Initialize LDAP:
ldapclient manual \ -a credentialLevel=anonymous \ -a authenticationMethod=simple \ -a defaultSearchBase=dc=your,dc=site \ -a serviceSearchDescriptor=passwd:cn=users,dc=your,dc=site \ -a serviceSearchDescriptor=group:cn=groups,dc=your,dc=site \ -a defaultServerList=LDAPSERVER \ -a domainName=yoursite \ -a proxyDN=uid=root,cn=users,dc=your,dc=site \ -a proxyPassword=yoursiteAdd the following entries to /etc/pam.conf for SSH authentication:
# ssh sshd auth requisite pam_authtok_get.so.1 sshd auth required pam_dhkeys.so.1 sshd auth sufficient pam_unix_auth.so.1 sshd auth required pam_ldap.so.1 try_first_pass sshd account required pam_unix_account.so.1Don't forget to update /etc/nsswitch.conf to reference the correct databases.
Leave a comment