I haven't seen any answers to this one yet. I also tried to use [EMAIL PROTECTED] on this one and they rejected it indicating it wasn't openldap specific enough. Are there any other mailing lists that might be more appropriate for questions of this nature?
> I have set up LDAP so ldapsearch works for a specific user, but when that > user tries to login, that user is invalid. I must have missed something > in the configuration but having trouble spotting it. Some extra eyes > would sure help here. > > Below are diff listings of my changes to config files and their original > state as of the openLDAP-2.0.27-23 release. Also changes to nsswitch.conf > and chkconfig. System is running RHEL ES 3.9 and is currently the only > server and client. > > I have made no changes to /etc/pam.d/* or /etc/pam_smb.conf > > What am I missing here? > > # diff /etc/ldap.conf /etc/ldap.conf_2.0.27-23 > 18c18 > < base dc=localdomain > --- > > base dc=example,dc=com > 43c43 > < rootbinddn cn=Manager,dc=localdomain > --- > > #rootbinddn cn=manager,dc=example,dc=com > > # diff /etc/openldap/ldap.conf /etc/openldap/ldap.conf_2.0.27-23 > 16c16 > < BASE dc=localdomain > --- > > BASE dc=example,dc=com > > # diff /etc/openldap/slapd.conf /etc/openldap/slapd.conf_2.0.27-23 > 40,42d39 > < TLSCipherSuite HIGH:MEDIUM > < TLSCertificateFile /usr/share/ssl/certs/slapd.pem > < TLSCertificateKeyFile /usr/share/ssl/certs/slapd.pem > 60,64d56 > < access to attrs=userPassword > < by self write > < by * auth > < access to * > < by * read > 71c63 > < suffix "dc=localdomain" > --- > > suffix "dc=my-domain,dc=com" > 73c65 > < rootdn "cn=Manager,dc=localdomain" > --- > > rootdn "cn=Manager,dc=my-domain,dc=com" > 78,79c70,71 > < #rootpw secret > < rootpw {SSHA}hqjzpACdAWS/WmnnqRu/5P9TaNqaSVg7 > --- > > # rootpw secret > > # rootpw {crypt}ijFYNcSNctBYg > > # diff /etc/nsswitch.conf /etc/nsswitch.conf_ORIG > 33,35c33,35 > < passwd: ldap files > < shadow: ldap files > < group: ldap files > --- > > passwd: files > > shadow: files > > group: files > > # chkconfig --list | egrep 'ldap|sasl' > saslauthd 0:off 1:off 2:off 3:off 4:off 5:off 6:off > ldap 0:off 1:off 2:on 3:on 4:on 5:on 6:off --- You are currently subscribed to [EMAIL PROTECTED] as: [EMAIL PROTECTED] To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the SUBJECT of the message.