Re: openldap, pam_ldap, accounts

["John P. Looney" <jplooney-ldap@online.ie>]

On Fri, Dec 03, 1999 at 09:26:43AM -0500, Ben Collins mentioned:
> > > You will also need nss_ldap so that the system passwd calls can get the
> > > user info. It's availabel from ftp.padl.com. After you compile and install
> > > it, you need to add ldap to the passwd and group entries in
> > > /etc/nsswitch.conf.
> >  Is it nessary to use ldap_pam AND ldap_nss ? I was just using ldap_nss &
> > it wasn't working very well...
> You can use nss_ldap by itself if you want. It just needs to have access
> to the proper fields on the directory (password filed specifically).

 As in, the LDAP server would have to run as root (it does anyway at the
moment) ? I'd like to do this "The one true way", if possible...so feel
free to lecture me :)

John

-- 
Microsoft. The best reason in the world to drink beer.
http://www.redbrick.dcu.ie/~valen