Dell Wyse Enhanced Ubuntu Linux T50 Instrukcja Użytkownika Strona 105

  • Pobierz
  • Dodaj do moich podręczników
  • Drukuj
  • Strona
    / 220
  • Spis treści
  • BOOKMARKI
  • Oceniono. / 5. Na podstawie oceny klientów
Przeglądanie stron 104
Chapter 9. Authentication in ThinLinc
9.3.1.3.4. Run tl-nds-posixuser and tl-nds-posixgroup
Run tl-nds-posixuser and tl-nds-posixgroup as described in Section 9.3.4 to complement your existing
users and groups with values that allow them to be used with the ThinLinc server(s).
9.3.2. Acquiring the SSL CA Certificate from eDirectory
In order to use SSL with server verification, the public part of the CA Certificate used to sign the
certificate used for SSL on the LDAP server in eDirectory must be extracted. This is done using the
following procedure:
1. Find out what SSL Certificate object is used for the LDAP server in question using eDirectory. Find
the LDAP Server object, choose properties and in the "SSL Configuration" tab, look up the name of
the SSL Certificate object in use.
2. Find the Certificate Object, choose properties and in the "Certificates" tab, choose "Trusted Root
Certificate". Press the "Export" button. If available, choose "File in base64 format", if not, choose
"File in binary DER format".
3. Choose an appropriate filename and press the Export button. A file with the certificate will now be
written to your harddisk.
4. If you managed to export the file in base64 format (which is the same thing as PEM), use the file as
tls_cacertfile. If the export was done to DER format, execute the following command to convert it to
PEM:
[root@test root]
openssl x509 -inform der -in
<filename.der> -outform pem -out
<filename.pem>
Use the resulting file as tls_cacertfile
9.3.3. Allowing Clear Text Passwords (bind operations)
If there by some reason is no way to enable transport security (SSL) for bind operations (where
passwords are transmitted), eDirectory must be configured to allow cleartext bind operations. This is
done in the LDAP Group object under the General tab.
9.3.4. Using eDirectory User and Group Objects with ThinLinc
When integrating a Linux server into a Novell Netware network with eDirectory as source for
authentication information for the first time, the users in the eDirectory most probably doesn’t have the
neccesary objectclasses and attributes defined. The users must have the objectclass posixAccount and the
attributes (from posixAccount) uidNumber, gidNumber, loginShell, uid, and homeDirectory defined.
Groups must have the objectclass posixGroup, and a gidNumber defined. Manually assigning the
required values is not practical for installations with more than a few users.
95
Przeglądanie stron 104
1 2 ... 100 101 102 103 104 105 106 107 108 109 110 ... 219 220

Komentarze do niniejszej Instrukcji

Brak uwag