[B! OpenLDAP] coceloã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

cocelo id:cocelo

OpenLDAPã«é–¢ã™ã‚‹coceloã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (24)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

openldap + samba ãƒ‰ãƒ¡ã‚¤ãƒ³ã€€Windows7 ã®ãƒã‚°ã‚¤ãƒ³ãŒé…ã„: ã‚ã‹ã¶
çµæ§‹ã¯ã¾ã£ãŸã€‚æ—¥æœ¬èªžã®ã‚µã‚¤ãƒˆã«ã¯è§£æ±ºç–ã¯è¦‹ã¤ã‘ã‚‰ã‚Œãªã‹ã£ãŸã€‚ ç’°å¢ƒã¯ã€CentOS5.6 + samba3x ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ï¼ˆver 3.5.4) ãƒ¦ãƒ¼ã‚¶åãƒ»ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰å…¥åŠ›å¾Œã®å‹•ä½œã‚’wiresharkã§ãƒ‘ã‚±ãƒƒãƒˆã‚ãƒ£ãƒ—ãƒãƒ£ã‚’ã—ã¦ã¿ã‚‹ã¨ã€ samba(PDC)ã«å¯¾ã—IPC$ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚„ã€net logonå…±æœ‰ã«å¯¾ã™ã‚‹ã‚¢ã‚¯ã‚»ã‚¹ã‚’ã—ãã‚Šã« è¡Œã£ã¦ã„ã‚‹ã€‚30ç§’çµŒéŽã—ãŸãã‚‰ã„ã§ã‚„ã£ã¨ãƒã‚°ã‚¤ãƒ³ã®èªè¨¼ãƒ‘ã‚±ãƒƒãƒˆãŒé£›ã‚“ã§ãã‚‹ã€‚ ä½•ã˜ã‚ƒã“ã‚Šã‚ƒï¼Ÿï¼Ÿï¼ˆã¨å¿ƒã®å£°ï¼‰ è§£æ±ºç–ãŒãªã‹ãªã‹è¦‹ã¤ã‹ã‚‰ãªã„ã€‚ãã‚‚ãã‚‚Windows7ã¯NTãƒ‰ãƒ¡ã‚¤ãƒ³éžå¯¾å¿œã€‚ sambaãƒ‰ãƒ¡ã‚¤ãƒ³ã‚‚éžã‚µãƒãƒ¼ãƒˆã€‚ã‚„ã£ã±ã‚Šã‚„ã£ã¦ã„ã‚‹äººãŒå°‘ãªã„ã®ã§ã™ããã£ã¨ã€‚ ã¡ãªã¿ã«ä»Šå›žã®æ§‹æˆã¯ã€ç§»å‹•ãƒ—ãƒãƒ•ã‚¡ã‚¤ãƒ«ã¯ä½¿ã‚ãªã„æ§‹æˆã§ã™ã€‚ ç§»å‹•ãƒ—ãƒãƒ•ã‚¡ã‚¤ãƒ«ã‚’ä½¿ã„ã€ãƒ›ãƒ¼ãƒ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã®å…±æœ‰ã‚„ã€net logonå…±æœ‰ãŒæœ‰åŠ¹ã« ãªã£ã¦ã„ã‚‹ç’°å¢ƒã§ã¯é…å»¶ã¯ç™ºç”Ÿã™ã‚‹ã®ã‹ãªï¼Ÿ æ™‚é–“ãŒç„¡ãã¦è©¦ã›ã¦ã¾ã›
cocelo 2011/09/27
Samba

