Exacq exacqVision - Ubuntu Linux Server & Client and Openldap;Kerberos Ubuntu Linux Server & Client and Openldap;Kerberos

exacqVision User Manual
1/24/2011
Ubuntu Linux Server &
Client and
1.
On the OpenLDAP/Kerberos server, ensure that your installed schema includes the following object types:
 inetOrgPerson
(RFC 2798)
 organization
(RFC 2256)

krbPrincipalAux
2.
On the OpenLDAP/Kerberos server, ensure that your user accounts exist as inetOrgPerson objects, and that
each account is also marked with the krbPrincipalAux auxiliary object type. Ensure
has the following attribute values:
 cn -- th
e user account's display name (

krbPrincipalName
"john.smith@REALM").
 entryUUID -- t
he unique identifier for the user accou
3. On the
OpenLDAP/Kerberos server, ensure that your user groups exist as organization objects
group has the following attribute values:
 o -- t
he group's display name (
 entryUUID -- t
he unique identifier for the gro
4.
On the OpenLDAP/Kerberos server, ensure that your user accounts are associated with groups via an "o"
attribute for each group. Each inetOrgPerson object can have
desired. The attribute value
"o=Engi
neers,dc=exacq,dc=test,dc=com."
If installing an exacqVision server, complete steps 5 through 10. Otherwise, skip to step 11.
5.
On the exacqVision server or client computer, configure your DNS d
file with your fully qualified host name, as in the following example:
/etc/hostname
evserver.exacq.test.com
6.
Edit your hosts file with your fully qualified host name preceding localhost, as in the following example:
/etc/hosts
127.0.0.1 evserver.exacq.test.com localhost
7. Restart the system.
8.
Open a terminal window and confirm the fully qualified host name using the following command:
dnsdomainname
Page 211
Client and
OpenLDAP/Kerberos
On the OpenLDAP/Kerberos server, ensure that your installed schema includes the following object types:
(RFC 2798)
(RFC 2256)
krbPrincipalAux
(provided by the Ubuntu krb5-kdc-ldap package)
On the OpenLDAP/Kerberos server, ensure that your user accounts exist as inetOrgPerson objects, and that
each account is also marked with the krbPrincipalAux auxiliary object type. Ensure
has the following attribute values:
e user account's display name (
for example, "John Smith").
krbPrincipalName
-- the user account's Kerberos principal name (
for example,
"john.smith@REALM").
he unique identifier for the user accou
nt, managed by the slapd daemon
OpenLDAP/Kerberos server, ensure that your user groups exist as organization objects
group has the following attribute values:
he group's display name (
for example, "Marketing")
he unique identifier for the gro
up, managed
by the slapd daemon
On the OpenLDAP/Kerberos server, ensure that your user accounts are associated with groups via an "o"
attribute for each group. Each inetOrgPerson object can have
as many
associated "o" attribute values as
desired. The attribute value
should resemble "o=Engineers",
for example, instead of
neers,dc=exacq,dc=test,dc=com."
If installing an exacqVision server, complete steps 5 through 10. Otherwise, skip to step 11.
On the exacqVision server or client computer, configure your DNS d
omain name. Configure the hostname
file with your fully qualified host name, as in the following example:
/etc/hostname
evserver.exacq.test.com
.
Edit your hosts file with your fully qualified host name preceding localhost, as in the following example:
127.0.0.1 evserver.exacq.test.com localhost
Open a terminal window and confirm the fully qualified host name using the following command:
dnsdomainname
--fqdn
On the OpenLDAP/Kerberos server, ensure that your installed schema includes the following object types:
On the OpenLDAP/Kerberos server, ensure that your user accounts exist as inetOrgPerson objects, and that
each account is also marked with the krbPrincipalAux auxiliary object type. Ensure
that each user account
for example,
nt, managed by the slapd daemon
OpenLDAP/Kerberos server, ensure that your user groups exist as organization objects
and that each
by the slapd daemon
On the OpenLDAP/Kerberos server, ensure that your user accounts are associated with groups via an "o"
associated "o" attribute values as
for example, instead of
If installing an exacqVision server, complete steps 5 through 10. Otherwise, skip to step 11.
omain name. Configure the hostname
Edit your hosts file with your fully qualified host name preceding localhost, as in the following example:
Open a terminal window and confirm the fully qualified host name using the following command: