Serveurs

Permet de montage automatique de homedir depuis olympe, sous ubuntu 18

sudo apt install ldap-utils autofs-ldap ldap-auth-client nscd libnss-ldapd libpam-ldapd libpam-mount

lors de la configuration de nslcd répondre :

URI du serveur LDAP : ldap://ldap.i2m.univ-amu.fr/

Base de recherche du serveur LDAP : dc=i2m,dc=univ-amu,dc=fr

Services de nom à configurer : passwd, group, shadow

lors de la configuration de ldap-auth-config répondre :

LDAP server Uniform Resource Identifier : ldap://ldap.i2m.univ-amu.fr/

Distinguished name of the search base: dc=i2m,dc=univ-amu,dc=fr

LDAP version to use: 3

Make local root Database admin: Oui

Does the LDAP database require login? Non

LDAP account for root: cn=admin,dc=i2m,dc=univ-amu,dc=fr

LDAP root account password: remplir à partir du fichier de mot de passe

Puis configurer le LDAP pour NSS en lancant la commande suivante :

sudo auth-client-config -t nss -p lac_ldap

Configurer le LDAP pour l'authentification dans PAM.

sudo pam-auth-update

lors de la configuration de PAM Profils PAM à activer : Unix authentication, Mount volumes for user, LDAP Authentication, Register user sessions in the systemd control group hierarchy, Inheritable Capabilities Management

Mettre à jour le fichier /etc/ldap/ldap.conf avec le contenu suivant:

#
# LDAP Defaults
#

# See ldap.conf(5) for details
# This file should be world readable but not world writable.

BASE dc=i2m,dc=univ-amu,dc=fr
URI ldap://ldap.i2m.univ-amu.fr
ldap_version 3
scope sub
bind_policy soft
pam_filter objectclass=posixAccount
pam_login_attribute uid
pam_password md5
nss_base_passwd ou=accounts,dc=i2m,dc=univ-amu,dc=fr
nss_base_shadow ou=accounts,dc=i2m,dc=univ-amu,dc=fr
nss_base_group  ou=Groups,dc=i2m,dc=univ-amu,dc=fr

ssl start_tls
tls_reqcert allow
tls_checkpeer yes


# TLS certificates (needed for GnuTLS)
TLS_CACERT    /etc/ssl/certs/ca-certificates.crt
tls_cacertdir /etc/ssl/certs

nss_initgroups_ignoreusers avahi,backup,bin,bind,colord,daemon,fetchmail,games,gnats,irc,klog,libuuid,list,lp,mail,man,messagebus,news,nslcd,proxy,root,smmsp,smmta,sshd,statd,sync,sys,syslog,usbmux,uucp,www-data,x2gouser

Mettre à jour le fichier /etc/default/autofs avec le contenu suivant:

# Init syatem options
#

master_map_name="/etc/auto.master"

timeout=300

browse_mode="no"

logging="verbose"

LDAP_URI="ldap://ldap.i2m.univ-amu.fr"

MAP_OBJECT_CLASS="automountMap"
ENTRY_OBJECT_CLASS="automount"
MAP_ATTRIBUTE="ou"
ENTRY_ATTRIBUTE="cn"
VALUE_ATTRIBUTE="automountInformation"

USE_MISC_DEVICE="yes"
#
# Use OPTIONS to add automount(8) command line options that
# will be used when the daemon is started.
#
#OPTIONS=""
#

Mettre à jour le fichier /etc/auto.master avec le contenu suivant:

#
# Sample auto.master file
# This is a 'master' automounter map and it has the following format:
# mount-point [map-type[,format]:]map [options]
# For details of the format look at auto.master(5).
#
#/misc  /etc/auto.misc
#
# NOTE: mounts done from a hosts map will be mounted with the
#       "nosuid" and "nodev" options unless the "suid" and "dev"
#       options are explicitly given.
#
/net    -hosts
#
# Include /etc/auto.master.d/*.autofs
# The included files must conform to the format of this file.
#
#+dir:/etc/auto.master.d
#
# Include central master map if it can be found using
# nsswitch sources.
#
# Note that if there are entries for /net or /misc (as
# above) in the included master map any keys that are the
# same will not be seen as the first read key seen takes
# precedence.
#
#+auto.master
/home   ldap://ldap.i2m.univ-amu.fr/ou=auto.home,dc=i2m,dc=univ-amu,dc=fr