ldap 建立用戶和組

1.爲每一個新的用戶建立個LDIF文件
#cat zhouly.ldif
dn:uid=zhouly,ou=People,dc=prod,dc=hadoop,dc=feidai,dc=com
objectClass:account
objectClass:posixAccount
objectClass:top
objectClass:shadowAccount
uid:zhouly
cn:zhouly
loginShell:/bin/bash
userPassword:zhouly267489
uidNumber:4001
gidNumber:4801
homeDirectory:/home/zhouly

dn:cn=fkclgroup,ou=Group,dc=prod,dc=hadoop,dc=feidai,dc=com
objectClass:posixGroup
objectClass:top
cn:fkclgroup
gidNumber:4801
memberUid:zhouly

2.添加用戶組
#cat addgroup.ldif
dn:cn=fkclgroup,ou=Group,dc=prod,dc=hadoop,dc=feidai,dc=com
objectClass:posixGroup
objectClass:top
cn:fkclgroup
gidNumber:4801

ldapadd -x -W -D "cn=Manager,dc=prod,dc=hadoop,dc=feidai,dc=com" -f addgroup.ldif

3.添加用戶
#cat adduser.ldif
dn: uid=zhouly,ou=People,dc=prod,dc=hadoop,dc=feidai,dc=com
objectClass: account
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
uid: zhouly
cn: zhouly
loginShell: /bin/bash
userPassword: password
uidNumber: 4001
gidNumber: 4801
homeDirectory: /home/zhouly

ldapadd -x -W -D "cn=Manager,dc=prod,dc=hadoop,dc=feidai,dc=com" -f adduser.ldif

4.添加用戶到組
#cat u2g.ldif
dn: cn=fkclgroup,ou=Group,dc=prod,dc=hadoop,dc=feidai,dc=com
changetype: modify
add: memberuid
memberuid: uid=zhouly,ou=People,dc=prod,dc=hadoop,dc=feidai,dc=com

ldapmodify -x -W -D "cn=Manager,dc=prod,dc=hadoop,dc=feidai,dc=com" -f u2g.ldif

5.清空SSSD,並重啓sssd 服務
rm -f /var/lib/sss/db/cache_default.ldb
service sssd restart

6.列出當前用戶和組
ldapsearch -x

7.添加 Principal
kadmin.local -q "addprinc -pw test123 user2@PROD.HADOOP.FEIDAI.COM"

8.刪除 Principal
kadmin.local -q "delete_principal user2@PROD.HADOOP.FEIDAI.COM"

8.列出當前的Principal
kadmin.local -q listprincs

9.生成keytab文件 kadmin.local -q "ktadd -k user2.keytab user2@PROD.HADOOP.FEIDAI.COM"