Central authentication server HOWTO
   Next

Central authentication server HOWTO

Jose González Gómez

2004-06-02

Revision History
Revision 0.22004-08-19jgonzalez
Second draft, including: complete reorganization of the HOWTO, improved DocBook tagging, better introduction, licensing information, minor modifications to some configuration files (specially regarding OpenLDAP indexes and security) and whole rewrite of security issues
Revision 0.12004-06-02jgonzalez
First draft containing the basics

Abstract

This document is a guide for the creation of a central authentication server using Linux.

Table of Contents

1. Introduction
1.1. Copyright and License
1.2. Disclaimer
1.3. Credits / Contributors
1.4. Feedback
1.5. Translations
2. Prerequisites
3. Structure
4. Technologies
4.1. Heimdal
4.2. OpenLDAP
4.3. Cyrus SASL
4.4. pam_krb5
4.5. nss_ldap
4.6. Summing up
5. Software installation
6. Server configuration - creating the Kerberos realm
6.1. OpenLDAP
6.1.1. Basic configuration
6.1.2. Database configuration
6.1.3. Service configuration
6.1.4. Initial database creation
6.2. Heimdal Kerberos
6.2.1. Basic configuration
6.2.2. Creation of the Kerberos domain
6.2.3. Password policies
6.2.4. User creation
6.2.5. ACL configuration
6.2.6. Kerberos servers
6.2.7. Checking our Kerberos installation
6.2.8. Setting Kerberos to read the whole directory
6.3. OpenLDAP access configuration
6.3.1. Creation of LDAP service ticket
6.3.2. Checking authentication services offered by OpenLDAP/SASL
6.3.3. Single sign on while accessing OpenLDAP
6.3.4. Mapping authentication identities to LDAP entries
6.3.5. Creating a proxy for NSS
6.3.6. Configuring SASL and LDAP to allow simple bind authentication
6.3.7. Securing the directory
6.4. SSH configuration
6.5. Logs configuration
7. Client configuration - contacting the KDC for authentication
7.1. Centralized authentication configuration
7.1.1. PAM
7.1.2. LDAP access
7.1.3. NSS configuration
7.2. SSH configuration
8. User management
9. Maintenance
10. Advanced issues
11. Troubleshooting
12. Further Information
   Next
   1. Introduction