[CentOS] LDAP и аутентификация
Всем привет.
Пытаюсь настроить авторизацию через LDAP.
В LDAP все работает , пользователи добавляются но система не видит их.
ldapsearch -x -v -D «cn=root,dc=master,dc=xcat» -w 111111 «uid=test3»
ldap_initialize( <DEFAULT> )
filter: uid=test3
requesting: All userApplication attributes
# extended LDIF
#
# LDAPv3
# base <> with scope subtree
# filter: uid=test3
# requesting: ALL
#
# test3, People, master.xcat
dn: uid=test3,ou=People,dc=master,dc=xcat
uid: test3
sn: test3
cn: test3
mail: test3@master.xcat
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
shadowLastChange: 13998
shadowMax: 99999
shadowWarning: 7
loginShell: /bin/bash
uidNumber: 505
gidNumber: 505
homeDirectory: /home/test3
# search result
search: 2
result: 0 Success
# numResponses: 2
# numEntries: 1
Проверяем пользователя:
id test3
id: test3: No such user
Конфиги:
/etc/ldap.conf
host 127.0.0.1
base dc=master,dc=xcat
timelimit 120
bind_timelimit 120
idle_timelimit 3600
nss_base_passwd ou=People,dc=mester,dc=xcat
nss_base_shadow ou=People,dc=master,dc=xcat
nss_base_group ou=Group,dc=master,dc=xcat
nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd
pam_filter objectclass=People
pam_login_attribute uid
pam_lookup_policy yes
pam_password md5
slapd.conf
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema
include /etc/openldap/schema/misc.schema
pidfile /var/run/openldap/slapd.pid
argsfile /var/run/openldap/slapd.args
loglevel 9
database hdb
suffix «dc=master,dc=xcat»
rootdn «cn=root,dc=master,dc=xcat»
rootpw {SSHA}Xl0skgV6F/aV4z6BQ3i5PhvYYWs0+9z6
directory /var/lib/ldap
index objectclass,entryCSN,entryUUID eq,pres
index ou,cn,mail,surname,givenname eq,pres,sub
index uidNumber,gidNumber,loginShell eq,pres
index uid,memberUid eq,pres,sub
index nisMapName,nisMapEntry eq,pres,sub
password-hash {SSHA}
access to attrs=userPassword
by dn=«uid=root,ou=People,dc=master,dc=xcat» write
by anonymous read
by self write
by * none
access to attrs=shadowLastChange
by dn=«uid=root,ou=People,dc=master,dc=xcat» write
by self write
by * read
###sync provider
modulepath /usr/lib64/openldap
#moduleload syncprov
overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100
###sync
