[K12OSN] LDAP login nightmare

[dahopkins at comcast.net]

An some more info.  If I comment out ALL access control statements in slapd.conf and also stop nscd, then logins with ldap accounts work.  BUT this can't be good. And given that I don't have TLS active, I am probably just begging for trouble if I leave the system this way.  I would at least like to have some access control on the ldap database.  

Sincerely,
Dave Hopkins


> Jim,
> 
> I have stopped/restarted the ldap/smb/nscd services several times.  I just 
> discovered that if I stop the nscd process, then for root (and only root), the 
> uid/gid mappings resolve for /home.  I can then also su - some_user and the 
> login works, but I get a message about not resolving the uid/gid still.  So ... 
> is it some authorization issue in sladp.conf?
> 
> In the meantime, I will completely stop/restart the server, just to be sure.
> 
> Fantastic news about Webmin.
> 
> Sincerely,
> Dave Hopkins
> 
> 
> > > Any help would be greatly appreciated.  It has to be some 
> > > simple config setting, but I am not finding it.
> > 
> > I know this is minimal help, but, have you restarted the system since
> > the installation?  I know I keep seeing where a reboot is needed.
> > 
> > On a side note, I think I almost have Webmin working for complete user
> > management.  I just need to do some more testing.  Addition single or
> > bulk, deletion single or bulk, modification, groups, quotas, etc.
> > 
> > -- 
> > No virus found in this outgoing message.
> > Checked by AVG Anti-Virus.
> > Version: 7.0.338 / Virus Database: 267.9.9/62 - Release Date: 8/2/2005
> >  
> > 
> > 
> > -- 
> > This message has been scanned for viruses and
> > dangerous content by the Cotter Technology 
> > Department, and is believed to be clean.
> > 
> > _______________________________________________
> > K12OSN mailing list
> > K12OSN at redhat.com
> > https://www.redhat.com/mailman/listinfo/k12osn
> > For more info see <http://www.k12os.org>
> 
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>