Hi all,
Can anyone please tell me how can i pull users from LDAP server and treat them as local users? So that i can login as an ldap user and test whether particular user have permissions to particular HDFS commands or not.
On Wed, 12 Aug 2015, Aneela Saleem wrote:
Hi all, Can anyone please tell me how can i pull users from LDAP server and treat them as local users? So that i can login as an ldap user and test whether particular user have permissions to particular HDFS commands or not.
I'm not sure what you're referring to by "pull." In a typical *ix setup, you'd configure the system name services and/or authentication services to include an LDAP backend.
The precise details and options depend on the exact flavor of the system you're using. nss_ldap, nss-pam-ldapd, and nssov are likely candidates on the name service side; nss-pam-ldapd also provides a pam_ldap on the authentication side. But again, this is somewhat system-dependent (no NSS on OS X/Darwin, for example).
For nssov, see the LDAPCon paper http://ldapcon.org/2011/downloads/cheng-paper.pdf for starters.
Hi Aaron!
Actually i'm trying to login LDAP users as local users from command line.
I have followed this https://www.digitalocean.com/community/tutorials/how-to-authenticate-client-computers-using-ldap-on-an-ubuntu-12-04-vps guide but unable to perform 'ssh'
On Wed, Aug 12, 2015 at 7:23 PM, Aaron Richton richton@nbcs.rutgers.edu wrote:
On Wed, 12 Aug 2015, Aneela Saleem wrote:
Hi all, Can anyone please tell me how can i pull users from LDAP server
and treat them as local users? So that i can login as an ldap user and test whether particular user have permissions to particular HDFS commands or not.
I'm not sure what you're referring to by "pull." In a typical *ix setup, you'd configure the system name services and/or authentication services to include an LDAP backend.
The precise details and options depend on the exact flavor of the system you're using. nss_ldap, nss-pam-ldapd, and nssov are likely candidates on the name service side; nss-pam-ldapd also provides a pam_ldap on the authentication side. But again, this is somewhat system-dependent (no NSS on OS X/Darwin, for example).
For nssov, see the LDAPCon paper http://ldapcon.org/2011/downloads/cheng-paper.pdf for starters.
On Wed, Aug 12, 2015 at 10:37 AM, Aneela Saleem aneela@platalytics.com wrote:
Hi Aaron!
Actually i'm trying to login LDAP users as local users from command line.
I have followed this guide but unable to perform 'ssh'
I think we need more than "unable to perform 'ssh'." Have you done the usual stuff like ssh in verbose mode and check the logs? Have you checked that ldap works in said machine?
On Wed, Aug 12, 2015 at 7:23 PM, Aaron Richton richton@nbcs.rutgers.edu wrote:
On Wed, 12 Aug 2015, Aneela Saleem wrote:
Hi all, Can anyone please tell me how can i pull users from LDAP server and treat them as local users? So that i can login as an ldap user and test whether particular user have permissions to particular HDFS commands or not.
I'm not sure what you're referring to by "pull." In a typical *ix setup, you'd configure the system name services and/or authentication services to include an LDAP backend.
The precise details and options depend on the exact flavor of the system you're using. nss_ldap, nss-pam-ldapd, and nssov are likely candidates on the name service side; nss-pam-ldapd also provides a pam_ldap on the authentication side. But again, this is somewhat system-dependent (no NSS on OS X/Darwin, for example).
For nssov, see the LDAPCon paper http://ldapcon.org/2011/downloads/cheng-paper.pdf for starters.
openldap-technical@openldap.org
-
Aaron Richton -
Aneela Saleem -
Mauricio Tavares