Red Hat LINUX 7.2 - OFFICIAL LINUX CUSTOMIZATION GUIDE Guida di Installazione Scaricare il pdf (Pagina 256)

256 Chapter 19. Lightweight Directory Access Protocol (LDAP)

19.10.2.4. PAM and LDAP

To have standard PAM-enabled applications use LDAP for authentication, run authconfig and select

Use LDAP. (PAM is beyond the scope of this LDAP overview, so if you need help, consult Chapter 8

and the PAM man pages.)

19.10.3. Migrate Your Old Authentication Information to LDAP Format

The /usr/share/openldap/migration directory contains a set of shell and Perl scripts for mi-

grating your old authentication information into LDAP format. (You must have Perl installed on your

system to use these scripts.)

First, you will need to modify the migrate_common.ph ﬁle so that it reﬂects your domain. The

default DNS domain should be changed from:

$DEFAULT_MAIL_DOMAIN = "padl.com";

to something like:

$DEFAULT_MAIL_DOMAIN = "your_company.com";

The default base should also be changed, from:

$DEFAULT_BASE = "dc=padl,dc=com";

to something like:

$DEFAULT_BASE = "dc=your_company,dc=com";

Next, decide which script to use based on Table 19-1.

Existing name service Is LDAP

running?

Script to Use

/etc ﬂat ﬁles yes migrate_all_online.sh

/etc ﬂat ﬁles no migrate_all_offline.sh

NetInfo yes migrate_all_netinfo_online.sh

NetInfo no migrate_all_netinfo_offline.sh

NIS (YP) yes migrate_all_nis_online.sh

NIS (YP) no migrate_all_nis_offline.sh

Table 19-1. LDAP Migration Scripts

Run the appropriate script based on your existing name service.

The README and the migration-tools.txt ﬁles in /usr/share/openldap/migration provide

more details on how to migrate the information.

19.11. Additional Resources

More information concerning LDAP is available. Please review these sources, especially the OpenL-

1 2 ... 251 252 253 254 255 256 257 258 259 260 261 ... 281 282

Nessun commento

Red Hat LINUX 7.2 - OFFICIAL LINUX CUSTOMIZATION GUIDE Guida di Installazione Pagina 256