I have a server running openldap 2.4.31 in which I store my user and group posix accounts. How can I automatically copy the user and group accounts on the first login so that if the machine disconnects from the ldap server the user can still login? Also, would it be possible to automatically update the password and group membership for the local account if it is updated on the ldap server provided they are connected again?
The openldap server is running on ubuntu 14.04 and the other machines are running ubuntu 14.04, CentOS 7 and Arch linux.
What would be the common way to solve this in a company network running only linux machines? With windows machines this seems to be solved using active directory and maybe some policies but in a company with centralized login servers and laptops with either linux only or mixed OS I supposed this is done with ldap or radius or both.