In our local school, I have twenty desktop clients running OpenSUSE Leap 15.1 KDE. Authentication is managed centrally on a CentOS 7 server running a bone-headed NIS/NFS, which is not ideal in terms of security.
I’ve spent the last week experimenting with 389 Directory Server, which is essentially an LDAP server that JustWorks™. TLS is also setup.
Now I’d like to configure my OpenSUSE clients so they authenticate against this server. I spent many hours experimenting more or less haphazardly with YaST, I had some scarce successes and many failures.
Are some folks here actually using LDAP/TLS for user authentication? I’d be glad to have some pointers to reliable documentation on the subject.