Re: pure-ftpd Ldap

2013-06-29 Thread maral ff
this is my file pureftpd_ldap.conf: # # # # Sample Pure-FTPd LDAP configuration file. # # See README.LDAP for explanations

pure-ftpd Ldap

2013-06-28 Thread maral ff
hey! I installed Pure-ftpd + Ldap and add a user in Ldap but Pure-ftpd don't recognize that user how can i fix this issue? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any

Re: pure-ftpd Ldap

2013-06-28 Thread Mark Felder
On Fri, 28 Jun 2013 09:37:12 -0500, maral ff ffma...@gmail.com wrote: I installed Pure-ftpd + Ldap and add a user in Ldap but Pure-ftpd don't recognize that user how can i fix this issue? We're going to need some sort of confirmation that you actually configured pure-ftpd to bind to your

BIND and LDAP support

2011-12-07 Thread Kernel Panic
when I do a buildworld cycle? WITH_DLZ_LDAP=true Does this actually enable LDAP backend support or is it something else? The reason I ask is because there seems to be a separate port for BIND LDAP support but it's for an older version of BIND (dns/bind97-sdb) Thanks for any assistance

Re: BIND and LDAP support

2011-12-07 Thread Damien Fleuriot
src.conf to tell the compiler not to reinstall base BIND when I do a buildworld cycle? WITH_DLZ_LDAP=true Does this actually enable LDAP backend support or is it something else? The reason I ask is because there seems to be a separate port for BIND LDAP support but it's for an older version

unable to install php5-ldap port

2011-09-07 Thread Frank Bonnet
Hello I'm trying to install php5-ldap from ports and I'm facing to a strange error : ldap3# cd php5-ldap ldap3# make config === No options to configure ldap3# make === php5-ldap-5.3.8 depends on file: /usr/local/bin/phpize - found === php5-ldap-5.3.8 depends on file: /usr/local/bin/autoconf

import users from LDAP to local password file (pwd.db)

2011-07-08 Thread Frank Bonnet
Hello I need to import the necessary users's data from an OpenLDAP directory server to put them in the local password files , anyone has done this before ? The machine use nss_ldap and pam_ldap to authenticate users but for robustness during the holidays I would like to have a local

Re: import users from LDAP to local password file (pwd.db)

2011-07-08 Thread Moises Castellanos
Hi You can try with getent(1) passwd and see if you can work with the output Regards On Fri, Jul 8, 2011 at 9:56 AM, Frank Bonnet f.bon...@esiee.fr wrote: Hello I need to import the necessary users's data from an OpenLDAP directory server to put them in the local password files , anyone

Re: import users from LDAP to local password file (pwd.db)

2011-07-08 Thread Frank Bonnet
getent does not show the encrypted password field On 07/08/2011 05:43 PM, Moises Castellanos wrote: Hi You can try with getent(1) passwd and see if you can work with the output Regards On Fri, Jul 8, 2011 at 9:56 AM, Frank Bonnetf.bon...@esiee.fr wrote: Hello I need to import the

Re: import users from LDAP to local password file (pwd.db)

2011-07-08 Thread Dan Nelson
I want my mailhub to be standalone for authentication in order to let email service running even the directory server crash. You can try with getent(1) passwd and see if you can work with the output getent does not show the encrypted password field LDAP servers usually don't allow clients

Re: Trouble with LDAP-authentication to Apple Open Directory

2011-05-30 Thread Aleksander Steffensen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Anyone? If this is not the right place to ask, can someone please point me in the right direction? Best regards, Aleksander Steffensen -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org

Trouble with LDAP-authentication to Apple Open Directory

2011-05-26 Thread Aleksander Steffensen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello! Yesterday I finally managed to get my FreeBSD 8.2-STABLE box to actually authenticate to the Xserve, running Open Directory on Mac OS X 10.5 Server. I was able to log in to the FreeBSD box (egil.kreativsone.no) as a directory user via SSH

RE: Trouble with LDAP-authentication to Apple Open Directory

2011-05-26 Thread mcoyles
Hello! Yesterday I finally managed to get my FreeBSD 8.2-STABLE box to actually authenticate to the Xserve, running Open Directory on Mac OS X 10.5 Server. I was able to log in to the FreeBSD box (egil.kreativsone.no) as a directory user via SSH and also via netatalk. Unfortunately, after

Re: Trouble with LDAP-authentication to Apple Open Directory

2011-05-26 Thread Aleksander Steffensen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 They were not, but I synced them both to the same time server. I don't use Kerberos anyways, I use nss_ldap, so it didn't work. Best regards, Aleksander Steffensen Den 26. mai 2011 kl. 14.42 skrev mcoyles: Hello! Yesterday I finally managed to

linux_compat ldap authentication

2011-03-21 Thread Da Rock
Just quickly off the top: has/is anyone working on a solution for this? Acrobat and other linux programs aren't running with ldap authentication setup on 8.x. Aside from running a periodic script to grab the passwd entries, I'm wondering if anyone has succeeded in finding/building ldap auth

