-Fix AD support for RHEL6 deployed nodes

git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@7203 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
This commit is contained in:
jbjohnso 2010-08-24 15:35:32 +00:00
parent f29da8e67b
commit 160692e00a
2 changed files with 4 additions and 2 deletions

View File

@ -143,6 +143,7 @@ reboot
pam_krb5
krb5-workstation
nss-pam-ldapd
cyrus-sasl-gssapi
%pre
#INCLUDE:#ENV:XCATROOT#/share/xcat/install/scripts/pre.rh#
%post

View File

@ -26,9 +26,10 @@ if [ "$OSVER" = "rhels6" ]; then
echo sasl_mech GSSAPI >> /etc/nslcd.conf
echo sasl_secprops maxssf=0 >> /etc/nslcd.conf
echo krb5_ccname /var/run/ldap_krb5cc >> /etc/nslcd.conf
sed -i '/# Mappings for Active Directory/,/^[^#]/ s/^#\([^ ]\)/\1/' /etc/nslcd.conf
authconfig --update --enableldap --ldapserver=$LDAPSRV --ldapbasedn=$LDAPBASEDN
echo 'kinit -c /var/run/ldap_krb5cc < /etc/krb5.hostpass' >> /etc/rc.local
echo 'kinit -c /var/run/ldap_krb5cc < /etc/krb5.hostpass' >> /etc/cron.hourly/nslcdkrb.cron
echo 'kinit '$HOSTPRINC'-c /var/run/ldap_krb5cc < /etc/krb5.hostpass >& /dev/null' >> /etc/rc.local
echo 'kinit '$HOSTPRINC'-c /var/run/ldap_krb5cc < /etc/krb5.hostpass >& /dev/null' >> /etc/cron.hourly/nslcdkrb.cron
chmod +x /etc/cron.hourly/nslcdkrb.cron
fi
#TODO: SLES/maybe RHEL5. Uncomfortable with libnss_ldap without root_krb5_ccname, ldap needs diff credentials per user