flatldap/README at master · gerhardqux/flatldap · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
Flatldap
========

This does not work yet, this code only sets the basic idea.


OS setup
--------
client# apt-get install libnss-ldap libpam-ldap

server# apt-get install libnet-ldap-perl libnet-ldap-server-perl perl-doc

gerhtest$ cat /etc/libnss-ldap.conf
host 127.0.0.1
base dc=qrux,dc=nl
ldap_version 3
rootbinddn cn=manager,dc=qrux,dc=nl
port 1389

gerhtest# cat /etc/libnss-ldap.secret
123root

gerhtest# chown root.root $_
gerhtest# chmod 700 $_

gerhtest# cat /etc/nsswitch.conf
# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

passwd:         files ldap
group:          files ldap
shadow:         files

hosts:          files dns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis


Starting the server
-------------------
gerhtest$ ./run


Testing
-------

gerhtest# getent passwd

gerhtest# id bestaatwel
uid=5001(bestaatwel) gid=5001 groups=5001

gerhtest# getent group