reconfigure ldap-auth-config
+</code>
+<code>
+Should debconf manage LDAP configuration: Yes
+LDAP Server URI: ldap://cls-kvm1.itsm.unt.edu
+DN of search base: dc=itsm,dc=unt,dc=edu
+Make local root DB admin: Yes
+Does the LDAP DB require login: No
+LDAP account for root: cn=admin,dc=itsm,dc=unt,dc=ed
+LDAP root account password: 1234567
+Ok
+MD5
 </code>
@@ Line 46: / Line 58: @@
 </code>
-Edit ''/etc/pamd.d/common-password'' to remove the ''use_authok'' from the ''password'' entry:
+Edit ''/etc/pam.d/common-password'' to remove the ''use_authok'' from the ''password'' entry:
 <code>
 #password       [success=1 user_unknown=ignore default=die]     pam_ldap.so use_authtok try_first_pass
@@ Line 61: / Line 73: @@
 </code>
-Now that we have the client configured to read authentication data from LDAP, we can create and configure ownership of the exported home directories:
+Now that PAM is configured to retrieve user information from the LDAP directory, we can move on to the next lesson.
-<code>
-cd /nfs/cls-kvm1/
-sudo mkdir /nfs/cls-kvm1/kevin
-sudo chown -R kevin:kevin kevin
-sudo mkdir /nfs/cls-kvm1/olive
-sudo chown -R olive:olive olive
-sudo mkdir /nfs/cls-kvm1/tom
-sudo chown -R tom:tom tom
-</code>
-Test authentication using ''su - kevin'' or ''su - olive'':
-<code>
-su - kevin
-Password:
-No directory, logging in with HOME=/
-groups: cannot find name for group ID 9012
-kevin@cls-kvm2:/$
-</code>
-In the next step we will resolve the ''No directory, logging in with HOME=/'' error message by configuring autofs mounted home directories.