Administrace komentářů

# overovani uzivatelu a skupin vuci LDAP
sudo apt-get --yes install ldap-auth-client nscd   #toto instaluje "auth-client-config ldap-auth-config libnss-ldap libpam-ldap"
sudo auth-client-config -t nss -p lac_ldap #prida do /etc/nsswitch.conf ldap (files ldap)
sudo pam-auth-update ldap
/etc/init.d/nscd restart

# nss-updatedb >> cache skupin a uzivatelu (groups & users)
sudo apt-get install nss-updatedb libnss-db

# aktualizace udaju z LDAPu
sudo nss_updatedb ldap
  passwd... done.
  group... done.
ls -l /var/lib/misc/*.db
  -rw-r--r-- 1 root root 8192 2008-08-26 18:20 /var/lib/misc/group.db
  -rw-r--r-- 1 root root 8192 2008-08-26 18:20 /var/lib/misc/passwd.db

# automatizace aktualizace udaju z LDAPu
echo '#!/bin/sh' | sudo tee /etc/cron.daily/upd-local-nss-db && echo `which nss_updatedb` ldap | sudo tee -a /etc/cron.daily/upd-local-nss-db && sudo chmod +x /etc/cron.daily/upd-local-nss-db

# libnss-db >> umozni cteni cache uzivatelu a skupin
sudo mcedit /etc/nsswitch.conf
 passwd:         files ldap [NOTFOUND=return] db
 group:          files ldap [NOTFOUND=return] db

# cache hesel pokud neni LDAP k dispozici
sudo apt-get install libpam-ccreds nscd

echo "auth    sufficient      pam_unix.so
auth    [authinfo_unavail=ignore success=1 default=die] pam_ldap.so use_first_pass
auth    [default=done]  pam_ccreds.so action=validate use_first_pass
auth    [default=done]  pam_ccreds.so action=store use_first_pass
auth    [default=done]  pam_ccreds.so action=update use_first_pass" > /etc/pam.d/common-auth &&
echo "account sufficient      pam_unix.so nullok_secure
account sufficient      pam_ldap.so
account required        pam_permit.so" > /etc/pam.d/common-account

# kontrola nakesovanych hesel
sudo cc_dump 

# automaticke vytvoreni domovskeho adresare (kopiruje obsah /etc/skel)
echo "session required        pam_ldap.so
session required        pam_unix.so
session required        pam_mkhomedir.so skel=/etc/skel/ umask=0077" > /etc/pam.d/common-session