Sean Carolan wrote:
> Thanks for the info, the sshd_config file may be the way to go.
We
> already use cfengine so it would be fairly easy to implement and push
> out to all our servers.
>
Speaking of cfengine, I would like to use this to push out the
/etc/pam.d/system-auth and other files required for ldap
authentication and user information. Are there any other files on the
client machines that will be required to make this work? I used the
GUI tool (system-config-authentication) to flip on LDAP auth on my
test machine.
It's not clear to me what OS/distribution you're doing this on, but for
the most part we have cfengine run authconfig on our Red Hat boxes to
set up the basic LDAP auth (it's a one-liner if done that way), and then
push around the sshd_config file.