Skip to Content
0 Votes

Changes for page KerberosAndLDAP

Last modified by Sirius Rayner-Karlsson on 2024/05/09 10:54
From version 4.1
edited by Sirius Rayner-Karlsson
on 2024/05/01 05:07
Change comment: There is no comment for this version
To version 10.1
edited by Sirius Rayner-Karlsson
on 2024/05/01 17:04
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -2,32 +2,26 @@
2 2  
3 3  The guide I followed was [[https:~~/~~/wiki.debian.org/LDAP/OpenLDAPSetup#Kerberos>>https://wiki.debian.org/LDAP/OpenLDAPSetup#Kerberos]] which while it worked required some minor tweaks. I obtained edit privileges for the Debian Wiki and updated the guide with the fixes that I found. I however have a Synology NAS and that can run an LDAP Server. So this guide differs a little from the upstream Debian Guide.
4 4  
5 +{{{
5 5  First, install the packages containing the LDAP-enabled Kerberos servers ([[krb5-kdc-ldap>>url:https://packages.debian.org/krb5-kdc-ldap]] and [[krb5-admin-server>>url:https://packages.debian.org/krb5-admin-server]]) and the [[schema2ldif>>url:https://packages.debian.org/schema2ldif]] tool:
6 6  
7 -~{~{~{
8 -
9 -$ sudo apt install krb5-kdc-ldap krb5-admin-server schema2ldif
10 -
8 +##$ sudo apt install krb5-kdc-ldap krb5-admin-server schema2ldif##
11 11  }}}
12 12  
13 -
11 +{{{
14 14  Then load the ##kerberos## schema:
15 15  
16 -~{~{~{
14 +##$ zcat /usr/share/doc/krb5-kdc-ldap/kerberos.openldap.ldif.gz | ldapadd -H ldap:~/~/nas.fqdn/ -D uid=root,cn=users,dc=example,dc=com##
15 +##Password:##
17 17  
18 -$ zcat /usr/share/doc/krb5-kdc-ldap/kerberos.openldap.ldif.gz | ldapadd -H ldap:~/~/nas.fqdn/ -D uid=root,cn=users,dc=example,dc=com
19 -
20 -adding new entry "cn=kerberos,cn=schema,cn=config"
21 -
17 +##adding new entry "cn=kerberos,cn=schema,cn=config"##
22 22  }}}
23 23  
24 24  
25 25  And add an index on the ##krbPrincipalName## (improves performance and also suppresses some log messages if ##slapd## is configured to log more than default) for the database(s) where you intend to store Kerberos data:
26 26  
27 -~{~{~{
23 +{{{# ldapmodify -H ldap:~/~/nas.fqhn <<EOF
28 28  
29 -# ldapmodify -H ldap:~/~/nas.fqhn <<EOF
30 -
31 31  dn: olcDatabase={1}bdb,cn=config
32 32  
33 33  add: olcDbIndex