1373
Comment: manbo installation details
|
1568
|
Deletions are marked like this. | Additions are marked like this. |
Line 11: | Line 11: |
* SSL - our own CA or pay for a cert? | |
Line 13: | Line 14: |
* referral to UWA contact directory - what DN? | |
Line 35: | Line 37: |
morwong will only accept {crypt} passwords. Maybe make ignore this and just make morwong ssh-key only? |
This page is for working out the migration of UCC authentication to LDAP.
Current status: Sun LDAP server on manbo set up, DN is dc=ucc,dc=gu,dc=uwa,dc=edu,dc=au. Server root is /var/mps/serverroot, admin passwords available upon application to [TRS]. /usr/sbin/directoryserver startconsole start the managery console thing.
To Do
- initialize OU entries
- load user data from nis and samba
- New user creation script, run on manbo?, can use either:
[http://cpu.sourceforge.net/ cpu] and smbpasswd
- smbldap-tools.
- SSL - our own CA or pay for a cert?
- Replication?
Bonus crack - user address book, see (minimally functional) demo at http://mussel.ucc.asn.au/contagged-0.5
- referral to UWA contact directory - what DN?
User objectClasses
- Structural
- inetOrgPerson
- Auxiliary
- sambaSamAccount
- shadowAccount
Attribute Abuse
Stick dovecot mail_location in preferredDeliveryMethod
Useful URLs
http://lists.samba.org/archive/samba/2005-March/101579.html BR http://www.unav.es/cti/ldap-smb/smb-ldap-3-howto.html BR http://samba.org/samba/docs/man/Samba-Guide/happy.html BR http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html
Client configuration
- libnss-ldap
- nss_base_passwd ou=People,dc=ucc,dc=gu,dc=uwa,dc=edu,dc=au
- and for hosts with samba: nss_base_passwd ou=Computers,dc=ucc,dc=gu,dc=uwa,dc=edu,dc=au
- libpam-ldap
morwong will only accept {crypt} passwords. Maybe make ignore this and just make morwong ssh-key only?