OpenLDAP

Windows

Windows 7

CentOS
ãƒªãƒ³ã‚¯
dfltweb1.onamae.com â€“ ã“ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã¯ãŠåå‰.comã§å–å¾—ã•ã‚Œã¦ã„ã¾ã™ã€‚
ã“ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã¯ ãŠåå‰.com ã‹ã‚‰å–å¾—ã•ã‚Œã¾ã—ãŸã€‚ ãŠåå‰.com ã¯ GMOã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚°ãƒ«ãƒ¼ãƒ—(æ ª) ãŒé‹å–¶ã™ã‚‹å›½å†…ã‚·ã‚§ã‚¢No.1ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ç™»éŒ²ã‚µãƒ¼ãƒ“ã‚¹ã§ã™ã€‚ â€»è¡¨ç¤ºä¾¡æ ¼ã¯ã€å…¨ã¦ç¨Žè¾¼ã§ã™ã€‚ â€»ã‚µãƒ¼ãƒ“ã‚¹å“è³ªç¶æŒã®ãŸã‚ã€ä¸€æ™‚çš„ã«å¯¾è±¡ã¨ãªã‚‹æ–™é‡‘ã¸ä¸€å®šå‰²åˆã®ã€Œã‚µãƒ¼ãƒ“ã‚¹ç¶æŒèª¿æ•´è²»ã€ã‚’åŠ ç®—ã•ã›ã¦ã„ãŸã ãã¾ã™ã€‚ â€»1 ã€Œå›½å†…ã‚·ã‚§ã‚¢ã€ã¯ã€ICANN(ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®ãƒ‰ãƒ¡ã‚¤ãƒ³åãªã©ã®è³‡æºã‚’ç®¡ç†ã™ã‚‹éžå–¶åˆ©å›£ä½“)ã®å…¬è¡¨æ•°å€¤ã‚’ã‚‚ã¨ã«é›†è¨ˆã€‚gTLDãŒé›†è¨ˆã®å¯¾è±¡ã€‚ æ—¥æœ¬ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ç™»éŒ²æ¥è€…(ãƒ¬ã‚¸ã‚¹ãƒˆãƒ©)ï¼ˆã€ŒICANNãŒãƒ¬ã‚¸ã‚¹ãƒˆãƒ©ã¨ã—ã¦èªå®šã—ãŸä¼æ¥ã€ä¸€è¦§ï¼ˆInterNICæä¾›ï¼‰å†…ã«ã€ŒJapanã€ã®è¨˜è¼‰ãŒã‚ã‚‹ã‚‚ã®ï¼‰ã‚’å¯¾è±¡ã€‚ ãƒ¬ã‚¸ã‚¹ãƒˆãƒ©ã€ŒGMO Internet Group, Inc. d/b/a Onamae.comã€ã®ã‚·ã‚§ã‚¢å€¤ã‚’é›†è¨ˆã€‚ 2023å¹´10æœˆæ™‚ç‚¹ã®èª¿æŸ»ã€‚
cocelo 2009/12/01
OpenLDAP

automount

FreeBSD

LDAP
ãƒªãƒ³ã‚¯
Ldapsam Editposix - SambaWiki
cocelo 2009/10/31
Samba

LDAP

PDC

OpenLDAP
ãƒªãƒ³ã‚¯
OpenLDAP: ldapsearch(1) -y ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã®æ€ªã—ã„æŒ™å‹• â€“ ãƒ€ãƒ¡å‡ºã—æ—¥è¨˜
cocelo 2009/10/29
OpenLDAP

LDAP
ãƒªãƒ³ã‚¯
[samba-jp:20878] sambaãƒ‰ãƒ¡ã‚¤ãƒ³ã¨windows7
cocelo 2009/10/29
Windows

Windows 7

Samba

LDAP

OpenLDAP

PDC
ãƒªãƒ³ã‚¯
nss-pam-ldapd: NSS and PAM modules for lookups using LDAP
cocelo 2009/10/28
nss_ldap

