Difference between revisions of "Bright: node provision"
Jump to navigation
Jump to search
(Created page with "this web page shows how to let the headnode serve as an external LDAP server to manage the user account on a nodes with standard CentOS installed. == Settings for LDAP Serve...") |
|||
| (One intermediate revision by the same user not shown) | |||
| Line 2: | Line 2: | ||
== Settings for LDAP Server == | == Settings for LDAP Server == | ||
Once the bright cluster manager is installed, let shorewall open the ports for LDAP | Once the bright cluster manager is installed, let shorewall open the ports for LDAP | ||
| + | Add the following content in file /etc/shorewall/rules | ||
# for ldap | # for ldap | ||
| Line 8: | Line 9: | ||
-------------------------------------------------------- | -------------------------------------------------------- | ||
| + | |||
== Settings for LDAP Client == | == Settings for LDAP Client == | ||
yum -y install openldap-clients nss-pam-ldapd | yum -y install openldap-clients nss-pam-ldapd | ||
authconfig --enableldap --enableldapauth --ldapserver=172.23.19.254 --ldapbasedn="dc=cm,dc=cluster" --enablemkhomedir --update | authconfig --enableldap --enableldapauth --ldapserver=172.23.19.254 --ldapbasedn="dc=cm,dc=cluster" --enablemkhomedir --update | ||
| − | + | ||
| + | restart nslcd and nscd service | ||
| + | |||
| + | /etc/init.d/nslcd restart | ||
| + | /etc/init.d/nscd restart | ||
Latest revision as of 10:08, 12 December 2014
this web page shows how to let the headnode serve as an external LDAP server to manage the user account on a nodes with standard CentOS installed.
Settings for LDAP Server
Once the bright cluster manager is installed, let shorewall open the ports for LDAP Add the following content in file /etc/shorewall/rules
# for ldap ACCEPT net fw tcp 389 ACCEPT net fw tcp 636
Settings for LDAP Client
yum -y install openldap-clients nss-pam-ldapd authconfig --enableldap --enableldapauth --ldapserver=172.23.19.254 --ldapbasedn="dc=cm,dc=cluster" --enablemkhomedir --update
restart nslcd and nscd service
/etc/init.d/nslcd restart /etc/init.d/nscd restart