Re: login_ldap

2007-03-29 Thread Joachim Schipper
On Wed, Mar 28, 2007 at 12:45:04PM -0400, Mike Erdely wrote: What I've decided to do since I can't make this work ('cause I'm an idiot) and pserver is insecure and sucks, I'm going to set local passwords for users that require pserver that are different from their LDAP password. That way,

Re: login_ldap

2007-03-29 Thread Joachim Schipper
On Wed, Mar 28, 2007 at 12:45:04PM -0400, Mike Erdely wrote: Joachim Schipper wrote: On Tue, Mar 27, 2007 at 04:49:05PM -0400, Mike Erdely wrote: I'm trying to get login_ldap to work with cvs pserver (run out of inetd). I think you are misunderstanding some things, or doing something that

Re: login_ldap

2007-03-28 Thread Mike Erdely
Joachim Schipper wrote: On Tue, Mar 27, 2007 at 04:49:05PM -0400, Mike Erdely wrote: I'm trying to get login_ldap to work with cvs pserver (run out of inetd). I think you are misunderstanding some things, or doing something that doesn't work; however, since I've never tried to set up a

Re: login_ldap

2007-03-28 Thread Vijay Sankar
On Wednesday 28 March 2007 11:45, Mike Erdely wrote: Joachim Schipper wrote: On Tue, Mar 27, 2007 at 04:49:05PM -0400, Mike Erdely wrote: I'm trying to get login_ldap to work with cvs pserver (run out of inetd). I think you are misunderstanding some things, or doing something that

Re: login_ldap

2007-03-28 Thread Mike Erdely
Vijay Sankar wrote: I use login_ldap but don't have any experience with cvs pserver. Just in case it has any relevance or triggers some other solution . . . 1) Are you using LDAPv2 or LDAPv3? If you are using v3, you may want to try v2. I'm using the default in login.conf for login_ldap,

Re: login_ldap

2007-03-27 Thread Joachim Schipper
On Tue, Mar 27, 2007 at 04:49:05PM -0400, Mike Erdely wrote: I'm trying to get login_ldap to work with cvs pserver (run out of inetd). Regular SSH logins work fine. I know to make ftpd work with login_ldap, you have to make the following change in login.conf: -

Re: login_ldap

2007-03-27 Thread Niall O'Higgins
On Wed, Mar 28, 2007 at 01:19:05AM +0200, Joachim Schipper wrote: I don't believe GNU CVS does that, and OpenCVS doesn't do authentication at all. Your best bet is probably setting up ssh; sshd uses the BSD authentication routines by default. More specifically, OpenCVS doesn't do pserver at

Re: login_ldap

2005-08-08 Thread Alexander Farber
One more problem I have with login_ldap is that after I lock KDE with the blue lock-applet (kdesktop_lock), then I can't login anymore. The /var/log/authlog: Aug 8 13:52:43 blowfish kcheckpass[7059]: Authentication failure for afarber (invoked by uid 25323) I've searched around

Re: login_ldap

2005-08-08 Thread Antoine Jacoutot
Alexander Farber wrote: One more problem I have with login_ldap is that after I lock KDE with the blue lock-applet (kdesktop_lock), then I can't login anymore. The /var/log/authlog: Aug 8 13:52:43 blowfish kcheckpass[7059]: Authentication failure for afarber (invoked by uid

Re: login_ldap

2005-08-04 Thread John Wright
On Thu, Aug 04, 2005 at 09:43:28AM +0200, Alexander Farber wrote: Also, does anybody know, how to run /usr/local/libexec/auth/login_-ldap on a command line, to see if it works at all? I try following: blowfish# /usr/local/libexec/auth/login_-ldap afarber blowfish# echo $?

Re: login_ldap

2005-08-04 Thread Alexander Farber
2005/8/4, John Wright [EMAIL PROTECTED]: /usr/libexec/auth/login_-ldap -d afarber should be more verbose. Thank you, now I get: blowfish# /usr/local/libexec/auth/login_-ldap -d afarber Password: couldn't get x-ldap-server reject Aug 4 10:11:43

Re: login_ldap

2005-08-04 Thread Alexander Farber
Here is what I get on the command line (a result: 0 Success, so I wonder why does login_-ldap fail?) blowfish# ldapsearch -x -h 172.25.93.242 \ -b o=bonmp.XXX.com (uid=afarber) # extended LDIF # # LDAPv3 # base o=bonmp.XXX.com with scope sub # filter: (uid=afarber) #

Re: login_ldap

2005-08-04 Thread Alexander Farber
2005/8/4, John Wright [EMAIL PROTECTED]: On Thu, Aug 04, 2005 at 10:47:00AM +0200, Alexander Farber wrote: # base o=bonmp.XXX.com with scope sub Maybe the scope? If I'm reading the code correctly the default is onelevel (or -s one on the ldapsearch command line) but the default for