Hot answers tagged openldap
The value of objectSID - the Security Identifier - is a Windows NT-thing, not a generic directory service-thing. Version 3.0 (and newer) of the Samba project's LDAP schema contains a fully compatible attribute class called sambaSID, intended to store and display SID's just like the objectSID class.
You can use sssd daemon for it - https://wiki.ubuntu.com/Enterprise/Authentication/sssd It have cache credentials feature: cache_credentials = true in config file. Then - any user after login have their credentials cached, so can login again without access to ldap server.
Debian and Ubuntu provide the libpam-ccreds package, that caches network login credentials. From the package description: This package provides the means for Linux workstations to locally authenticate using an enterprise identity when the network is unavailable. Used in conjunction with the nss_updatedb utility, it provides a mechanism for ...
Only top voted, non community-wiki answers of a minimum length are eligible