bijayant kumar schrieb:
> Hi Marc,
>                        First of all i want to thank you for your response. I 
> tried everything which  you have suggested to me, but unfortunately it didnot 
> worked for me. It still taking 15 to 20 seconds to authenticate. Does it 
> takes too much time or i am doing something wrong. Please help me. I am doing 
> this from last 8 days. And one more thing i want to know, how would i know 
> that user is authenticated via the ldap not the system.


15-20 seconds is to long. I only authentificate ldap-users via
Samba-login with windows machines, and this works fast without any delay.

For the authentification issue: if your user is in the local user data
base, it is authentificated against it (depending on your nsswitch and
pam settings), if he is in ldap, he is authentificated against ldap. You
should't have users in both, local and ldap.

I looked again at your access rules in slapd.conf: try out these rules:


-----

access to attrs=userPassword,gecos,description,loginShell
by dn="uid=root,ou=people,dc=kavach,dc=blr" write
by anonymous auth
by self write
by * none

access to *
by dn="uid=root,ou=people,dc=kavach,dc=blr" write
by users read

-----

The first rule allows root to and self to change the attributes
"userPassword,gecos,description,loginShell", anonymous to authentificate
(=login!) and * nothing.

The second rule allows root to change all other attributes and
authentificated users to read all other attributes.

Regards,
Marc
-- 
[email protected] mailing list

Reply via email to