Migration Of All Users In LDAP Server In LINUX Fedora!
Warren Sturm
wrsturm at mtroyal.ca
Wed Nov 21 05:26:07 UTC 2007
One other command you may need to look at is authconfig...which will
help set up all the config files necessary to authenticate using ldap
and other methods
authconfig --help
and man authconfig for assistance
On Tue, 2007-11-20 at 20:40 -0800, Jyotishmaan Ray wrote:
>
>
> Dear All Openldap USERS on Fedora-Linux,
>
> This is Jyotishmaan Ray, from Silchar, India.
>
> I have been working on migration of users from fedora-linux server to
> LDAP server. Of late after i have migrated the all users, as per the
> adminitration guide of openldap sofware, i realised that i have done
> something wrong, because of which the authentication is not
> successfully happening.
>
> Now please those openldap experts who are on linux-fedora platform
> please kindly pay attention to my questions:-
>
>
> 1) Is it necessary to execute the following steps :-
>
>
> Now you are ready to migrate the data (actually it works even without
> the export command):
>
> export ETC_SHADOW=/etc/shadow
> ./migrate_base.pl > /tmp/base.ldif
> ./migrate_group.pl /etc/group /tmp/group.ldif
> ./migrate_hosts.pl /etc/hosts /tmp/hosts.ldif
> ./migrate_passwd.pl /etc/passwd /tmp/passwd.ldif
>
>
> Now we have the data in the format understood by LDAP server. Please
> open one the files with text editor to get used to the syntax. After
> that we can add the data from ldifs.
>
> ldapadd -D "cn=Manager,dc=domain,dc=com" -W -f /tmp/base.ldif
>
> ldapadd -D "cn=Manager,dc=domain,dc=com" -W -f /tmp/group.ldif
>
> ldapadd -D "cn=Manager,dc=domain,dc=com" -W -f /tmp/passwd.ldif
>
> ldapadd -D "cn=Manager,dc=domain,dc=com" -W -f /tmp/hosts.ldif
>
>
>
> However, i have not performed all the above steps except for the
> addition of users!!
>
>
>
> As of now, when i finger the users, it shows fine. But when i try to
> log ion to the server machine using ssh localhost.localdomain. -l xyx,
>
> it asks me the password twice one trial after another and susequently
> throwing the message:-
>
>
>
> [root at authdns bin]# ssh authdns.nits.ac.in -l jmaan
> jmaan at authdns.nits.ac.in's password:
> Permission denied, please try again.
> jmaan at authdns.nits.ac.in's password:
> Permission denied, please try again.
> jmaan at authdns.nits.ac.in's password:
> Permission denied (publickey,gssapi-with-mic,password).
>
>
> [root at authdns bin]#
>
>
>
>
>
>
> After seaching on the google.co.in, i have changed the default
> permission of the /dev/tty (666) to 777.
>
>
>
> Still it is not successfully working with ssh. I just wanted to make
> it sure that i could log in with user locally, to my server. However,
> the /etc/passwd file does not shows the passwd field of the users as
> 'x' but rather as '*'.
>
>
>
>
> To check this i have tried using the command,
>
>
>
> getent passwd|grep user
>
>
>
> it worked fine.
>
>
>
> Please tell me it is because i have not performed the first few steps
> of ldapadd of base.ldif, hosts.ldif, group.ldif to the ldap server
> that, its not working.
>
>
>
> I have also worked with the command:-
>
>
> pwconv
>
>
>
> to generate the new shadow file from the /etc/passwd file.
>
>
>
> Please help!!
>
> With Thanks and Regards,
> Jyotishmaan Ray
> Moderator Of Paradise Groups
> http://yahoogroups.com/group/Spirituality-Paradise
>
> Are You Spiritually Aware !!! Are You Enjoying Yourself !!! See
> What All You Had Been Missing !!!!
> Please Join Immediately By Sending A Blank Mail @
> Spirituality-Paradise-subscribe at yahoogroups.com
>
>
>
>
>
>
>
>
> ______________________________________________________________________
> Be a better sports nut! Let your teams follow you with Yahoo Mobile.
> Try it now.
> --
> fedora-list mailing list
> fedora-list at redhat.com
> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
More information about the users
mailing list