一. 安装客户端软件

[root@labsys00208 ~]# yum -y install openldap-clients nss-pam-ldapd

[root@labsys00208 ~]# authconfig --enableldap --enableldapauth --ldapserver=10.17.161.18 --ldapbasedn="dc=contoso,dc=com" --enablemkhomedir --update

 

refer: https://www.server-world.info/en/note?os=CentOS_7&p=openldap&f=3

If SELinux is enabled, it needs to add a rule to allow creating home directories automatically by mkhomedir.[root@www ~]# vi mkhomedir.te# create newmodule mkhomedir 1.0;require {        type unconfined_t;        type oddjob_mkhomedir_exec_t;        class file entrypoint;}#============= unconfined_t ==============allow unconfined_t oddjob_mkhomedir_exec_t:file entrypoint;[root@www ~]# checkmodule -m -M -o mkhomedir.mod mkhomedir.techeckmodule: loading policy configuration from mkhomedir.techeckmodule: policy configuration loadedcheckmodule: writing binary representation (version 17) to mkhomedir.mod[root@www ~]# semodule_package --outfile mkhomedir.pp --module mkhomedir.mod[root@www ~]# semodule -i mkhomedir.pp