[Date Prev][Date Next]
Re: Handling slapd.d in OpenLDAP and Kerberos
Jaap Winius wrote:
For authenticating via OpenLDAP, the principles needs to be rewritten (using
authz-policy and authz-regexp). We know how to do
that in older version of OpenLDAP which had (slapd.conf) but don't know how
to do the same in new OpenLDAP which has slapd.d directory instead.
The manuals also doesn't say anything on this issue.
The switch from slapd.conf to cn=config takes a little getting used
to, plus the migration script may not work for you, but in the end I
produced a set of procedures that should tell you most of what you
want to know:
* Integrated Kerberos-OpenLDAP provider on Debian squeeze
* Integrated Kerberos-OpenLDAP consumer on Debian squeeze
True, I didn't use Ubuntu in these examples, but I would not be
surprised if the procedures were almost identical, certainly with
If you read
You could simplify your ACL changes in 7.1.1.x.
Similarly in 7.1.2.x you don't need to specify the prefixes when you're adding
rules in order.
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/