2 - Raspberry PI Community Projects

Question
Answer
LDAP server Uniform Resource Identifier ldap://ldap.falcot.com
Distinguished name of the search base dc=falcot,dc=com
LDAP version to use 3
Does the LDAP database require login? no
LDAP account for root
cn=admin,dc=falcot,dc=com
LDAP root account password
the administrative password
Table 11.2
Configuring the libnss-ldap package
passwd: ldap compat
group: ldap compat
shadow: ldap compat
hosts: files dns ldap
networks: ldap files
protocols: ldap db files
services: ldap db files
ethers: ldap db files
rpc: ldap db files
netgroup: files
Example 11.31
The /etc/nsswitch.conf file
The ldap module is usually inserted before others, and it will therefore be queried first. The
notable exception is the hosts service since contacting the LDAP server requires consulting
DNS first (to resolve ldap.falcot.com). Without this exception, a hostname query would try to
ask the LDAP server; this would trigger a name resolution for the LDAP server, and so on in an
infinite loop. As for the netgroup services, it is not yet handled by the LDAP module.
If the LDAP server should be considered authoritative (and the local files used by the files
module disregarded), services can be configured with the following syntax:
service:ldap [NOTFOUND=return] files.
If the requested entry does not exist in the LDAP database, the query will return a “not existing”
reply even if the resource does exist in one of the local files; these local files will only be used
when the LDAP service is down.
Chapter 11 — Network Services: Postfix, Apache, NFS, Samba, Squid, LDAP
291