Re: i don't find a new user added in getent passwd list

2012-02-29 Thread stefano
nobody knows something? On 02/29/2012 04:21 PM, stefano wrote: am sorry, i confused DB_CONFIG with /etc/default/slapd and i re-installed everything. i follow the steps on http://wiki.debian.org/LDAP/NSS - NSS Setup with libnss-ldapd but i can't see the new user posixAccount with getent passwd

Re: ssl negotiation and openldap

2012-02-29 Thread Howard Chu
Brett @Google wrote: Hello, I've recently had issues with a 3rd party java client using jdk 1.4.x, trying to connect with ldaps:// to openldap 2.4.26, compiled with OpenSSL 1.0.0d It would appear that the client's jdk 1.4.x has a few harsh restrictions with regard to modulus size in certiicates

ssl negotiation and openldap

2012-02-29 Thread Brett @Google
Hello, I've recently had issues with a 3rd party java client using jdk 1.4.x, trying to connect with ldaps:// to openldap 2.4.26, compiled with OpenSSL 1.0.0d It would appear that the client's jdk 1.4.x has a few harsh restrictions with regard to modulus size in certiicates, even with all unrestr

Re: LDAP_OPT_X_TLS_xxx option in SSL/TLS connection

2012-02-29 Thread Qiang Xu
Guess what? Just picked up a pearl in the sea of internet: http://www.mailinglistarchive.com/postfix-us...@postfix.org/msg57688.html Basically, it seems to be a feature introduced since the beginning of openldap 2.4 version. We need to set LDAP_OPT_X_TLS_REQUIRE_CERT on an ldap handle (already ini

ssh group membership access

2012-02-29 Thread Daniel Bahena
Hi, I have a set of servers in which I want to configure ssh access based on the users group membership. I'm using CentOS 5 and this version of openldap [root@centos5 ldifs]# rpm -qa | grep ldap openldap-servers-2.3.43-12.el5_7.10 php-ldap-5.1.6-27.el5_7.5 openldap-servers-overlays-2.3.43-12.el5

Re: SSL handshake failure

2012-02-29 Thread Rich Megginson
On 02/29/2012 01:29 PM, Bryce Powell wrote: I managed to get this working, mostly by following directions in: http://www.openldap.org/doc/admin24/tls.html http://www.openldap.org/faq/data/cache/1514.html Note that these steps work for my combination of OS and OpenLDAP package, as detailed in my

RE: SSL handshake failure

2012-02-29 Thread Bryce Powell
I managed to get this working, mostly by following directions in: http://www.openldap.org/doc/admin24/tls.html http://www.openldap.org/faq/data/cache/1514.html Note that these steps work for my combination of OS and OpenLDAP package, as detailed in my initial posting. My server and CA certificat

Re: LDAP_OPT_X_TLS_xxx option in SSL/TLS connection

2012-02-29 Thread Qiang Xu
On Tue, Feb 28, 2012 at 8:25 PM, Hallvard B Furuseth < h.b.furus...@usit.uio.no> wrote: > The essential parts here are creating the LDAP* with > ldap_initialize() or whatever, and ldap_start_tls_s(). > > Note that ldap_unbind() is misnamed, it should have been > called ldap_destroy(). It does sen

Re: i don't find a new user added in getent passwd list

2012-02-29 Thread stefano
am sorry, i confused DB_CONFIG with /etc/default/slapd and i re-installed everything. i follow the steps on http://wiki.debian.org/LDAP/NSS - NSS Setup with libnss-ldapd but i can't see the new user posixAccount with getent passwd command again. the list is the same of /etc/passwd what is hap

slapd-meta and LDAPS/SSL problem.

2012-02-29 Thread Jim Vanes
Hello, Sorry, I tried posting this yesterday but it didn't seem to make it on the list - trying again. I currently have OpenLDAP (2.4.28) running on a Linux box with a local database and a meta backend which represents the local database along with a remote Active Directory server (2008 R2).

Re: i don't find a new user added in getent passwd list

2012-02-29 Thread stefano
so, there is a little problem. i was checking with ldapsearch and the answer was "ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)" i didn't understand the cause. i checked about pid of openldap and there wasn't it. in slapd.conf it has to be in /var/run/slapd/slapd.pid but this file wasn

Re: i don't find a new user added in getent passwd list

2012-02-29 Thread Adam
Hi, have you tried using ldapsearch to see if its an issue with nss/pam or an issue with ldap? I would suggest that your openldap environment is probably working fine (as you seem to have been able to perform the necessary ldapadds) and its probably nss/pam that need fixing. Try reading here: ht

i don't find a new user added in getent passwd list

2012-02-29 Thread stefano
hi, i started to work with posixAccount objectClass. i installed libnss-ldap on debian squeeze server. i configured it during install time and i modified nsswitch.conf as follow: passwdfiles ldap group files ldap shadowfiles ldap and i didn't modify the remains lines. i succes