免备案php网站空间,查询工商营业执照,wordpress 模板 推荐,seo优化网站Unit8 ldap网络帐号1.ldap是什么ldap目录服务认证#xff0c;和windows活动目录类似#xff0c;就是记录数据的一种方式2.ldap客户端所须软件yum sssd krb5-workstation -y3.如何开启ldap用户认证authconfig-tui┌────────────────┤ Authentication Configu… Unit8 ldap网络帐号1.ldap是什么ldap目录服务认证和windows活动目录类似就是记录数据的一种方式 2.ldap客户端所须软件yum sssd krb5-workstation -y 3.如何开启ldap用户认证authconfig-tui ┌────────────────┤ Authentication Configuration ├─────────────────┐│                                                                 │ │  User Information        Authentication                         │ │  [ ] Cache Information   [ ] Use MD5 Passwords                  │ │  [*] Use LDAP            [*] Use Shadow Passwords               │ │  [ ] Use NIS             [ ] Use LDAP Authentication            │ │  [ ] Use IPAv2           [*] Use Kerberos                       │ │  [ ] Use Winbind         [ ] Use Fingerprint reader             │ │                          [ ] Use Winbind Authentication         │ │                          [*] Local authorization is sufficient  │ │                                                                 │ │            ┌────────┐                      ┌──────┐             │ │            │ Cancel │                      │ Next │             │ │            └────────┘                      └──────┘             │ │                                                                 │ │                                                                 │ └─────────────────────────────────────────────────────────────────┘                                                                                              ┌─────────────────┤ LDAP Settings ├─────────────────┐│                                                   │ │          [*] Use TLS                              │ │  Server: ldap://cla***oom.example.com/___________ │ │ Base DN: dcexample,dccom_______________________ │ │                                                   │ │         ┌──────┐                ┌──────┐          │ │         │ Back │                │ Next │          │ │         └──────┘                └──────┘          │ │                                                   │ │                                                   │ └───────────────────────────────────────────────────┘                                                          ┌─────────────────┤ Kerberos Settings ├──────────────────┐│                                                        │ │        Realm: EXAMPLE.COM_____________________________ │ │          KDC: cla***oom.example.com___________________ │ │ Admin Server: cla***oom.example.com___________________ │ │               [ ] Use DNS to resolve hosts to realms   │ │               [ ] Use DNS to locate KDCs for realms    │ │                                                        │ │          ┌──────┐                    ┌────┐            │ │          │ Back │                    │ Ok │            │ │          └──────┘                    └────┘            │ │                                                        │ │                                                        │ └────────────────────────────────────────────────────────┘                                                           当出现以下报错时 ┌────────────────┤ Warning ├─────────────────┐│                                            │ │ To connect to a LDAP server with TLS       │ │ protocol enabled you need a CA certificate │ │ which signed your servers certificate.    │ │ Copy the certificate in the PEM format to  │ │ the /etc/openldap/cacerts directory.     │ │ Then press OK.                             │ │                                            │ │                  ┌────┐                    │ │                  │ Ok │                    │ │                  └────┘                    │ │                                            │ │                                            │ └────────────────────────────────────────────┘                                                                                 时因为tls的证书缺失需要到服务器端下载所需要的证书到/etc/openldap/cacerts用到的命令wget http://172.25.254.254/pub/example-ca.crt 测试 getent passwd ldapuser1如果用户信息可以正常显示证明客户端认成功。 4.自动挂载用户家目录yum install autofs -yvim /etc/autofs.master/home/guests/etc/auto.ldap vim /etc/auto.ldapldapuser1172.25.254.254:/home/guests/ldapuser1*172.25.254.254:/home/guests/ systemctl restart autofs                                转载于:https://blog.51cto.com/12774035/1921794