On Wed, Oct 1, 2014 at 10:41 AM, Morgan Blackthorne
<[email protected]> wrote:

> Debian / Ubuntu - libpam-ldap / libnss-ldap
> RHEL 5 - nss_ldap
> CentOS 5 - openldap-clients

iirc openldap-clients probably only configures how ldapsearch works --
everything else will be related to the pam_ldap and nss_ldap modules,
whatever the OS happens to call them.


> RHEL 6 / CentOS 6 - SSSD

Here's your outlier, really... ^^^ If I weren't primarily (90%+)
dealing with RHEL and variants, I might choose to ignore that this
thing exists, and configure pam_ldap and nss_ldap anyway.  Just so all
the boxes have the same "configuration smell".


> How do you all manage things, or are we just really abnormal for running
> such a mix of OSes? We've been working to get everything into Chef, and I'm
> refactoring the LDAP setup piece to be its own cookbook for clarity's sake,
> and ideally would like to simplify the configuration into as few different
> options as possible. Suggestions very welcome.

Sometimes you *do* know better than the vendor does, and should take
their preferred method with a large boulder of sodium chloride....

--e
_______________________________________________
Discuss mailing list
[email protected]
https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to