Use LDAP as the local user authentication mode configuration:
User information and authentication information are provided by different programs.
Yum-y Install SSSD auth config-gtk krb5-workstation (do not install if Kerberos authentication is not necessary)
AUTHCONFIG-GTK graphical interface
Ldapuser0:password provided by LDAP
Ldapuser0=kerberos Authentication with Kerberos
Kerberos authentication will provide Kerberos address and realm.example.com
grep ldapuser0/etc/passwd
ID LDAPUSER0 See if there are no accounts
Getent passwd Ldapuser0 This indicates a successful connection to the LDAP server, there are two possible problems, one is the time is out of sync, and the other is the certificate is wrong.
Vim/etc/openldap/ldap.conf is the CA storage address where the configuration file was modified
ls/etc/openldap/cacerts/
LDAP authentication: AUTHCONFIG-GTK changed to LDAP auth
RHCE7.0 answer using LDAP as a local user authentication method