Last time I played with this, you did still have to create users home
directories, though, so you can't completely avoid touching the box.
But... a fairly easy way to fix this is to have a cron job that runs
periodically that looks at ldap and creates (and deletes if you want)
home directories as appropriate.
- Jeff
David Irving wrote:
Nope.. Once in LDAP and everything is configured correctly on the linux
box, you don't have to do anything to passwd or shadow to let a user log
on to the box. I currently have this kind of setup using RHEL and it
works great!