Quick Configuration of Openldap and Kerberos In Linux and Authenicating Linux to Active Directory

By

Dr. Hidaia Mahmood Alassouli

1. Abstract:

This paper is a step-by-step “how to” guide for configuring of Openldap server, Kerberos server and shows the procedure for authentication of Linux Machine to Active Directory. The paper provides an installation guide for,

1. OpenLDAP server and client.
2. Kerberos server and client.
3. Procedure for authenticating Linux Machine to Active Directory.

Keywords: OpenLDAP, Kerberos, Active Directory, Authentication, Linux.

2. Openldap Configuration:

Full documentation of OpenLDAP exists in www.openldap.org. The general procedure for configuration of OpenLDAP server and client that I tried to follow on RedHat 9,

1. I installed the openldap RPMS, openldap-2.0.7-14.i386.rpm, openldap-servers-2.0.7- 14.i386.rpm and openldap-clients-2.0.7-14.i386.rpm from the CD for RedHat 9.

1. Using LDAP will almost certainly require you to install the PAM libraries for LDAP. These are packaged in with the nss_ldap package, so I just installed it.

2. Configuration of OpenLDAP is done through the /etc/openldap/slapd.conf file. In this work I used the following simple configuration file:

#

# See slapd.conf(5) for details on configuration options.

# This file should NOT be world readable.

#

include      /etc/openldap/schema/core.schema

include      /etc/openldap/schema/cosine.schema include      /etc/openldap/schema/inetorgperson.schema include      /etc/openldap/schema/nis.schema

include      /etc/openldap/schema/rfc822-MailMember.schema include      /etc/openldap/schema/autofs.schema

include      /etc/openldap/schema/kerberosobject.schema

######################################################################

#

# ldbm database definitions

######################################################################

#

database      ldbm

suffix      "o=MyCompany,c=AU"

rootdn      "uid=root,ou=People,o=MyCompany,c=AU" rootpw            secret

directory      /var/lib/ldap

# Indices to maintain

index objectClass,uid,uidNumber,gidNumber      eq index cn,mail,surname,givenname      eq,subinitial

#

# ACLs

#

access to dn=".*,ou=People,o=MyCompany,c=AU" attr=userPassword

by self write