This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
| 
                    hannibal:ldap-auth [2008/06/25 12:02] Olivier Brugman created  | 
                
                    hannibal:ldap-auth [2010/03/08 12:27] (current) Luc Nieland Troubleshouting  | 
            ||
|---|---|---|---|
| Line 71: | Line 71: | ||
| mkdir /etc/ldap/cacerts | mkdir /etc/ldap/cacerts | ||
| - | Now we have to convert the public CA-certificate of the Fedora Directory Server (which was created by the setupssl.sh script, see [[hannibal:ldap_directory#ssl_tls_configuration|our FDS documentation]] for more information on this procedure) for usage with libnss/pam. | + | Now we have to convert the public CA-certificate of the Fedora Directory Server (which was created by the setupssl.sh script, see [[hannibal:fds#ssl_tls_configuration|our FDS documentation]] for more information on this procedure) for usage with libnss/pam. | 
| The script puts the cacert.asc file in the directory  /opt/fedora-ds/alias . Copy it to your client (the server or virtual server you're working on right now is a LDAP-client) and run (you might need to install the openssl package first if that isn't already available on your system): | The script puts the cacert.asc file in the directory  /opt/fedora-ds/alias . Copy it to your client (the server or virtual server you're working on right now is a LDAP-client) and run (you might need to install the openssl package first if that isn't already available on your system): | ||
| apt-get install openssl | apt-get install openssl | ||
| Line 80: | Line 80: | ||
| getent passwd | getent passwd | ||
| + | |||
| + | |||
| + | ==Troubleshouting== | ||
| + | |||
| + | Check /etc/libnss-ldap.secret for the correct password (in case of non-anonymous bind; configured in /etc/libnss-ldap.conf in the attribute rootbinddn). | ||
| + | |||
| ===Pam_ldap per service=== | ===Pam_ldap per service=== | ||