Bright: node provision

this web page shows how to let the headnode serve as an external LDAP server to manage the user account on a nodes with standard CentOS installed.

Settings for LDAP Server

Once the bright cluster manager is installed, let shorewall open the ports for LDAP Add the following content in file /etc/shorewall/rules

   # for ldap
   ACCEPT   net            fw              tcp     389
   ACCEPT   net            fw              tcp     636

---

Settings for LDAP Client

   yum -y install openldap-clients nss-pam-ldapd
   authconfig --enableldap --enableldapauth --ldapserver=172.23.19.254 --ldapbasedn="dc=cm,dc=cluster" --enablemkhomedir --update 

restart nslcd and nscd service

   /etc/init.d/nslcd restart
   /etc/init.d/nscd restart