OK one step closer (I hope)
1 - stupid mistake
using ldapsearch with just a host name makes the server expect a password

ldapsearch -h xxx.xxx.xxx.xxx -xLLL -b "ou=Users,dc=dcmc"
generates a list of users and their details - works locally from my machine 
and the client machine
:-)

2 - client still can't authenticate :-(

I realised that all the various bits I was reading all said answer no to the 
question about authentication but I had not spotted in Javiers example file 
that a bindpw was included - another oops

Now I have a base for search of ou=Users,dc=dcmc
binddn cn=ebox,dc=dcmc
bindpw copied from ldap.secrets (same on both server and client)
rootbinddn same as binddn
rootbindpw same as bindpw

My authlogs now tell me I have an authentication failure, unknown user so at 
least I am getting a sensible conversation between client and server.

3 - I have read so many things on setting this up my head is spinning but I 
must have something wrong in somewhere like nsswitch.conf or one of the pam.d 
files (probably the latter as getent passwd generates a nice list of 
/etc/passwd like stuff)

This last bit of testing is on a fresh install of ubuntu9.10 with ebox-desktop 
installed.

Peter

Attachment: signature.asc
Description: This is a digitally signed message part.

_______________________________________________
ebox-user mailing list
[email protected]
http://lists.ebox-platform.com/cgi-bin/mailman/listinfo/ebox-user

Reply via email to