I'm totally with you on the SSL/TLS. I've been swearing at that particular element for over two weeks now. Since there is no slapd.conf any more, the method of introducing a certificate is not logical, nor documented.<div>
<br></div><div>I haven't looked into sssd. Since it isn't installed by default on CentOS, why would that be a requirement? (not saying it isn't a good thing, but I'd probably defer that to another document as with the other elements you suggested)</div>
<div><br clear="all">--<br>Adrian Hall (Personal Account)<br><a href="mailto:photoadrian@gmail.com">photoadrian@gmail.com</a><br><br>
<br><br><div class="gmail_quote">On Tue, Sep 13, 2011 at 2:27 PM, Paul Heinlein <span dir="ltr"><<a href="mailto:heinlein@madboa.com">heinlein@madboa.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">On Tue, 13 Sep 2011, Adrian Hall wrote:<br>
<br>
> <a href="http://wiki.centos.org/AdrianHall/CentralizedLDAPAuth" target="_blank">http://wiki.centos.org/AdrianHall/CentralizedLDAPAuth</a><br>
> I would suggest it goes into the HOWTO section.<br>
<br>
</div>Things I'd recommend adding to the discussion before official<br>
publication of the page:<br>
<br>
* sssd and ldap<br>
* SSL/TLS<br>
<br>
Of slightly less immediate importance, but worthy of inclusion further<br>
down the road:<br>
<br>
* master-slave ldap setup and failover on the clients<br>
* ldap and samba for windows auth<br>
* pointers to using ldap auth for, e.g., apache, jabber, sendmail, ...<br>
* central user accounts and NFSv4<br>
<font color="#888888"><br>
--<br>
Paul Heinlein <> <a href="mailto:heinlein@madboa.com">heinlein@madboa.com</a> <> <a href="http://www.madboa.com/" target="_blank">http://www.madboa.com/</a><br>
_______________________________________________<br>
CentOS-docs mailing list<br>
<a href="mailto:CentOS-docs@centos.org">CentOS-docs@centos.org</a><br>
<a href="http://lists.centos.org/mailman/listinfo/centos-docs" target="_blank">http://lists.centos.org/mailman/listinfo/centos-docs</a><br>
</font></blockquote></div><br></div>