pam_ldap

PAM

LDAP

OpenLDAP
ãƒªãƒ³ã‚¯
LDAPã«ã‚ˆã‚‹ãƒ¦ãƒ¼ã‚¶æƒ…å ±ã®ç®¡ç† - takedarts.jp
æ¦‚è¦ â€ UNIXç³»ã®ã‚µãƒ¼ãƒã§ã¯ã€/etc/passwdã«ç®¡ç†ã•ã‚Œã‚‹é€šå¸¸ã®ã‚µãƒ¼ãƒåˆ©ç”¨è€…ã ã‘ã§ã¯ãªãã€Sambaåˆ©ç”¨è€…ã‚„WebDavåˆ©ç”¨è€…ãªã©ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³åˆ©ç”¨è€…ãŒå˜åœ¨ã™ã‚‹ã€‚ é€šå¸¸ã®ã‚µãƒ¼ãƒ*1ã§ã¯ã€ã“ã‚Œã‚‰ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒåˆ¥å€‹ã«ãƒ¦ãƒ¼ã‚¶æƒ…å ±ã‚’ç®¡ç†ã—ã¦ãŠã‚Šã€å¤šãã®ã‚µãƒ¼ãƒ“ã‚¹(ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³)ã‚’å°Žå…¥ã™ã‚‹ã¨ãƒ¦ãƒ¼ã‚¶ç®¡ç†ãŒç…©é›‘ã«ãªã‚‹ã€‚ ãã“ã§ã€LDAPã«ãƒ¦ãƒ¼ã‚¶æƒ…å ±ã‚’ç™»éŒ²ã—ã€ã“ã‚Œã‚’OSã®èªè¨¼æ©Ÿæ§‹ã¨ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‹ã‚‰å‚ç…§ã™ã‚‹ã‚·ã‚¹ãƒ†ãƒ ã‚’æ§‹ç¯‰ã™ã‚‹ã€‚LDAPã«ã¦ãƒ¦ãƒ¼ã‚¶æƒ…å ±ã‚’ä¸€å…ƒç®¡ç†ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ãƒ¦ãƒ¼ã‚¶ã®è¿½åŠ ãƒ»å‰Šé™¤ç‰ã®ãƒ¦ãƒ¼ã‚¶ç®¡ç†ã®æ‰‹é–“ã‚’æ¸›ã‚‰ã™ã€‚ ã“ã“ã§ã¯ã€ä»¥ä¸‹ã®èªè¨¼ã®ãŸã‚ã®ãƒ¦ãƒ¼ã‚¶æƒ…å ±ã‚’LDAPã§ç®¡ç†ã™ã‚‹ã€‚ ãƒ¦ãƒ¼ã‚¶èªè¨¼(/etc/passwdã¨ã®çµ±åˆ) Sambaã®ãƒ¦ãƒ¼ã‚¶èªè¨¼ Apacheã®ãƒ¦ãƒ¼ã‚¶èªè¨¼(Basicèªè¨¼) PPTPã®ãƒ¦ãƒ¼ã‚¶èªè¨¼ â†‘ ä½¿ç”¨ã—ãŸã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ â€ FreeBSD ver.6.3 Op
cocelo 2009/10/27
FreeBSD

LDAP

OpenLDAP

Samba

PDC
ãƒªãƒ³ã‚¯
LISM - ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆç®¡ç†ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ LISM
LISM(LDAP Identity Synchronization Manager) â€ LISM(LDAP Identity Synchronization Manager)ã¯ã€LDAPã€ãƒªãƒ¬ãƒ¼ã‚·ãƒ§ãƒŠãƒ«ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã€CSVãƒ•ã‚¡ã‚¤ãƒ«ã¨ã„ã£ãŸæ§˜ã€…å½¢å¼ã§ç®¡ç†ã•ã‚Œã¦ã„ã‚‹IDæƒ…å ±ã‚’ã€LDAPã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã‚’é€šã—ã¦ä¸€å…ƒçš„ã«ç®¡ç†ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã™ã€‚ ãƒ‹ãƒ¥ãƒ¼ã‚¹ â€ 2008å¹´9æœˆ8æ—¥ LISM 2.2.6ã‚’ãƒªãƒªãƒ¼ã‚¹ã—ã¾ã—ãŸã€‚ 2008å¹´8æœˆ9æ—¥ LISM 2.2.5ã‚’ãƒªãƒªãƒ¼ã‚¹ã—ã¾ã—ãŸã€‚ 2008å¹´6æœˆ17æ—¥ LISM 2.2.4ã‚’ãƒªãƒªãƒ¼ã‚¹ã—ã¾ã—ãŸã€‚ 2008å¹´5æœˆ29æ—¥ LinuxWorld Expo/Tokyo 2008.orgã‚»ãƒŸãƒŠãƒ¼ã«ã¦è¬›æ¼”ã‚’è¡Œã„ã¾ã—ãŸã€‚ 2008å¹´4æœˆ17æ—¥ LISM 2.2.3ã‚’ãƒªãƒªãƒ¼ã‚¹ã—ã¾ã—ãŸã€‚ 2008å¹´3æœˆ28æ—¥ ç¬¬2å›žLISMå‹‰å¼·ä¼šã‚’é–‹å‚¬
cocelo 2008/11/05
OpenLDAP

LDAP

Server

Perl
ãƒªãƒ³ã‚¯
Prefetch Technologies -- Prefetch Technologies
Welcome! Prefetch Techno logies hosts a wide variety of opensource software, in-depth technical articles, presentations and reference material for a wide-variety of applications and Operating Systems. The site also hosts the techno logy blog Blog Oâ€™ Matty. There you will find solutions to probl ems, HOWTOS, techno logy reviews, and step-by-step debugging guides. You may even find an occassional concer
cocelo 2008/11/02
BSD

OpenBSD

LDAP

OpenLDAP

OpenSSH

SSH

DTrace

UNIX

Linux
ãƒªãƒ³ã‚¯
postfix-ldap @ debian etch Â« himorinâ€™s blog
cocelo 2008/11/02
Postfix

LDAP

OpenLDAP
ãƒªãƒ³ã‚¯
http://blog.harimawo.com/2008/03/slapd%E3%81%A8%E5%90%8C%E4%B8%80%E3%82%B5%E3%83%BC%E3%83%90%E4%B8%8A%E3%81%A7nss_ldap%E3%82%92%E4%BD%BF%E3%81%86%E6%99%82%E3%81%AE%E6%B3%A8%E6%84%8F/
cocelo 2008/04/20
FreeBSD

FreeBSD 6.3

LDAP

OpenLDAP

nss_ldap

pam_ldap
ãƒªãƒ³ã‚¯
FreeBSD/LDAP - SHIMI.INFO
Last-modified: Mon, 09 May 2005 07:58:48 JST (1240d) FreeBSD Install vmwareã‚’åˆ©ç”¨ã€‚ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã¯virtual switchãƒ¢ãƒ¼ãƒ‰ã¨ã™ã‚‹ã€‚ FreeBSD-5.4-RC3 ã‚’åˆ©ç”¨ã€‚ --> 5.3ã¨nssã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®ç½®ãå ´æ‰€ãŒå¤‰æ›´ã•ã‚Œã¦ã„ã‚‹ã£ã½ã„ã®ã§æ³¨æ„.. openldap, nss_ldap, pam_ldap ã®å°Žå…¥ openldap-sasl-client, openldap-sasl-server # cd /usr/ports/net/openldap22-sasl-server # make install nss_ldap # cd /usr/ports/net/nss_ldap # make install ã€œä¸ç•¥ã€œ ======================================
cocelo 2008/04/04
FreeBSD

