Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Centralized user authentication with OpenLDAP and PAM
View unanswered posts
View posts from last 24 hours

Goto page Previous  1, 2, 3, 4, 5, 6, 7  
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
kootie
n00b
n00b


Joined: 19 Mar 2005
Posts: 10

PostPosted: Sun Mar 20, 2005 2:42 pm    Post subject: Reply with quote

I don't think so because this :

Code:
ldapsearch -D "uid=root,ou=people,dc=pastis,dc=ath.cx" -W -Hldap://127.0.0.1


returns results. Excerpt :

Code:

# mbertier, People, pastis.ath.cx
dn: uid=mbertier,ou=People,dc=pastis,dc=ath.cx
uid: mbertier
cn: mbertier
sn: mbertier
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
userPassword:: e2NyeXB0fSQxJEoudTU2czBZJElhaGpqZDdiZnA2WmxmNUh0YzNGSy8=
shadowLastChange: 12837
shadowMax: 99999
shadowWarning: 7
loginShell: /bin/bash
uidNumber: 1000
gidNumber: 407
homeDirectory: /home/mbertier
Back to top
View user's profile Send private message
weyhan
Apprentice
Apprentice


Joined: 27 May 2003
Posts: 245

PostPosted: Sun Mar 20, 2005 3:31 pm    Post subject: Reply with quote

kootie wrote:
I don't think so because this :

Code:
ldapsearch -D "uid=root,ou=people,dc=pastis,dc=ath.cx" -W -Hldap://127.0.0.1


I know you have setup it up as such. I'm saying you should set it as:

Code:
"ou=people,dc=pastis,dc=ath,dc=cx"

_________________
Han.
Back to top
View user's profile Send private message
kootie
n00b
n00b


Joined: 19 Mar 2005
Posts: 10

PostPosted: Sun Mar 20, 2005 3:32 pm    Post subject: [SOLVED] Reply with quote

Found the problem in the other (french) thread i opened :

It was an ACL issue, the first ACL example didn't work The second one does :

Code:
access to attribute="userPassword"
  by dn="uid=root,ou=people,dc=pastis,dc=ath.cx" write
  by anonymous auth
  by self write
  by * none
 
access to *
  by dn="uid=root,ou=People,dc=pastis,dc=ath.cx" write
  by * read


wouhou !

Is this an error in the howto, or does this come from something wrong in my setup ?
Back to top
View user's profile Send private message
outspoken
Guru
Guru


Joined: 14 Feb 2004
Posts: 464
Location: orlando, fl

PostPosted: Thu Sep 01, 2005 5:21 pm    Post subject: Reply with quote

i followed the howto and it ended up not working. =/

but i did find two other howtos on the net which helped me out:

http://linsec.ca/bin/view/Main/OpenLDAPAuth
http://wiki.debian.net/?LDAPMigrationTools

so it took a total of 3 howtos to get my system rolling, as always YMMV. ;)
Back to top
View user's profile Send private message
weyhan
Apprentice
Apprentice


Joined: 27 May 2003
Posts: 245

PostPosted: Thu Sep 01, 2005 5:34 pm    Post subject: Reply with quote

You could have use the following guide :wink::

http://gentoo-wiki.com/HOWTO_LDAPv3

The HOWTO you follow is incredibaly old and outdated.
_________________
Han.
Back to top
View user's profile Send private message
outspoken
Guru
Guru


Joined: 14 Feb 2004
Posts: 464
Location: orlando, fl

PostPosted: Thu Sep 01, 2005 6:07 pm    Post subject: Reply with quote

weyhan wrote:
You could have use the following guide :wink::

http://gentoo-wiki.com/HOWTO_LDAPv3

The HOWTO you follow is incredibaly old and outdated.


well like i said, i used 3, so i only took the bits and pieces that i needed from those mentioned guides - i didn't follow them form top to bottom.

also, the ldap howto on that wiki page does not cover many of the issues that i ran into. whats even better is the fact that the wiki link you pasted has a link at the bottom that is one of the links i pasted! ;)

after im fully satisfied with things and have it running smooth ill come back and help edit that gentoo wiki page.

next time don't be in such a rush to correct someone.
Back to top
View user's profile Send private message
weyhan
Apprentice
Apprentice


Joined: 27 May 2003
Posts: 245

PostPosted: Thu Sep 01, 2005 6:30 pm    Post subject: Reply with quote

outspoken wrote:
well like i said, i used 3, so i only took the bits and pieces that i needed from those mentioned guides - i didn't follow them form top to bottom.

also, the ldap howto on that wiki page does not cover many of the issues that i ran into. whats even better is the fact that the wiki link you pasted has a link at the bottom that is one of the links i pasted! ;)

Humm... I've just re-read the HOWTO I have posted and a new section I have not read before that points to the gentoo official HOWTO http://www.gentoo.org/doc/en/ldap-howto.xml.
outspoken wrote:
after im fully satisfied with things and have it running smooth ill come back and help edit that gentoo wiki page.

Great. Unless, of course, it is the same thing in the gentoo official HOWTO, and in that case I would like to know. So I could point people there if necessary. Please post your findings here. Thanks.
outspoken wrote:
next time don't be in such a rush to correct someone.

Not correcting. I'm trying to tell you and others who come to this HOWTO for help that it is really old and dated and to point them to other alternative (maybe I should have worded it better). I know you are trying to do the same as well. I'm merely trying to suggest an alternative. No need to take offense. :wink:
_________________
Han.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Goto page Previous  1, 2, 3, 4, 5, 6, 7
Page 7 of 7

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum