Autentisering via LDAP och Kerberos i CentOS 7 - Revision history

Peter at 11:59, 12 August 2023

2023-08-12T11:59:57Z

← Older revision		Revision as of 13:59, 12 August 2023
Line 98:		Line 98:
	\|<nowiki>ldapwhoami -D uid=anna,ou=people,dc=example,dc=com -W</nowiki>}}		\|<nowiki>ldapwhoami -D uid=anna,ou=people,dc=example,dc=com -W</nowiki>}}

	[[Category:~~Guide~~]]		[[Category:GammalGuide]]

2016-03-01T05:54:41Z

SSSD

2016-01-14T16:56:15Z

← Older revision	Revision as of 18:56, 14 January 2016
(No difference)

2016-01-06T17:12:30Z

2015-12-21T05:46:39Z

LDAP

← Older revision		Revision as of 07:46, 21 December 2015
Line 85:		Line 85:

	== LDAP ==		== LDAP ==

			Installera:
			{{RootCmd\|yum install openldap-client}}

	{{RootCmd\|<nowiki>authconfig --ldapserver=ns.example.com --ldapbasedn="dc=example,dc=com" --enableldapstarttls --update</nowiki>}}		{{RootCmd\|<nowiki>authconfig --ldapserver=ns.example.com --ldapbasedn="dc=example,dc=com" --enableldapstarttls --update</nowiki>}}

2015-12-19T18:28:57Z

SSSD

← Older revision		Revision as of 20:28, 19 December 2015
Line 23:		Line 23:

	=== SSSD ===		=== SSSD ===
	~~Istället för nslcd använder vi oss av den nyare sssd.~~ Editera filen /etc/sssd/sssd.conf:
			Editera filen /etc/sssd/sssd.conf:
	{{bc\|1=		{{bc\|1=
	[sssd]		[sssd]

2015-12-19T15:02:06Z

← Older revision		Revision as of 17:02, 19 December 2015
Line 1:		Line 1:
	~~{{Note\|Denna guide är fel. Man använder nämligen inte SSSD för Kerberos autentiseringen utan använder Kerberos direkt. Uppdatering kommer.}}~~

	__NOTOC__		__NOTOC__
	Denna guide visar hur man sätter upp autentisering via LDAP/Kerberos i CentOS 7. I guiden heter Kerberos realm EXAMPLE.COM och servern med Kerberos och LDAP heter ns.example.com. Klienten vi sätter upp heter client.example.com.		Denna guide visar hur man sätter upp autentisering via LDAP/Kerberos i CentOS 7. Vi kommer använda SSSD och i guiden heter Kerberos realm EXAMPLE.COM och servern med Kerberos och LDAP heter ns.example.com. Klienten vi sätter upp heter client.example.com.
	__TOC__		__TOC__

2015-12-19T14:58:10Z

SSSD

← Older revision		Revision as of 16:58, 19 December 2015
Line 78:		Line 78:

	Enable:a användarinformation via SSSD:		Enable:a användarinformation via SSSD:
	{{RootCmd\|authconfig --enablesssd --update}}		{{RootCmd\|authconfig --enablesssd --enablesssdauth --update}}

	Kontrollera med:		Kontrollera med:

2015-12-19T14:57:43Z

SSSD

← Older revision		Revision as of 16:57, 19 December 2015
Line 29:		Line 29:
	[sssd]		[sssd]
	config_file_version = 2		config_file_version = 2
	services = nss		services = nss, pam
	domains = LOCAL, ~~example~~.~~com~~		domains = LOCAL, EXAMPLE.COM

	[nss]		[nss]
Line 38:		Line 38:
	entry_cache_timeout = 300		entry_cache_timeout = 300
	entry_cache_nowait_percentage = 75		entry_cache_nowait_percentage = 75

			[pam]
			reconnection_retries = 3

	[domain/LOCAL]		[domain/LOCAL]
Line 44:		Line 47:
	access_provider = permit		access_provider = permit

	[domain/~~example~~.~~com~~]		[domain/EXAMPLE.COM]
	enumerate = true		enumerate = true
	~~auth_provider~~ = ~~krb5~~		min_id = 5000
	~~krb5_server = ns.example.com~~
	~~krb5_realm = EXAMPLE.COM~~
	cache_credentials = true		cache_credentials = true

			id_provider = ldap
			auth_provider = krb5
			chpass_provider = krb5
	access_provider = simple		access_provider = simple
	~~chpass_provider~~ = ~~krb5~~		sudo_provider = none

	~~id_provider = ldap~~
	ldap_uri = ldap://ns.example.com		ldap_uri = ldap://ns.example.com
	ldap_search_base = dc=example,dc=com		ldap_search_base = dc=example,dc=com
Line 60:		Line 63:
	ldap_tls_cacert = /etc/openldap/cacerts/example.com-ca.crt		ldap_tls_cacert = /etc/openldap/cacerts/example.com-ca.crt

	~~sudo_provider~~ = ~~none~~		krb5_realm = EXAMPLE.COM
			krb5_server = ns.example.com
			krb5_kpasswd = ns.example.com
	}}		}}

2015-12-19T14:52:58Z

Kerberos

← Older revision		Revision as of 16:52, 19 December 2015
Line 7:		Line 7:
	=== Kerberos ===		=== Kerberos ===
	Installera följande:		Installera följande:
	{{RootCmd\|yum install krb5-workstation ~~pam_krb5~~ sssd}}		{{RootCmd\|yum install krb5-workstation sssd}}

	Spara undan befintlig settings:		Spara undan befintlig settings: