On Mon, 27 Jan 2003 10:50:28 -0500
"Brian Smith" <[EMAIL PROTECTED]> wrote:
On Fri, 24 Jan 2003 22:06:42 -0700
Vincent Danen <[EMAIL PROTECTED]> wrote:
When you have "ssl start_tls" do the usual "getent
passwd" or "getent
shadow" and such work?
getent passwd works, getent shadow does not (well, it
lists the used in /etc/shadow, but not the ones in ldap).
Err, that's incorrect. I just got to looking... some of my
users in ldap don't have an 'objectClass: shadowAccount'
attribute. Other than that, getent shadow works fine with
ssl start_tls; it's just ssh that can't deal with it. I've
found that ssh is failing with 'ssl on' as well, seems
that I have to use 'ssl off' to get it to work. Luckily my
network is behind a firewall....