Hi to all,
                 I am trying to install openLDAP server. I have already configured the server on a machine and is running fine. But the problem is when i am trying to login on a client machine with the user on server, it gives me an error " unknown id "

#su ukj
Unknown id: ukj

Please help me regarding this..I will be very thankful to you all....

My configuration files are :::

On Server :--

/etc/openldap/slapd.conf

include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/nis.schema

pidfile         /var/run/openldap/slapd.pid
argsfile        /var/run/openldap/slapd.args

database        ldbm
suffix          "dc=kavach,dc=blr"
checkpoint     32      30
rootdn          "cn=Manager,dc=kavach,dc=blr"
directory       /var/lib/openldap-data
index uid,cn,gidNumber,uidNumber,memberUid eq
index uniqueMember pres
index   objectClass     eq

access to attrs=userPassword,gecos,description,loginShell
by dn="uid=root,ou=people,dc=kavach,dc=blr" write
by dn="cn=Manager,dc=kavach,dc=blr" write
by anonymous auth
by self write
by * none

access to *
by dn="uid=root,ou=people,dc=kavach,dc=blr" write
by dn="cn=Manager,dc=kavach,dc=blr" write
by users read


/etc/openldap/ldap.conf

HOST         192.168.99.172
BASE         dc=kavach,dc=blr
URI          ldap://192.168.99.172:389/
TIMELIMIT      15
SIZELIMIT      12
DEREF          never


On Client Machine : -

/etc/pam.d/system-auth

auth        required      /lib/security/pam_env.so
auth        sufficient    /lib/security/pam_unix.so likeauth nullok
auth        sufficient    /lib/security/pam_ldap.so use_first_pass
auth        required      /lib/security/pam_deny.so

account     required      /lib/security/pam_unix.so
account     sufficient    /lib/security/pam_ldap.so

password    required      /lib/security/pam_cracklib.so retry=3 minlen=4 dcredit=0 ucredit=0
password    sufficient    /lib/security/pam_unix.so nullok use_authtok md5 shadow
password    sufficient    /lib/security/pam_ldap.so use_authtok
password    required      /lib/security/pam_deny.so

session     required      /lib/security/pam_limits.so
session     required      /lib/security/pam_unix.so
session     optional      /lib/security/pam_ldap.so

/etc/ldap.conf

host 192.168.99.172
base dc=kavach,dc=blr
port 389
bind_policy hard
uri ldap://192.168.99.172:389/
pam_password crypt
ldap_version 3
pam_filter objectclass=posixAccount
pam_login_attribute uid
pam_member_attribute gid
nss_base_passwd ou=people,dc=kavach,dc=blr?one
nss_base_shadow ou=people,dc=kavach,dc=blr?one
nss_base_group ou=Group,dc=kavach,dc=blr?one
nss_base_hosts ou=Hosts,dc=kavach,dc=blr?one
scope one
nss_initgroups_ignoreusers root,ldap


/etc/nsswitch.conf

passwd:  files ldap
shadow:  files ldap
group:   files ldap

And log message  on my client machine
nss_ldap: failed to bind to LDAP server ldap://192.168.99.172:389/: Can't contact LDAP server
nss_ldap: failed to bind to LDAP server ldap://192.168.99.172: Can't contact LDAP server



Please please help me...........................

Send instant messages to your online friends http://uk.messenger.yahoo.com

Send instant messages to your online friends http://uk.messenger.yahoo.com --- You are currently subscribed to [email protected] as: [EMAIL PROTECTED] To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the SUBJECT of the message.

Reply via email to