Configuring Ubuntu machine as LDAP client

From Notes_Wiki

Home > Ubuntu > Configuring Ubuntu machine as LDAP client

To configure Ubuntu machine as LDAP client use:

  1. Install required package using:
    sudo apt-get install ldap-utils libpam-ldap libnss-ldap nslcd
  2. Edit '/etc/nsswitch.conf' and append ldap to shadow, passwd and group such as shown below:
    passwd: compat ldap
    group : compat ldap
    shadow: compat ldap
  3. To ensure that users home folder automatically get created at login edit '/etc/pam.d/login' and add below line along with other session required lines:
    session required pam_mkhomedir.so skel=/etc/skel umask=0022
    Also add the same session required line to '/etc/pam.d/lightdm' file.
  4. Enable nslcd service to run automatically on start-up using:
    sudo update-rc.d nslcd enable
  5. Restart nscd service using:
    /etc/init.d/nscd restart
  6. Verify connection to LDAP server is working using:
    ldapsearch -x -h <LDAP-server> -z 5
  7. Verify that user information is being recognized properly using:
    getent passwd
    getent group
    getent shadow
  8. Try to login as LDAP user using 'ssh <username>@localhost' assuming package 'openssh-server' is installed and ssh server is running. Note that system may ask you to reset password during first login.


Steps learned from https://askubuntu.com/questions/127389/how-to-configure-ubuntu-as-an-ldap-client



Home > Ubuntu > Configuring Ubuntu machine as LDAP client