Native FreeBSD Kerberos/LDAP with FreeIPA/IDM

[vermaden]

Original article here.
Consider this when replying.

FreeBSD, The FreeBSD Foundation, and The FreeBSD Forums are not associated with the content of this article.

 

[SirDice]

to achieve that we will add sshd user to its nslcd group.

pw usermod sshd -G nslcd

Careful with that one. If, for some reason, the sshd user was a member of additional groups, those would get removed.

This adds the sshd user to the nslcd group, leaving the additional groups sshd might be a member of in place.
pw groupmod nslcd -m sshd

 

[elephant]

I saw "FreeIPA" and thought, oh, cool - a free beer!

 

[vermaden]

Careful with that one.

Updated/fixed with Your command instead. Thank You for pointing that out.