SAC:betawebsite

From OSGeo
Revision as of 07:50, 19 October 2017 by Robe (talk | contribs) (Created page with "This is setup of Cloud server osgeo.public.cloudvps.com It is a debian 8, 4GB , 160 HDD server. These are the steps I did after it was created in attempt to implement LDAP...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

This is setup of Cloud server osgeo.public.cloudvps.com

It is a debian 8, 4GB , 160 HDD server.

These are the steps I did after it was created in attempt to implement LDAP

First I installed updates

apt-get update apt-get upgrade

Then to try the ldap

https://wiki.debian.org/LDAP/PAM

1) edit /etc/ldap/ldap.conf

BASE dc=osgeo,dc=org URI ldaps://ldap.osgeo.org


  1. SIZELIMIT 12
  2. TIMELIMIT 15
  3. DEREF never
  1. TLS certificates (needed for GnuTLS)

TLS_CACERT /etc/ssl/certs/ca-certificates.crt


2) apt-get install libpam-ldap nscd

nano /etc/ssh/sshd_config

(it will prompt for services you want to use ldap for ) Selections will be written to /etc/nsswitch.conf

after conf looked like this

   after conf looked like this
   # /etc/nsswitch.conf
   #
   # Example configuration of GNU Name Service Switch functionality.
   # If you have the `glibc-doc-reference' and `info' packages installed, try:
   # `info libc "Name Service Switch"' for information about this file.
   passwd:         compat ldap
   group:          compat ldap
   shadow:         compat
   gshadow:        files
   hosts:          files dns
   networks:       files
   protocols:      db files ldap
   services:       db files ldap
   ethers:         db files
   rpc:            db files
   netgroup:       nis
   aliases:        ldap


3)

  /etc/init.d/nscd restart
 /etc/init.d/ssh restart
 
 Should output something like this:

[ ok ] Restarting ssh (via systemctl): ssh.service.

4)

3) pam-auth-update Make sure both Unix and LDAP authentication are checked


4) Verify server can do ldap queries with Osgeo by running something like this

ldapsearch -x uid=robe

This worked fine and gave answers as expected.


But I am still unable to log in with my OSGeo Ldap account so I feel I am missing something.