RE: OffTopic - Solaris 9 & openldap

We have almost completed our complete migration from NIS to LDAP+Kerberos.
Diego Remolina, our lead sysadmin on this project, has put up 
his detailed notes at https://www.math.gatech.edu/~dijuremo/ldap

These may be a little out of date, but they should be basically correct.

Cheers,
Lew Lefton

  -----------------------------------------------------------------------
| Lew Lefton, IT Director         | Phone:     (404) 385-0052           |
| School of Mathematics           | FAX:       (404) 894-4409           |
| Georgia Institute of Technology | e-mail:    [email protected]  |
| Atlanta, GA  30332-0160         | http://www.math.gatech.edu/~llefton |
  -----------------------------------------------------------------------

On Wed, 6 Oct 2004, Tay, Gary wrote:

> Hi John,
>
> I have done some Centralized LDAP stuff using openldap(w/ Berkeley DB,
> w/ SSL/TLS, or iDS51 as secondary/primary), + + openssl + openssh +
> pam_ldap + nss_ldap, and would like to share the experience. I avoided
> cyrus-sasl and used Simple BIND w/ TLS.
>
> You may find my home page useful, or not:
> http://web.singnet.com.sg/~garyttt/
>
> Rgds
> Gary
>
> -----Original Message-----
> From: J. A. Landamore [mailto:[email protected]]
> Sent: Tuesday, October 05, 2004 11:26 PM
> To: [email protected]
> Subject: OffTopic - Solaris 9 & openldap
>
>
> Apologies for this off topic post, but I'm struggling as to where to go
> for
> information.
>
> For various reasons, primarily that the LDAP server needs to access the
> LDAP
> repository, we are running one of our domains with OpenLDAP (the other
> domain
> where we have a dedicated server runs iDS5 with no problems)  Whilst the
> Linux
> clients can authenticate against LDAP successfully I have been unable to
> get the
> Solaris 9 clients to do so.  If I login with a local account getent and
> ldaplist
> return correct entries, it is just the authentication of users at login
> that
> fails.  I've found documents that describe how to do interoperate
> Solaris 9 and
> OpenLDAP using PADL nss-ldap but not with native Solaris nss-ldap.  Can
> anyone
> provide pointers as to what I'm missing and how I can use native
> nss-ldap?
>
> Unless you think your reply will interest the whole list please reply
> directly
> to me.
>
> Thanks for any help
>
> John Landamore
>
> School of Mathematics & Computer Science
> University of Leicester
> University Road, LEICESTER, LE1 7RH
> [email protected]
> Phone: +44 (0)116 2523410       Fax: +44 (0)116 2523604
>
>