0

I am currently setting LDAP/krb5 on Centos7. I followed the instruction on:

https://wiki.cac.washington.edu/display/LDI/Configuring+Linux+Clients+for+LDI (thanks to Eric) http://staff.washington.edu/somsky/LDI/CentOS7-client.sfml (Thanks to Bill)

However, after finishing the configuration, I cannot sign in to CentOS machine with public/private key for LDAP user account. I also configured Debian (9) machine for the testing purpose, and I was able to login to the machine with private/public key authentication. One thing that I noticed from the configuration is that after configuring the server, I cannot log in to any local account in centos.

Thanks for reading this

Here is some additional configuration that I use:

nsswitch.conf

passwd:         compat systemd ldap
group:          compat systemd ldap
shadow:         compat ldap
gshadow:        files

hosts:          files mdns4_minimal [NOTFOUND=return] dns myhostname
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis

nslcd.conf

uid             nslcd
gid             ldap
uri             ldap://ldi.s.uw.edu
ssl             start_tls
tls_cacertfile /etc/ssl/ldi/InCommonCA.crt
tls_cert        /etc/ssl/ldi/ldi-client.css.uwb.edu.pem
tls_key         /etc/ssl/ldi/ldi-client.css.uwb.edu.key

sasl_mech EXTERNAL

TLS_REQCERT allow

pagesize        250
nss_min_uid     1000
nss_initgroups_ignoreusers ALLLOCAL

base                                 ou=uwbstem,dc=ldi,dc=uw,dc=edu
base group                 ou=groups,ou=uwbstem,dc=ldi,dc=uw,dc=edu
base passwd              ou=accounts,ou=uwbstem,dc=ldi,dc=uw,dc=edu
base shadow              ou=accounts,ou=uwbstem,dc=ldi,dc=uw,dc=edu

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.