3:30 p.m.
Hi all,
Can anyone please tell me how can i pull users from LDAP server and treat
them as local users? So that i can login as an ldap user and test whether
particular user have permissions to particular HDFS commands or not.
7:23 a.m.
On Wed, 12 Aug 2015, Aneela Saleem wrote:
Hi all, Can anyone please tell me how can i pull users from LDAP
server
and treat them as local users? So that i can login as an ldap user and
test whether particular user have permissions to particular HDFS
commands or not.
I'm not sure what you're referring to by "pull." In a typical *ix setup,
you'd configure the system name services and/or authentication services to
include an LDAP backend.
The precise details and options depend on the exact flavor of the system
you're using. nss_ldap, nss-pam-ldapd, and nssov are likely candidates on
the name service side; nss-pam-ldapd also provides a pam_ldap on the
authentication side. But again, this is somewhat system-dependent (no NSS
on OS X/Darwin, for example).
For nssov, see the LDAPCon paper
http://ldapcon.org/2011/downloads/cheng-paper.pdf for starters.
7:37 a.m.
Hi Aaron!
Actually i'm trying to login LDAP users as local users from command line.
I have followed this
<https://www.digitalocean.com/community/tutorials/how-to-authenticate-clie...
guide but unable to perform 'ssh'
On Wed, Aug 12, 2015 at 7:23 PM, Aaron Richton <richton(a)nbcs.rutgers.edu>
wrote:
On Wed, 12 Aug 2015, Aneela Saleem wrote:
Hi all, Can anyone please tell me how can i pull users from LDAP server
> and treat them as local users? So that i can login as an ldap user and test
> whether particular user have permissions to particular HDFS commands or not.
>
I'm not sure what you're referring to by "pull." In a typical *ix
setup,
you'd configure the system name services and/or authentication services to
include an LDAP backend.
The precise details and options depend on the exact flavor of the system
you're using. nss_ldap, nss-pam-ldapd, and nssov are likely candidates on
the name service side; nss-pam-ldapd also provides a pam_ldap on the
authentication side. But again, this is somewhat system-dependent (no NSS
on OS X/Darwin, for example).
For nssov, see the LDAPCon paper
http://ldapcon.org/2011/downloads/cheng-paper.pdf for starters.
7:56 a.m.
On Wed, Aug 12, 2015 at 10:37 AM, Aneela Saleem <aneela(a)platalytics.com> wrote:
Hi Aaron!
Actually i'm trying to login LDAP users as local users from command line.
I have followed this guide but unable to perform 'ssh'
I think we need more than "unable to perform 'ssh'." Have
you
done the usual stuff like ssh in verbose mode and check the logs? Have
you checked that ldap works in said machine?
On Wed, Aug 12, 2015 at 7:23 PM, Aaron Richton
<richton(a)nbcs.rutgers.edu>
wrote:
>
> On Wed, 12 Aug 2015, Aneela Saleem wrote:
>
>> Hi all, Can anyone please tell me how can i pull users from LDAP server
>> and treat them as local users? So that i can login as an ldap user and test
>> whether particular user have permissions to particular HDFS commands or not.
>
>
> I'm not sure what you're referring to by "pull." In a typical *ix
setup,
> you'd configure the system name services and/or authentication services to
> include an LDAP backend.
>
> The precise details and options depend on the exact flavor of the system
> you're using. nss_ldap, nss-pam-ldapd, and nssov are likely candidates on
> the name service side; nss-pam-ldapd also provides a pam_ldap on the
> authentication side. But again, this is somewhat system-dependent (no NSS on
> OS X/Darwin, for example).
>
> For nssov, see the LDAPCon paper
> http://ldapcon.org/2011/downloads/cheng-paper.pdf for starters.
>
2789
days inactive
2790
days old
openldap-technical@openldap.org
3 comments
3 participants
participants (3)
-
Aaron Richton -
Aneela Saleem -
Mauricio Tavares