Exacq exacqVision Server/Client OS: Linux OpenLDAP User Manuale Utente Scaricare il pdf

Ubuntu Linux Server & Client and OpenLDAP/Kerberos

www.exacq.com

+1.317.845.5710

+44.1438.310163

USA (Corporate Headquarters)

Europe/Middle East/Asia

Page 1 of 5

12/1/2011

1 Configuration

The following process allows you to configure exacqVision permissions and privileges for accounts that exist on an

OpenLDAP/Kerberos server:

1. On the OpenLDAP/Kerberos server, ensure that your installed schema includes the following object types:

 inetOrgPerson (RFC 2798)

 organization (RFC 2256)

 krbPrincipalAux (provided by the Ubuntu krb5-kdc-ldap package)

2. On the OpenLDAP/Kerberos server, ensure that your user accounts exist as inetOrgPerson objects, and that each account is

also marked with the krbPrincipalAux auxiliary object type. Ensure that each user account has the following attribute

values:

 cn -- the user account's display name (for example, "John Smith").

 krbPrincipalName -- the user account's Kerberos principal name (for example, "john.smith@REALM").

 entryUUID -- the unique identifier for the user account, managed by the slapd daemon

3. On the OpenLDAP/Kerberos server, ensure that your user groups exist as organization objects and that each group has the

following attribute values:

 o -- the group's display name (for example, "Marketing")

 entryUUID -- the unique identifier for the group, managed by the slapd daemon

4. On the OpenLDAP/Kerberos server, ensure that your user accounts are associated with groups via an "o" attribute for each

group. Each inetOrgPerson object can have as many associated "o" attribute values as desired. The attribute value should

resemble "o=Engineers", for example, instead of "o=Engineers,dc=exacq,dc=test,dc=com."

If installing an exacqVision server, complete steps 5 through 10. Otherwise, skip to step 11.

5. On the exacqVision server or client computer, configure your DNS domain name. Configure the hostname file with your

fully qualified host name, as in the following example:

/etc/hostname

evserver.exacq.test.com.

6. Edit your hosts file with your fully qualified host name preceding localhost, as in the following example:

/etc/hosts

127.0.0.1 evserver.exacq.test.com localhost

7. Restart the system.

8. Open a terminal window and confirm the fully qualified host name using the following command:

dnsdomainname --fqdn

1 2 3 4 5

Sommario

Pagina 1 - Configuration

Ubuntu Linux Server & Client and OpenLDAP/Kerberos www.exacq.com +1.317.845.5710 +44.1438.310163 USA (Corporate Headquarters) Europe/Mid

Pagina 2 - 12/1/2011

www.exacq.com +1.317.845.5710 +44.1438.310163 USA (Corporate Headquarters) Europe/Middle East/Asia Page 2 of 5 12/1/2011 9. If installing an

Pagina 3 - Page 3 of 5

www.exacq.com +1.317.845.5710 +44.1438.310163 USA (Corporate Headquarters) Europe/Middle East/Asia Page 3 of 5 12/1/2011 14. Configure the /e

Pagina 4 - Page 4 of 5

www.exacq.com +1.317.845.5710 +44.1438.310163 USA (Corporate Headquarters) Europe/Middle East/Asia Page 4 of 5 12/1/2011 20. If installing an

Pagina 5 - Page 5 of 5

www.exacq.com +1.317.845.5710 +44.1438.310163 USA (Corporate Headquarters) Europe/Middle East/Asia Page 5 of 5 12/1/2011 2 Connecting to exacq

Commenti su questo manuale

Nessun commento

Exacq exacqVision Server/Client OS: Linux OpenLDAP User Manuale Utente

Navigare online o scaricare Manuale Utente per Accessori per video Exacq exacqVision Server/Client OS: Linux OpenLDAP User . Exacq exacqVision Server/Client OS: Linux OpenLDAP User Manual User Manual Manuale Utente

Sommario

Commenti su questo manuale

Prodotti e manuali riguardandi Accessori per video Exacq exacqVision Server/Client OS: Linux OpenLDAP User