2 - Raspberry PI Community Projects

Question
Answer
X.500 naming context dc=falcot,dc=com
LDAP server hostname
localhost
Manager DN
cn=admin,dc=falcot,dc=com
Bind credentials
the administrative password
Create DUAConfigProfile
no
Table 11.1
Answers to questions asked by the migrate_all_online.sh script
Should we want to integrate this data into the directory, the /etc/ldap/schema/misc.schema
file should be added to the standard schema.
TOOL
Browsing an LDAP directory
The luma command (in the package of the same name) is a graphical tool
allowing to browse and edit an LDAP database. It's an interesting tool that
provides an administrator with a good overview of the hierarchical structure
of the LDAP data.
Also note the use of the -c option to the ldapadd command; this option requests that processing
doesn't stop in case of error. Using this option is required because converting the
/etc/services often generates a few errors that can safely be ignored.
11.7.3. Managing Accounts with LDAP
Now the LDAP database contains some useful information, the time has come to make use of
this data. This section focuses on how to configure a Linux system so that the various system
directories use the LDAP database.
11.7.3.1. Configuring NSS
The NSS system (Name Service Switch, see sidebar “NSS and system databases” (page 156)) is
a modular system designed to define or fetch information for system directories. Using LDAP
as a source of data for NSS requires installing the libnss-ldap package. Its installation asks a few
questions; the answers are summarized in Table 11.2 .
The /etc/nsswitch.conf file then needs to be modified, so as to configure NSS to use the
freshly-installed ldap module.
# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.
290 The Debian Administrator's Handbook