Changes between Version 63 and Version 64 of Old/hNodes/cNodeVer3/dAssembly/e4NodesSetup


Ignore:
Timestamp:
Jul 3, 2013, 6:28:06 PM (11 years ago)
Author:
ParviK
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Old/hNodes/cNodeVer3/dAssembly/e4NodesSetup

    v63 v64  
    4984982. Edit the /etc/ldap.conf file to configure the ldap client.
    499499{{{
    500     base dc=orbit-lab,dc=org
    501     uri ldap://ldap.orbit-lab.org/
     500    base dc=geni,dc=net
     501    uri ldap://ldap.geni.net/
    502502    ldap_version 3
    503503    binddn
    504     rootbinddn cn=admin,dc=orbit-lab,dc=org
     504    rootbinddn cn=admin,dc=geni,dc=net
    505505    pam_password md5
    506506    nss_initgroups_ignoreusers backup,bin,daemon,games,gnats,irc,libuuid,libvirt- qemu,list,lp,mail,man,messagebus,news,ntp,postfix,proxy,root,sshd,statd,sync,sys,syslog,usbmux,uucp,www-data
     
    5135133.  The /etc/ldap/ldap.conf is the second file that guides the client.
    514514{{{
    515     BASE    dc=orbit-lab,dc=org
    516     URI     ldap://ldap.orbit-lab.org
     515    BASE    dc=geni,dc=net
     516    URI     ldap://ldap.geni.net
    517517}}}
    518518 Again you can edit it directly or copy this version​.
     
    5495498.  We need to make sure machine have fully qualified host name (some services depend on it). So:
    550550{{{
    551     echo "console.sb4.orbit-lab.org" > /etc/hostname
     551    echo "console.geni.net" > /etc/hostname
    552552}}}
    553553
     
    5725721. Decide on the organizational structure for ldap:
    573573{{{
    574     orbit-lab.org => dc=orbit-lab,dc=org
     574    geni.net => dc=geni,dc=net
    575575}}}
    576576
     
    603603   database bdb
    604604   index objectclass,entryCSN,entryUUID eq
    605    suffix "dc=orbit-lab,dc=org"
    606    rootdn "dc=orbit-lab,dc=org"
     605   suffix "dc=geni,dc=net"
     606   rootdn "dc=geni,dc=net"
    607607   directory "/var/lib/ldap"
    608608   access to dn.base="" by * read
    609    access to * by dn.regex="cn=admin,dc=orbit,dc=lab,dc=org" write by * read
    610    access to attrs=userPassword by dn.regex="cn=admin,dc=orbit-lab,dc=org" write by anonymous auth by self write by * none
     609   access to * by dn.regex="cn=admin,dc=geni,dc=net" write by * read
     610   access to attrs=userPassword by dn.regex="cn=admin,dc=geni,dc=net" write by anonymous auth by self write by * none
    611611}}}
    612612