Re: rm -rf openldap*

[Turbo Fredriksson <turbo@bayour.com>]

Quoting Rich West <Rich.West@divatv.com>:

> Unfortunately, documentation (the How-To) is written from the 10,000
> foot level, and the people who I have ping'ed for ideas/help who have
> working installations do not offer much more information that the
> typical MS exec (accurate information, but useless).  :(

That's because it's a very complicated issue. You will HAVE TO have the
basic knowledge on the following issues (at least)

1. UNIX administration
2. Configuring, making and installing software from scratch
3. LDAP (what it is and what it's not)
4. PAM (Pluggable Authentication Modules, basic auth system under resent
        Linux systems)

But most of all, you will have to have a knowledge how to read all the
HOWTOs/FAQs and then putting all that information togheter to something
that is understandable and usable (basicly this reads 'read between the
lines').

> I guess I should have known to run away screaming when the first
> response I received from a post to the mailing list was the suggestion
> to run kerberos rather than ldap.  :)

You should :)

I almost did, and I consider myself VERY knowledgeble (in all 4 points above).

It took me about 3-4 months (!!) to get a working OpenLDAP/Kerberos system
up and running!

When/If you get OpenLDAP/PAM to work, have a look at the howto I wrote on
how to get OpenLDAP/KerberosV to work together to get me a secure (?!) system.

http://www.bayour.com/LDAPv3-HOWTO.html

> Again, thanks for all of the ideas!  Maybe I will come back to this when
> I have time to burn (and my frustration level has dropped)...

To get you started, I'll list some of the links I used to get my first LDAP
system up and running (I might have missed some, but here you go):


IBM Redbook:Understanding LDAP
http://publib-b.boulder.ibm.com/Redbooks.nsf/RedbookAbstracts/sg244986.html?Open

IBM Redbook:LDAP Implementation Cookbook
http://publib-b.boulder.ibm.com/Redbooks.nsf/RedbookAbstracts/sg245110.html?Open

PADL:LDAP Migration tools
http://www.padl.com/tools.html

Using NetScape with OpenLDAP v2.x 
http://home.kabelfoon.nl/~hvdkooij/Netscape_and_OpenLDAP_v2/netscape-and-openldap-v2.html

LDAP Nameservice Howto
http://www.rage.net/ldap/ldapns-howto/

OpenLDAP Faq-O-Matic:LDAP Applications
http://www.openldap.org/faq/data/cache/271.html



If you are running Debian GNU/Linux, then you are much at luck! Everything you
need (in software that is) are already done for you, and accessible with just
a few keystrokes...

-- 
 Turbo     __ _     Debian GNU     Unix _IS_ user friendly - it's just 
 ^^^^^    / /(_)_ __  _   ___  __  selective about who its friends are 
         / / | | '_ \| | | \ \/ /   Debian Certified Linux Developer  
  _ /// / /__| | | | | |_| |>  <  Turbo Fredriksson   turbo@tripnet.se
  \\\/  \____/_|_| |_|\__,_/_/\_\ Stockholm/Sweden