PAM/NSS (CLIENT) CONFIGURATION FOR PARTICIPATING IN A DIRECTORY

(Please don't forget to read security.txt for security issues)

0. Make sure your PAM, NSS and LDAP client libraries are compiled
   with SSL support!  This is crucial!  Also make sure your server
   has SSL support and is listening on port ssl-ldap.

1. Make sure there aren't any user accounts created on the client
   (system accounts should be left untouched)

2. configure the file /etc/ldap.conf with these directives:
   host <directory server ip address>
   base <base dn>
   ssl yes
   rootbinddn <DN of an administrative account>

3. Create the file /etc/ldap.secret containing the password of the
   dn you used for the rootbinddn directive of /etc/ldap.conf,
   and make it readable by only root.

4. Put the system-auth and passwd example files from the
   doc/pam.d/ directory into your /etc/pam.d directory

