forum.lissyara.su

Код: Выделить всё

uid nslcd
gid nslcd

uri ldap://dc1.example.com/
uri ldap://dc2.example.com/

base DC=example,DC=com
base passwd     DC=example,DC=com
base shadow     DC=example,DC=com
base group      DC=example,DC=com

#ldap_version 3

binddn CN=user,DC=example,DC=com
bindpw password

scope sub
pagesize 1000
referrals off

filter passwd (&(objectClass=person)(!(userAccountControl=514))(|(memberOf=CN=IT,OU=Groups,DC=example,DC=com)))
map passwd uid sAMAccountName
map passwd homeDirectory unixHomeDirectory
map passwd gecos displayName
map passwd loginShell "/usr/local/bin/bash"

filter shadow (&(objectClass=person)(!(userAccountControl=514))(|(memberOf=CN=IT,OU=Groups,DC=example,DC=com)))
map shadow uid sAMAccountName
map shadow shadowLastChange pwdLastSet
filter group (&(objectClass=group)(gidNumber=*))

Код: Выделить всё

passwd:         files ldap
group:          files ldap
shadow:         files ldap
netgroup:       nis
hosts:          files dns
networks:       files
protocols:      db files
services:       db files
ethers:         db files
rpc:            db files
netgroup:       nis

Код: Выделить всё

#
# $FreeBSD: releng/10.2/etc/pam.d/sshd 197769 2009-10-05 09:28:54Z des $
#
# PAM configuration for the "sshd" service
#

# auth
auth            sufficient      pam_opie.so             no_warn no_fake_prompts
auth            requisite       pam_opieaccess.so       no_warn allow_local
#auth           sufficient      pam_krb5.so             no_warn try_first_pass
#auth           sufficient      pam_ssh.so              no_warn try_first_pass
auth            sufficient      /usr/local/lib/pam_ldap.so              no_warn try_first_pass minimum_uid=1000
auth            required        pam_unix.so             no_warn try_first_pass
auth            sufficient      pam_ldap.so             use_first_pass

# account
account         required        pam_nologin.so
#account        required        pam_krb5.so
account         required        pam_login_access.so
account         required        /usr/local/lib/pam_ldap.so              ignore_authinfo_unavail ignore_unknown_user minimum_uid=1000
account         required        pam_unix.so
account         sufficient      pam_ldap.so 

# session
#session        optional        pam_ssh.so              want_agent
session         required        pam_permit.so
session         required        /usr/local/lib/pam_mkhomedir.so         umask=0022 skel=/usr/share/skel
session         optional        pam_ldap.so 
#
# password
#password       sufficient      pam_krb5.so             no_warn try_first_pass
password        required        /usr/local/lib/pam_ldap.so              use_authok minimum_uid=1000
password        required        pam_unix.so             no_warn try_first_pass