topic Re: Login Authenication in Operating System - Linux

Login Authenication

nash11 — Sat, 12 Aug 2006 05:51:08 GMT

We have three server

192.168.0.1 --> LDAP master server
192.168.0.2 --> LDAP slave server
192.168.0.3 --> server
192.168.0.4 --> server

Assume user A want to access server 192.168.0.3 , user B want to access server 192.168.0.4 , now , if I would like all user have one single point login ( so that they don't need to remember so many ip address ) , for example , both of them only login to 192.168.0.1 (single point) , the system can re-direct them to the host they want ( in my case which are 192.168.0.3 and 192.168.0.4 ) , does openldap have such function ?

Re: Login Authenication

Steven E. Protter — Sat, 12 Aug 2006 14:46:07 GMT

Shalom,

What you do is change authentication in server 3 and 4 (designated by their ip addresses) to LDAP.

Configure them to connect to the ldap infrastructure and you have single sign on.

The first step is to change /etc/nsswitch.conf and make the passwd entry ldap instead of the default files.

Redirecting logins to another server does not really achieve what you say you want to get done.

SEP

Re: Login Authenication

Stuart Browne — Sat, 12 Aug 2006 22:09:33 GMT

Yea.. If you want the user credentials (i.e. usernames and passwords) to be shared amongst all servers, what SEP said is perfect for you.

But from what I can tell, what you're saying doesn't relate to the authentication directly at all.

It relates more to wanting to access different servers from a single location.

You are wanting to look into passwordless SSH logins which get launched from server 1 when they log in.

LDAP it's self isn't what you want. Look at '.bash_profile' and SSH key sharing without passwords.

Re: Login Authenication

sindodm — Sat, 12 Aug 2006 22:33:33 GMT

thx SEP and SB replies,

Do you mean mean ldap doesn't have the function I mention ? so I need to setup the ssh to redirect the user from 192.168.0.1 to another server ? thx

Re: Login Authenication

dirk dierickx — Mon, 14 Aug 2006 03:17:25 GMT

ldap can do authentication for multiple hosts, but it doesn't do redirects.

Re: Login Authenication

sindodm — Mon, 14 Aug 2006 09:49:12 GMT

thx Dirk ,

if ldap doesn't has this function , can advise the good practice of it ? thx