Re: pam ssh authentication via ldap

2011-02-28 Thread krad
On 28 February 2011 01:06, Tim Dunphy bluethu...@gmail.com wrote: Hello Krad and thank you for your reply! Well it seems that I am still unable to login to this machine using an LDAP account. I have tried applying the configurations you have provided and the result doesn't seem to have

Re: pam ssh authentication via ldap

2011-02-27 Thread krad
On 26 February 2011 20:01, Tim Dunphy bluethu...@gmail.com wrote: Hey list, I just wanted to follow up with my /usr/local/etc/ldap.conf file and nsswitch file because I thought they might be helpful in dispensing advice as to what is going on: uri ldap://LBSD2.summitnjhome.com base ou

Re: pam ssh authentication via ldap

2011-02-27 Thread krad
is going on: uri ldap://LBSD2.summitnjhome.com base ou=staff,ou=Group,dc=summitnjhome,dc=com sudoers_base ou=staff,ou=Group,dc=summitnjhome,dc=com binddn cn=pam_ldap,ou=Services,dc=summitnjhome,dc=com bindpw secret scope sub pam_password exop nss_base_passwd dc=summitnjhome,dc=com

Re: pam ssh authentication via ldap

2011-02-27 Thread Tim Dunphy
Hello Krad and thank you for your reply! Well it seems that I am still unable to login to this machine using an LDAP account. I have tried applying the configurations you have provided and the result doesn't seem to have changed just yet. Here is my /usr/local/etc/ldap.conf file uri ldap

pam ssh authentication via ldap

2011-02-26 Thread Tim Dunphy
Hello List!! I have an OpenLDAP 2.4 server functioning very nicely that authenticates a network of (mostly virtual) centos 5.5 machines. But at the moment I am attempting to setup pam authentication for ssh via LDAP and having some difficulty. My /etc/pam.d/sshd file seems to be setup

Re: pam ssh authentication via ldap

2011-02-26 Thread Tim Dunphy
Hey list, I just wanted to follow up with my /usr/local/etc/ldap.conf file and nsswitch file because I thought they might be helpful in dispensing advice as to what is going on: uri ldap://LBSD2.summitnjhome.com base ou=staff,ou=Group,dc=summitnjhome,dc=com sudoers_base ou=staff,ou=Group,dc

ldap with GSSAPI using security/cyrus-sasl2 with security/heimdal?

2011-01-19 Thread Jan Henrik Sylvester
Earlier I tried GSSAPI authentication for ldap against heimdal in 8.1-RELEASE base and failed. Now I tried again with security/heimdal. I got: security/heimdal security/cyrus-sasl2 with HEIMDAL_HOME=/usr/local/ net/openldap24-server with WITH_SASL When I first tried ldapmodify -Z -Y GSSAPI -I

Apache with LDAP from ports failing.

2011-01-07 Thread Paul Halliday
I am trying to build apache22 on a fresh 8.1 box from ports. It is dying right about here: mod_authnz_ldap.c:41:2: error: #error mod_authnz_ldap requires APR-util to have LDAP support built in. To fix add --with-ldap to ./configure. Help! :) -- Paul Halliday http://www.pintumbler.org

Re: Apache with LDAP from ports failing.

2011-01-07 Thread Matthew Seaman
On 07/01/2011 12:43, Paul Halliday wrote: I am trying to build apache22 on a fresh 8.1 box from ports. It is dying right about here: mod_authnz_ldap.c:41:2: error: #error mod_authnz_ldap requires APR-util to have LDAP support built in. To fix add --with-ldap to ./configure. Add LDAP

Re: TLS enabled LDAP, clients fail to connect

2010-11-22 Thread Erik Norgaard
On 21/11/10 23.20, bluethundr wrote: I am attempting to setup SSL/TLS support on my openLDAP 2.4 server on FreeBSD. ... [r...@virtcent08:/etc/openldap/cacerts]#openssl s_client -connect ldap.summitnjhome.com:389 -showcerts -CAfile gd_bundle.crt CONNECTED(0003) 3156:error:140790E5:SSL

Re: TLS enabled LDAP, clients fail to connect

2010-11-22 Thread Mubeesh ali
-2.4.23 Open source LDAP client implementation with SASL2 support openldap-sasl-server-2.4.23 Open source LDAP server implementation I put my cert file, key file and CA certfile in a directory called /usr/local/etc/openldap/cacerts Here's how it looks: [r...@lbsd2:/usr/local/etc/openldap/cacerts