OpenLDAP

nss_ldap

pam_ldap

LDAP

Tips
ãƒªãƒ³ã‚¯
nss_ldapã¨nscdã®ç½ - sumiiã®ãƒ–ãƒã‚°
ã¨ã„ã†ã“ã¨ã§ã‚¤ãƒ³ã‚¿ãƒ©ãƒ—ãƒˆã•ã‚ŒãªãŒã‚‰straceã¨ã‹ã—ã¦èª¿ã¹ã¦ã‚ã‹ã£ãŸï¼ˆã¤ã‚‚ã‚Šã®ï¼‰ã“ã¨ï¼š LDAPã«ã‚ˆã‚‹UNIXã‚¢ã‚«ã‚¦ãƒ³ãƒˆç®¡ç†ï¼èªè¨¼ã¯ã€nscdãŒã„ãªã„ã¨é…ã„ã€‚ ã‚ã¨ã€ã‚·ã‚¹ãƒ†ãƒ å…¨ä½“ã‚„LDAPã‚µãƒ¼ãƒã®èµ·å‹•ãƒ»å†èµ·å‹•ç‰ã§ã€LDAPã‚µãƒ¼ãƒãŒå‹•ä½œã—ã¦ã„ãªã„ã¨ã€rootã¨ã‹ldapè‡ªèº«ã¨ã‹ã®ã‚°ãƒ«ãƒ¼ãƒ—æ¤œç´¢ãŒã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆã™ã‚‹ã®ã§æ‚²æƒ¨ã€‚ ãªã®ã§ã€/etc/ldap.confã«nss_initgroups_ignoreusers root,ldap,...ã®ã‚ˆã†ã«ã‚·ã‚¹ãƒ†ãƒ ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’åˆ—æŒ™ã—ãªã„ã¨ã„ã‘ãªã„ã€‚ ã¨ã“ã‚ãŒã€ãã“ã«ã€Œnscdã€ã‚’ã€Œåˆ—æŒ™ã€ã—ã¦ã—ã¾ã†ã¨ã€ãªãœã‹/var/run/nscd/socketãŒä½œæˆã•ã‚Œãªããªã‚‹ã€‚ãã®ãŸã‚ã«nscd -gï¼ˆã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹å–å¾—ï¼‰ã¨ã‹nscd -Kï¼ˆãƒ‡ãƒ¼ãƒ¢ãƒ³åœæ¢ï¼‰ã¨ã‹ãŒå‹•ä½œã›ãšã€/etc/init.d/nscd stopã‚„restartã‚‚å¤±æ•—ã™ã‚‹ã€‚ ã¨ã„ã†ã“ã¨ã§ã€/etc/pa
cocelo 2008/04/04
OpenLDAP

nss_ldap

pam_ldap

LDAP

Tips

nscd
ãƒªãƒ³ã‚¯
ç¬¬9å›žã€€LDAPã¨ãƒã‚° | gihyo.jp
ä»¥ä¸Šã®ã„ãšã‚Œã‹ã‚’è¨å®šã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€slapdã‹ã‚‰syslogãƒ‡ãƒ¼ãƒ¢ãƒ³ã«ãƒã‚°ãŒé€å‡ºã•ã‚Œã‚‹ã®ã§ã™ãŒã€å½“ç„¶ã®ã“ã¨ãªãŒã‚‰syslogãƒ‡ãƒ¼ãƒ¢ãƒ³å´ã§ã‚‚é©åˆ‡ã«è¨å®šã‚’è¡Œã£ã¦ãŠãå¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚slapdã‹ã‚‰ã®ãƒã‚°ã¯local4ã¨ã„ã†ãƒ•ã‚¡ã‚·ãƒªãƒ†ã‚£ã§å‡ºåŠ›ã•ã‚Œã‚‹ãŸã‚ã€/etc/syslog.confã«ãƒªã‚¹ãƒˆ2ã®ã‚ˆã†ãªè¨å®šã‚’è¿½è¨˜ã—ã€syslogdã‚’å†èµ·å‹•ã—ã¦ãŠã„ã¦ãã ã•ã„ã€‚ ãƒªã‚¹ãƒˆ2ã€€/etc/syslog.confã«è¿½åŠ ã™ã‚‹è¨å®š local4.* /var/log/ldap.log å›³1ã€€syslogdã®å†èµ·å‹• /etc/init.d/syslog restart syslog-ngãªã©ã®ãã®ä»–ã®syslogãƒ‡ãƒ¼ãƒ¢ãƒ³ã‚’ä½¿ç”¨ã—ã¦ã„ã‚‹å ´åˆã«ã‚‚ã€local4ã¨ã„ã†ãƒ•ã‚¡ã‚·ãƒªãƒ†ã‚£ã®ãƒã‚°ã‚’é©åˆ‡ã«å‡ºåŠ›ã§ãã‚‹ã‚ˆã†è¨å®šã‚’è¡Œã£ã¦ãƒ‡ãƒ¼ãƒ¢ãƒ³ã‚’å†èµ·å‹•ã—ã¦ãŠãå¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ ãƒã‚°ã®å‡ºåŠ›ä¾‹ syslogãƒ‡ãƒ¼ãƒ¢ãƒ³ã®è¨å®šã‚’é©åˆ‡ã«è¡Œã£ãŸå ´åˆã€
cocelo 2008/03/12
OpenLDAP

