My Stuff

slapd.conf - indexing is different then here:

http://wiki.debian.org/LDAP/OpenLDAPSetup

maybe that will get rid of messages in slapd.log like bdb_index_read: failed (-30990)

files I am changing:

• /etc/ldap/ldap.conf
• /etc/libnss-ldap.conf
• /etc/pam_ldap.conf
• /etc/nsswitch.conf

ella specific:

• /etc/apache2/sites-available/secure
• /etc/squirrelmail/config.php (although this was pointing to miles, so don't think this config was actually being used)
• /etc/imapd.conf

/etc/postfix/main.cf

new test machine 17 currently

make sure permissions of certs is correct, otherwise ldap fails silently with an error message that is indeed cryptic:
main: TLS init def ctx failed: -64

once ldap is working, check ldap.conf on all machines

think I need to install sasl2-bin as well as these: slapd libnss-ldap ldap-utils libpam-ldap

trying it now with aptitude install gnutls-bin

Started getting ldap to work on nina (is this where I want the backup install?).
I think I am happy with slapd.conf
ldap not populated yet.
ldapmodify files need additional line now (see pass.exp for example)
ldap queries stopped working on marsalis, somehow the /etc/libnss-ldap.conf file got corrupted, and this line was weird:

rootbinddn

I commented out the line, restarted nscd and now queries work. log message was:

Dec 10 14:15:13 marsalis nscd: nss_ldap: failed to bind to LDAP server ldap://ldap.shadlen.org: Invalid DN syntax

in /var/log/auth.log

trying to get automount to work with ldap. installed autofs-ldap on armstrong, and ldap is now loading the autofs.schema Now I need to populate the database with automount stuff.

https://help.ubuntu.com/community/AutofsLDAP

http://www.openldap.org/lists/openldap-software/200106/msg00355.html