TLS enabled LDAP, clients fail to connect

2010-11-21 Thread bluethundr
I am attempting to setup SSL/TLS support on my openLDAP 2.4 server on FreeBSD. LBSD2# pkg_info | grep openldap openldap-sasl-client-2.4.23 Open source LDAP client implementation with SASL2 support openldap-sasl-server-2.4.23 Open source LDAP server implementation I put my cert file, key file

Problems Hooking Sudoers into PAM/LDAP

2010-11-10 Thread bluethundr
on and it is ALL happening through PAM!! Well almost all of it.. The one sticking point I am currently having is getting sudoers to authenticate against LDAP. The server is FreeBSD 8.1 but the clients are all CentOS 5.4. Although, knowing this shouldn't make much difference in how this works

Problems Hooking Sudoers into PAM/LDAP (corrected post)

2010-11-10 Thread bluethundr
against LDAP. The server is FreeBSD 8.1 but the clients are all CentOS 5.4. Although, knowing this shouldn't make much difference in how this works AFAIK. On the client I have my /etc/ldap.conf file setup like this: URI ldap://ldap.acadaca.net/ BASE dc=acadaca,dc=net TLS_CACERTDIR /etc/openldap

pam services under ldap

2010-11-08 Thread bluethundr
Hello List I am attempting to setup various pam modules to consult our new LDAP services in order to do what it needs to do. My LDAP server is FreeBSD but the clients are CentOS... I have setup my /etc/pam.d sudo file on the client (for example) this way in the attempt to accomplish this via

failure to import ldif into ldap

2010-11-04 Thread Tim Dunphy
Thanks all.. I have read the man of ldif your advice has gotten me quite far both in my current implementation and in my overall understanding of LDAP which I am hoping grows with each passing day. In my attempt to build my current directory, I have taken a dump of my last successful

Re: failure to import ldif into ldap

2010-11-04 Thread freebsd-questions
On Fri 5/11/10 6:40 AM , Tim Dunphy wrote:Thanks all.. I have read the man of ldif your advice has gotten me quite far both in my current implementation and in my overall understanding of LDAP which I am hoping grows with each passing day. In my attempt to build my current directory

adding user ldif to ldap

2010-10-28 Thread Tim Dunphy
hi list.. I am trying to add an ldif with my users that I have derived from /etc/passwd. for some reason ldapadd is choking on the root user... may I ask how best to correct this? Here is the error: LBSD2# ldapadd -x -D cn=Manager,dc=summitnjhome,dc=com -w localG30rg3T0wn -f /tmp/passwd.ldif

Re: LDAP Authentication from console

2010-10-07 Thread Kevin Mai
: Kevin Mai k...@mrecic.gov.ar, freebsd-questions freebsd-questions@freebsd.org Enviados: Miércoles, 6 de Octubre 2010 14:00:08 Asunto: Re: LDAP Authentication from console On Wed, Oct 06, 2010 at 11:59:53AM -0500, Dan Nelson thus spake: In the last episode (Oct 06), Kevin Mai said: Hey guys, I've

Re: LDAP Authentication from console

2010-10-07 Thread Indexer
. THEY SHOULD BE THE EXACT SAME. As it currently stands, Your ldap user can ssh into your server, but module order in pam is VERY important. BACKUP YOUR PAM.D DIRECTORY BEFORE YOU DO ANYTHING. pam is very touchy, and the slightest mistake it will just panic, and throw up its hands in defeat

LDAP Authentication from console

2010-10-06 Thread Kevin Mai
Hey guys, I've already configured PAM to authenticate against ldap and it works wonderful using ssh/su/sudo/etc, but when I try to log in from console it prompts: login: kma Password: LDAP Password: (same as the first one) Login Incorrect login: What am I missing

Re: LDAP Authentication from console

2010-10-06 Thread Dan Nelson
In the last episode (Oct 06), Kevin Mai said: Hey guys, I've already configured PAM to authenticate against ldap and it works wonderful using ssh/su/sudo/etc, but when I try to log in from console it prompts: login: kma Password: LDAP Password: (same as the first

Re: LDAP Authentication from console

2010-10-06 Thread Jason
On Wed, Oct 06, 2010 at 11:59:53AM -0500, Dan Nelson thus spake: In the last episode (Oct 06), Kevin Mai said: Hey guys, I've already configured PAM to authenticate against ldap and it works wonderful using ssh/su/sudo/etc, but when I try to log in from console it prompts: login: kma Password

Re: LDAP Authentication from console

2010-10-06 Thread Kevin Mai
Logins over ssh and sudo work great with ldap, but when I try to log in from console, it prompts me twice for the password. If I put a wrong password it prints out that it cannot bind to the ldap server, what means that I'm being able to bind to ldap, but cannot login for some reason. What

