Sunny Chan blogs Can you see the Logic in my Madness?

This is a brain dump on how to get Centos 6 client to authenticate using Synology's Directory Service. I have assumed that you have setup the Directory Server correctly.

You need the following packages:

• openldap-clients


• sssd

sssd seems to be installed by default, but openldap wasn't.

Run system-config-authenticate, with the following settings:

• LDAP Search Base DN can be found under Synology Directory Server application


• Make sure you use ldaps:// in order to use LDAP passwd. Notice that ldaps is switch on by default on synology server.

Then, Apply the changes.

Notice that the SSL certificate used by the LDAP server is a self-generated one, and I didn't manage to change it so I took a short cut and ask openldap client not to borther checking the certifiacte. You can do this by modifying /etc/openldap/ldap.conf and add "TLS_REQCERT allow". This would ask openldap to ignore any SSL cert error.

Once you have done that, try login via ssh and you should be able to access the user listed in the synology server directory. If you want to use the uid and gid from ldap server instead of the passwd file on the Linux client, make sure you swap the priority for passwd in nsswitch.conf.

Just to save people from scratching their heads - if you try and compile OpenJDK from vanilla source bundle (not IcedTea) on Fedora 16, you migth see libjvm.so fails to link with a message:

libstdc++ not found

If you look at OpeJDK build readme:

This is caused by a missing libstdc++.a library. This is installed as part of a specific package (e.g. libstdc++.so.devel.386). By default some 64-bit Linux versions (e.g. Fedora) only install the 64-bit version of the libstdc++ package. Various parts of the JDK build require a static link of the C++ runtime libraries to allow for maximum portability of the built images.

 DOH! So what you will need on Fedora 16 is libstdc++-static package

Just to save other people out there who have try to use autofs:

All automount map file must be non executable (eg rw-r-r-)

If not automounter will refuse to load it. I was scratching my head for a whole night trying to figure out my new ubuntu installation refuse to mount my NFS home directory. I am just about to blame ubuntu for this :-)