NSLCD

Installation :

yum install -y nss-pam-ldapd nscd

Modification du fichier /etc/nslcd.conf

uid nslcd
gid ldap
uri ldap://srvads.ad.tranquil.it/
base dc=ad,dc=tranquil,dc=it
binddn cn=simon_test,ou=service_accounts,ou=tranquilit,dc=ad,dc=tranquil,dc=it
bindpw mot_de_passe
pagesize 1000
referrals off
idle_timelimit 800
filter passwd (&(objectClass=user)(!(objectClass=computer))(uidNumber=*)(unixHomeDirectory=*))
map    passwd uid              sAMAccountName
map    passwd homeDirectory    unixHomeDirectory
map    passwd gecos            displayName
filter shadow (&(objectClass=user)(!(objectClass=computer))(uidNumber=*)(unixHomeDirectory=*))
map    shadow uid              sAMAccountName
map    shadow shadowLastChange pwdLastSet
filter group  (objectClass=group)
ssl no
tls_cacertdir /etc/openldap/cacerts

Pour reconfigurer la partie pam:

authconfig-tui

Reconfiguration du nsswitch /etc/nsswitch.conf :

passwd:     files ldap
shadow:     files ldap
group:      files ldap

systemctl restart nslcd

Purge du cache si nécessaire :

nscd --invalidate=passwd
nscd --invalidate=group

SAMBA - Authentification CentOS avec NSLCD

NSLCD