Re: LDAP Authentication from console

2010-10-06 Thread Michel Talon
Kevin Mai wrote: Logins over ssh and sudo work great with ldap, but when I try to log in from console, it prompts me twice for the password. If I put a wrong password it prints out that it cannot bind to the ldap server, what means that I'm being able to bind to ldap, but cannot login

Re: LDAP Authentication from console

2010-10-06 Thread Indexer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/10/2010, at 10:05 AM, Michel Talon wrote: Kevin Mai wrote: Logins over ssh and sudo work great with ldap, but when I try to log in from console, it prompts me twice for the password. If I put a wrong password it prints out

LDAP and LDAPS on the same server ?

2010-05-06 Thread Frank Bonnet
lines in slapd.conf file it fails to restart TLSCACertificateFile /usr/local/etc/openldap/ssl/cert.crt TLSCertificateFile/usr/local/etc/openldap/ssl/cert.crt TLSCertificateKeyFile /usr/local/etc/openldap/ssl/cert.key in ldap.conf file I have the following # # LDAP Defaults # # See ldap.conf

Re: LDAP and LDAPS on the same server ?

2010-05-06 Thread Boris Samorodov
file I have the following # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. BASE dc=esiee,dc=fr URI ldap://ldap.esiee.fr ldaps://ldap.esiee.fr #SIZELIMIT12 #TIMELIMIT15 #DEREFnever What did I missed

Re: LDAP and LDAPS on the same server ?

2010-05-06 Thread Maciej Milewski
create self-signed certificate you first create your own CA and then issue certificate for the server or clients. TLSCertificateFile/usr/local/etc/openldap/ssl/cert.crt TLSCertificateKeyFile /usr/local/etc/openldap/ssl/cert.key in ldap.conf file I have the following # # LDAP Defaults

Re: LDAP and LDAPS on the same server ?

2010-05-06 Thread Frank Bonnet
/etc/openldap/ssl/cert.key in ldap.conf file I have the following # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. BASEdc=esiee,dc=fr URI ldap://ldap.esiee.fr ldaps://ldap.esiee.fr #SIZELIMIT 12 #TIMELIMIT

Re: LDAP and LDAPS on the same server ?

2010-05-06 Thread Erik Norgaard
On 06/05/10 14.15, Frank Bonnet wrote: It runs nicely but I want to add LDAPS service on the SAME server. Is it possible ? Yes in fact with OpenLDAP you can have ldap, ldaps and ldap TLS with STARTTLS, the latter runs on the standard ldap port. I have generated cert.crt cert.csr cert.key

Re: LDAP and LDAPS on the same server ?

2010-05-06 Thread Frank Bonnet
On 05/06/10 16:26, Erik Norgaard wrote: On 06/05/10 14.15, Frank Bonnet wrote: It runs nicely but I want to add LDAPS service on the SAME server. Is it possible ? Yes in fact with OpenLDAP you can have ldap, ldaps and ldap TLS with STARTTLS, the latter runs on the standard ldap port. I

Accessing LDAP via web

2009-10-18 Thread carmel_ny
I am probably doing this all wrong. I have an OpenLDAP server set up that works correctly. I wanted to be able to access it via LDAP:// from my laptop when traveling. Unfortunately, that is not working. When trying it via Microsoft, I simply get an error that the server is either busy

Re: Accessing LDAP via web

2009-10-18 Thread Olivier Nicole
I am probably doing this all wrong. I have an OpenLDAP server set up that works correctly. I wanted to be able to access it via LDAP:// from my laptop when traveling. Unfortunately, that is not working. When An LDAP server is not something that you access through a web browser. The naming

Re: Accessing LDAP via web

2009-10-18 Thread carmel_ny
On Sun, 18 Oct 2009 20:57:52 +0700 (ICT) Olivier Nicole (olivier.nic...@cs.ait.ac.th) replied: I am probably doing this all wrong. I have an OpenLDAP server set up that works correctly. I wanted to be able to access it via LDAP:// from my laptop when traveling. Unfortunately

Re: Accessing LDAP via web

2009-10-18 Thread Dan Nelson
In the last episode (Oct 18), carmel_ny said: On Sun, 18 Oct 2009 20:57:52 +0700 (ICT) Olivier Nicole (olivier.nic...@cs.ait.ac.th) replied: I am probably doing this all wrong. I have an OpenLDAP server set up that works correctly. I wanted to be able to access it via LDAP:// from my

Re: Accessing LDAP via web

2009-10-18 Thread Olivier Nicole
Hi Carmen, I have email clients on my laptops that can access the LDAP server when connected via my LAN. When traveling that is not readily possible (is it)? Therefore, how can I accomplish this or is it not possible? Remember, I am not attempting to administer the LDAP server, but rather

Re: Accessing LDAP via web

2009-10-18 Thread Peter Boosten
Olivier Nicole wrote: Hi Carmen, I have email clients on my laptops that can access the LDAP server when connected via my LAN. When traveling that is not readily possible (is it)? Therefore, how can I accomplish this or is it not possible? Remember, I am not attempting to administer

ldap and pam-mkhomedir, anyone know how to set directory ownership to the ldap user logging in ??

