Y.A.S.D.

Sun Ray / OpenSolaris & RBAC / LDAP

新しく Ultra 24 が来たので,試しに 1台 OpenSolaris を Sun Ray の failover group に入れてやろうかと。

で,箱から出して最初 電源入れてみたら,「CPU Fan Error!」とか言ってそのまま落ちちゃって焦る。Product Notes に対処法 が書いてあった。2008.11 入れて,LDAP ひかせて認証やら automount やらが問題ないことを確認。Sun Ray Server のインストールは,Sun Ray wiki が参考になった。

関係ないけど今まで全然 RBAC を触ってこなかったせいで,「LDAP で RBAC ってどうやんだー」と一瞬困った。どうも LDAP のユーザエントリに

  • SolarisUserAttr って objectClass を追加する。
  • SolarisAttrKeyValue って attribute を作る。
  • SolarisAttrKeyValue の値に,user_attr に書くような書式で attribute list を持たせてやる。
すればいいみたい。

$ ldapsearch -b 'dc=foo,dc=bar,dc=com' -h 192.168.1.1 uid=tsumura objectClass SolarisAttrKeyValue
version: 1
dn: uid=tsumura,ou=People,dc=foo,dc=bar,dc=com
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetorgperson
objectClass: account
objectClass: shadowaccount
objectClass: posixAccount
objectClass: solarisuserattr
SolarisAttrKeyValue: roles=root;profiles=User Management,User Security
 

Comments:

snow boots is unquestionable that every single female desires to gown the best. Therefore, apart from dresses, additionally they glimpse for some applicable accessories, makeup and shoes. However, to Puma Shoes locate gowns and makeup is thought to be pretty easy. But, acquiring a secure and attractive pair of footwear could be pretty an adventure. Today, Christian Louboutin is thought to be to become among the most effective add-ons ugg boots on sale for girls by every single stylist. This reality is recognized.

Posted by snow boots on October 31, 2011 at 01:03 PM JST #

Hi, this is really good website. You know that I have a web about viviscal you need learn about document management and virus removal and its true. Thank you

Posted by Body By Vi on December 06, 2012 at 08:35 PM JST #

Post a Comment:
  • HTML Syntax: Allowed

[Masubi]
Copyright © 1998-2009 Tomoaki TSUMURA. Powered by Apache Roller 4.0.1.
tomoaki@tsumura.info