Edit the file \/etc\/openldap\/ldap.conf<\/p>\n
URI ldap:\/\/$FQDN_OF_SERVER\/ (has to be the same fqdn as in the certificate)
\nBASE dc=mydomain,dc=com
\nTLS_CACERTDIR \/etc\/openldap\/cacerts<\/p>\n
now edit the \/etc\/nsswitch.conf file to tell linux where to get the login information from:<\/p>\n
passwd:\u00a0\u00a0\u00a0\u00a0 files sss ldap<\/strong> After that run the command authconfig-gtk<\/p>\n Select:<\/p>\n User Account Database: ldap If you want to create directly a new home directory for the new user you can go to the advanced tab and check the box “Create Home directories on first login”<\/p>\n reboot<\/p>\n Now you are done with the authentication part.<\/p>\n","protected":false},"excerpt":{"rendered":" Edit the file \/etc\/openldap\/ldap.conf URI ldap:\/\/$FQDN_OF_SERVER\/ (has to be the same fqdn as in the certificate) BASE dc=mydomain,dc=com TLS_CACERTDIR \/etc\/openldap\/cacerts now edit the \/etc\/nsswitch.conf file to tell linux where to get the login information from: passwd:\u00a0\u00a0\u00a0\u00a0 files sss ldap shadow:\u00a0\u00a0\u00a0\u00a0 files sss ldap group:\u00a0\u00a0\u00a0\u00a0\u00a0 files sss ldap After that run the command authconfig-gtk Select: User…<\/p>\n","protected":false},"author":2,"featured_media":162,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[3],"tags":[],"class_list":["post-42","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/blog.domb.net\/index.php?rest_route=\/wp\/v2\/posts\/42","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.domb.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.domb.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.domb.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.domb.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=42"}],"version-history":[{"count":2,"href":"https:\/\/blog.domb.net\/index.php?rest_route=\/wp\/v2\/posts\/42\/revisions"}],"predecessor-version":[{"id":251,"href":"https:\/\/blog.domb.net\/index.php?rest_route=\/wp\/v2\/posts\/42\/revisions\/251"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.domb.net\/index.php?rest_route=\/wp\/v2\/media\/162"}],"wp:attachment":[{"href":"https:\/\/blog.domb.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=42"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.domb.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=42"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.domb.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=42"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nshadow:\u00a0\u00a0\u00a0\u00a0 files sss ldap<\/strong>
\ngroup:\u00a0\u00a0\u00a0\u00a0\u00a0 files sss ldap<\/strong><\/p>\n
\nLdap base search DN: dc=domain,dc=com
\nldap server: FQDN of ldap Server
\nCheck the Box use TLS encryption
\nAdd the correct url\u00a0 which points to the ladpcertificate.pem file. Normally this file is located on a webserver (https:\/\/internal.webserver.com\/ladpcertificate.pem
\nAuthentication configuration: ldap<\/p>\n