Editing FreeBSD (section)

=== Setup LDAP Authentication ===

Install required ports:

 sudo portinstall nss_ldap
 sudo portinstall pam_ldap

Setup ''nss_ldap.conf''

<pre>
host 172.31.0.1
base dc=incoherency,dc=net
uri ldap://172.31.0.1:389/
ssl start_tls

binddn uid=nss,ou=dsa,dc=incoherency,dc=net
bindpw ********
bind_policy soft

nss_initgroups_ignoreusers root,ldap

timelimit 5
nss_reconnect_tries 2

port 389
nss_base_passwd dc=incoherency,dc=net?subtree
nss_base_group  ou=groups,dc=incoherency,dc=net?one
pam_password SSHA
</pre>

Link ldap.conf to nss_ldap.conf

 ln -s nss_ldap.conf ldap.conf

Add the following to /etc/pam.d/ for each relevant service

 auth		sufficient	/usr/local/lib/pam_ldap.so	no_warn try_first_pass

Edit /etc/nsswitch.conf:

 passwd: files ldap
 group: files ldap