Skip to Content
0 Votes

Changes for page KerberosAndLDAP

Last modified by Sirius Rayner-Karlsson on 2024/05/09 10:54
From version 6.1
edited by Sirius Rayner-Karlsson
on 2024/05/01 17:00
Change comment: There is no comment for this version
To version 4.1
edited by Sirius Rayner-Karlsson
on 2024/05/01 05:07
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -4,13 +4,19 @@
4 4  
5 5  First, install the packages containing the LDAP-enabled Kerberos servers ([[krb5-kdc-ldap>>url:https://packages.debian.org/krb5-kdc-ldap]] and [[krb5-admin-server>>url:https://packages.debian.org/krb5-admin-server]]) and the [[schema2ldif>>url:https://packages.debian.org/schema2ldif]] tool:
6 6  
7 -{{{ $ sudo apt install krb5-kdc-ldap krb5-admin-server schema2ldif }}}
7 +~{~{~{
8 8  
9 +$ sudo apt install krb5-kdc-ldap krb5-admin-server schema2ldif
9 9  
11 +}}}
12 +
13 +
10 10  Then load the ##kerberos## schema:
11 11  
12 -{{{$ zcat /usr/share/doc/krb5-kdc-ldap/kerberos.openldap.ldif.gz | ldapadd -H ldap:~/~/nas.fqdn/ -D uid=root,cn=users,dc=example,dc=com
16 +~{~{~{
13 13  
18 +$ zcat /usr/share/doc/krb5-kdc-ldap/kerberos.openldap.ldif.gz | ldapadd -H ldap:~/~/nas.fqdn/ -D uid=root,cn=users,dc=example,dc=com
19 +
14 14  adding new entry "cn=kerberos,cn=schema,cn=config"
15 15  
16 16  }}}
... ... @@ -18,8 +18,10 @@
18 18  
19 19  And add an index on the ##krbPrincipalName## (improves performance and also suppresses some log messages if ##slapd## is configured to log more than default) for the database(s) where you intend to store Kerberos data:
20 20  
21 -{{{# ldapmodify -H ldap:~/~/nas.fqhn <<EOF
27 +~{~{~{
22 22  
29 +# ldapmodify -H ldap:~/~/nas.fqhn <<EOF
30 +
23 23  dn: olcDatabase={1}bdb,cn=config
24 24  
25 25  add: olcDbIndex