50 lines
1.4 KiB
Plaintext
50 lines
1.4 KiB
Plaintext
|
#!/bin/sh
|
||
|
|
# IBM(c) 2007 EPL license http://www.eclipse.org/legal/epl-v10.html
|
||
|
|
#
|
||
|
|
#---------------------------------------------------------------------------
|
||
|
|
# setup LDAP client configuration on the compute nodes
|
||
|
|
#
|
||
|
|
#---------------------------------------------------------------------------
|
||
|
|
|
||
|
|
if [ -r /etc/ldap.conf -a -r /etc/resolv.conf ]
|
||
|
|
then
|
||
|
|
echo -n " LDAP: "
|
||
|
|
|
||
|
|
DC=$(
|
||
|
|
cat /etc/resolv.conf | \
|
||
|
|
egrep '(domain|search)' | \
|
||
|
|
head -1 | \
|
||
|
|
awk '{print $2}' | \
|
||
|
|
sed 's/\./,dc=/g' | \
|
||
|
|
sed 's/^/dc=/'
|
||
|
|
)
|
||
|
|
|
||
|
|
echo "uri ldap://$MASTER/
|
||
|
|
base $DC
|
||
|
|
timelimit 120
|
||
|
|
bind_timelimit 120
|
||
|
|
idle_timelimit 3600
|
||
|
|
nss_base_passwd ou=People,$DC
|
||
|
|
nss_base_shadow ou=People,$DC
|
||
|
|
nss_base_group ou=Group,$DC
|
||
|
|
nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd
|
||
|
|
ssl no
|
||
|
|
tls_cacertdir /etc/openldap/cacerts
|
||
|
|
pam_password md5" >/etc/ldap.conf
|
||
|
|
|
||
|
|
echo "URI ldap://$MASTER
|
||
|
|
BASE $DC
|
||
|
|
TLS_CACERTDIR /etc/openldap/cacerts" >/etc/openldap/ldap.conf
|
||
|
|
|
||
|
|
cd /etc
|
||
|
|
cp nsswitch.conf nsswitch.conf.ORIG
|
||
|
|
sed -r 's/^((passwd|shadow|group):.*)/\1 ldap/' <nsswitch.conf.ORIG >nsswitch.conf
|
||
|
|
|
||
|
|
cd /etc/pam.d
|
||
|
|
cp system-auth system-auth.ORIG
|
||
|
|
sed -r 's/(account\s+required\s+pam_unix.so)/account sufficient pam_ldap.so\n\1/' <system-auth.ORIG >system-auth
|
||
|
|
|
||
|
|
fi
|
||
|
|
exit 0
|
||
|
|
|