Re: ldap authentication troubles

2007-03-01 Thread Vijay Sankar
On Thursday 22 February 2007 15:41, Joachim Schipper wrote: > > That's true. Then again, I've never had any problems with my home-hacked > solution that just cats a couple of /etc/master.passwd.something files > together, and then runs the appropriate 'compilation' commands. > > You do have to know

Re: ldap authentication troubles

2007-02-23 Thread Rogier Krieger
On 2/21/07, Vijay Sankar <[EMAIL PROTECTED]> wrote: On Wednesday 21 February 2007 10:22, Rogier Krieger wrote: > Personally, I'm having trouble using login-ldap with my local(host) > LDAP server using SSL. ftl2# more /etc/openldap/ldap.conf TLS_CACERT /etc/ssl/certs/ca.crt The TLS_CACERT

Re: ldap authentication troubles

2007-02-22 Thread Joachim Schipper
On Wed, Feb 21, 2007 at 04:54:25PM -0500, Cory Albrecht wrote: > Marc Balmer wrote: > >Cory Albrecht wrote: > >>I'm trying to get my OpenBSD firewall to authenticate normal user > >>accounts off of an LDAP server running on a different machine. > > >On a side note, you are aware that you must cre

Re: ldap authentication troubles

2007-02-21 Thread Marc Balmer
Cory Albrecht wrote: Marc Balmer wrote: Cory Albrecht wrote: I'm trying to get my OpenBSD firewall to authenticate normal user accounts off of an LDAP server running on a different machine. On a side note, you are aware that you must create the accounts locally as well for things to work pro

Re: ldap authentication troubles

2007-02-21 Thread Lars Hansson
Cory Albrecht wrote: So, you're saying that if I had an organization with 100 OpenBSD desktops (and associated typical file /print/etc servers), that I would have to create every new login on *each* of those 100 desktops in addition adding it to the LDAP server every time we got a new employee?

Re: ldap authentication troubles

2007-02-21 Thread Cory Albrecht
Marc Balmer wrote: Cory Albrecht wrote: I'm trying to get my OpenBSD firewall to authenticate normal user accounts off of an LDAP server running on a different machine. On a side note, you are aware that you must create the accounts locally as well for things to work properly? It is not enou

Re: ldap authentication troubles

2007-02-21 Thread Diana Eichert
On Wed, 21 Feb 2007, L. V. Lammert wrote: > TTFR, but you missed the point I was making - LDAP is seldom used for > *machine authentication*, rather it is designed for applications like > email, file sharing, et al. > > Per your comment, it appears that the discontinuity lies with *local > logins*

Re: ldap authentication troubles

2007-02-21 Thread David Golden
> on OpenBSD, for things like samba servers or user logins to the > machine, the account must be created locally as well as in the LDAP > database. at least this is the current state of affairs. > > trivia: This contrasts to e.g. the linux/solaris situation where a nss (Name Service Switch) modu

Re: ldap authentication troubles

2007-02-21 Thread Vijay Sankar
On Wednesday 21 February 2007 10:22, Rogier Krieger wrote: > Personally, I'm having trouble using login-ldap with my local(host) > LDAP server using SSL. It refuses to connect and I can't find where > the problem lies. But since the two run on the same server, I manage > to live with unsecured con

Re: ldap authentication troubles

2007-02-21 Thread L. V. Lammert
At 05:22 PM 2/21/2007 +0100, Rogier Krieger wrote: On 2/21/07, L. V. Lammert <[EMAIL PROTECTED]> wrote: PMFJI, but could you clarify that? Requiring local accounts totally defeats the purpose of an LDAP server. Yes, it does. In fact, it is clearly documented in the login-ldap port materials.

Re: ldap authentication troubles

2007-02-21 Thread Rogier Krieger
On 2/21/07, L. V. Lammert <[EMAIL PROTECTED]> wrote: PMFJI, but could you clarify that? Requiring local accounts totally defeats the purpose of an LDAP server. Yes, it does. In fact, it is clearly documented in the login-ldap port materials. You may get around said local accounts requirement i

Re: ldap authentication troubles

2007-02-21 Thread Marc Balmer
L. V. Lammert wrote: On Wed, 21 Feb 2007, Marc Balmer wrote: Cory Albrecht wrote: I'm trying to get my OpenBSD firewall to authenticate normal user accounts off of an LDAP server running on a different machine. On a side note, you are aware that you must create the accounts locally as well f

Re: ldap authentication troubles

2007-02-21 Thread L. V. Lammert
On Wed, 21 Feb 2007, Marc Balmer wrote: > Cory Albrecht wrote: > > > I'm trying to get my OpenBSD firewall to authenticate normal user > > accounts off of an LDAP server running on a different machine. > > On a side note, you are aware that you must create the accounts > locally as well for things

Re: ldap authentication troubles

2007-02-21 Thread Marc Balmer
Cory Albrecht wrote: I'm trying to get my OpenBSD firewall to authenticate normal user accounts off of an LDAP server running on a different machine. On a side note, you are aware that you must create the accounts locally as well for things to work properly? It is not enough to have the accou

Re: ldap authentication troubles

2007-02-20 Thread Vijay Sankar
On Tuesday 20 February 2007 21:04, Cory Albrecht wrote: > Hello all, > > Yes, it's me again with more problems. :-) > > I'm trying to get my OpenBSD firewall to authenticate normal user > accounts off of an LDAP server running on a different machine. > > I installed ports/sysutils/login_ldap and mo

ldap authentication troubles

2007-02-20 Thread Cory Albrecht
Hello all, Yes, it's me again with more problems. :-) I'm trying to get my OpenBSD firewall to authenticate normal user accounts off of an LDAP server running on a different machine. I installed ports/sysutils/login_ldap and modified /etc/login.conf based on the examples from /usr/local/shar