服务器
1)我首先安装了ldap-utils libldap-2.4-2 libldap-2.4-2-dbg slapd slapd-dbg
2)在文件/etc/ldap/ldap.conf中：
- BASE dc=example,dc=com
- URI ldap://192.168.1.254/
3)
- dpkg-reconfigure slapd
我检查有关域的信息是否正确：正确.
4)
- ldapsearch -x
它符合我之前选择的内容.
structure.ldif：
- dn: ou=users,dc=example,dc=com
- objectClass: organizationalUnit
- u: users
- description: users
- dn: ou=computers,dc=com
- objectClass: organizationalUnit
- ou: computers
- description: computers
- dn: ou=sale,ou=users,dc=com
- objectClass: organizationalUnit
- ou: sale
- description: sale
- dn: ou=direction,dc=com
- objectClass: organizationalUnit
- ou: direction
- description: direction
- dn: cn=sale,ou=sale,dc=com
- objectClass: posixGroup
- gidNumber: 501
- cn: sale
- description: Sale group
- dn: cn=direction,ou=direction,dc=com
- objectClass: posixGroup
- gidNumber: 502
- cn: direction
- description: Direction group
- dn: cn=pauldupont,cn=direction,dc=newsoft,dc=ch
- cn=pauldupont,dc=com
- objectClass: inetOrgPerson
- objectClass: posixAccount
- uid: pauldupont
- userPassword: pauldupont
- cn: pauldupont
- uidnumber: 1050
- gidnumber: 501
- homeDirectory: /home/profils/pauldupont
- sn: pauldupont
adduseringroup.ldif：
- dc: cn=sale,dc=com
- changetype: modify
- add: memberuid
- memberuid: uid=pauldupont,dc=com
6)我将文件发送到目录：
- ldapadd -x -D "cn=admin,dc=com" -W -f file.ldif
6)
- ldapsearch -x
信息在那里.
客户
1)我安装了ldap-utils libldap-2.4-2 libldap-2.4-2-dbg slapd slapd-dbg libnss-ldap libpam-ldap libpam-modules libpam-cracklib nscd
2)libnss-ldap配置：服务器ip：192.168.1.254,dc = example,dc = com
3)libpam-ldap配置：不,LDAP管理员就像本地用户,不是LDAP服务器在进行查询之前要求提供信息
4)
dpkg-reconfigure libnss-ldap
信息是正确的.
5)在文件/etc/ldap/ldap.conf中
- BASE dc=example,dc=com
- URI ldap://192.168.1.254/
6)在文件/etc/nsswitch.conf中
- passwd: compat ldap
- group: compat ldap
- shadow: compat ldap
7)在文件/etc/libnss-ldap.conf中
- base dc=example,dc=com
- uri ldap://192.168.1.254/
- ldap_version 3
- rootbinddn cn=admin,dc=com
8)在文件/etc/libnss-ldap.secret中
- ldap password
9)在文件/etc/pam_ldap.conf中：
- base dc=example,dc=com
- uri ldap://192.168.1.254/
- rootbinddn cn=admin,dc=com
- port 389
- scope sub
- bind_timelimit 30
- idle_timelimit 3600
- pam_filter objectClass=posixAccount
- pam_login_attribute uid
10)在文件/etc/pam.d/common-auth&共同账户&我在底部添加的常见会话：
- auth sufficient pam_ldap.so
11)在文件/etc/pam.d/common-password中,我在底部添加了：
- password sufficient pam_ldap.so use_first_pass
12)
- getent passwd && getent group
13)客户端似乎联系服务器：
- ldapsearch -x -H "ldap://192.168.1.254" -b "dc=example,dc=com" dn
让我回到dn条目
14)
getent passwd pauldupont
什么都没有给我,当我签入/var/log/auth.log时：
- May 12 10:43:36 CLI1-DIR-DEB nscd: nss_ldap: Failed to bind to LDAP server ldap:///192.168.1.254/: Invalid credentials
- May 12 10:43:36 CLI1-DIR-DEB nscd: nss_ldap: reconnecting to LDAP server...
- May 12 10:43:36 CLI1-DIR-DEB nscd: nss_ldap: Failed to bind to LDAP server ldap:///192.168.1.254/: Invalid credentials
- May 12 10:43:36 CLI1-DIR-DEB nscd: nss_ldap: reconnecting to LDAP server...
- May 12 10:43:37 CLI1-DIR-DEB nscd: nss_ldap: Failed to bind to LDAP server ldap:///192.168.1.254/: Invalid credentials
- May 12 10:43:37 CLI1-DIR-DEB nscd: nss_ldap: could not search LDAP server - Server is unavailable
凭证似乎是错误的.我检查了上面的所有配置文件,我找不到任何错误.
有人知道问题出在哪里吗？
谢谢您的帮助.
我正在使用Debian Jessie 8.0 AMD64作为客户端和服务器
uname -a：Linux SRV1-DEB 3.16.0-4-amd64#1 SMP Debian 3.16.7-ckt9-3~deb8u1(2015-04-24)x86_64 GNU / Linux
OpenLDAP 2.4
编辑：一旦我在/etc/ldap.secret文件中添加了密码,我做了一个getent passwd,我得到了ldap用户,但我仍然无法连接.
一旦我尝试连接,我在日志文件中有这个：
- May 18 09:09:53 CLI1-DIR-DEB login[904]: pam_mail(login:session): user unknown
- May 18 09:09:53 CLI1-DIR-DEB login[904]: pam_loginuid(login:session): error_ log for user-name'pauldupont' does not exist
- May 18 09:09:53 CLI1-DIR-DEB login[904]: pam_unix(login:session): session opened for user pauldupont by LOGIN(uid=0)
- May 18 09:09:53 CLI1-DIR-DEB login[904]: pam_systemd(login:session): Failed to get user data
- May 18 09:09:53 CLI1-DIR-DEB login[904]: pam_systemd(login:session): Failed to get user data
- May 18 09:09:53 CLI1-DIR-DEB login[904]: User not known to the underlying authentication module
