session optional pam_ldap.so minimum_uid=1000
</pre>
== sshd keys ==
If you migrate from a existing backup server, you might want to copy the ssh host keys to the new server. If you do so clients want see a difference between the two hosts as the fingerprint remains the same. Copy the following files from the existing host to the new:
* /etc/ssh/ssh_host_dsa_key
* /etc/ssh/ssh_host_ecdsa_key
* /etc/ssh/ssh_host_key
* /etc/ssh/ssh_host_rsa_key
* /etc/ssh/ssh_host_dsa_key.pub
* /etc/ssh/ssh_host_ecdsa_key.pub
* /etc/ssh/ssh_host_key.pub
* /etc/ssh/ssh_host_rsa_key.pub
Set the correct permissions on the new host:
chmod 600 /etc/ssh/ssh_host_dsa_key /etc/ssh/ssh_host_ecdsa_key /etc/ssh/ssh_host_key /etc/ssh/ssh_host_rsa_key
And restart the ssh daemon. ''Caution'': do not close your existing ssh session as long as you are not sure the ssh daemon restarted properly and you can login again.
== sshd_config ==
vi /etc/ssh/sshd_config