User Tools

Site Tools


ldap_openldap

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Last revision Both sides next revision
ldap_openldap [2014/11/24 01:14]
0.0.0.0 created
ldap_openldap [2014/11/24 02:19]
ben
Line 89: Line 89:
  
 Add the following to configuration to make nss revert to the cached credentials if there's no connection to the directory service. Add the following to configuration to make nss revert to the cached credentials if there's no connection to the directory service.
-{{File|/etc/nsswitch.conf|<syntax lang="conf">+{{File|/etc/nsswitch.conf|<code conf>
 passwd:      compat ldap [[NOTFOUND=return]] db passwd:      compat ldap [[NOTFOUND=return]] db
 shadow:      compat ldap [[NOTFOUND=return]] db shadow:      compat ldap [[NOTFOUND=return]] db
-</syntax>}}+</code>}}
  
 Configure pam to update the cache on successful logins, and accept cached credentials when no server is available. Configure pam to update the cache on successful logins, and accept cached credentials when no server is available.
-{{File|/etc/pam.d/system-auth|<syntax lang="pamconf">+{{File|/etc/pam.d/system-auth|<code pamconf>
 auth        required    pam_env.so auth        required    pam_env.so
 auth        [[success=ignore|default=1]] pam_localuser.so auth        [[success=ignore|default=1]] pam_localuser.so
Line 112: Line 112:
 account     [[authinfo_unavail=ignore|default=done]] pam_ldap.so account     [[authinfo_unavail=ignore|default=done]] pam_ldap.so
 account     sufficient  pam_permit.so account     sufficient  pam_permit.so
-</syntax>}}+</code>}}
  
 Log in once, and your credentials should be cached. You can check with the following command Log in once, and your credentials should be cached. You can check with the following command
ldap_openldap.txt · Last modified: 2014/11/24 02:20 by ben