567 reputation
2524
bio website
location Minnesota
age 33
visits member for 4 years, 2 months
seen Nov 6 at 20:06

Jul
5
comment Configure selinux to allow openldap on CentOS 6.4
@MichaelHampton where would the correct place to report this be? CentOS, Redhat, or somewhere else?
Jul
5
comment Configure selinux to allow openldap on CentOS 6.4
I used -F because that's what was done in another thread I found. Seems to have changed the owner of some files, which caused the init script to fail. chmod -R ldap:ldap /var/lib/ldap /etc/openldap/slapd.d fixed that part of the problem.
Jul
3
comment Configuring OpenLDAP init script on CentOS 6.4
I tried removing and hardcoding things in the init script until the start() function was just running slapd like I had done manually, and even then it doesn't work. Not sure what's going on.
Jul
3
comment Configuring OpenLDAP init script on CentOS 6.4
@SvW Unfortunately no. All I know is that it creates the .pid file before it exits
Mar
14
comment Allow SFTP but disallow SSH?
When I try setting the shell to /bin/false neither ssh or sftp works
Jan
31
comment How to handle nested groups in LDAP
related: How are nested groups in LDAP normally implemented?
Aug
1
comment Starting program once leads to 10 instances
Looks like this wasn't the source of the problem after all then. I must have been using a different view before.
Aug
1
comment Starting program once leads to 10 instances
@Daniel I reran with ps ax -l and updated output above
Aug
19
comment Firewall rules for outgoing RSH connections
I had to use -I INPUT 8 instead of -A INPUT to place it before the catch-all reject rule, but this did the trick
Mar
3
comment openldap proxied authorization
Between your authRegexp and logging suggestions, storing the password as plain text I got all the ldapwhoami tests working. Now I just have to figure out why it doesn't work in Java.
Mar
1
comment openldap proxied authorization
updated question. I've also set olcAuthzRegexp to {0}"^uid=([^,]+).*,cn=[^,]*,cn=auth$" "ldap:///dc=example,dc=com??sub?(uid=$1)". Not sure how to post the whole config but I'll post any other parts you want to see.
Feb
28
comment openldap proxied authorization
guess I need to configure sasl as well. I've got things to the point that testsaslauthd works, but ldapwhoami failes with "SASL(-13): user not found: no secret in database". Have any links about setting that up?
Feb
27
comment openldap proxied authorization
@Julien - I think authzRegexp is what I was missing. Won't be able to test it fully until tomorrow but I wanted to make sure the bounty got awarded. Wasn't sure if I can still award it after it expires.
Feb
7
comment Setting up openldap for ldaps with cn=config
Had to generate a certificate with alt-subject-names for both ldap servers and the meta-server name and distribute the certs to all the other linux servers to get linux logins working securely.
Jan
28
comment dn-based linux groups from ldap
Nevermind, it started working. I think I probably had just some bogus values that were messing things up.
Jan
27
comment dn-based linux groups from ldap
had to add groupOfMembers to my schema manually and add nss_map_attribute uniqueMember member but I got it working. Now I'm stuck on nested groups, know anything about that?
Jan
20
comment Defining date attributes in openldap
I may want to be able to use some of them in search filters so I guess I'll go with the standard unless there's a way I can define my own matching rules.
Jan
19
comment Defining date attributes in openldap
So people normally just zero out the time fields? No way to do dates only?
Oct
17
comment Installing PHP with MySQL support?
@matt_tm - that error means you've got your mysql support working. Otherwise you'd get some version of a "method not found" error. You can sort out the authentication issues in your php code.
Oct
7
comment Where to get RRDs.pm?
This time you've hit it. Running strings against the rpm it appears to be hardcoded to install under perl 5.8.8. I've reverted to 5.8.8 and it's now working! Hopefully there wasn't a good reason I'd upgraded to 5.8.9