Install libnss-ldap and libpam-ldap. Base dn is
'dc=debconf,dc=debian,dc=org' and LDAP host is 10.0.1.1. LDAP version 3 and password method should be 'exop'.
Edit /etc/pam.d/common-auth to look like this:
auth sufficient pam_unix.so nullok_secure
auth required pam_ldap.so use_first_pass
Edit /etc/pam.d/common-password to look like this:
password sufficient pam_ldap.so
password required pam_unix.so nullok obscure min=4 max=8 md5
Edit /etc/pam_ldap.conf, make sure this line at the end:
ssl start_tls
Last, make sure /etc/nsswitch.conf contain these lines instead of the 'compat' lines:
passwd: ldap files
group: ldap files
shadow: ldap files
This should be enough to get LDAP user directory working.
|