Pool-Name attribute issue WAS Re: Unknown Auth-Type LDAP in authenticate sub-section

2012-03-12 Thread up
On Sat, Mar 10, 2012 at 5:29 AM, u...@3.am wrote: So to save lots of time and configuration problem: does your LDAP store user passwords in clear text or any common hash (e.g. md5, unix)? If yes, AND you know what the LDAP attribute is, you don't even need an LDAP section in authenticate.

Re: Pool-Name attribute issue WAS Re: Unknown Auth-Type LDAP in authenticate sub-section

2012-03-12 Thread Phil Mayers
On 12/03/12 15:44, u...@3.am wrote: DEFAULT Group == FOO, Pool-Name :=FOO_pool Group is probably empty. I can't remember what module, if any, fills it out. What do you *think* Group will contain? It won't contain LDAP groups. - List info/subscribe/unsubscribe? See

Re: Pool-Name attribute issue WAS Re: Unknown Auth-Type LDAP in authenticate sub-section

2012-03-12 Thread up
On 12/03/12 15:44, u...@3.am wrote: DEFAULT Group == FOO, Pool-Name :=FOO_pool Group is probably empty. I can't remember what module, if any, fills it out. What do you *think* Group will contain? It won't contain LDAP groups. I was about to post about this..I just did a test with

Re: Pool-Name attribute issue WAS Re: Unknown Auth-Type LDAP in authenticate sub-section

2012-03-12 Thread Alan Buxey
Hi, DEFAULT Group == FOO, Pool-Name :=FOO_pool Group is probably empty. I can't remember what module, if any, fills it out. # The Group and Group-Name attributes are automatically created by # the Unix module, and do checking against /etc/group automatically. # This means that

Re: Pool-Name attribute issue WAS Re: Unknown Auth-Type LDAP in authenticate sub-section

2012-03-12 Thread up
Hi, DEFAULT Group == FOO, Pool-Name :=FOO_pool Group is probably empty. I can't remember what module, if any, fills it out. # The Group and Group-Name attributes are automatically created by # the Unix module, and do checking against /etc/group automatically. # This means

Re: Pool-Name attribute issue WAS Re: Unknown Auth-Type LDAP in authenticate sub-section

2012-03-12 Thread Phil Mayers
On 12/03/12 18:23, u...@3.am wrote: ...and you just hit on something that solved the problem. It seems that FR was getting the group info from LDAP indirectly, through the PAM module, which was Actually, probably not. It probably gets the groups via nss_ldap, through nssswitch. - List