Download LDAP System Administration

[ Team LiB ]
•
Table of Contents
•
Index
•
Reviews
•
Reader Reviews
•
Errata
LDAP System Administration
Figure 9-5. Accessing the Unix Settings for a user account from the MMC snap-in
By Gerald Carter
Publisher
: O'Reilly
Pub Date
: March 2003
ISBN
: 1-56592-491-6
Pages
: 308
If you want to be a master of your domain, LDAP System Administration will help you get up and running quickly
regardless of which LDAP version you use. After reading this book, even with no previous LDAP experience, you'll
be able to integrate a directory server into essential network services such as mail, DNS, HTTP, and SMB/CIFS.
[ Team LiB ]
Back on the Unix side, the NSS library can handle the AD/SFU schema only if it is compiled with the —enableschema-mapping option. The —enable-rfc2307bis option is frequently used in combination with schema mapping to
define individual suffixes for the various NSS databases such as passwd and netgroup. The installation steps now
become:
$ ./configure --enable-schema-mapping --enable-rfc2307bis
$ make
$ /bin/su -c "make install"
The/etc/nsswitch.conf file should include the settings used in the earlier discussion of nss_ldap (see Chapter 6):
## Portion of /etc/nsswitch.conf needed to support LDAP lookups in AD
passwd: files ldap
shadow: files ldap
group:
files ldap
Since pam_ldap and nss_ldap share a common configuration file, setting up the latter doesn't require much effort.
The nss_ldap library must be instructed to map necessary attribute and object class names on the AD server to a