Login Authenication

[nash11]

We have three server

192.168.0.1 --> LDAP master server
192.168.0.2 --> LDAP slave server
192.168.0.3 --> server
192.168.0.4 --> server

Assume user A want to access server 192.168.0.3 , user B want to access server 192.168.0.4 , now , if I would like all user have one single point login ( so that they don't need to remember so many ip address ) , for example , both of them only login to 192.168.0.1 (single point) , the system can re-direct them to the host they want ( in my case which are 192.168.0.3 and 192.168.0.4 ) , does openldap have such function ?

[Steven E. Protter]

Shalom,

What you do is change authentication in server 3 and 4 (designated by their ip addresses) to LDAP.

Configure them to connect to the ldap infrastructure and you have single sign on.

The first step is to change /etc/nsswitch.conf and make the passwd entry ldap instead of the default files.

Redirecting logins to another server does not really achieve what you say you want to get done.

SEP

[Stuart Browne]

Yea.. If you want the user credentials (i.e. usernames and passwords) to be shared amongst all servers, what SEP said is perfect for you.

But from what I can tell, what you're saying doesn't relate to the authentication directly at all.

It relates more to wanting to access different servers from a single location.

You are wanting to look into passwordless SSH logins which get launched from server 1 when they log in.

LDAP it's self isn't what you want. Look at '.bash_profile' and SSH key sharing without passwords.

[sindodm]

thx SEP and SB replies,

Do you mean mean ldap doesn't have the function I mention ? so I need to setup the ssh to redirect the user from 192.168.0.1 to another server ? thx

[dirk dierickx]

ldap can do authentication for multiple hosts, but it doesn't do redirects.

[sindodm]

thx Dirk ,

if ldap doesn't has this function , can advise the good practice of it ? thx