Login  View  Edit  Attributes  History  Attach  Print  Search

Ldap

Trying to make ldap work with mac:

copied samba, apple and netinfo schemas from the mac server to annette. Edited slapd.conf. Did not start. Did not leave useful error messages. tried uncommneting attributetype authAuthority per instructions here

http://bax.comlab.uni-rostock.de/en/articles/macos-x-home-directory-mounting-via-smbldap-and-gosa-web-administration.html

did not work. need to try again but with more error messages.

slapd.conf - indexing is different then here:

http://wiki.debian.org/LDAP/OpenLDAPSetup

maybe that will get rid of messages in slapd.log like bdb_index_read: failed (-30990)

files I am changing:

  • /etc/ldap/ldap.conf
  • /etc/libnss-ldap.conf
  • /etc/pam_ldap.conf
  • /etc/nsswitch.conf

ella specific:

  • /etc/apache2/sites-available/secure
  • /etc/squirrelmail/config.php (although this was pointing to miles, so don't think this config was actually being used)
  • /etc/imapd.conf
  • /etc/postfix/main.cf

new test machine 17 currently

make sure permissions of certs is correct, otherwise ldap fails silently with an error message that is indeed cryptic:
main: TLS init def ctx failed: -64

once ldap is working, check ldap.conf on all machines

think I need to install sasl2-bin as well as these: slapd libnss-ldap ldap-utils libpam-ldap

trying it now with aptitude install gnutls-bin

ldap queries stopped working on marsalis, somehow the /etc/libnss-ldap.conf file got corrupted, and this line was weird:

rootbinddn

I commented out the line, restarted nscd and now queries work. log message was:

Dec 10 14:15:13 marsalis nscd: nss_ldap: failed to bind to LDAP server ldap://ldap.shadlen.org: Invalid DN syntax

in /var/log/auth.log

trying to get automount to work with ldap. installed autofs-ldap on armstrong, and ldap is now loading the autofs.schema Now I need to populate the database with automount stuff.

https://help.ubuntu.com/community/AutofsLDAP

http://www.openldap.org/lists/openldap-software/200106/msg00355.html