Hello Pierre.

I have spent some time to setup authorization with LDAP via ypldap and
want to share some ideas that I believe can help others.
I think you can add it to documentation for ypldap with some details.

1. we should use ypbind in addition to ypldap.
2. we should activate YP passwd support in /etc/master.passwd with
string: +:::::::::/bin/ksh
3. in /etc/rc script we should comment-out invocation of ypbind or it
will launch before ypldap
4. we need login_ldap package for authentication

As for 3 I think it is bad thing to modify rc script and we need some
standard solution here!

I have written post about it where I cover it in more details:
 
[http://blogs.helion-prime.com/vasiliykiryanov/2009/05/07/authorization-with-ldap-on-openbsd.html]

thanks,
and have a nice day

Reply via email to