The background is the Linux host more and more companies to take account of the unified administration of
The company has a ready-made Windows domain
Check some information on the Internet, in theory should be able to achieve,
Configuration method of reference since
https://www.jianshu.com/p/af295531eaf6

Start the normal no error
But it is not easy user

Through the ldapsearch command can normal user query to list
Ldapsearch -h "ldap://192.168.1.16:389" 3-d "cn=ldap, cn=users, dc test, dc=com" -w 'road' - b "cn=users, dc test, dc=com" - x | grep sAMAccountName | wc -l
28

Getent passwd command
The debug information below

NSLCD: [334873] NSLCD: [334873] NSLCD: [334873] NSLCD: [334873] NSLCD: [334873] NSLCD: [334873] NSLCD: [334873] NSLCD: [334873] NSLCD: [334873] NSLCD: [334873] NSLCD: [334873] NSLCD: [334873]

Returns the result is 0 record

The configuration file
The cat/etc/NSLCD. Conf | grep -v ^ # | grep -v "^ $
"Uid NSLCD
Gid ldap
Uri ldap://192.168.1.16/
Base dc test, dc=com
Binddn cn=ldap, cn=users, dc test, dc=com
Bindpw road name
SSL no
Tls_cacertdir/etc/openldap/cacerts

CodePudding user response:

Is there a big