Samba e OpenLDAP: creare un controller di dominio con Debian Lenny: differenze tra le versioni

Samba e OpenLDAP: creare un controller di dominio con Debian Lenny (visualizza wikitesto)

130 byte aggiunti , 28 gen 2010

4 069

contributi

@@ Riga 1 159: / Riga 1 159: @@
 <pre>
 # /etc/nsswitch.conf
-##
-Example configuration of GNU Name Service Switch functionality.
+passwd:    files ldap [notfound=continue]
-# If you have the `glibc-doc-reference' and `info' packages installed, try:
+shadow:    files ldap [notfound=continue]
-# `info libc "Name Service Switch"' for information about this file.
+group:     files ldap [notfound=continue]
-passwd: files ldap
-group: files ldap
+hosts:          files dns wins
-shadow: files ldap
+networks:       files
-hosts: files dns ldap
-hosts: files dns
+protocols:      db files
-networks: files
+services:       db files
-protocols: db files
+ethers:         db files
-services: db files
+rpc:            db files
-ethers: db files
-rpc: db files
+netgroup:       nis
-netgroup: nis
 </pre>
 Modificate inotre il file '''/etc/libnss-ldap.conf''', decommentando e modificando le righe seguenti e lasciando decommentate quelle di default:
@@ Riga 1 222: / Riga 1 221: @@
 ssl on
+</pre>
+e memorizziamo poi la password dell'amministratore ldap in /etc/ldap.secret e rendiamolo leggibile solo a root:
+<pre>
+# echo password_root_ldap > /etc/ldap.secret
+# chown root.root /etc/ldap.secret
+# chmod 600 /etc/ldap.secret
 </pre>
 <br/>