kerberos&LDAP实现免密码登录搭建-优快云博客

本文详细介绍了如何通过Kerberos和LDAP集成实现系统免密码登录。首先，我们讨论了Kerberos的身份验证机制，然后阐述了LDAP在用户身份管理中的作用。接着，我们将逐步指导读者配置Kerberos服务器，并集成LDAP进行身份验证。最后，通过实际操作演示如何设置无密码登录环境，确保安全性和便捷性并存。

kerberos && openldap 

1.install openldap & kerberos server:
	yum install db4 db4-utils db4-devel cyrus-sasl* krb5-server-ldap -y
	yum install openldap openldap-servers openldap-clients openldap-devel compat-openldap -y
	
2.conf ldap
	rm -rf /var/lib/ldap/*
	cp /usr/share/openldap-servers/DB_CONFIG.example /var/lib/ldap/DB_CONFIG
	chown -R ldap.ldap /var/lib/ldap
	cp -rf /etc/openldap/slapd.d /etc/openldap/slapd.d.bak
	cp /usr/share/doc/krb5-server-ldap-1.15.1/kerberos.schema /etc/openldap/schema/
	
#include  (kerberos  & openldap) schema:
cat >>/etc/openldap/slapd.conf<<"EOF"	
	include /etc/openldap/schema/core.schema
	include /etc/openldap/schema/collective.schema
	include /etc/openldap/schema/corba.schema
	include /etc/openldap/schema/cosine.schema
	include /etc/openldap/schema/duaconf.schema
	include /etc/openldap/schema/dyngroup.schema
	include /etc/openldap/schema/inetorgperson.schema
	include /etc/openldap/schema/java.schema
	include /etc/openldap/schema/misc.schema
	include /etc/openldap/schema/nis.schema
	include /etc/openldap/schema/openldap.schema
	include /etc/openldap/schema/ppolicy.schema
	include /etc/openldap/schema/kerberos.schema
EOF

#update slapd.d
	slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d
	chown -R ldap:ldap /etc/openldap/slapd.d && chmod -R 700 /etc/openldap/slapd.d


#start sldap
    rpm -e cyrus-sasl-sql 
	rpm -e cyrus-sasl-ldap
	
	systemctl start sla