[389-users] Developting a CentOS-DS setup

[John A. Sullivan III]

On Sat, 2009-06-06 at 15:53 -0500, Doug Coats wrote:
> I am new to using CentOS-DS and LDAP and I am having difficulty
> finding solid information on setting up using CentOS-DS as the
> information and authentification center of my network.
> 
> I have googled a number of different combinations looking for the
> informaiton I need but have not found any good resources to setup what
> I am after.  I have downloaded and am going over the Red Hat
> documentation and where it is very informative it certainly is not a
> Howto.
> 
> My biggest need for resources is in setting up the authentification of
> different services and LDAP.
> 
> I am using CentOS 5.3 and CentOS-DS 8.1.  These I have installed and
> running on a test server.
> 
> I would like to accomplish the following things in this order.
> 
> Linux authentification
> Samba authentification
> Dovecot authentification
> 
> So my questions to begin with are: How do I get Linux to use LDAP to
> authenticate instead of the passwd and shadow files?
> 
> Once I get that to work: How do I get Linux to to do the normal things
> it does with adduser (like create a home directory, create a group,
> and things I can't think of)?
> 
> If anyone could push me in the right direction I would really appreciate it.
<snip>
We are using almost an identical setup except for Dovecot and we started
with DS 8.0 and upgraded to 8.1.  I'm afraid I'm up to my eyeballs in a
project so I can't customize this for you but I'll paste in as much of
our internal documentation as would be prudent to do.  You will need to
understand the principles behind the steps so you can adapt it
accordingly.  For example, we installed the master replica on a vserver
- a great project (www.linux-vserver.org) but it does introduce some
complexity to LDAP.  We also use a RO replica on KVM.  Both are in an
iSCSI environment.  We also sync passwords with Active Directory for
multiple clients - oh, and yes, this is a multi-tenant environment -
hence the unusual hierarchical structure and bizarre ACIs.  As I said,
you will need to adapt but hopefully this will get you started.  (and I
hope it is not dropped for SPAM because of its length - hmm come to
think of it, I think I'll send this email separately and then send the
same email with all the notes.  This way, if it does get trapped as
SPAM, you can fish it out).
-- 
John A. Sullivan III
Open Source Development Corporation
+1 207-985-7880
jsullivan at opensourcedevel.com

http://www.spiritualoutreach.com
Making Christianity intelligible to secular society