2009-10-14 Thread Craig Butler
Hi All Currently I have got pam authenticating against ldap and mkhomedir creating the home directories, but they are created owned as root:wheel and the user can't write to their own home directory -- I have read the man page for pam_mkhomedir, the only way I see it working at the moment

Re: ldap and pam-mkhomedir, anyone know how to set directory ownership to the ldap user logging in ??

2009-10-14 Thread Chris Cowart
Craig Butler wrote: Currently I have got pam authenticating against ldap and mkhomedir creating the home directories, but they are created owned as root:wheel and the user can't write to their own home directory -- I have read the man page for pam_mkhomedir, the only way I see it working

Adding Windows Machine to LDAP

2009-09-29 Thread KIRAN
HI All, I am FreeBSD User I am using samba domain, Recently 20 day's back I have updated ports. After updating the ports I am not able to join Windows desktop samba domain. Kindly do the need full (Before joining the domain I use to configure wins IP into the windows machine) Kindly do the

Re: Adding Windows Machine to LDAP

2009-09-29 Thread Olivier Nicole
Hi Kiran, I am FreeBSD User I am using samba domain, Recently 20 day's back I have updated ports. After updating the ports I am not able to join Windows desktop samba domain. I think you must give more details about your configuration. In the message title you mention LDAP, but you don't

Re: Adding Windows Machine to LDAP

2009-09-29 Thread Алексеев Александр
Ports update could affect the efficiency of Samba. Perhaps you have updated your software, that effect on one of the libraries. Try to rebuild Samba. -- Alexandr A Alexeev http://www.unixcommunity.net/ KIRAN пишет: HI All, I am FreeBSD User I am using samba domain, Recently 20 day's

Re: Adding Windows Machine to LDAP

2009-09-29 Thread Алексеев Александр
Ports update could affect the efficiency of Samba. Perhaps you have updated your software, that effect on one of the libraries. Try to rebuild Samba. -- Alexandr A Alexeev http://www.unixcommunity.net/ KIRAN пишет: HI All, I am FreeBSD User I am using samba domain, Recently 20 day's back

Re: LDAP server gone - impossible to login locally!

2009-09-24 Thread Doug Barton
Olivier Nicole wrote: Last June, we had to shutdown our openldap server every night, I noticed that a simple halt(8) would leave the bdb backend database in a corrupted state. As mentioned in the man page, halt(8) should not be used for regular shutting down of the system. shutdown(8) is

Re: LDAP server gone - impossible to login locally!

2009-09-23 Thread O. Hartmann
Daniel O'Connor wrote: On Wed, 23 Sep 2009, Erik Norgaard wrote: This sounds like the correct solution, AFAIK it's the same concept as for NIS, first check local files, then ldap. You don't want your root credentials possibly be leaked accross the network. On the other hand you don't want

Re: LDAP server gone - impossible to login locally!

2009-09-23 Thread Olivier Nicole
/etc/rc.d/slapd stop and sync(8) a couple of type before I halt(8). After that I wrote a small script that would take a backup of the ldap data every 2 hours and keep 5 days of backup. It seems that Berkeley DB has a lot of options that need to be configured to be working optimally with openldap

Re: LDAP server gone - impossible to login locally!

2009-09-23 Thread Daniel O'Connor
On Wed, 23 Sep 2009, O. Hartmann wrote: Daniel O'Connor wrote: On Wed, 23 Sep 2009, Erik Norgaard wrote: This sounds like the correct solution, AFAIK it's the same concept as for NIS, first check local files, then ldap. You don't want your root credentials possibly be leaked accross

LDAP server gone - impossible to login locally!

2009-09-22 Thread O. Hartmann
Hello, I run into trouble with FreeBSD and LDAP on a regular basis! Sometimes it is necessary to log in onto a bunch of servers with no LDAP service responding, due to service, crash, eletrically disconnetion, whatever. The problem is: I can't. Using all prerequisits from ports (pam_ldap

Re: LDAP server gone - impossible to login locally!

2009-09-22 Thread Daniel O'Connor
On Tue, 22 Sep 2009, O. Hartmann wrote: I run into trouble with FreeBSD and LDAP on a regular basis! Sometimes it is necessary to log in onto a bunch of servers with no LDAP service responding, due to service, crash, eletrically disconnetion, whatever. The problem is: I can't. Using all

Re: LDAP server gone - impossible to login locally!

