Samba e OpenLDAP: creare un controller di dominio con Debian Lenny: differenze tra le versioni

Samba e OpenLDAP: creare un controller di dominio con Debian Lenny (visualizza wikitesto)

788 byte aggiunti , 28 gen 2010

4 069

contributi

@@ Riga 1 191: / Riga 1 191: @@
 nss_base_shadow ou=Users,dc=dominio,dc=local?sub
 nss_base_group ou=Groups,dc=dominio,dc=local?one
+</pre>
+e il file '''<code>/etc/ldap.conf</code>''':
+<pre>
+base dc=dominio,dc=local
+uri ldaps://127.0.0.1
+rootbinddn krb5PrincipalName=ldapmaster/admin@DOMINIO.LOCAL,ou=KerberosPrincipals,ou=Users,dc=dominio,dc=local
+port 636
+ldap_version 3
+bind_policy soft
+bind_timelimit 2
+timelimit 2
+scope sub
+nss_reconnect_maxsleeptime 8
+nss_reconnect_sleeptime 1
+nss_initgroups_ignoreusers root
+nss_srv_domain esempio.lan
+pam_password exop
+pam_filter objectclass=posixAccount
+pam_login_attribute uid
+pam_member_attribute memberUid
+nss_base_passwd ou=Users,dc=dominio,dc=local?one
+nss_base_shadow ou=Users,dc=dominio,dc=local?one
+nss_base_passwd ou=Computers,dc=dominio,dc=local?one
+nss_base_shadow ou=Computers,dc=dominio,dc=local?one
+nss_base_group  ou=Groups,dc=dominio,dc=local?one
+ssl on
 </pre>
 <br/>