Configuring file authentication by using CLI

You need to use the mmuserauth service create command to configure user authentication by using CLI.

You can configure the following external authentication servers for file access:
  • Active Directory (AD)
  • Lightweight Directory Access Protocol (LDAP)
  • Network Information Service (NIS)
Before you configure the authentication method, ensure that the following RPMs are installed on all the protocol nodes before you start configuring the authentication method:
Note: If you try to configure the file authentication method manually, with the mmuserauth command, the command displays an error message if the required RPMs are not installed on the nodes. The error output includes a list of nodes in which some RPMs are not installed and a list of the missing RPMs for each node.
On Red Hat Enterprise Linux® nodes
  • For AD:
    • bind-utils
    • krb5-workstation
  • For LDAP:
    • openldap-clients
    • sssd and its dependencies (particularly sssd-common, sssd-ldap, and sssd-tools). It is a good idea to install all the dependencies, as in the following example:
      yum install sssd*
    • krb5-workstation only if Kerberized authentication is planned.
  • For NIS:
    • sssd and its dependencies (particularly sssd-common and sssd-proxy)
    • ypbind and its dependencies (yp-tools)
On SLES nodes
  • For AD:
    • bind-utils
    • krb5-client
  • For LDAP:
    • openldap2-client
    • sssd and its dependencies (particularly sssd-common, sssd-ldap, sssd-krb5, and sssd-tools). It is a good idea to install all the dependencies, as in the following example:
      zypper install sssd*
    • krb5-client only if Kerberized authentication is planned.
  • For NIS:
    • sssd and its dependencies (particularly sssd-common and sssd-proxy)
    • ypbind and its dependencies (yp-tools)
On Ubuntu nodes
  • For AD:
    • dnsutils
    • krb5-user (only if Kerberos authentication is planned)
  • For LDAP:
    • ldap-utils
    • krb5-user (only if Kerberos authentication is planned)
    • sssd and its dependencies (particularly sssd-tools). It is a good idea to install all the dependencies, as in the following example:
      apt-get install sssd
  • For NIS:
    • sssd and its dependencies (particularly sssd-common and sssd-proxy)
    • nis and libslp1 (nis package automatically installs the libslp1 package)