I am using FreeBSD 7.2 as an NFS server, and as a client to an OpenLDAP server (which runs Debian etch). When users access their files on the NFS server, the users' UIDs are looked up in the ldap server and mapped to their usernames (via nsswitch). My problem is that even after configuring FreeBSD as a client for the ldap server, it is unable to authenticate.
I know the configuration is correct because entering "ldapsearch" gives me a list of all users on the ldap server. I used the doc at http://www.freebsd.org/doc/en/articles/ldap-auth/client.html to do the configuration. Is anything missing in these docs?
Here is the ldap.conf used by PAM/NSS:
[root@csastorage /csastore]# cat /usr/local/etc/ldap.conf # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. #BASE dc=example,dc=com #URI ldap://ldap.example.com ldap://ldap-master.example.com:666 BASE dc=cl,dc=csa,dc=iisc,dc=ernet,dc=in URI ldaps://<server address>/ TLS_REQCERT allow TLS_CACERT /usr/local/etc/openldap/server.pem #SIZELIMIT 12 #TIMELIMIT 15 #DEREF never pam_login_attribute uid