Integrate RHEL with Active Directory Post: 302884068

Sponsored Content

Special Forums Windows & DOS: Issues & Discussions Integrate RHEL with Active Directory Post 302884068 by gull04 on Friday 17th of January 2014 10:14:08 AM

01-17-2014

Registered User

Hi Stuart,

It's working against the AD for all of it's stuff, possibly better if I incorporate the sssd,conf file here.

We are running a very similar setup to yours, with an 18 node cluster using GFS at the back end with automount for home directories etc.

Code:

[15:06 sc386dm@ekbvcad301 data] > cat orig.sssd.conf
[sssd]
config_file_version = 2
reconnection_retries = 3
sbus_timeout = 30
services = nss, pam
domains = XXXXXXXXXXXXX

[nss]
filter_groups = root
filter_users = root
reconnection_retries = 3

[pam]
reconnection_retries = 3
#ldap_schema = rfc2307bis
ldap_schema = rfc2307
ldap_user_search_base = cn=Users,dc=xxx,dc=xxxxx,dc=com
ldap_group_search_base = cn=Users,dc=xxx,dc=xxxxx,dc=com
ldap_default_bind_dn = cn=admintest,cn=Users,dc=xxx,dc=xxxxx,dc=com
ldap_default_authtok_type = password
ldap_default_authtok = XXXXXXXX
ldap_force_upper_case_realm = True

[domain/EKB.ATMEL.COM]
description = LDAP auth to AD2003
min_id = 100
id_provider = ldap
auth_provider = ldap
ldap_uri = ldap://kdc1.xxx.xxxxx.com
ldap_schema = rfc2307bis
ldap_search_base = cn=Users,dc=xxx,dc=xxxxx,dc=com
ldap_default_bind_dn = cn=admintest,cn=Users,dc=xxx,dc=xxxxx,dc=com
ldap_default_authtok_type = password
ldap_default_authtok = XXXXXXXX
ldap_user_object_class = user
ldap_group_object_class = group
ldap_user_home_directory = unixHomeDirectory
ldap_user_gecos = displayName
enumerate = true
chpass_provider = krb5
auth_provider = krb5
krb5_kdcip = 10.143.253.183
krb5_realm = XXX.XXXXX.COM
krb5_ccachedir = /tmp
krb5_ccname_template = FILE:%d/krb5cc_%U_XXXXXX
krb5_auth_timeout = 15

#cache_credentials = True
#ldap_id_use_start_tls = False
debug_level = 9
krb5_kpasswd = kdc1.xxx.xxxxx.com:749
#ldap_search_base = cn=Users,dc=xxx,dc=xxxxx,dc=com
#krb5_realm = XXX.XXXXX.COM
#chpass_provider = krb5
#krb5_kdcip = kdc1.xxx.xxxxx.com:88
#ldap_tls_cacertdir = /etc/openldap/cacerts
[15:10 sc386dm@ekbvcad301 data] >

Anywhere you see 'x' or 'X' you'll have to substitute your own stuff - I have to leave now - but will check back when I get home (5 Hours).

Regards

Gull04

gull04

View Public Profile for gull04

Visit gull04's homepage!

Find all posts by gull04

7 More Discussions You Might Find Interesting

1. Windows & DOS: Issues & Discussions

unix and active directory

Hi Does anybody know the steps and requirements of the installation process of Windows Active Directory using Unix/Linux Bind DNS. I will appreciate if somebody gives the answer.

2. UNIX for Dummies Questions & Answers

Active Directory and UNIX

Hello - I have a very vague question, which will probably result in vague answers because I don't have a lot of detailed information and I don't know a whole lot about active directory. Our Windows/NT admin has been rolling out Active Directory over the past several weeks and as time goes on,...

3. UNIX for Dummies Questions & Answers

setup active directory

i would like to ask about unix with active directory..actually my situation is at ny place there already have dns server in unix based,i want to implement an active directory to the network..from what i read about active directory we have to used bind dns...some say that bind could not handle in...

4. HP-UX

HP-UX authenticating to Active Directory

Hey, I've asked questions about this project here before and gotten lots of help so I figured I'd give it another try. I've recently set up my HP-UX environment to authenticate to a Windows Active Directory server (Windows Server 2003 R2). I setup an account on Active Directory which works...

5. Red Hat

ldap and active directory

Hi Friends, I need your help to get some solution of one of my problem. Ours is a mixed domain. Most of the servers are windows and very little linux servers. We are using the MS AD for authentication. My problem is, I want to authenticate linux servers against AD. I donot want to use any...

6. UNIX for Advanced & Expert Users

Active Directory with 6.1

Is there anyone who is utilizing Active Directory (2008R2) for AIX user account management? If yes or if AD is possible with AIX systems, can you please share what to be done to get there? Please advise.

7. UNIX for Beginners Questions & Answers

Active Directory OR LDAP

Hi, How can we check users added through LDAP or AD. Users added through a group of AD or LDAP group.

LEARN ABOUT DEBIAN

dtc_install_centos

dtc_install_centos(8)					      System Manager's Manual					     dtc_install_centos(8)

NAME

       dtc_install_centos - bootstrap a CentOS install to use in a chroot or VM

SYNOPSIS

       dtc_install_centos <install root> <yum environment>

DESCRIPTION

       This  shell  script is part of the dtc-xen package, generally to be used by the dtc panel to install a new a Xen VPS server. This script is
       called by dtc_reinstall_os when the user chooses to install the CentOS operating system.

       How it works: it generates a temporary yum configuration in the yum environment directory, that directs yum to act inside the install  root
       instead	of  in	the base system; then it kindly requests yum to install the basesystem, centos-release and yum packages onto it.  Yum then
       uses the configuration to download the required (usually, security-updated) packages and then perform the RPM  installation  process  under
       the install root.

       It  requires  both  RPM	and  yum.  It does work under Debian (it was developed in Ubuntu first).  It should also work on RPM-based systems
       without destroying the system-wide RPM and yum configurations.

OPTION

       <install root>

       Target directory where CentOS will be deployed.	Must exist beforehand.

       <yum environment>

       Directory where yum will store the repository manifests and configuration.  Will be automatically created.  Cached RPMs and manifests  will
       be left, as usual, in a directory var/cache/yum inside the install root.

EXAMPLE

       dtc_install_centos /root/yum /xen/13

       This will setup the operating system in /xen/13, with the CentOS configuration folder in /root/yum.

BUGS

       It's limited to CentOS 5 at the moment.

       It must be run as root.

       Under  some  circumstances,  the installation process itself may kill processes running on the host machine.  The chroot yum does should be
       sufficient to avoid this, but we haven't been able, yet, to ascertain why this fails sometimes.

SEE ALSO

       dtc_reinstall_os(8)

VERSION

       This documentation describes dtc_install_os version 0.3.1.

       See http://www.gplhost.com/software-dtc-xen.html for updates.

															     dtc_install_centos(8)