OpenSolaris: Difference between revisions
Jump to navigation
Jump to search
(→LDAP) |
(→LDAP) |
||
Line 10: | Line 10: | ||
Configure and build static openldap libraries: |
Configure and build static openldap libraries: |
||
./configure --disable-slapd --prefix=/opt/openldap --sysconfdir=/etc/ldap |
./configure --disable-slapd --prefix=/opt/csc/openldap --sysconfdir=/etc/ldap |
||
make depend; make; make install |
make depend; make; make install |
||
Configure nss_ldap: |
Configure nss_ldap: |
||
CFLAGS=-I$HOME/openldap/include LDFLAGS=-L/opt/openldap/lib\ -rpath=/opt/openldap/lib \ |
CFLAGS=-I$HOME/openldap/include LDFLAGS=-L/opt/csc/openldap/lib\ -rpath=/opt/csc/openldap/lib \ |
||
./configure --with-ldap-conf-file=/etc/libnss-ldap.conf --prefix=/opt/nss_ldap |
./configure --with-ldap-conf-file=/etc/libnss-ldap.conf --prefix=/opt/csc/nss_ldap |
||
make; make install |
make; make install |
||
rm /usr/lib/nss_ldap.so.1 |
rm /usr/lib/nss_ldap.so.1 |
||
ln -s /opt/nss_ldap/lib/nss_ldap.so /usr/lib/nss_ldap.so.1 |
ln -s /opt/csc/nss_ldap/lib/nss_ldap.so /usr/lib/nss_ldap.so.1 |
||
== Kerberos == |
== Kerberos == |
Revision as of 20:41, 19 January 2008
Solaris is drugs; avoid it at all cost.
pkg-get
pkgadd -d http://www.blastwave.org/pkg_get.pkg
/opt/csw/bin/pkg-get -i gnupg vim bash sudo wget gcc3core gcc3g++ gmake
LDAP
Configure and build static openldap libraries:
./configure --disable-slapd --prefix=/opt/csc/openldap --sysconfdir=/etc/ldap make depend; make; make install
Configure nss_ldap:
CFLAGS=-I$HOME/openldap/include LDFLAGS=-L/opt/csc/openldap/lib\ -rpath=/opt/csc/openldap/lib \ ./configure --with-ldap-conf-file=/etc/libnss-ldap.conf --prefix=/opt/csc/nss_ldap make; make install rm /usr/lib/nss_ldap.so.1 ln -s /opt/csc/nss_ldap/lib/nss_ldap.so /usr/lib/nss_ldap.so.1
Kerberos
scp caffeine:/etc/krb5.conf /etc/krb5/krb5.conf
In /etc/pam.conf, after
other auth required pam_unix_cred.so.1
add
other auth sufficient pam_krb5.so.1
You might want to also do this for 'login'.
You need to create /etc/krb5/krb5.keytab containing host/FQDN@CSCLUB.UWATERLOO.CA where FQDN = the fully qualified domain name of the host.
External Links
https://www.cs.uwaterloo.ca/twiki/view/CF/ADAddSolaris10 http://ashtech.net/~syntax/blog/archives/50-Solaris-10-Partitioning,-RAID,-and-ZFS.html