認証システムSSSD+LDAP+SUDOの構築手順


特に真新しいわけでもないけど、SSSD(System Security Services Daemon) についてメモ。SSSDは主にリモートの認証システムの利用と、その認証データのキャッシュを目的とします。

キッカケはLDAP連携において 現在利用中の nslcd+nscd との優位性が気になったからで、その辺は分けて書いておきます。ここではSSSDとLDAPの連携、そしてSUDOが使えるようにするための構築手順になります。



関連記事

  • SSSD+LDAP+SSH連携の設定
  • SSSDとnslcd+nscdの比較

  • SSSD+LDAP+SUDOの構築

    LDAPサーバーとユーザーデータは既にあるものとします。

    まず、SSSDをインストールします。
    nscd は共存できない(するべきではない)ので、削除しておきます。

    自動設定をします。が、設定内容の見た目が汚いのと、どうせsudo周りの設定が足りないので、飛ばして直接作成した方がいいかもです。

    /etc/sssd/sssd.conf を編集します。設定の説明は、キャッシュ周りは別記事で触れますが、それ以外は man sssd.conf , man sssd-ldap で確認した方が確実です。

    直接ファイルを作成した場合は、権限を設定します。

    /etc/nsswitch.conf を編集します。(authconfigでは sudoers を埋め込めません)

    再起動してデータの確認をします。

    ゴリッとキャッシュ周りの確認をしたいときなどは、キャッシュデータを削除しつつ再起動します。nscd -i passwd のようなクリーンアップツール sss_cache もあります。



    nslcd と比べると、ldap.conf や sudo-ldap.conf など散らばった設定が不要になるので、だいぶ綺麗になって使いやすくなった印象です。

    あとは、古めのバージョンには嫌らしいバグがあったりするみたいなので、新し目のディストリビューションからの採用がよいかもしれません、というくらいです。

    認証システムSSSD+LDAP+SUDOの構築手順 への26件のコメント

    1. ピンバック: CentOS 8.0をインストールしてみた | 外道父の匠

    2. Der Artikel ist wirklich informativ. Das Thema hat mich schon immer interessiert und ich konnte hier noch einiges weiterführendes finden. Ich
      bin schon sehr gespannt, weitere News zu lesen. Danke und Grüße aus Heidelberg Marco Feindler

    3. Hulda Kellaway より:

      I’m impressed, I must say. Rarely do I come across a blog that’s both equally educative and interesting, and without a doubt, you have hit the nail on the head. The issue is something that not enough people are speaking intelligently about. Now i’m very happy I came across this during my hunt for something concerning this.

    4. 匿名 より:

      Я чувствовал, как разрываю её плоть, и меня это возбуждало.

    5. Lorenzo より:

      Extraordinario información clara y sencilla, gracias y buenas tardes!

    6. media より:

      Nice weblog here! Additionally your website a lot up fast!
      What host are you the usage of? Can I am getting your affiliate hyperlink
      for your host? I wish my web site loaded
      up as fast as yours lol

    7. 마루마루 より:

      I was pretty pleased to find this site. I want to to thank you for your time for this particularly wonderful read!!
      I definitely loved every part of it aand I have youu ssaved as a favorite to see new stuff in your blog.

    8. Wonderful blog! Do you have any tips for aspiring writers?

      I’m hoping to start my own site soon but I’m a little lost on everything.
      Would you advise starting with a free platform like WordPress or go for a paid option? There
      are so many choices out there that I’m completely confused ..
      Any ideas? Cheers!

    9. home decorating より:

      Thank you a bunch for sharing this with all of us you really know what you are talking approximately!
      Bookmarked. Please additionally talk over with my site =).
      We could have a link exchange contract among us

    10. bitcoin news より:

      It’s awesome for me to have a site, which is beneficial in support of
      my knowledge. thanks admin

    11. dave auto glass より:

      Thank you, I’ve recently been searching for information about this subject
      for ages and yours is the greatest I have discovered so far.
      However, what about the bottom line? Are you certain concerning the source?

    12. I don’t know whether it’s just me or if perhaps everybody
      else experiencing problems with your site.
      It seems like some of the written text in your content are running off the screen. Can somebody else please provide feedback and let me
      know if this is happening to them too? This could be
      a issue with my web browser because I’ve had
      this happen previously. Appreciate it

    13. whoah this weblog is wonderful i like reading your articles.

      Keep up the good work! You realize, many people are hunting around for this info, you
      could help them greatly.

    14. What i don’t understood is in truth how you are no longer actually much more smartly-liked than you may be right now.

      You are very intelligent. You realize thus significantly with
      regards to this matter, made me in my opinion consider it
      from numerous numerous angles. Its like women and men don’t seem to be fascinated unless it is something to
      do with Girl gaga! Your individual stuffs excellent.

      At all times deal with it up!

    15. Winfred より:

      I feel that is one of the such a lot important information for me.

      And i’m satisfied reading your article. But wanna commentary on few basic things,
      The web site taste is great, the articles is really great : D.

      Good activity, cheers

    16. Thanks for finally talking about > 認証システムSSSD+LDAP+SUDOの構築手順 | 外道父の匠 < Loved it!

    17. slots betflik より:

      I am really happy to read this weblog posts which contains plenty of helpful facts, thanks for providing such statistics.

    18. Hi kaelyn, yes, i watched to the end!! For what its worth, I failed miserably at school so college/uni was never going to
      be an option. I actually became more interested in educating myself as I got older.

      Im actually extremely jealous of anyone who is smart enough to
      be accepted at any university. The struggles you had with your essay remind me the struggle
      I had with the “11″plus. It was the test you took at 11
      yrs old to decide if you were clever enough to go to a grammar school.
      ( I failed ) I remember not understanding most
      of the questions!! I now realise the reason I watch articles like yours and
      others is it tells me of what might have been had I been smarter.
      Saying that,continue to be productive, use this time of your life to the full and grasp this opportunity.
      You want to be able to look back and be certain that you did everything you could,
      which, if this article is anything to go by, you certainly are……fingers crossed for the PHD applications!!……A jealous
      subscriber

    19. Love hearing about your research! I am also not a person who
      can do a rough draft and edit because I hate going back to reading what I wrote lol I always feel like it should be better.
      I was wondering if you also thought yourself to be a slow writer
      in undergrad because of your writing process?

    20. top web hosting より:

      Hello mates, how is all, and what you desire to say about this post, in my view its
      in fact amazing designed for me.

    21. xtoys.co.il より:

      This is the right web sijte for everyone wwho really wants to find out about
      this topic. You understand so much its almost tough to argue with you (not that I really would
      want to…HaHa). You certanly put a brand new spin on a topic which has
      been discussed for a long time. Wonderful stuff, just great!


      My web page xtoys.co.il

    22. betflix22 より:

      You can certainly see your enthusiasm in the article you write.
      The world hopes for even more passionate writers like you who aren’t afraid to
      mention how they believe. Always go after your heart. betflix22

    23. SLOT Joker より:

      First-class information it is actually. My boss has been awaiting for this update.

    24. Inspiring quest there. What occurred after? Thanks!

    25. I get pleasure from, result in I found exactly what I used to
      be looking for. You’ve ended my 4 day long hunt!
      God Bless you man. Have a nice day. Bye

    コメントを残す

    メールアドレスが公開されることはありません。

    次のHTML タグと属性が使えます: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code class="" title="" data-url=""> <del datetime=""> <em> <i> <q cite=""> <strike> <strong> <img localsrc="" alt=""> <pre class="" title="" data-url=""> <span class="" title="" data-url="">