OpenLDAP - Configuring a server to authenticate users using LDAP

[blackboxitech]

You should mentioned that two terminal windows should be opened before doing the pam stuff. I did lock myself out, but thankfully I had Webmin installed and was able to edit the changes to the files in the /etc/pam.d folder.

[racscord]

Me salvaste la vida!!! Muchas gracias.

[wolfricacc]

cah-ssh (cache) like aahhhh i see

[basmagic]

IP adress is the adress of the machine were you working on?

[dbiswas123]

Very good, one, again ! Thanks a ton .

[Pepsifx357]

So how would you get a Windows client to use LDAP authentication. Thus replacing Microsoft active directory?

[lanswipe]

what happens if you have 2 users with the same username locally and in LDAP, how do login to either of them without editing common-auth

for example, take root for example, root exists in my LDAP tree(for samba) and on the local machine, how do i say login as the LDAP root, because surely it will look at /etc/passwd first and use the local root?

[bowendenning]

@lanswipe The nsswitch.conf file will determine where, and in which order, user information is queried. In the video it is configured to first query ldap, and then the local passwd config.

If the user root exists in both ldap and passwd then the root user located within the ldap will take precedence over the local root user. The trick is to ensure that if you wish to select between users then make sure the names don't clash.

[lanswipe]

@bowendenning yeah so if the names do clash one will take precedence over the other and theres no way to switch at logon?

[Y0uEnj0yMyself]

I was actually hoping to find a video explaining how the LDAP server is queried

[oliverking90001]

Someone who actually speaks good english doing some advanced Linux .... Magic!

[mihek]

Oh and you didn't post any links about pam :)

[mihek]

Hey, how do you make it look just in one organisational unit and not in the whole ldap server? So only users that are in ou=Users,dc=example,dc=com are able to login?

[unixjpn]

setting up ldap using debian or ubuntu is cake walk with its TUI MS windows look like Wizard once apt-get installs it. Setting it up completely from config files and the DIT takes lots of considerations.

[MikeRay3333]

i have a problem in understanding last words(sorry i'm italianXD). what's joe's password at the end when trying logging in with ssh? i set it too with 123.. BTW great video!! i went crazy by following other guides on the net, but this one is the best!! it's the first that works!!XD

[alinef]

Thank you! Very helpful!

I'm adding your channel in my miro feeds.

[elcajonboy]

This video leaves out a very important step!! Security! by default all information in ldap is passed over the network in clear text. Do not do this unless you also setup TLS. A strong password policy is also just as important. Of course setting it up right and managing the schema will quickly make you look for a proper directory solution so you don't waste so much time dealing with rolling your own.

[majikal9]

Where were these videos when I was doing my capstore networking course! Just kidding - stuff is brilliant - you are emacs god :D

[solidgrey2840]

Thanks for the video. You took a hard topic and made it easy.

[unixjpn]

The nice thing about debian unlike redhat is that when you install a package it has a TUI that automatically gets launced that asked for info to setup the services.

Thanks for the nice video howto!

[nanoanthkell]

Thanks !

[bowendenning]

No problem mate, thanks for watching. Hopefully it's been helpful ;-)

[targettl]

Thank you very helpful worked for me

[whodageek]

@bowendenning Thank so much