I have a Problem with my LDAP configuration on SUSE Linux Enterprise Server 12.As many of you know, the ldap.conf has been replaced with the sssd.conf and a couple of other conf files like the nsswitch.conf.And there lies my question:I want to have an authentication through ldap which include users of a specific OU. I also need to get the definition for the sudoers through ldap.I also never worked with sssd before.My current nss Configuration looks as follows:passwd: files ldapshadow: files ldapgroup:  files ldaphosts:  files dnsnetworks:       filesservices:       filesprotocols:      filesrpc:    filesethers: filesnetmasks:       filesnetgroup:       files nispublickey:      filesbootparams:     filesautomount:      files nisaliases:        filespasswd_compat:  filesgroup_compat:   filessudoers:        ldap files [I added this line]And here is my sssd.conf:[sssd]config_file_version = 2services = nss, pamdomains = *****sbus_timeout = 30[nss]filter_users = rootfilter_groups = rootreconnection_retries = 3entry_cache_timeout = 300entry_cache_nowait_percentage = 75[pam][domain/GuH]id_provider = ldapauth_provider = ldapldap_schema = rfc2307bisldap_user_object_class = posixAccountdebug_level = 20#access_provider = ldapldap_uri = ldap://******.deldap_search_base = o=***create_homedir = trueildap_tls_cacert = /etc/sssd/certs/*******.pemldap_tls_cacertdir = /etc/sssd/certsldap_id_use_start_tls = trueldap_default_bind_dn = cn=********,o=guhldap_default_authtok_type = *******ldap_default_authtok = *********ldap_user_member_of = *********ldap_group_name = cn=*******,ou=*******,ou=******,o=******Just assume the * are put in correctly.Also, is there anything to do in a PAM config file, because ive not seen somebody adressing it yet.If you need more information, Im more than happy to provide it to you.
Get Sudoers through LDAP. (SUSE Linux Enterprise Server 12)
ldap;sles;sssd;nsswitch;nss