Centos – LDAP 389: Auto user creation at the client machines

389-dscentosldapopenldap

I have setup an 389 directory server on Centos 6. User authentication works fine, however, I have to create individual users on each client machine after creating the user at the directory server.

The the pam_mkhomedir.so module seems to create home directories in case the user is already present in the local system.

Best Answer

Finally I got the answer and solution. It is pretty simple. Similar discussion has already been done long back.

How can I require a certain group of users to login via LDAP while letting others use either LDAP or local login?

So here is snippet of my system-auth file for anyone looking for same.

account     sufficient    pam_succeed_if.so
account     sufficient    pam_sss.so

session     optional      pam_mkhomedir.so skel=/etc/skel umask=022
Related Topic