The OS is Amazon Linux 2023. I am trying to use LDAP to do user/group management for all new users. I've installed openldap-servers, openldap-clients and nss-pam-ldapd packages. I've configured SSL on slapd and
ldapwhoami -x -H ldaps://myserver.mydomain.com
ldapwhoami -x -H ldapi:///
both return anonymous.
sudo ldapwhoami -H ldapi:///
returns dn:gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth.
I've set nsswitch.conf to:
passwd: ldap sss files
shadow: ldap files
group: ldap sss files
I've set nslcd.conf to:
uid root
gid root
uri ldapi:///
base dc=mydomain,dc=com
When I run:
sudo useradd -b /home balaguru1
it does not appear to add the user to the LDAP db. The files in /var/lib/ldap/ are unchanged. /etc/passwd is modified with the new user.
What am I missing?