-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Pixel wrote: > Buchan Milne <[EMAIL PROTECTED]> writes: > > >>Note that for the client side, some changes need to be made in drakx for >>LDAP support to make it work better out-the-box: >> >>-use objectclass posixaccount instead of objectclass account (deprecated >>in openldap-2.1.x, many tools don't add it anyway) in pam_filter in >>/etc/ldap.conf >>-put pam_pwdb before pam_ldap in /etc/pam.d/system-auth >>-add "ldap" to the automount line of /etc/nsswitch.conf >>-If NIS or LDAP are used for auth, and NFS is installed, install >>autofs also > > > These changes should go in chkauth, a quite ugly script that takes > care of configuring ldap. I'm not really excited having to modify it, > if someone want to try, the result will be faster :)
I don't like chkauth either (have looked at it before ...) ... Also, we had mentioned trying to get auth config available after installation. How much work would it be to split the gui bits from DrakX to allow standalone use? If that is feasible, then I would be motivated to try and look at getting the config files right (if Daouda can help with some bits if it will be accessed from userdrake - which may or may not be a logical place?). But ideally we are going to want a backend that can configure pam without breaking it. Will libconf be part of 9.2? If so I will start with a pam backend for libconf (should be easier than slapd.conf ...) Regards, Buchan - -- |--------------Another happy Mandrake Club member--------------| Buchan Milne Mechanical Engineer, Network Manager Cellphone * Work +27 82 472 2231 * +27 21 8828820x202 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE+/ERbrJK6UGDSBKcRAkyeAJ9NFzaitqY/g/oR84xYv+91gRRQvwCfSJp7 bN5qMg2RGysuf9OXdgZye7g= =v5bj -----END PGP SIGNATURE----- ****************************************************************** Please click on http://www.cae.co.za/disclaimer.htm to read our e-mail disclaimer or send an e-mail to [EMAIL PROTECTED] for a copy. ******************************************************************
