Nwa amaala FreeBSD Kerberos/LDAP nwere FreeIPA/IDM

\u003ch2\u003e Native FreeBSD Kerberos/LDAP nwere FreeIPA/IDM\u003c/h2\u003e \u003cp\u003e Isiokwu a na-enye nghọta bara uru na ozi gbasara isiokwu ya, na-enye aka na ịkekọrịta ihe ọmụma na nghọta.\u003c/p\u003e \u003ch3\u003e Key Takeaways\u003c/h3\u003e \u003cp\u003e Ndị na-agụ nwere ike ịtụ anya inweta:\u003c/p\u003e \u003cul\u003e \u003c\u003e Nghọta miri emi nke isi okwu\u003c/li\u003e \u003c\u003e Ngwa bara uru na ezigbo mkpa ụwa\u003c/li\u003e \u003c\u003e Echiche ndị ọkachamara na nyocha\u003c/li\u003e \u003c\u003e ozi emelitere maka mmepe ugbu a\u003c/li\u003e \u003c/ul\u003e \u003ch3\u003e Atụmatụ bara uru\u003c/h3\u003e \u003cp\u003e Ọdịnaya dị mma dị ka nke a na-enyere aka wulite ihe ọmụma ma kwalite ime mkpebi ziri ezi na ngalaba dị iche iche.\u003c/p\u003e

Ajụjụ a na-ajụkarị

Gịnị bụ FreeIPA/IDM na kedu ka o siri metụta Kerberos na LDAP na FreeBSD?

FreeIPA (nke a makwaara dị ka IDM na gburugburu Red Hat) bụ njikwa njikwa njirimara agbakwunyere nke jikọtara nyocha Kerberos, ọrụ ndekọ aha LDAP, DNS, na njikwa asambodo n'ime otu ikpo okwu jikọtara ọnụ. Na FreeBSD, ị nwere ike hazie ndị ahịa Kerberos na LDAP ka ha nyochaa megide sava FreeIPA, na-eme ka njikwa onye ọrụ etiti gafee gburugburu sistemụ arụmọrụ agwakọtara na-achọghị mgbakwunye etiti ma ọ bụ ndị nnọchite anya nwe.

Mmekọrịta FreeBSD Kerberos/LDAP na mmepụta FreeIPA adịla njikere?

Ee, FreeBSD nwere nkwado siri ike, tozuru oke maka ma Kerberos 5 (site na MIT ma ọ bụ Heimdal) na LDAP (site nss_ldap ma ọ bụ sssd). Mgbe ahaziri nke ọma, ndị ọbịa FreeBSD nwere ike isonye na ngalaba FreeIPA maka otu nbanye (SSO), iwu sudo, njikwa nnabata dabere na nnabata, yana akpaaka. Ngwakọta ahụ kwụsiri ike maka nrụpụta ọrụ ụlọ ọrụ, n'agbanyeghị na ọ chọrọ nhazi nke ọma nke krb5.conf, PAM, na ntọala NSS ka ọ rụọ ọrụ nke ọma.

Kedu ọnyà na-adịkarị mgbe ị na-ejikọta FreeBSD na FreeIPA?

Okwu ndị na-emekarị na-agụnye skew elekere (Kerberos chọrọ ka emekọrịta elekere n'ime nkeji ise), mkpebi DNS ezighi ezi nke ndekọ ọrụ KDC na LDAP, yana nhazi PAM ma ọ bụ NSS na-ezighi ezi na-akpata ọdịda nbanye. ntụkwasị obi asambodo SSL/TLS maka njikọ LDAPS bụ ngọngọ ọzọ na-asụ ngọngọ. Ịbanye nke ọma site na sssd ọkwa ndozi yana ule kinit nwere ike igosi ọdịda ngwa ngwa. Ijikwa mgbagwoju akụrụngwa dị ka nke a dị mfe karị mgbe ị na-eji ikpo okwu dị ka Mewayz, nke na-enye modul 207 agbakwunyere na-amalite na $19 / ọnwa.

Enwere m ike ijikwa atumatu nnabata FreeBSD na iwu sudo ozugbo sitere na FreeIPA?

Ee, enwere ike ịmanye njikwa nnweta nnabata ndị ọbịa nke FreeIPA (HBAC) na sudo na ndị ahịa FreeBSD site na sssd, nke na-eweghachite ma chekwaa amụma ndị a site na azụ azụ IPA LDAP. Ozugbo ahaziri, ndị nchịkwa na-akọwapụta ohere na iwu ihe ùgwù nke etiti na FreeIPA webụ UI ma ọ bụ CLI, na ndị ọbịa FreeBSD na-amanye ha na mpaghara-ọbụlagodi n'oge nkwụsị netwọk site na cache sssd. Ụzọ a na-emekọ ihe ọnụ na-ejikọta nke ọma na nyiwe arụmọrụ dị n'otu dị ka Mewayz (modul 207, $ 19 / mo) maka njikwa akụrụngwa sara mbara.