mirror of
				https://github.com/xcat2/xcat-core.git
				synced 2025-10-31 19:32:31 +00:00 
			
		
		
		
	-Fix AD support for RHEL6 deployed nodes
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@7203 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
This commit is contained in:
		| @@ -143,6 +143,7 @@ reboot | ||||
| pam_krb5 | ||||
| krb5-workstation | ||||
| nss-pam-ldapd | ||||
| cyrus-sasl-gssapi | ||||
| %pre | ||||
| #INCLUDE:#ENV:XCATROOT#/share/xcat/install/scripts/pre.rh# | ||||
| %post | ||||
|   | ||||
| @@ -26,9 +26,10 @@ if [ "$OSVER" = "rhels6" ]; then | ||||
|     echo sasl_mech GSSAPI >> /etc/nslcd.conf | ||||
|     echo sasl_secprops maxssf=0 >> /etc/nslcd.conf | ||||
|     echo krb5_ccname /var/run/ldap_krb5cc >> /etc/nslcd.conf | ||||
|     sed -i '/# Mappings for Active Directory/,/^[^#]/ s/^#\([^ ]\)/\1/' /etc/nslcd.conf | ||||
|     authconfig --update --enableldap --ldapserver=$LDAPSRV --ldapbasedn=$LDAPBASEDN | ||||
|     echo 'kinit -c /var/run/ldap_krb5cc < /etc/krb5.hostpass' >> /etc/rc.local | ||||
|     echo 'kinit -c /var/run/ldap_krb5cc < /etc/krb5.hostpass' >> /etc/cron.hourly/nslcdkrb.cron | ||||
|     echo 'kinit '$HOSTPRINC'-c /var/run/ldap_krb5cc < /etc/krb5.hostpass >& /dev/null' >> /etc/rc.local | ||||
|     echo 'kinit '$HOSTPRINC'-c /var/run/ldap_krb5cc < /etc/krb5.hostpass >& /dev/null' >> /etc/cron.hourly/nslcdkrb.cron | ||||
|     chmod +x /etc/cron.hourly/nslcdkrb.cron | ||||
| fi | ||||
| #TODO: SLES/maybe RHEL5.  Uncomfortable with libnss_ldap without root_krb5_ccname, ldap needs diff credentials per user | ||||
|   | ||||
		Reference in New Issue
	
	Block a user