Tag: LDAP
Reverse Group Membership Maintenance
The memberof overlay updates an attribute (by default memberOf) whenever changes occur to the membership attribute (by default member) of entries of the objectclass (by default groupOfNames) configured to trigger updates. Add memberof module in cn=config dn: cn=module{0},cn=config changetype: modify add: olcModuleLoad olcModuleLoad: memberof.la Turn on memberof in the db dn: olcOverlay=memberof,olcDatabase={1}bdb,cn=config changetype: add objectClass: olcMemberOf objectClass: olcOverlayConfig objectClass: olcConfig objectClass: top olcOverlay: memberof olcMemberOfDangling: ignore olcMemberOfRefInt: TRUE olcMemberOfGroupOC: groupOfNames olcMemberOfMemberAD: member olcMemberOfMemberOfAD: memberOf It does not automatically update the existing data in the database, you need to re-load the DB to take effective Testing the function dn: uid=test1,ou=People,dc=q-station,dc=net changetype:
Password sychronize between Samba & Linux
As Samba & LDAP are using difference password storing scheme, their password value cannot be share even store on the LDAP. There are several ways to synchronize them, as following only point out one of the possible ways.
Samba as a PDC for pre 2k domain
In conclude, our setup should meet the following requirement: ADS domain controller is not supported Domain user DB is stored in the LDAP User entries are shared with UNIX Password of the user for windows & Linux are synchronized Domain group is supported
Samba & LDAP
Our aim is setting up a SAMBA server under Linux and making it as a PDC for windows machine.
Openldap administration
Outline common openldap administration tasks, including reindexing, changing schema, etc., to make everyone have a quick reference.
Configuring OpenLDAP as a replacement for NIS
It should be an easy task in modern linux environment to use openldap as a central user database for authentication. I try to list out the steps about the implementation. The reference system is base on Slackware 13.37. Some packages may already included in your Linux distribution but not for mine. So, you may skip the installation process and jump to the configuration process.
openldap building and configuration
Try to config an openldap (2.4.29) as nss backend & pam backend for Linux, NIS replacement, as well as SAMBA PDC.