How to configure Ezeelogin to authenticate using Open_Ldap(Pam-Ldap) in Ubuntu?
Integration of Open-LDAP (PAM-LDAP) in Ubuntu
Make sure that the PHP-LDAP extension is installed on the server. Replace the PHP version in the below command.
root@jumpserver:~# apt-get install phpx.x-ldap
eg: root@jumpserver:~# apt-get install php8.2-ldap
root@jumpserver:~# systemctl restart apache2
1. Login to Web-GUI > open settings > Ldap and add the details of LDAP configurations
2. Under Settings > General Settings > Authentication > change Webpanel authentication to LDAP & Check External SSH Auth
3. Select the LDAP users and import them to ezeelogin
You can confirm the imported LDAP users were listed in Users
Now you can login to ezeelogin with ldap user in ezeelogin GUI
After importing the users to Ezeelogin, log in with the user and set up security code for the user under Account > Password > New Security Code.
Let's configure PAM_LDAP Authentication for SSH
root@jumpserver:~# ln -s /etc/ldap /etc/openldap
root@jumpserver:~# cat /etc/nsswitch.conf
# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.
passwd: compat ldap
group: compat ldap
shadow: compat ldap
hosts: files mdns4_minimal [NOTFOUND=return] dns
networks: files
protocols: db files
services: db files
ethers: db files
rpc: db files
netgroup: nis
Ensure the login shell of ldap user is /usr/local/bin/ezsh
Run an ldapsearch to check the values returned from your AD server as follows. This is used for troubleshooting.
Related Articles: