Ldap question

JALITE · 09-18-2010, 11:11 AM

I am new to ldap. I've installed openldap server in a centos but yet to test it.
My question is how to force user to login to the system using ldap instead of non-ldap login?
For example, I created some users in the ldap server, these users are exist in /etc/passwd, when ssh login to server as user, it normally authenticates through /etc/passwd file without being forced to use ldap.

Blue_Ice · 09-18-2010, 12:09 PM

You have to adjust the following files /etc/ldap.conf, /etc/openldap/ldap.conf and nsswitch.conf.
Probably it is easier to run authconfig and follow the wizard. This works well for the basics, but some things you still need to configure afterwards in the afore mentioned files.

quanta · 09-18-2010, 12:50 PM

Quote:

Originally Posted by Blue_Ice

You have to adjust the following files /etc/ldap.conf, /etc/openldap/ldap.conf and nsswitch.conf.

and the /etc/pam.d/login, /etc/pam.d/sshd.

frndrfoe · 09-18-2010, 08:52 PM

If you edit nsswitch.conf to only look at ldap then you will lose your ability to log in as local root. I would remove the local user accounts from /etc/passwd and use "files ldap" in nsswitch.conf.