On Mon Jul 22, 2002 at 03:30:05PM -0700, David Walser wrote: > > What about TLS doesn't work? Is it configured > > correctly? I've got > > nss_ldap working just peachy on a few 8.2 boxes, no > > problems > > whatsoever. > > Following the instructions exactly from the article, > the relevant sections of slapd.conf and ldap.conf > exactly match what you have there, going the route > that you don't generate your own certificate and keep > the one it gave you. I gave you more details > personally in another message (that was me).
Ahhh... ok... better go have a gander at those messages... /me who has been trying to get his inbox under control for about 6mos > > I'll have to try cooker, but I know that on 8.2 > > nss_ldap/pam_ldap > > work as good as they can for authentication (see my > > Authentication > > with OpenLDAP article on MandrakeSecure; the entire > > thing was done on > > an 8.2 box). > > Yep, excellent article. Thank you. > > Of course, you keep saying 8.x but I find it odd > > that 8.0, 8.1, and > > 8.2 are all broken. I can't say for 100% certain > > about 8.[01] but I > > do know that 8.2 works. Which "8.x" are you using, > > specifically? > > Yeah, I'm really sorry I wasn't more clear/specific > about what I meant by 8.x. I didn't mean 8.0, 8.1, > and 8.2. I meant my main machine is 8.something but > hard to classify exactly. It was 8.1 once upon a > time, but you know how that goes. What would probably > be of more use to use is what versions of some > packages I have, I'll give you any info. you want. Definately letting me know what software you have installed will help. Let's start with versions of pam_ldap, nss_ldap, and openldap. Also, if you can tell me if any errors are printed to the screen or /var/log/messages when running stuff like "getent passwd" would really help. > > messages (thank you for that). But you indicate > > that TLS is not > > working on "8.x" but you say nothing about cooker... > > is TLS also not > > working in cooker? > > I have no idea. nss_ldap itself would have to be > working for me to test it. hehehe... I guess that makes sense. Well, I'm downloading 9.0b1 right now, and as soon as I have it all downloaded and burned, I'll be installing it on a spare machine to do some testing. I'll make it a priority to test this stuff out tonight or tomorrow morning to see what I can discover. > > Well, you can try -2mdk shortly for some other fixes > > to the spec only. > > Hmm, well, it's worth a shot. I most definately will > test it and let you know. Ok, thanks. -- MandrakeSoft Security; http://www.mandrakesecure.net/ "lynx -source http://www.freezer-burn.org/bios/vdanen.gpg | gpg --import" {GnuPG: 1024D/FE6F2AFD : 88D8 0D23 8D4B 3407 5BD7 66F9 2043 D0E5 FE6F 2AFD}
msg68169/pgp00000.pgp
Description: PGP signature
