HOWTOs, tips and tricks

HOWTO setup LDAP client

LDAP details

You need the following LDAP details:

LDAP server: usually ldap://<ip>, for instance ldap://192.168.1.1
root domain: usually dc=<organization>,dc=<country>, for instance dc=example.org,dc=com

PAM and NSS setup

Install necessary packages:

$ sudo apt-get install libnss-ldapd libpam-ldapd

Use LDAP server and root domain when configuring the client package during installation.

To automatically create a home directory on login add the following string to the end of the /etc/pam.d/common-session file (before the final comment):

session optional pam_mkhomedir.so skel=/etc/skel umask=0002

Restart NSS services:

$ sudo systemctl restart nscd
$ sudo systemctl restart nslcd

AutoFS setup

Install necessary packages:

$ sudo apt-get install autofs-ldap

Add the following text to the end of the /etc/default/autofs:

    MASTER_MAP_NAME="ldap://192.168.1.1/automountMapName=auto.master,ou=Mounts,dc=exampleorg,dc=com"
    LOGGING="verbose"
    SEARCH_BASE="ou=Mounts,dc=exampleorg,dc=com"
    
    MAP_OBJECT_CLASS="automountMap"
    ENTRY_OBJECT_CLASS="automount"
    MAP_ATTRIBUTE="automountMapName"
    ENTRY_ATTRIBUTE="automountKey"
    VALUE_ATTRIBUTE="automountInformation"

Restart autofs:

$ sudo systemctl restart autofs

References

PAM, NSS, AutoFS sorted by usefullness:

Kerberos related: