I've just got ldap login working on OpenBSD/7.1 with accounts stored
locally in ldapd and using ypldap.
I just thought I'd share something so anyone reading this may save
wasting the time that I wasted :-)
Your LDIF entry that you read into ldap must be as follows for
userPassword
userPassword: {CRYPT}${ENCRYPTED_PASSWD}
ie uppercase CRYPT - I was stuffing around for ages with trying to
understand why login_ldap was failing to bind because I had {crypt} in
lowercase.
If you search the interwebs you'll find many complicated examples for
the ldap class in login.conf but the following worked fine for this
local setup:
# /etc/login.conf.d/ldap
ldap:\
:auth=ldap:\
:x-ldap-uscope=subtree:\
:tc=default:
Hope this helps someone.
No comments:
Post a Comment