This is on CentOSI read the various openldap howto's, they mention /etc/openldap/ldap.conf and editing /etc/nsswitch.conffor example:https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/3/html/Reference_Guide/s1-ldap-pam.htmlI had openldap-clients installed. Thats all I know for sure that's what I should do. I don't know what else to do or try. Isn't there supposed to be an ldap binary somewhere that handles server connections or something? An instance of slapd on the client ? I really don't understand how this works on the client-side. The goal right now is to simply have users defined in ldap database to be able to ssh into client machines on my local network.ldap.conf also has symbolic links in the various places mentioned in different tutorials:/etc/openldap/ldap.conf #real file                                                                                                                                    /etc/ssh/ldap.conf                                                                                                                                                     /etc/ldap.conf ldap.conf:pam_login_attribute uidbase dc=lan,dc=archives,dc=neturi ldap://directory.lan.archives.net/pam_min_uid 100#pam_password_prohibit_message Please visit http://accounts.cs.sunyit.edu/ to change your password.nss_base_passwd         ou=people,dc=lan,dc=archives,dc=netnss_base_shadow         ou=people,dc=lan,dc=archives,dc=netnss_base_group          ou=groups,dc=lan,dc=archives,dc=netbind_policy soft# Enable SSLssl start_tlstls_reqcert demandTLS_CACERT /etc/pki/tls/certs/archivesCA.crt# Extra SSL settings#tls_checkpeer no#tls_reqcert never# Disable SSL#ssl off#TLS nevertimelimit 10bind_timelimit 10idle_timelimit 3600#sudoers_base ou=sudoers,dc=lan,dc=archives,dc=net# Require host tag in ldap# System hostname must match DNS records#pam_check_host_attr yesnsswitch.conf:...passwd:     files sss ldapshadow:     files sss ldapgroup:      files sss ldap...my /etc/sssd/sssd.conf:[domain/LDAP]id_provider = ldapcache_credentials = Falseldap_search_base = dc=lan,dc=archives,dc=netldap_uri = ldap://directory.lan.archives.net/ldap_schema = rfc2307bisid_provider = ldapauth_provider = ldap#chpass_provider = ldapldap_network_timeout = 3ldap_id_use_start_tls = Trueldap_tls_reqcert = demand#ldap_tls_cacert = /opt/work/certs/archivesCA.crt#ldap_tls_reqcert = never[sssd]domains = LDAPservices = nss, pamconfig_file_version = 2domains = default[nss]filter_users = root,ldap,named,avahi,haldaemon,dbus,radiusd,news,nscd
How does ldap work on a client?
centos;ldap