RockyLinux 8: Difference between revisions
Created page with "=== authselect === <nowiki>#</nowiki> mkhomedir module dnf install oddjob systemctl enable oddjobd.service systemctl start oddjobd.service <nowiki>#</nowiki> replace lda..." |
No edit summary |
||
| Line 1: | Line 1: | ||
== | == About == | ||
Rocky Linux is a community enterprise Operating System designed to be 100% bug-for-bug compatible with Enterprise Linux, now that CentOS has shifted direction. | |||
The official website: https://rockylinux.org/ | |||
===authselect=== | |||
<syntaxhighlight lang="bash"> | |||
# mkhomedir module | |||
dnf install oddjob | dnf install oddjob | ||
systemctl enable oddjobd.service | systemctl enable oddjobd.service | ||
systemctl start oddjobd.service | systemctl start oddjobd.service | ||
# replace ldap_tls_cacertdir with ldap_tls_cacert in /etc/sssd/conf.d/sssd.conf | |||
#ldap_tls_cacertdir = /etc/openldap/cacerts | |||
ldap_tls_cacert = /etc/openldap/cacerts/caname.crt | ldap_tls_cacert = /etc/openldap/cacerts/caname.crt | ||
# chmod | |||
chmod 0600 /etc/openldap/cacerts/caname.crt | chmod 0600 /etc/openldap/cacerts/caname.crt | ||
chmod 0600 /etc/sssd/conf.d/sssd.conf | chmod 0600 /etc/sssd/conf.d/sssd.conf | ||
systemctl enable autofs | systemctl enable autofs | ||
systemctl enable sssd | systemctl enable sssd | ||
| Line 27: | Line 24: | ||
[root@localhost]# grep -Ev "^$|^\s*#" /etc/idmapd.conf | [root@localhost]# grep -Ev "^$|^\s*#" /etc/idmapd.conf | ||
[General] | [General] | ||
Domain = DOMAIN.TLD | Domain = DOMAIN.TLD | ||
[Mapping] | [Mapping] | ||
Nobody-User = nobody | Nobody-User = nobody | ||
Nobody-Group = nobody | Nobody-Group = nobody | ||
[Translation] | [Translation] | ||
[Static] | [Static] | ||
[UMICH_SCHEMA] | [UMICH_SCHEMA] | ||
LDAP_server = LDAP.DOMAIN.TLD | LDAP_server = LDAP.DOMAIN.TLD | ||
LDAP_base = dc=DOMAIN,dc=TLD | LDAP_base = dc=DOMAIN,dc=TLD | ||
</syntaxhighlight> | |||
authselect select sssd with-mkhomedir with-sudo --force | authselect select sssd with-mkhomedir with-sudo --force | ||
[[Category:OS]] | [[Category:OS]] | ||
Revision as of 09:06, 6 December 2021
About
Rocky Linux is a community enterprise Operating System designed to be 100% bug-for-bug compatible with Enterprise Linux, now that CentOS has shifted direction.
The official website: https://rockylinux.org/
authselect
# mkhomedir module
dnf install oddjob
systemctl enable oddjobd.service
systemctl start oddjobd.service
# replace ldap_tls_cacertdir with ldap_tls_cacert in /etc/sssd/conf.d/sssd.conf
#ldap_tls_cacertdir = /etc/openldap/cacerts
ldap_tls_cacert = /etc/openldap/cacerts/caname.crt
# chmod
chmod 0600 /etc/openldap/cacerts/caname.crt
chmod 0600 /etc/sssd/conf.d/sssd.conf
systemctl enable autofs
systemctl enable sssd
dnf install autofs nfs-utils
[root@localhost]# grep -Ev "^$|^\s*#" /etc/idmapd.conf
[General]
Domain = DOMAIN.TLD
[Mapping]
Nobody-User = nobody
Nobody-Group = nobody
[Translation]
[Static]
[UMICH_SCHEMA]
LDAP_server = LDAP.DOMAIN.TLD
LDAP_base = dc=DOMAIN,dc=TLD
authselect select sssd with-mkhomedir with-sudo --force