User Tools

Site Tools


hannibal:ldap-auth

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
hannibal:ldap-auth [2008/06/25 12:02]
Olivier Brugman created
hannibal:ldap-auth [2010/03/08 12:27] (current)
Luc Nieland Troubleshouting
Line 71: Line 71:
   mkdir /​etc/​ldap/​cacerts   mkdir /​etc/​ldap/​cacerts
  
-Now we have to convert the public CA-certificate of the Fedora Directory Server (which was created by the setupssl.sh script, see [[hannibal:ldap_directory#​ssl_tls_configuration|our FDS documentation]] for more information on this procedure) for usage with libnss/pam.+Now we have to convert the public CA-certificate of the Fedora Directory Server (which was created by the setupssl.sh script, see [[hannibal:fds#​ssl_tls_configuration|our FDS documentation]] for more information on this procedure) for usage with libnss/pam.
 The script puts the cacert.asc file in the directory ​ /​opt/​fedora-ds/​alias . Copy it to your client (the server or virtual server you're working on right now is a LDAP-client) and run (you might need to install the openssl package first if that isn't already available on your system): The script puts the cacert.asc file in the directory ​ /​opt/​fedora-ds/​alias . Copy it to your client (the server or virtual server you're working on right now is a LDAP-client) and run (you might need to install the openssl package first if that isn't already available on your system):
   apt-get install openssl   apt-get install openssl
Line 80: Line 80:
  
   getent passwd   getent passwd
 +
 +
 +==Troubleshouting==
 +
 +Check /​etc/​libnss-ldap.secret for the correct password (in case of non-anonymous bind; configured in /​etc/​libnss-ldap.conf in the attribute rootbinddn).
 +
  
 ===Pam_ldap per service=== ===Pam_ldap per service===
hannibal/ldap-auth.1214388164.txt.gz · Last modified: 2008/06/25 12:02 by Olivier Brugman