[nflug] openldap

[Eric Benoit]

thanks, I'm really trying my very best use openldap with everything, but 
it has been quite the task...

so far I use smbldap-tools with ldap and samba so I can use roaming 
users... that worked out just fine it was all localhost stuff

but now I'm having diffuculty authenticating horde to the ldap server, 
using smb authentication works fine, but like you said address books are 
great to have with an email server and one of my objectives is to use 
turba with horde's imp web based email server...

I have been slowly self signing ssl keys {I know Darin is frowning  :) }
and slowly implementing my slapd.conf makig sure connectivity stays up 
for samba users ...sweating profusly as this is our internal DNS as well

so being careful is very important, and not knowing what I am doing all 
the time is ok, as long as I am learning and can go back and fix mistakes.

But a class on all this would be great... I've been reading different 
books and different web pages... none of which have exactly what I want 
to do, but mostly pieces of what I am doing.  Maybe I am biting off more 
than I can chew... but I'll just have to chew slow

JJ Neff wrote:
> LDAP as a directory can be used to HOST SO MUCH information - the most common anonymous bind data is address book data.
>
> If you want anyone to be able to look up Name, e-mail, phone number and other Public data then that data will normally be sent from the LDAP server to any Client that connects and searches.
>
> Then any other data (address, password, job description, personal info) can be secured for authorized users who present the proper credentials.
>
> MANY Directory software products (Domino, Active Directory) that have an LDAP server built in will have some public data available to anonymous so always search your LDAP server with a non- autheticated client and see what it gives back.  All these settings can be changed but the location to change it is different for each piece of software.  Of course OpenLdap and other LDAP servers will tend to use the same config files.  (Many Directory server products are really Open Ldap under the hood e.g. Tivoli Directory Server).
>
> JJN
> Formerly of IBM now with PayPal.
>
>
> ----- Original Message ----
> From: Eric Benoit <eric at bootz.us>
> To: nflug at nflug.org
> Sent: Wednesday, November 19, 2008 9:23:02 AM
> Subject: [nflug] openldap
>
> :) so many questions, wish I could take a class.
>
> I'm trying to get a handle on the most common way to connect to an openldap server anonymously.
>
> do most clients require the use of sasl or tls even when it's an anonymous bind?
> _______________________________________________
> nflug mailing list
> nflug at nflug.org
> http://www.nflug.org/mailman/listinfo/nflug
>
>
>
>       
>
> _______________________________________________
> nflug mailing list
> nflug at nflug.org
> http://www.nflug.org/mailman/listinfo/nflug
>