admin/ldapconfig

ldapconfig · 1.2 KiB · Text Raw

If it's plain OpenLDAP
The libpam-ldapd route is the least painful because the installer prompts you interactively and auto-configures nsswitch.conf + PAM:

sudo apt install libnss-ldapd libpam-ldapd

When it prompts, just fill in:

LDAP server URI: ldap://your-server:389
Search base: dc=example,dc=com
Check passwd, group, shadow 
Then set the bind DN/password:

sudo nano /etc/nslcd.conf

binddn "cn=readonly,dc=example,dc=com"
bindpw your-password

sudo systemctl restart nslcd
sudo reboot

# /etc/nslcd.conf
# nslcd configuration file. See nslcd.conf(5)
# for details.

# The user and group nslcd should run as.
uid nslcd
gid nslcd

# The location at which the LDAP server(s) should be reachable.
uri ldap://10.3.12.13:3189

# The search base that will be used for all queries.
base dc=rhodiumlab,dc=org

# The LDAP protocol version to use.
#ldap_version 3

# The DN to bind with for normal lookups.
binddn cn=admin,dc=rhodiumlab,dc=org
bindpw "password"

# The DN used for password modifications by root.
#rootpwmoddn cn=admin,dc=example,dc=com

# SSL options
#ssl off
#tls_reqcert never
tls_cacertfile /etc/ssl/certs/ca-certificates.crt

# The search scope.
#scope sub

1	If it's plain OpenLDAP
2	The libpam-ldapd route is the least painful because the installer prompts you interactively and auto-configures nsswitch.conf + PAM:
3
4	sudo apt install libnss-ldapd libpam-ldapd
5
6	When it prompts, just fill in:
7
8	LDAP server URI: ldap://your-server:389
9	Search base: dc=example,dc=com
10	Check passwd, group, shadow
11	Then set the bind DN/password:
12
13	sudo nano /etc/nslcd.conf
14
15	binddn "cn=readonly,dc=example,dc=com"
16	bindpw your-password
17
18	sudo systemctl restart nslcd
19	sudo reboot
20
21
22	# /etc/nslcd.conf
23	# nslcd configuration file. See nslcd.conf(5)
24	# for details.
25
26	# The user and group nslcd should run as.
27	uid nslcd
28	gid nslcd
29
30	# The location at which the LDAP server(s) should be reachable.
31	uri ldap://10.3.12.13:3189
32
33	# The search base that will be used for all queries.
34	base dc=rhodiumlab,dc=org
35
36	# The LDAP protocol version to use.
37	#ldap_version 3
38
39	# The DN to bind with for normal lookups.
40	binddn cn=admin,dc=rhodiumlab,dc=org
41	bindpw "password"
42
43	# The DN used for password modifications by root.
44	#rootpwmoddn cn=admin,dc=example,dc=com
45
46	# SSL options
47	#ssl off
48	#tls_reqcert never
49	tls_cacertfile /etc/ssl/certs/ca-certificates.crt
50
51	# The search scope.
52	#scope sub
53
54
55