{"id":3061,"date":"2012-10-14T21:13:18","date_gmt":"2012-10-14T13:13:18","guid":{"rendered":"http:\/\/staff.ie.cuhk.edu.hk\/~sfluk\/wordpress\/?p=3061"},"modified":"2012-10-14T21:32:18","modified_gmt":"2012-10-14T13:32:18","slug":"configure-solaris-10-native-client-to-authenticate-openldap-server","status":"publish","type":"post","link":"https:\/\/staff.ie.cuhk.edu.hk\/~sfluk\/wordpress\/?p=3061","title":{"rendered":"Configure Solaris 10&#8217;s native LDAP client to authenticate to OpenLDAP Server"},"content":{"rendered":"<p>1. Solaris&#8217; LDAP authentication requires shadowAccount object class be bound to an account for lookups to succeed.<br \/>\nEdit \/usr\/share\/openldap\/migration\/migrate_passwd.pl to add the shadowAccount object class below posixAccount<\/p>\n<p>2. Run ldapclient command on the Solaris with the parameters as specified as <a href=\"http:\/\/staff.ie.cuhk.edu.hk\/~sfluk\/files\/solaris10_ldapclient.txt\">here<\/a><\/p>\n<p>3. Remove \/etc\/pam.conf with this <a href=\"http:\/\/staff.ie.cuhk.edu.hk\/~sfluk\/files\/pam.conf.ldap.txt\">file<\/a><\/p>\n<p>4. edit \/etc\/nsswitch.conf.ldap, change :<\/p>\n<p>hosts:\u00a0\u00a0\u00a0\u00a0\u00a0 ldap [NOTFOUND=return] files<\/p>\n<p>to<\/p>\n<p>hosts:\u00a0\u00a0\u00a0\u00a0\u00a0 files dns<\/p>\n<p>4. ldapclient list<\/p>\n<p>5. ldaplist -vl passwd<\/p>\n<p>6. getent passwd<\/p>\n","protected":false},"excerpt":{"rendered":"<p>1. Solaris&#8217; LDAP authentication requires shadowAccount object class be bound to an account for lookups to succeed. Edit \/usr\/share\/openldap\/migration\/migrate_passwd.pl to add the shadowAccount object class below posixAccount<\/p>\n<p>2. Run ldapclient command on the Solaris with the parameters as specified as here<\/p>\n<p>3. Remove \/etc\/pam.conf with this file<\/p>\n<p>4. edit \/etc\/nsswitch.conf.ldap, change :<\/p>\n<p>hosts: ldap [NOTFOUND=return] [&#8230;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[3],"tags":[19],"class_list":["post-3061","post","type-post","status-publish","format-standard","hentry","category-computer","tag-ldap","odd"],"_links":{"self":[{"href":"https:\/\/staff.ie.cuhk.edu.hk\/~sfluk\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/3061","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/staff.ie.cuhk.edu.hk\/~sfluk\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/staff.ie.cuhk.edu.hk\/~sfluk\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/staff.ie.cuhk.edu.hk\/~sfluk\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/staff.ie.cuhk.edu.hk\/~sfluk\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3061"}],"version-history":[{"count":6,"href":"https:\/\/staff.ie.cuhk.edu.hk\/~sfluk\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/3061\/revisions"}],"predecessor-version":[{"id":3066,"href":"https:\/\/staff.ie.cuhk.edu.hk\/~sfluk\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/3061\/revisions\/3066"}],"wp:attachment":[{"href":"https:\/\/staff.ie.cuhk.edu.hk\/~sfluk\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3061"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/staff.ie.cuhk.edu.hk\/~sfluk\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3061"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/staff.ie.cuhk.edu.hk\/~sfluk\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3061"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}