diff --git a/openldap/Шпаргалка.txt b/openldap/Шпаргалка.txt index 7a9e752..6f77eb3 100644 --- a/openldap/Шпаргалка.txt +++ b/openldap/Шпаргалка.txt @@ -34,4 +34,31 @@ ldap_version 3 tls_cacertfile /etc/ssl/certs/ca-certificates.crt # The search scope. -#scope sub \ No newline at end of file +#scope sub + + + +#/etc/nsswitch.conf +passwd: files ldap +group: files ldap +shadow: files ldap + + +#/etc/pam.d/common-auth +auth [success=1 default=ignore] pam_unix.so nullok_secure +auth requisite pam_deny.so +auth required pam_permit.so +auth optional pam_ldap.so + +#/etc/pam.d/common-account +account [success=1 new_authtok_reqd=done default=ignore] pam_unix.so +account required pam_ldap.so + +#/etc/pam.d/common-session +session required pam_unix.so +session optional pam_ldap.so +session required pam_mkhomedir.so skel=/etc/skel/ umask=077 + +commands: +sudo systemctl restart nslcd +getent passwd \ No newline at end of file