Log
ãƒªãƒ³ã‚¯
ç¬¬6å›žã€€OpenSSHã®å…¬é–‹éµã‚’LDAPã§ç®¡ç† | gihyo.jp
å…¬é–‹éµç®¡ç†ã®æ¦‚è¦ èªè€…ã®çš†ã•ã‚“ã®å¤šãã¯ãƒªãƒ¢ãƒ¼ãƒˆãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ã®ãŸã‚ã«ã€å„ã‚µãƒ¼ãƒã§sshãƒ‡ãƒ¼ãƒ¢ãƒ³ã‚’å‹•ä½œã•ã›ã¦ã„ã‚‹ã¯ãšã§ã™ã€‚ã—ã‹ã—telnetã§ã¯ãªãsshã«ã™ã‚Œã°ãã‚Œã ã‘ã§å®‰å¿ƒå®‰å…¨ã€ã¨ã„ã†ã‚ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚å…±é€šéµèªè¨¼ã§ã¯ãã‚Œãžã‚Œã®é€šä¿¡è‡ªä½“ã¯æš—å·åŒ–ã•ã‚Œã¦ã„ã‚‹ã¨ã¯ã„ãˆã€è¿‘å¹´ã§ã¯ç·å½“ãŸã‚Šæ”»æ’ƒã®ã‚¿ãƒ¼ã‚²ãƒƒãƒˆã¨ãªã£ã¦ã„ã‚‹ã‚±ãƒ¼ã‚¹ã‚‚éžå¸¸ã«å¤šãã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£çš„ã«å®‰å¿ƒã§ãã‚‹ã‚‚ã®ã§ã¯ãªã„ãŸã‚ã§ã™ã€‚çš†ã•ã‚“ã¯ã¡ã‚ƒã‚“ã¨RSAã‚„DSAã«ã‚ˆã‚‹å…¬é–‹éµèªè¨¼ã‚’åˆ©ç”¨ã•ã‚Œã¦ã„ã¾ã™ã‹ï¼Ÿ å…¬é–‹éµèªè¨¼ã®ãƒ¡ãƒªãƒƒãƒˆã¯ã€å…±é€šéµèªè¨¼ã¨æ¯”è¼ƒã—ã¦ã€ã‚ˆã‚Šå®‰å…¨ãªèªè¨¼ã‚’å®Ÿç¾ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ç‚¹ã«ã‚ã‚Šã¾ã™ã€‚ãã®ä¸€æ–¹ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã«ã¯ç§˜å¯†éµãƒ•ã‚¡ã‚¤ãƒ«ã¨å¤šãã®å ´åˆã¯ãƒ‘ã‚¹ãƒ•ãƒ¬ãƒ¼ã‚ºãŒã€ã‚µãƒ¼ãƒå´ã«ã¯å…¬é–‹éµãƒ•ã‚¡ã‚¤ãƒ«ãŒå¿…è¦ã«ãªã‚‹ãŸã‚ã€ãƒ‡ãƒ¡ãƒªãƒƒãƒˆã¨ã—ã¦ãƒ¦ãƒ¼ã‚¶æ•°ãŒå¤šã„ã¨ãã‚Œã‚‰ã®ç®¡ç†ã‚‚ç…©é›‘ã«ãªã‚‹ã“ã¨ãŒæŒ™ã’ã‚‰ã‚Œã¾ã™ã€‚ ãŸã¨ãˆã°ç®¡ç†å¯¾è±¡ã®ã‚µãƒ¼ãƒãŒ100å°ã‚ã‚‹ã¨ã™ã‚Œã°ã€ã‚ã‚‹ãƒ¦ãƒ¼ã‚¶ã®å…¥ç¤¾æ™‚
cocelo 2007/12/28
LDAP

