Hello,
I'm testing a new configuration with heimdal and the ldap backend
but kadmin is completely ignoring the ldap directive in the dbname
definition.
last cvsup of the ports was yesterday and LDAP was defined in
the heimdal port config:
[EMAIL PROTECTED]:/usr/ports/security/heimdal# make showconfig
===> The following configuration options are set for heimdal-0.6.3_2:
LDAP=on "Use OpenLDAP as the KDC backend"
CRACKLIB=on "Use CrackLib for password quality checking"
X11=on "Build X11 utilies
and indeed it's linked with ldap as you can see:
# ldd /usr/local/sbin/kadmin
/usr/local/sbin/kadmin:
....
libldap-2.2.so.7 => /usr/local/lib/libldap-2.2.so.7 (0x2812c000)
liblber-2.2.so.7 => /usr/local/lib/liblber-2.2.so.7 (0x2818a000)
....
when the realm is initied kadmin creates a couple of files with the literal
dbname definition (adding ldap: as filename prefix) instead of contacting
the openldap server.
# /usr/local/sbin/kadmin -l
kadmin> init OLIMPUS
Realm max ticket life [unlimited]:
Realm max renewable ticket life [unlimited]:
# ls -l
...
-rw------- 1 root wheel 32768 May 31 10:19 ldap:ou=gods,dc=olimpus.db
-rw------- 1 root wheel 7584 May 31 10:19 ldap:ou=gods,dc=olimpus.log
...
anyone knows what I'm missing?
Thank you.
/---------/
# cat /etc/krb5.conf
[libdefaults]
default_realm = OLIMPUS
default_etypes_des = des3-cbc-sha1
default_etypes = des3-cbc-sha1
[appdefaults]
[realms]
OLIMPUS = {
kdc = localhost.olimpus
admin_server = localhost.olimpus
}
[domain_realm]
.olimpus = OLIMPUS
[kdc]
database = {
realm = OLIMPUS
dbname = ldap:ou=gods,dc=olimpus
mkey_file = /var/heimdal/m-key
}
[logging]
kdc = SYSLOG
admin_server = SYSLOG
default = SYSLOG
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
