This shows you the differences between two versions of the page.
Next revision | Previous revision | ||
hannibal:ldap-auth [2008/06/25 12:02] Olivier Brugman created |
hannibal:ldap-auth [2010/03/08 12:27] (current) Luc Nieland Troubleshouting |
||
---|---|---|---|
Line 71: | Line 71: | ||
mkdir /etc/ldap/cacerts | mkdir /etc/ldap/cacerts | ||
- | Now we have to convert the public CA-certificate of the Fedora Directory Server (which was created by the setupssl.sh script, see [[hannibal:ldap_directory#ssl_tls_configuration|our FDS documentation]] for more information on this procedure) for usage with libnss/pam. | + | Now we have to convert the public CA-certificate of the Fedora Directory Server (which was created by the setupssl.sh script, see [[hannibal:fds#ssl_tls_configuration|our FDS documentation]] for more information on this procedure) for usage with libnss/pam. |
The script puts the cacert.asc file in the directory /opt/fedora-ds/alias . Copy it to your client (the server or virtual server you're working on right now is a LDAP-client) and run (you might need to install the openssl package first if that isn't already available on your system): | The script puts the cacert.asc file in the directory /opt/fedora-ds/alias . Copy it to your client (the server or virtual server you're working on right now is a LDAP-client) and run (you might need to install the openssl package first if that isn't already available on your system): | ||
apt-get install openssl | apt-get install openssl | ||
Line 80: | Line 80: | ||
getent passwd | getent passwd | ||
+ | |||
+ | |||
+ | ==Troubleshouting== | ||
+ | |||
+ | Check /etc/libnss-ldap.secret for the correct password (in case of non-anonymous bind; configured in /etc/libnss-ldap.conf in the attribute rootbinddn). | ||
+ | |||
===Pam_ldap per service=== | ===Pam_ldap per service=== |