OpenLDAP

SSH

OpenSSH

Security
ãƒªãƒ³ã‚¯
ãã‚ãã‚LDAPã«ã—ã¦ã¿ãªã„ã‹ï¼Ÿï¼šç¬¬7å›žã€€Apacheã®Basicèªè¨¼ã‚’LDAPã§ï½œgihyo.jp â€¦ æŠ€è¡“è©•è«–ç¤¾
Basicèªè¨¼ã®å±é™ºæ€§ã¨LDAPåŒ–ã®æ¦‚è¦ å¤šãã®èªè€…ã®çš†ã•ã‚“ãŒã”å˜ã˜ã®ã‚ˆã†ã«ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰èªè¨¼ã‚’è¦æ±‚ã™ã‚‹Webãƒšãƒ¼ã‚¸ã‚’Apacheä¸Šã§ä½œæˆã™ã‚‹ãŸã‚ã«ã¯ã€é€šå¸¸ã¯.htaccessã¨.htpasswdãªã©ã‚’ç”¨ã„ãŸBasicèªè¨¼ã‚’ä½¿ç”¨ã—ã¾ã™ã€‚ ãŸã¨ãˆã°ã€http://www.example.com/secret/ä»¥ä¸‹ã«ã¦ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰èªè¨¼ã‚’å®Ÿç¾ã™ã‚‹ã«ã¯æ¬¡ã®ã‚ˆã†ãªè¨å®šã‚’è¡Œã†ã®ãŒä¸€èˆ¬çš„ã§ã—ã‚‡ã†ã€‚ ãƒªã‚¹ãƒˆ1ã€€.htaccessã‚„httpd.confã®è¨å®šï¼ˆéƒ¨åˆ†ï¼‰ AuthUserFile /home/passwd/.htpasswd AuthGroupFile /dev/null AuthName "Secret Area" AuthType Basic require valid-user ãƒªã‚¹ãƒˆ2ã€€/home/passwd/.htpasswdã®ä¾‹ tanaka:vDVcobip.AMqE suzuki:
cocelo 2007/12/28
Apache

LDAP

OpenLDAP

mod_ldap
ãƒªãƒ³ã‚¯
mod_ldap - Apache HTTP Server
cocelo 2007/11/26
Apache

Apache 2.0

LDAP

OpenLDAP

mod_ldap

Document
ãƒªãƒ³ã‚¯
mod_ldap - Apache HTTP Server Version 2.2
cocelo 2007/11/26
Apache

