[sisyphus] LDAP через SSL, использование для AAA.

[Denis S. Filimonov]

7 Январь 2003 19:07, Peter V. Saveliev написал:
> 8<------- /etc/ldap.conf
> ------------------------------------------------- host ldap.home
> uri ldaps://ldap.home/
> base dc=kehlisaari,dc=home
> rootbinddn cn=proxyuser,dc=kehlisaari,dc=home
> scope one
>
> pam_filter objectClass=posixAccount
> pam_login_attribute uid
> pam_member_attribute gid
> pam_template_login_attribute uid
> pam_password md5
>
> nss_base_passwd ou=users,dc=kehlisaari,dc=home?one
> nss_base_shadow ou=users,dc=kehlisaari,dc=home?one
> nss_base_group ou=groups,dc=kehlisaari,dc=home?one
> nss_base_hosts ou=hosts,dc=kehlisaari,dc=home?one
>
> tls_checkpeer yes
> tls_cacertfile /etc/openssl/sign/ca.crt
> tls_ciphers TLSv1
> 8<------- /etc/ldap.conf
попробуйте добавить эти две строчки в /etc/ldap.conf
ssl start_tls
ssl on