RockyLinux 8: Difference between revisions

From The Power of Many
No edit summary
Line 36: Line 36:
</syntaxhighlight>
</syntaxhighlight>


authselect current
authselect select sssd with-mkhomedir with-sudo --force


authselect select sssd with-mkhomedir with-sudo --force
#apply changes
authselect apply-changes
[[Category:OS]]
[[Category:OS]]

Revision as of 11:38, 18 March 2022

About

Rocky Linux is a community enterprise Operating System designed to be 100% bug-for-bug compatible with Enterprise Linux, now that CentOS has shifted direction.

The official website: https://rockylinux.org/

authselect

# mkhomedir module
dnf install oddjob
systemctl enable oddjobd.service
systemctl start  oddjobd.service

# replace ldap_tls_cacertdir with ldap_tls_cacert in /etc/sssd/conf.d/sssd.conf
#ldap_tls_cacertdir = /etc/openldap/cacerts
ldap_tls_cacert = /etc/openldap/cacerts/caname.crt

# chmod
chmod 0600 /etc/openldap/cacerts/caname.crt
chmod 0600 /etc/sssd/conf.d/sssd.conf
systemctl enable autofs
systemctl enable sssd

dnf install autofs nfs-utils

[root@localhost]# grep -Ev "^$|^\s*#" /etc/idmapd.conf
[General]
Domain = DOMAIN.TLD
[Mapping]
Nobody-User = nobody
Nobody-Group = nobody
[Translation]
[Static]
[UMICH_SCHEMA]
LDAP_server = LDAP.DOMAIN.TLD
LDAP_base = dc=DOMAIN,dc=TLD

authselect current authselect select sssd with-mkhomedir with-sudo --force

  1. apply changes

authselect apply-changes