Cyclades AlterPath BladeManager Manuál s instrukcemi stáhnout pdf (Strana 149)

Chapter 6: Administration Tasks Not Performed in the Web Manager 135

To configure groups using the info attribute on an LDAP authentication server:

1. On the server, add the info attribute into the objectclass posixAccount in the /etc/ldap/schema/

nis.schema file.

objectclass (1.3.6.1.1.2.0 NAME 'posixAccount' SUP top AUXILIARY DESC

'Abstraction of an account with POSIX attributes' MUST ( cn $ uid $

uidNumber $ gidNumber $ homeDirectory ) MAY ( userPassword $ loginShell

$ gecos $ description $ info) )

2. Make sure the info attribute exists in the /etc/ldap/schema/cosine.schema file.

attributetype (0.9.2342.19200300.100.1.4 NAME 'info'

DESC 'RFC1274: general information’

EQUALITY caseIgnoreMatch

SUBSTR caseIgnoreSubstringsMatch

SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{2048} )

3. Make sure both schema files are listed in slapd.conf:

NOTE: The slapd.conf file is normally located in: [Redhat] /etc/openldap or [bsd] /usr/local/etc/openldap.

include /etc/openldap/schema/nis.schema

include /etc/openldap/schema/cosine.schema

4. Restart the LDAP service to activate changes.

5. Use the

ldapadd(1) command to add new users or the ldapmodify(1)command to assign a

user to one or more groups in one of the two following ways:

a. Enter the user information including the group name or names on the command line, using

the

ldapadd command to add new users or the ldapmodify command to modify

existing users.

b. Put all user information, including the group definition in a text file and use the text file

with the

-f option on the command line to configure groups for users.

Use the following syntax for configuring a group using the info attribute:

info: group_name=<Group1>[,<Group2>,...,<GroupN>];

NOTE: To give a user administrative access to the MergePoint 5224/5240 appliance, add the admin group name

to the group_name definition.

To configure groups using the memberof attribute on an LDAP

authentication server:

1. On the server, add the memberof attribute to the /etc/openldap/schema/core.schema file.

attributetype (1.2.840.113556.1.2.102 NAME 'memberof'

DESC 'Group membership’

1 2 ... 144 145 146 147 148 149 150 151 152 153 154 ... 239 240

Žádné komentáře

Cyclades AlterPath BladeManager Manuál s instrukcemi Strana 149