Unix Technical Forum

Authenicating a non local user (ADS User) in Linux

This is a discussion on Authenicating a non local user (ADS User) in Linux within the Linux Operating System forums, part of the Unix Operating Systems category; --> Hi All I am trying the following. I am having ADS on a windows 2003 Ent SP1 machine. I ...


Go Back   Unix Technical Forum > Unix Operating Systems > Linux Operating System

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 01-18-2008, 06:39 PM
ponnovian@gmail.com
 
Posts: n/a
Default Authenicating a non local user (ADS User) in Linux

Hi All
I am trying the following.
I am having ADS on a windows 2003 Ent SP1 machine. I have a RHEL WS4.0
(64 Bit) machine on the same domain. I have installed Microsoft
services for Unix 3.5 on the ADs Machine. adn edited the /etc/ldap.conf
as follows.
host 172.12.3.4
base dc=linux,dc=com
binddn cn=Administrator,dc=linux,dc=com
bindpw
port 389
scope sub
ssl no
nss_base_passwd cn=Administrator,dc=linux,dc=com?sub
nss_base_shadow cn=Administrator,dc=linux,dc=com?sub
nss_base_group cn=Administrator,dc=linux,dc=com?sub
nss_map_objectclass posixAccount user
nss_map_objectclass shadowAccount user
nss_map_attribute uid sAMAccountName
nss_map_attribute uidNumber msSFU30UidNumber
nss_map_attribute gidNumber msSFU30GidNumber
nss_map_attribute loginShell msSFU30LoginShell
nss_map_attribute gecos name
nss_map_attribute userPassword msSFU30Password
nss_map_attribute homeDirectory msSFU30HomeDirectory
nss_map_objectclass posixGroup Group
nss_map_attribute uniqueMember msSFU30PosixMember
nss_map_attribute cn cn
linux_login_attribute sAMAccountName
linux_filter objectclass=user
linux_member_attribute msSFU30PosixMember
linux_groupdn cn=unixusergroup,dc=linux,dc=com
linux_password md5

Also edited the file /etc/nsswitch.conf with the following values
shadow: files ldap
passwd: files ldap
group: files ldap

Now i ran the utility auth config and selected the ldap authentication
and gave the ADS details.

I ahve configured the /etc/pam.d/su file with following line
auth required pam_ldap.so

i have commented the remaining lines starting with auth.

When i try aiuhtenticating i am getting a error message insyslog staing
bind failed.
There is communication betwwen the ADs and the client when i try to
authenticate.

Your help on solving this will be greatly appreciated.

Thanks
Ponnovian

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


All times are GMT. The time now is 07:49 AM.


Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0
www.UnixAdminTalk.com