Synology LDAP server linux and windows setting
出自 DDCC TCAD TOOL Manual
To make linux working with Synology LDAP server (not AD server). we can follow steps
apt-get install -y ldap-utils libpam-ldap libnss-ldap nslcd
Then edit /etc/ldap.conf. Some is aready in the file. So just add ip and account
host 192.168.0.2 base dc=synology-wk uri ldaps://192.168.0.2/ ldap_version 3 binddn rootbinddn uid=rootuser,cn=users,dc=synology-wk pam_password md5 nss_initgroups_ignoreusers ajaxterm,amavis,avahi,avahi-autoipd,backup,bin,clamav,colord,couchdb,daemon,dhcp,dovecot,dovenull,festival,games,gdm,gnats,haldaemon,hplip,irc,kernoops,kloglandscape,libuuid,lightdm,list,lp,mail,man,messagebus,mysql,news,nslcd,ntop,ntp,polkituser,postfix,postgrey,proxy,pulse,root,rtkit,saned,speech-dispatcher,sshd,statd,sync,sys,syslog,usbmux,uucp,whoopsie,www-data
vi /etc/nsswitch.conf passwd: compat ldap sss group: compat ldap sss shadow: compat ldap sss hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4 networks: files protocols: db files services: db files sss ethers: db files rpc: db files netgroup: nis sss automount: sss
Note sss is for AD domain, ldap is for synology user. My experience is that you can join both. But user name should not be the same for both systems. vi /etc/ldap.secret (if it is not there, simply create a new one) put the password of rootuser chmod 700 /etc/ldap.secret chown -R root.root /etc/ldap.secret
sudo update-rc.d nslcd enable sudo /etc/init.d/nscd restart
This should be working.
For windows, to make ldap work, the only solution I found is to download pGina to install in the windows system. Please find the guidance of pgina 3.1.8