Changes between Version 63 and Version 64 of Old/hNodes/cNodeVer3/dAssembly/e4NodesSetup
- Timestamp:
- Jul 3, 2013, 6:28:06 PM (11 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
Old/hNodes/cNodeVer3/dAssembly/e4NodesSetup
v63 v64 498 498 2. Edit the /etc/ldap.conf file to configure the ldap client. 499 499 {{{ 500 base dc= orbit-lab,dc=org501 uri ldap://ldap. orbit-lab.org/500 base dc=geni,dc=net 501 uri ldap://ldap.geni.net/ 502 502 ldap_version 3 503 503 binddn 504 rootbinddn cn=admin,dc= orbit-lab,dc=org504 rootbinddn cn=admin,dc=geni,dc=net 505 505 pam_password md5 506 506 nss_initgroups_ignoreusers backup,bin,daemon,games,gnats,irc,libuuid,libvirt- qemu,list,lp,mail,man,messagebus,news,ntp,postfix,proxy,root,sshd,statd,sync,sys,syslog,usbmux,uucp,www-data … … 513 513 3. The /etc/ldap/ldap.conf is the second file that guides the client. 514 514 {{{ 515 BASE dc= orbit-lab,dc=org516 URI ldap://ldap. orbit-lab.org515 BASE dc=geni,dc=net 516 URI ldap://ldap.geni.net 517 517 }}} 518 518 Again you can edit it directly or copy this version​. … … 549 549 8. We need to make sure machine have fully qualified host name (some services depend on it). So: 550 550 {{{ 551 echo "console. sb4.orbit-lab.org" > /etc/hostname551 echo "console.geni.net" > /etc/hostname 552 552 }}} 553 553 … … 572 572 1. Decide on the organizational structure for ldap: 573 573 {{{ 574 orbit-lab.org => dc=orbit-lab,dc=org574 geni.net => dc=geni,dc=net 575 575 }}} 576 576 … … 603 603 database bdb 604 604 index objectclass,entryCSN,entryUUID eq 605 suffix "dc= orbit-lab,dc=org"606 rootdn "dc= orbit-lab,dc=org"605 suffix "dc=geni,dc=net" 606 rootdn "dc=geni,dc=net" 607 607 directory "/var/lib/ldap" 608 608 access to dn.base="" by * read 609 access to * by dn.regex="cn=admin,dc= orbit,dc=lab,dc=org" write by * read610 access to attrs=userPassword by dn.regex="cn=admin,dc= orbit-lab,dc=org" write by anonymous auth by self write by * none609 access to * by dn.regex="cn=admin,dc=geni,dc=net" write by * read 610 access to attrs=userPassword by dn.regex="cn=admin,dc=geni,dc=net" write by anonymous auth by self write by * none 611 611 }}} 612 612