LDAP auth (was password history)

[Shawn Badger]

I have tried a couple times to auth against AD using Suse ES9 with no
luck. Do I need to create a group within AD for the users or what is the
secret? I have tried a number of times using Yast and everything looks
good, but I get errors in my message file that says "nss_ldap: could not
search LDAP server - Operations error" and logins fail. Any ideas out
there?





On Fri, 2005-12-16 at 10:52 -0700, Dan Lund wrote:
> No, not using LDAP. (the actual Linux logons are isolated to
> developers and admins)  Until recently our LDAP solution was a bit....
> buggy.  We went with a company named Symas who sells a solution built
> around OpenLDAP (essentially OpenLDAP with code optimizations and
> off-the-shelf integration of Windows domain synchronization), and then
> our coders snagged it and started adding their own hooks into the BDB
> files when creating a GUI for helpdesk.
> It's a complicated story, but basically I just kept an island unto
> myself because of the flux of power-struggles. *shrugs*  I don't do
> politics, and you know how that is.
> We've since replaced Symas LDAP with Active Directory.  I've authed a
> couple of machines against AD just to say "hey, yeah, it can be done,
> look at xyz" but it's a convoluted process of kerberos and ldap
> through pam.
> 
> I'm going to look into what Richard and TJ said.  Thanks guys, I
> appreciate it.  Thanks for the URLs!
> 
> 
> --Dan
> 
> On 12/16/05, Craig White <craigwhite at azapple.com> wrote:
> 
> > 160 machines? Not using LDAP?
> >
> > fedora directory server has a fairly mature password policy. OpenLDAP
> > finally added password policy in latest but haven't used it.
> >
> > Craig
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change  you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>