linux nslcd服务,CentOS 6通过ldap集成AD域账号(nslcd方式)

CentOS 6通过ldap集成AD域账号(nslcd方式)：

yum install nss-pam-ldapd(rpm -qa nss-pam-ldapd，rpm -ql nss-pam-ldapd)

vi /etc/nsswitch.conf

passwd: files ldap

group: files ldap

shadow: files ldap

:wq

vi /etc/nslcd.conf

binddn cn=aa,cn=users,dc=ming,dc=com (aa为普通AD账号，在Users组里)

bindpw ** (aa的密码)

下面部分默认为注释掉的，去掉注释即可

#Mappings for Active Directory

#pagesize 1000

#referrals off

filter passwd (&(objectClass=user)(!(objectClass=computer))(uidNumber=)(unixHomeDirectory=))

map passwd uid sAMAccountName

map passwd homeDirectory unixHomeDirectory

map passwd gecos displayName

filter shadow (&(objectClass=user)(!(objectClass=computer))(uidNumber=)(unixHomeDirectory=))

map shadow uid sAMAccountName

map shadow shadowLastChange pwdLastSet

filter group (objectClass=group)

map group uniqueMember member

uid nslcd

gid ldap

uri ldap://10.0.0.3/

base dc=ming,dc=com

ssl no

tls-cacertdir /etc/openldap/cacerts

:wq

/etc/init.d/nslcd restart

认证后自动创建用户家目录：

vi /etc/pam.d/system-auth

session required pam_mkhomedir.so skel=/etc/skel umask=0022

:wq

getent passwd | grep zhi.yang

su - zhi.yang

远程ssh登陆会不行，还在查找原因