2009-09-22 Thread John Marshall
On Tue, 22 Sep 2009, 11:53 +, O. Hartmann wrote: Hello, I run into trouble with FreeBSD and LDAP on a regular basis! Sometimes it is necessary to log in onto a bunch of servers with no LDAP service responding, due to service, crash, eletrically disconnetion, whatever. The problem

Re: LDAP server gone - impossible to login locally!

2009-09-22 Thread Dmitriy Kirhlarov
John Marshall wrote: On Tue, 22 Sep 2009, 11:53 +, O. Hartmann wrote: Hello, I run into trouble with FreeBSD and LDAP on a regular basis! Sometimes it is necessary to log in onto a bunch of servers with no LDAP service responding, due to service, crash, eletrically disconnetion

Re: LDAP server gone - impossible to login locally!

2009-09-22 Thread Erik Norgaard
Daniel O'Connor wrote: On Tue, 22 Sep 2009, O. Hartmann wrote: I run into trouble with FreeBSD and LDAP on a regular basis! Sometimes it is necessary to log in onto a bunch of servers with no LDAP service responding, due to service, crash, eletrically disconnetion, whatever. The problem is: I

Re: LDAP server gone - impossible to login locally!

2009-09-22 Thread Daniel O'Connor
On Wed, 23 Sep 2009, Erik Norgaard wrote: This sounds like the correct solution, AFAIK it's the same concept as for NIS, first check local files, then ldap. You don't want your root credentials possibly be leaked accross the network. On the other hand you don't want or need user accounts

Re: LDAP server gone - impossible to login locally!

2009-09-22 Thread Tim Judd
On 9/22/09, Daniel O'Connor docon...@gsoft.com.au wrote: On Wed, 23 Sep 2009, Erik Norgaard wrote: This sounds like the correct solution, AFAIK it's the same concept as for NIS, first check local files, then ldap. You don't want your root credentials possibly be leaked accross the network

Re: LDAP server gone - impossible to login locally!

2009-09-22 Thread Daniel O'Connor
notfound=continue]' pieces after the ldap dictionary in nsswitch.conf man nsswitch.conf :) Now I have another command, db_recover You can benefit from my torn out hair from when I went looking for it :) disabled (which is recommended for performance!) it won't say _anything_. To have

Re: PHP5 and ldap

2009-09-18 Thread FreeBSD admin
Hi folks, I don't know how to enable ldap for php5 on my Freebsd 7.2 system this is a client only ldap system. ldapsearch works well with tls on it. but I try to enable roundcube ldap, and roundcube says: LDAP Error: No ldap support in this installation of PHP (GET /?_task=addressbook_action

Re: PHP5 and ldap

2009-09-18 Thread Bill Moran
In response to FreeBSD admin alligator...@free.fr: Hi folks, I don't know how to enable ldap for php5 on my Freebsd 7.2 system this is a client only ldap system. ldapsearch works well with tls on it. but I try to enable roundcube ldap, and roundcube says: LDAP Error: No ldap support

Re: PHP5 and ldap

2009-09-18 Thread FreeBSD admin
SOLVED! i had an incorrect php.ini in front of my apache installation. You put me on the right tracks! problem solved. no I have a TLS negociation error, but this is another part. Cheers -- View this message in context: http://www.nabble.com/PHP5-and-ldap-tp22183625p25511444.html Sent from

Re: PHP5 and ldap

2009-09-18 Thread FreeBSD admin
and now it working... tls_ssf=256 ssf=256 great thanks for php.ini trick! @+ -- View this message in context: http://www.nabble.com/PHP5-and-ldap-tp22183625p25511620.html Sent from the freebsd-questions mailing list archive at Nabble.com

Re: Samba PDC with LDAP backend

2009-09-07 Thread Ruben de Groot
that Samba is using LDAP or anything else for authentication, so the PC talks to Samba the way it always does/did. (I managed, with some effort, to replace one Samba server authenticating to Unix /etc/passwd, by a Samba server authenticating with LDAP, without the XP clients noticing

Re: Samba PDC with LDAP backend

2009-09-04 Thread Ruel Luchavez
On Mon, Jul 20, 2009 at 6:51 PM, Ruben de Groot mai...@bzerk.org wrote: On Mon, Jul 20, 2009 at 06:22:50PM +0800, Ruel Luchavez typed: But to some one out their who has an idea to this you are very much WELCOME:-) I think this was mentioned before, but did you have to edit

RE: Samba PDC with LDAP backend

2009-07-20 Thread Johan Hendriks
On Sat, Jul 18, 2009 at 12:53:40PM +0800, Ruel Luchavez typed: On Sat, Jul 18, 2009 at 11:43 AM, Olivier Nicole o...@cs.ait.ac.th wrote: Still it does not start the LDAP, hers my /etc/rc.conf: slapd_flags='-h ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldaps

Re: Samba PDC with LDAP backend

2009-07-20 Thread Ruel Luchavez
On Mon, Jul 20, 2009 at 4:04 PM, Johan Hendriks jo...@double-l.nl wrote: On Sat, Jul 18, 2009 at 12:53:40PM +0800, Ruel Luchavez typed: On Sat, Jul 18, 2009 at 11:43 AM, Olivier Nicole o...@cs.ait.ac.th wrote: Still it does not start the LDAP, hers my /etc/rc.conf

Re: Samba PDC with LDAP backend

2009-07-20 Thread Olivier Nicole
I know this is running slapd_flags='-h \ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldap://0.0.0.0/ ldap://127.0.0.1/\;' as is issue a command ps -aux | grep slap, hers whats the box give to me #ps -aux | grep slap ldap 1273 0.0 6.6 341992 7816 ?? Is4:17PM 0:00.14 /usr/local

Re: Samba PDC with LDAP backend

2009-07-20 Thread Ruel Luchavez
On Mon, Jul 20, 2009 at 4:35 PM, Olivier Nicole o...@cs.ait.ac.th wrote: I know this is running slapd_flags='-h \ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldap://0.0.0.0/ ldap://127.0.0.1/\;' as is issue a command ps -aux | grep slap, hers whats the box give to me #ps -aux | grep slap

Re: Samba PDC with LDAP backend

2009-07-20 Thread Polytropon
On Mon, 20 Jul 2009 16:50:48 +0800, Ruel Luchavez ruel.free...@gmail.com wrote: On Mon, Jul 20, 2009 at 4:35 PM, Olivier Nicole o...@cs.ait.ac.th wrote: I know this is running slapd_flags='-h \ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldap://0.0.0.0/ ldap://127.0.0.1

Re: Samba PDC with LDAP backend

2009-07-20 Thread Ruel Luchavez
%2fopenldap%2fldapi/ ldap://0.0.0.0/ ldap://127.0.0.1/\;' as is issue a command ps -aux | grep slap, hers whats the box give to me #ps -aux | grep slap ldap 1273 0.0 6.6 341992 7816 ?? Is4:17PM 0:00.14 /usr/local/libexec/slapd -h ldapi://%2fvar%2frun%2fopenldap

Re: Samba PDC with LDAP backend

2009-07-20 Thread Ruel Luchavez
wrote: I know this is running slapd_flags='-h \ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldap://0.0.0.0/ ldap://127.0.0.1/\;' as is issue a command ps -aux | grep slap, hers whats the box give to me #ps -aux | grep slap ldap 1273 0.0 6.6 341992 7816 ?? Is4

RE: {Disarmed} Re: Samba PDC with LDAP backend

2009-07-20 Thread Johan Hendriks
There is an improvement... this is my current /etc/rc.conf slapd_enable=YES slapd_flags='-h ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldap://MailScanner warning: numerical links are often malicious: 127.0.0.1/ http://127.0.0.1/ ldap://MailScanner warning: numerical links are often malicious

Re: Samba PDC with LDAP backend

2009-07-20 Thread Olivier Nicole
#smbldap-populate -u 1 -g 1 -r 1 Populating LDAP directory for domain MYDOMAIN (S-1-5-21-2772587264-3389604304-3649373591) (using builtin directory structure) adding new entry: dc=mydomain,dc=local failed to add entry: modifications require authentication at In fact the script

Re: Samba PDC with LDAP backend

2009-07-20 Thread Ruel Luchavez
On Mon, Jul 20, 2009 at 6:17 PM, Olivier Nicole o...@cs.ait.ac.th wrote: #smbldap-populate -u 1 -g 1 -r 1 Populating LDAP directory for domain MYDOMAIN (S-1-5-21-2772587264-3389604304-3649373591) (using builtin directory structure) adding new entry: dc=mydomain,dc=local

Re: Samba PDC with LDAP backend

2009-07-20 Thread Ruel Luchavez
On Mon, Jul 20, 2009 at 6:21 PM, Ruel Luchavez ruel.free...@gmail.comwrote: On Mon, Jul 20, 2009 at 6:17 PM, Olivier Nicole o...@cs.ait.ac.th wrote: #smbldap-populate -u 1 -g 1 -r 1 Populating LDAP directory for domain MYDOMAIN (S-1-5-21-2772587264-3389604304-3649373591

