nss_ldap - working or not, and how to?

[Olivier Tharan]

* jcaldwell at ymcastlouis.org <jcaldwell at ymcastlouis.org> (20040921 14:09):
> Specifically what I'm looking for is just User/Group stuff. I'm setting up 
> a distributed Samba network - actually migrating from Novell Netware to 
> FreeBSD/Samba. It seems like the only sane way to approach that (with 22 
> servers, scattered across 20 locations) is with nss_ldap. I'll check out 
> pam_ldap as well - thanks for the pointer.

nss_ldap does just the uid/name lookup, pam_ldap does the
authentication/authorization thing. If you only need user/group
stuff, Bind does not need to be recompiled.

I remember having installed the nss_ldap port, changed settings
in /usr/local/etc/ldap.conf (or whatever nss_ldap installs),
changed /etc/nsswitch.conf to use nss_ldap and that was about
all.

The documentation for nss_ldap is not always clear, but if you
know your LDAP installation well, it is ok.

-- 
olive