Re: How to authenticate Linux Clients using Domino server

Am 12.05.2004 um 15:14 schrieb Ralph Seichter:

> Andreas Vetter wrote:
>
> > I thought to use PAM. As far as I understand it, pam_ldap uses
> > openldap client for communication with the LDAP server.
> >
> > I basically need it as a replacement for NIS user authentication.
> > Is saslauthd the way to go?
>
> I don't really have an answer. "saslauthd" can be configured to use a
> couple of authentication mechanisms, PAM and LDAP being two of them.
> As "man 8 saslauthd" reports, OpenLDAP >= 2.0 is used.

If you want to authenticate a unix system against LDAP you will need to 
have
the posix account schema available.

This has to be done on the LDAP server, which basically means you have 
to change
the domino LDAP templates.

Note that it does not help to simply authenticate, you will need to 
enable nssldap on
the Linux clients to make users and groups available on the client.

So you have to support posix groups in LDAP also.

For the sake of simplicity, I would suggest to synchronize the Domino 
LDAP Directory
with an OpenLDAP server, which holds all the posix user/group data.

just my 0.02 euro,
Ingo