Re: Samba PDC with LDAP backend

2009-07-20 Thread Ruben de Groot
On Mon, Jul 20, 2009 at 06:22:50PM +0800, Ruel Luchavez typed: But to some one out their who has an idea to this you are very much WELCOME:-) I think this was mentioned before, but did you have to edit /usr/local/etc/smbldap-tools/smbldap.conf and

Re: Samba PDC with LDAP backend

2009-07-19 Thread Ruben de Groot
On Sat, Jul 18, 2009 at 12:53:40PM +0800, Ruel Luchavez typed: On Sat, Jul 18, 2009 at 11:43 AM, Olivier Nicole o...@cs.ait.ac.th wrote: Still it does not start the LDAP, hers my /etc/rc.conf: slapd_flags='-h ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldaps:// 192.168.5.0

Re: Samba PDC with LDAP backend

2009-07-19 Thread Ruel Luchavez
On Sun, Jul 19, 2009 at 7:28 PM, Ruben de Groot mai...@bzerk.org wrote: On Sat, Jul 18, 2009 at 12:53:40PM +0800, Ruel Luchavez typed: On Sat, Jul 18, 2009 at 11:43 AM, Olivier Nicole o...@cs.ait.ac.th wrote: Still it does not start the LDAP, hers my /etc/rc.conf

Re: Samba PDC with LDAP backend

2009-07-19 Thread Olivier Nicole
Rhuel, In your starting command you have: ldaps://192.168.5.0/ ldap://127.0.0.1/;' This means TLS/SSL. If you don't want it, remove it from your command. Is it necessary to have ssl/tls support? It is up to you. TLS/SSL will bring some extra security. It may be important if the network

Samba PDC with LDAP backend

2009-07-17 Thread Ruel Luchavez
Hi amazing list... I want to set up Samba PDC with LDAP I Have installed the following package: smblap-tools-0.9.5.tgz samba-3.0.35.tar.gz nss_ldap-264.tar.gz openldap-2.4.16.tgz all the installation are successful, but when I'm going to populate the database I get this weird error saying

Re: Samba PDC with LDAP backend

2009-07-17 Thread Olivier Nicole
Hi, when I look at the smblap_tools.pm at line 322 this is what it look likes and sorry I cant understand the code: else { $ldap_master = Net::LDAP-new( --This is line 322 $config{masterLDAP}, port= $config{masterPort}, version = 3

Re: Samba PDC with LDAP backend

2009-07-17 Thread Ruel Luchavez
On Sat, Jul 18, 2009 at 10:07 AM, Olivier Nicole o...@cs.ait.ac.th wrote: Hi, when I look at the smblap_tools.pm at line 322 this is what it look likes and sorry I cant understand the code: else { $ldap_master = Net::LDAP-new( --This is line 322 $config

Re: Samba PDC with LDAP backend

2009-07-17 Thread Olivier Nicole
Ruel, And yes ldap is running #ps -aux | grep slap That the process slapd is running does not mean you can access it. That: /usr/local/libexec/slapd -h ldapi://%2fvar%2frun%2fopenldap%2fldapi/ldap:// 0.0.0.0/ldap://192.168.5.0/ldap://127.0 looks strange to me, I am used to someting like

Re: Samba PDC with LDAP backend

2009-07-17 Thread Ruel Luchavez
On Sat, Jul 18, 2009 at 10:25 AM, Olivier Nicole o...@cs.ait.ac.th wrote: Ruel, And yes ldap is running #ps -aux | grep slap That the process slapd is running does not mean you can access it. That: /usr/local/libexec/slapd -h ldapi://%2fvar%2frun%2fopenldap%2fldapi/ldap:// 0.0.0.0

Re: Samba PDC with LDAP backend

2009-07-17 Thread Olivier Nicole
Ruel, I tried you idea with NO SPACE between each URL but when i restart the LDAP it does not start anymore...hmmm what did i mess here!!?? in /etc/rc.conf I have: slapd_flags='-h ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldaps://192.41.170.6/ ldap://192.41.170.6/;' see the specific use

Re: Samba PDC with LDAP backend

2009-07-17 Thread Ruel Luchavez
On Sat, Jul 18, 2009 at 11:11 AM, Olivier Nicole o...@cs.ait.ac.th wrote: Ruel, I tried you idea with NO SPACE between each URL but when i restart the LDAP it does not start anymore...hmmm what did i mess here!!?? in /etc/rc.conf I have: slapd_flags='-h ldapi://%2fvar%2frun

Re: Samba PDC with LDAP backend

2009-07-17 Thread Olivier Nicole
Still it does not start the LDAP, hers my /etc/rc.conf: slapd_flags='-h ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldaps:// 192.168.5.0/ ldap://127.0.0.1/;' At this point it would be usefull that you have a look in the logs at /var/log and see what is wrong in your command line

  1   2   3   4   5   >