资讯详情

sudo dnf install -y openldap-clients  nss-pam-ldapd authconfig

 

配置 nslcd​​

 

sudo vim /etc/nslcd.conf

 

 

 

uri ldap://your_ldap_server base dc=example,dc=com binddn cn=admin,dc=example,dc=com bindpw your_admin_password ssl no tls_cacertdir /etc/openldap/cacerts

 

 

​​配置 PAM​​

 

sudo vim /etc/pam.d/system-auth

 

 

添加：

 

auth sufficient pam_ldap.so

account sufficient pam_ldap.so

password sufficient pam_ldap.so

session optional pam_mkhomedir.so umask=0022

 

 

​​启动服务​​

 

sudo systemctl start nslcd

sudo systemctl enable nslcd