LDAP Part Two Set up LDAP Client Configure PAM with LDAP Debian
• Edit /etc/pam.d/common-auth:
sudo vi /etc/pam.d/common-auth
• Ensure it contains:
auth success=1 default=ignore pam_ldap.so use_first_pass
• Enable Home Directory Creation (When an LDAP user logs in for the first time, a home directory should be automatically created.)
• Add a directory structure in /etc/skel:
Create standard directories
sudo mkdir -p /etc/skel/Desktop
sudo mkdir -p /etc/skel/Documents
sudo mkdir -p /etc/skel/Downloads
sudo mkdir -p /etc/skel/Music
sudo mkdir -p /etc/skel/Pictures
sudo mkdir -p /etc/skel/Videos
Create a sample README file in Documents
echo "Welcome to your new account! This is your Documents folder." | sudo tee /etc/skel/Documents/README.txt /dev/null
Create a sample bash profile (custom prompt, aliases)
sudo tee /etc/skel/.bashrc /dev/null EOF
.bashrc - Default config for new users
export PS1='\u@\h:\w\$ '
alias ll='ls -lah --color=auto'
alias update='sudo apt update && sudo apt upgrade -y'
EOF
Create a basic .profile file
sudo tee /etc/skel/.profile /dev/null EOF
.profile - Default shell startup script
if [ -f ~/.bashrc ]; then
. ~/.bashrc
fi
EOF
Set appropriate permissions
sudo chmod 755 /etc/skel
sudo chmod 700 /etc/skel/{Desktop,Documents,Downloads,Music,Pictures,Videos}
sudo chmod 644 /etc/skel/Documents/README.txt
sudo chmod 644 /etc/skel/.bashrc
sudo chmod 644 /etc/skel/.profile
Verify structure
sudo ls -lR /etc/skel