Fw: Re: nss_ldap in -CURRENT

[Clement Laforet]

If someone wants to add/correct something.

Begin forwarded message:

Date: Thu, 7 Aug 2003 01:14:50 +0200
From: Clement Laforet <sheepkiller at cultdeadsheep.org>
To: Kerberus <kerberus at microbsd.net>
Cc: thomas at deniau.org
Subject: Re: nss_ldap in -CURRENT


On 06 Aug 2003 18:03:30 -0500
Kerberus <kerberus at microbsd.net> wrote:

> is there a quick howto some where on doing this setup, cause its killing
> me.... 

1. Get a working -CURRENT system
2. install /usr/ports/net/openldap21
3. install /usr/ports/net/nss_ldap
4. install /usr/ports/security/pam_ldap
5. set up your openldap server, don't forget to include schema/nis.schema
6. fill users using ldiff (or get a web frontend)
7. configure you /usr/local/etc/ldap.conf
8. ln -s /usr/local/etc/ldap.conf /etc/ldap.conf
9. configure /etc/nsswitch
10. id <user> to test

troubleshouting :
- if you get an error like this one :
Entry (uid=test,ou=users,dc=cultdeadsheep,dc=org), attribute 'field' not allowed
in your /var/log/debug log, you have to add it in the schema (see core.schema)

should be ok now :)

regards,

clem