Linux user authentication with Microsoft LDAP

ldaplinux

I'm trying to do following things:

Login to CentOS over ssh: authentication needs to happen with Microsoft Ldap
On successful login create a home directory for user in /home if directory exists take him to his home directory
Put quota on /home/user directory of 5 GB

Can someone please show me a link for Centos/redhat to authorize users with Microsoft Ldap?

I have already tried: setup command from root -> "Authentication configuration" -> "[] User Information -> Use Ldap" -> Authentication -> [] Use Ldap Authentication" -> []/[*] Use TLS -> Server: ldap://corporate.company.com -> Base DN: dc=corporate,dc=company,dc=com" This does not authentication users with Microsoft LDAP

Best Answer

The "authenticate linux user against AD" part was extensively covered here.
For part 2 of your question you will probably need to put a little script into your /etc/bash.bashrc file (if your users use bash, otherwise you'll need to find out which file is run for that user's particular shell). Same goes for part 3 of your question.

Related Solutions

Linux – authenticate to ldap in centos

Before beginning, make sure you tail both /var/log/secure AND /var/log/messages; secure will give you errors from pam, but messages will give you errors from ssh (i.e., errors from querying LDAP):

tail -f -n0 /var/log/{messages,secure}

So, we have the same setup at work (Using AD server 2003). Since it sounds like you already have pam hitting LDAP (because its failing when you try to login), lets check some values in /etc/ldap.conf.

First off, set the bind_policy from hard to soft; hard will try connecting repeatedly, exponentially increasing the sleep time between attempts (these are the errors you saw in /var/log/secure). Setting it to soft will get rid of your delays when using a local account.

bind_policy soft

Next, verify that you're using the correct settings for connecting (ssl, tls, etc.); you can use ldapsearch to test with a bit more verbosity as well. Unfortunately, without more debugging output (what server is setup, what error messages are being returned from the LDAP query, config files), I'm afraid nobody will be able to help much.

Hope this helps you get on the right track!

Andrew

Linux – Configure DB2 LDAP authentication

For the next user that needs to do this, the correct answer is, if you are using sssd for ldap, then

inside the /etc/pam.d/db2 file created as part of the IBM directions, replace "pam_ldap.so" with "pam_sss.so" and it will work.

Best Answer

Related Solutions

Linux – authenticate to ldap in centos

Linux – Configure DB2 LDAP authentication

Related Topic