LDAP is working - how to logon and whats sasldb ???

[Holger Banko <holger.banko@pgam.com>]

Hi,

I installed OpenLdap2-2.012, the Client and pam_ldap. Copied the pam.d 
directory from pam_ldap to /etc and modified the nsswitch.conf:

passwd: files ldap
shadow: files ldap
group:  files ldap

passwd: compat
group:  compat .....

I added two users with cpu and I can search and find the users and see the 
ldap tree with ldapsearch (my first successes after 3 weeks ldap). When I try 
to logon with a user already exists in /etc/passwd everything is OK. The 
users that are only exists in LDAP I can't use. When I look at my 
/var/log/messages I see the following when trying to login as "cs" for 
example:

Mar 26 08:46:19 pc-0001 in.telnetd[1865]: connect from 127.0.0.1 (127.0.0.1)
Mar 26 08:46:24 pc-0001 slapd[928]: daemon: conn=3 fd=13 connection from 
IP=127.0.0.1:33003 (IP=:: 34049) accepted.
Mar 26 08:46:24 pc-0001 slapd[1258]: conn=3 op=0 BIND dn="" method=128
Mar 26 08:46:24 pc-0001 slapd[1258]: conn=3 op=0 RESULT tag=97 err=0 text=
Mar 26 08:46:24 pc-0001 slapd[1256]: conn=3 op=1 SRCH base="dc=pgam, dc=com" 
scope=2 filter="(&(objectClass=posixAccount)(uid=cs))"
Mar 26 08:46:24 pc-0001 slapd[1256]: conn=3 op=1 SEARCH RESULT tag=101 err=0 
text=
Mar 26 08:46:24 pc-0001 slapd[1257]: conn=3 op=2 BIND 
dn="UID=CS,OU=GMH,DC=PGAM,DC=COM"
method=128
Mar 26 08:46:24 pc-0001 slapd[1257]: conn=3 op=2 RESULT tag=97 err=0 text=
Mar 26 08:46:24 pc-0001 slapd[1258]: conn=3 op=3 BIND dn="" method=128
Mar 26 08:46:24 pc-0001 slapd[1258]: conn=3 op=3 RESULT tag=97 err=0 text=
Mar 26 08:46:24 pc-0001 login: Cannot make/remove an entry for the specified 
session
Mar 26 08:46:24 pc-0001 slapd[1256]: conn=3 op=4 UNBIND
Mar 26 08:46:24 pc-0001 slapd[1256]: conn=-1 fd=13 closed

I also see the following in /var/log/messages:

 unable to open Berkeley db /etc/sasldb: No such file or directory

Genereal questions about the homedirs, must I create them by hand ? How do 
the users later access them from other machines ? They are automatically 
mounted by the ldap client ??? Or must I write scripts ??

Help :-)

Holger