Met with Symen about the authentication system. We have a new LDAP group, actually two, and he helped me set up the ldap authentication so it found them correctly.
Notes:
- pam_ldap_filter did not seem to be used at all, only nss_passwd_base
- be careful with parenthesis, apparently the system auto adds some parentheses to the queries, so your query is really just a substring that is injected into the real query.
- http://www-unix.mcs.anl.gov/~gawor/ldap/applet/applet.html is a cool applet, although there should be some better ldap editors around.
It turns out that the user that I needed to set up the LDAP group for, is now in the first group anyways. Oh well, it still may be useful.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment