Authentification LDAP et getent
Bonjour
Je suis en train de migrer d'un serveur Linux CENTOS 5.5 vers un serveur CENTOS 6.5 et je n'arrive pas à m'authentifier à partir d'une base LDAP.
Cela fonctionne parfaitement en 5.5 mais pas en 6.5
J'ai effectué le même paramétrage :
/etc/ldap.conf :
Code:
1
2
3
4
5
6
7
8
9
|
port 389
SASL_SECPROPS none
ldap_version 3
scope sub
host 192.168.2.208
base o=organisation.fr
ssl no
pam_password clear |
/etc/openldap/ldap.conf :
Code:
1
2
3
4
5
6
7
8
9
10
|
port 389
SASL_SECPROPS none
ldap_version 3
scope sub
host 192.168.2.208
base o=organisation.fr
ssl no
HOST 192.168.2.208
BASE o=organisation.fr |
et enfin /etc/nsswitch.conf
Code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
|
#
# /etc/nsswitch.conf
#
# An example Name Service Switch config file. This file should be
# sorted with the most-used services at the beginning.
#
# The entry '[NOTFOUND=return]' means that the search for an
# entry should stop if the search in the previous entry turned
# up nothing. Note that if the search failed due to some other reason
# (like no NIS server responding) then the search continues with the
# next entry.
#
# Valid entries include:
#
# nisplus Use NIS+ (NIS version 3)
# nis Use NIS (NIS version 2), also called YP
# dns Use DNS (Domain Name Service)
# files Use the local files
# db Use the local database (.db) files
# compat Use NIS on compat mode
# hesiod Use Hesiod for user lookups
# [NOTFOUND=return] Stop searching if not found so far
#
# To use db, put the "db" in front of "files" for entries you want to be
# looked up first in the databases
#
# Example:
#passwd: db files nisplus nis
#shadow: db files nisplus nis
#group: db files nisplus nis
passwd: files ldap
shadow: files ldap
group: files
#hosts: db files nisplus nis dns
hosts: files dns
# Example - obey only what nisplus tells us...
#services: nisplus [NOTFOUND=return] files
#networks: nisplus [NOTFOUND=return] files
#protocols: nisplus [NOTFOUND=return] files
#rpc: nisplus [NOTFOUND=return] files
#ethers: nisplus [NOTFOUND=return] files
#netmasks: nisplus [NOTFOUND=return] files
bootparams: nisplus [NOTFOUND=return] files
ethers: files
netmasks: files
networks: files
protocols: files ldap
rpc: files
services: files ldap
netgroup: files ldap
publickey: nisplus
automount: files ldap
aliases: files nisplus |
Quand je teste avec ldapsearch, tout mon annuaire LDAP s'affiche.
Mais quand j'exécute getent passwd user1 par exemple, seuls les utilisateurs présents dans /etc/passwd s'affichent, pas ceux de la base ldap
Y-a-t-il des changements à ce sujet entre la centos 5.5 et la 6.5 ?
Merci d'avance pour vos réponses
