2010/2/2 Sean Carolan <scarolan@xxxxxxxxx>:
> Perhaps some of you have gone down this path before and can offer some
> helpful suggestions. I need to convert a group of servers to LDAP
> authentication. Most of the user accounts on these systems have
> consistent uids and gids across all the servers. There are a few
> exceptions but the people who need to access the servers on a daily
> basis should all have the same account uid on every machine.
>
> My questions are:
>
> 1. Can you disable local authentication for all users except root
> once LDAP authentication is in place?
>
dont create any "root" user on LDAP and...
> 2. If there are some users who only need access to a small number of
> servers, how would you handle that situation?
>
modify /etc/security/limits.conf to your needs
> 3. When adding new users, do you create them a private group to avoid
> this error?
i always create users in a default generic group, but that has nothing
to do with your error.
> id: cannot find name for group ID 5001
>
you probably have nsswitch.conf missconfigured.
regards,
muzzol
--
========================
^ ^
O O
(_ _)
muzzol(a)muzzol.com
========================
jabber id: muzzol(a)jabber.dk
========================
No atribueixis qualitats humanes als ordinadors.
No els hi agrada.
========================
"El gobierno español sólo habla con terroristas, homosexuales y
catalanes, a ver cuando se decide a hablar con gente normal"
Jiménez Losantos
========================
<echelon spamming>
bomb terrorism bush aznar teletubbies
</echelon spamming>
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users
