LDAP stands for Lightweight Directory Access Protocol which is an industry-standard application protocol for maintaining and accessing directory information services over IP networks. Directory information services match resources information to their respective IP addresses. LDAP's role is to store emails, accounts, and passwords in a central location, and some applications will use this data for authentication.
Here at LinuxAPT, as part of our Server Management Services, we regularly help our Customers to perform related Linux Active Directory queries.
In this context, we shall look into configuring the LDAP client on Ubuntu 20.04.
1. Install LDAP client utilities
To begin, Run apt command to install the utilities associated:
$ sudo apt install libnss-ldap libpam-ldap ldap-utilsIn the output, you will set up the URL of the LDAP server.
Next, Press Ok to continue.
2. Set domain for LDAP client
Now, set up the domain name of the LDAP server.
The first dc represents the name part, the second dc represents the tail. Press Ok to next.
3. Select LDAP version
Here, choose the latest LDAP version. After selection, Press Ok to continue.
4. Set admin for root database
Now you can make local root Database admin. Press Enter to next.
5. Set LDAP databaselogin preference
You will see a screen when you will prompted if the LDAP database requires login, so you can choose Choose Yes and press Enter.
6. Set Username
Now, enter the username at the cn option. Press Ok.
7. Choose password
Here, Choose a password and select OK to continue.
8. Set username for privileged account
Here type in a different username with a privileged account at cn. Press Enter to next.
9. Enter password for database login account
Now type the password. After completing the above command will be active.
10. Update PAM-auth file
With LDAP for authentication, update the PAM-auth file with the below command:
$ sudo pam-auth-updateThen, Press Ok to continue.
To make some migration changes the PAM directory public session file can be edited. Open nano editor:
$ sudo nano /etc/pam.d/common-sessionAt the end of the file, let's add:
session required pam_mkhomedir.so skel=/etc/skel umask=077Save it and exit.
If you don't want to use the LDAP client, run the following command to remove it:
$ sudo apt-get purge libnss-ldap libpam-ldap ldap-utilsThis article covers how to configure the LDAP client on Ubuntu 20.04. In fact, LDAP allows users to store the usernames and passwords of users in a single place. This place is then used by multiple services for validating the users claiming these services. To use a service, you always need to have a client-end program that can help you to access that service.