Apache 2.2

LDAP

OpenLDAP

mod_ldap

Document
ãƒªãƒ³ã‚¯
nss_ldap ã®æŽ¥ç¶šã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆã‚’å¤‰ãˆã‚‹ | dTblog | ãƒ‡ã‚¶ã‚¤ãƒ³ã¨ãƒ—ãƒã‚°ãƒ©ãƒ ã®å¢ƒç•Œã‚’ã•ã¾ã‚ˆã†ãƒ–ãƒã‚°
PAM (Pluggable Authentication Modules)èªè¨¼ã§ã€pam_ldap.so ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ä½¿ç”¨ã™ã‚‹ã¨ãã€LDAPã«æŽ¥ç¶šã§ããªã„ã¨ã€é•·ã„ã“ã¨å¾…ãŸã•ã‚Œã‚‹ã€‚LDAPå´ã§ç®¡ç†ã—ã¦ã„ã‚‹ãƒ¦ãƒ¼ã‚¶ã§ã¯ãªãã€shadowãƒ•ã‚¡ã‚¤ãƒ«ãªã©ã§èªè¨¼ãƒã‚§ãƒƒã‚¯ãŒOKã¨ãªã£ã¦ã‚‚ã€2åˆ†ãã‚‰ã„å¾…ãŸã•ã‚Œã‚‹ã€‚ãªã‚“ã§ã˜ã‚ƒã€‚ PAMã®system-authã¯ã“ã‚“ãªæ„Ÿã˜ã€‚ #%PAM-1.0 auth required /lib/security/pam_env.so auth sufficient /lib/security/pam_unix.so likeauth nullok auth sufficient /lib/security/pam_ldap.so use_first_pass auth required /lib/security/pam_deny.so account required
cocelo 2007/11/26
LDAP

OpenLDAP

nss_ldap
ãƒªãƒ³ã‚¯
AD(ActiveDIrectory)ã«ã‚ˆã‚‹LDAPæ´»ç”¨ Page9
NSSã¨PAMã«ã¤ã„ã¦ã€ ç¾åœ¨ã€Solarisã‚„Linuxã€ãã®ä»–ã®Unuxç³»ã®å¤šãã§ã¯ãƒ¦ãƒ¼ã‚¶èªè¨¼ã¨ã—ã¦PAMï¼ˆPluggable Authentication Modulesï¼‰ã¨ã„ã†æŠ€è¡“ã«ã‚ˆã£ã¦ã€èªè¨¼æ©Ÿæ§‹ã‚’ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã§æ‹¡å¼µã§ãã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™ã€‚ã€€ä¾‹ãˆã°ã€é€šå¸¸Linuxã§ã¯ãƒ¦ãƒ¼ã‚¶èªè¨¼ã¨ã—ã¦ /etc/password ã¨ /etc/shadow ã¨ã„ã†ï¼’ã¤ã®ãƒ•ã‚¡ã‚¤ãƒ«ã«ç™»éŒ²ã•ã‚Œã¦ã„ã‚‹ãƒ¦ãƒ¼ã‚¶æƒ…å ±ã‚’ä½¿ã£ã¦ãƒã‚°ã‚¤ãƒ³ã®èªè¨¼ã‚’ã—ã¦ã„ã¾ã™ãŒã€PAMã®è¨å®šã‚’è¡Œã†ã“ã¨ã§ LDAP ã‚„ãã®ä»–ã®èªè¨¼æ©Ÿæ§‹ã‚’åˆ©ç”¨ã—ã¦ãƒã‚°ã‚¤ãƒ³èªè¨¼ã‚’è¡Œã‚ã›ã‚‹äº‹ãŒæ‹¡å¼µã§ãã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™ã€‚ NSSï¼ˆNetwork Service Switchï¼‰ã¯ã€ DNS ã‚„ NIS ã‚„ /etc/protocols ãªã©ã®ãƒãƒ¼ã‚«ãƒ«ã«æŒã£ãŸå„ç¨®ã®æ¤œç´¢ç”¨ã®ã‚µãƒ¼ãƒ“ã‚¹ã®éš›ã«ã€ã©ã®ãƒ‡ãƒ¼ã‚¿ã‚’å‚ç…§ã—ã«ã„ãã‹ã‚’ã‚¹ã‚¤ãƒƒãƒã•ã›ã‚‹æ©Ÿèƒ½ã§ã™ã€‚ã€€ä¾‹ãˆã°ã€ã“ã®æ©Ÿèƒ½ã‚’ä½¿
cocelo 2007/11/26
LDAP

OpenLDAP

nss_ldap

pam_ldap
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