Re: LDAP Support

2005-06-27 Thread Antoine Jacoutot

Matt Juszczak wrote:
the system so that all authentication is done via LDAP?  I know OpenBSD 
does not have NSS/PAM like FreeBSD does, so I'm trying to investigate 
how quick and easy it would be to switch our solution to OpenBSD.


Well, PAM is not included with OpenBSD which uses bsd_auth instead. You 
can use the login_ldap port (/usr/ports/sysutils/login_ldap) to 
authenticate against an LDAP server just like you would do with PAM.
However, there's no clean way to use an LDAP server to get user info 
under OpenBSD like you would do under FreeBSD/Linux with nss_ldap.


Regards,

Antoine



Re: LDAP Support

2005-06-27 Thread Wu
[ smtp (sendmail) ][ imaps/pop3s (cyrus-imapd) ]
|   |
|   |
|   |
-
| |
  [ cyrus-sasl (saslauthd)]
 |
 |
[OpenLDAP]

This way you get LDAP-based authentication for all the email
services. Sendmail is in base, cyrus-imapd and cyrus-sasl
are in ports, aswell as OpenLDAP.

(dunno if you mean something like that, hope it works)


On Mon, 27 Jun 2005 17:13:28 -0400 (EDT)
Matt Juszczak <[EMAIL PROTECTED]> wrote:

> Hi all,
> 
> I'm currently experiencing major problems with FreeBSD 5.4 (stability, 
> system keeps crashing) and i'm looking for an alternative solution.
> 
> Right now, we have a mail server which is completely 100% LDAP (no local 
> accounts on the system at all).  Is it possible to integrate LDAP into the 
> system so that all authentication is done via LDAP?  I know OpenBSD does 
> not have NSS/PAM like FreeBSD does, so I'm trying to investigate how quick 
> and easy it would be to switch our solution to OpenBSD.
> 
> TIA, Regards,
> 
> Matt
> 


-- 

"Perceive that which cannot be seen with the eye." - Miyamoto Musashi
-
Francisco de Borja Lspez Rmo ([EMAIL PROTECTED])
Csdigo23 - Secure Network Solutions
http://www.codigo23.net / http://www.e-shell.org



Re: LDAP Support

2005-06-27 Thread OutBack Dingo
actually here is the correct patch : ) arghhh to much code : ))

On Mon, 2005-06-27 at 19:12 -0400, Matt Juszczak wrote:
> 
> > Have you considered there might be a problem with the hardware and not
> > the OS. maybe memory has become faulty. Ive got 62 FreeBSD 5.4 Servers
> > running and they dont crash. Maybe you are using a piece of incompatible
> > hardward, or something may have started to show signs of becoming
> > faulty. Before you decide to rip out the OS and have potentially the
> > same problem with OpenBSD or NetBSD, be sure its not something other
> > then the OS. If you need some help in maybe trouble shooting the issue,
> > feel free to post the points here.
> 
> Thanks for you response.
> 
> I am pretty sure this is the known ttwakeup bug in FreeBSD, which is a 
> known bug that has not been fixed.  Occurs on SMP machines with high 
> traffic.
> 
> Thats why I was considering switching Operating Systems.
> 
> -Matt

[demime 1.01d removed an attachment of type text/x-patch which had a name of 
tty_5.4.patch]



Re: LDAP Support

2005-06-27 Thread Rogier Krieger
On 6/27/05, Matt Juszczak <[EMAIL PROTECTED]> wrote:
> Is it possible to integrate LDAP into the system so that all
> authentication is done via LDAP?

You may want to check out login_ldap from ports (sysutils/login_ldap)
which uses BSD auth present in OpenBSD. See how you like it and give
it a test run, especially before you decide to move things over.

Cheers,

Rogier

-- 
If you don't know where you're going, any road will get you there.



Re: LDAP Support

2005-06-27 Thread Matt Juszczak

Have you considered there might be a problem with the hardware and not
the OS. maybe memory has become faulty. Ive got 62 FreeBSD 5.4 Servers
running and they dont crash. Maybe you are using a piece of incompatible
hardward, or something may have started to show signs of becoming
faulty. Before you decide to rip out the OS and have potentially the
same problem with OpenBSD or NetBSD, be sure its not something other
then the OS. If you need some help in maybe trouble shooting the issue,
feel free to post the points here.


Thanks for you response.

I am pretty sure this is the known ttwakeup bug in FreeBSD, which is a 
known bug that has not been fixed.  Occurs on SMP machines with high 
traffic.


Thats why I was considering switching Operating Systems.

-Matt



Re: LDAP Support

2005-06-27 Thread OutBack Dingo
Have you considered there might be a problem with the hardware and not
the OS. maybe memory has become faulty. Ive got 62 FreeBSD 5.4 Servers
running and they dont crash. Maybe you are using a piece of incompatible
hardward, or something may have started to show signs of becoming
faulty. Before you decide to rip out the OS and have potentially the
same problem with OpenBSD or NetBSD, be sure its not something other
then the OS. If you need some help in maybe trouble shooting the issue,
feel free to post the points here.

On Mon, 2005-06-27 at 17:13 -0400, Matt Juszczak wrote:
> Hi all,
> 
> I'm currently experiencing major problems with FreeBSD 5.4 (stability, 
> system keeps crashing) and i'm looking for an alternative solution.
> 
> Right now, we have a mail server which is completely 100% LDAP (no local 
> accounts on the system at all).  Is it possible to integrate LDAP into the 
> system so that all authentication is done via LDAP?  I know OpenBSD does 
> not have NSS/PAM like FreeBSD does, so I'm trying to investigate how quick 
> and easy it would be to switch our solution to OpenBSD.
> 
> TIA, Regards,
> 
> Matt



Re: LDAP Support

2005-06-27 Thread Maxim Bourmistrov
Try to search at http://marc.theaimsgroup.com on this subject.
OpenBSD have BSD-auth.
 
On Monday 27 June 2005 23:13, you wrote:
> Hi all,
> 
> I'm currently experiencing major problems with FreeBSD 5.4 (stability, 
> system keeps crashing) and i'm looking for an alternative solution.
> 
> Right now, we have a mail server which is completely 100% LDAP (no local 
> accounts on the system at all).  Is it possible to integrate LDAP into the 
> system so that all authentication is done via LDAP?  I know OpenBSD does 
> not have NSS/PAM like FreeBSD does, so I'm trying to investigate how quick 
> and easy it would be to switch our solution to OpenBSD.
> 
> TIA, Regards,
> 
> Matt
> 
> 

-- 
Best regards
Maxim Bourmistrov