|
On Wednesday, 14 December 2011 09:13:11 Jayavant Patil wrote: > Hi, > > I am using openldap-2.4.19-4.x86_64 on fedora 12 machine. On client > node, in /etc/ldap.conf file, we specify binddn and bindpw. If not > specified, the request will be anonymous. I have on each client machine > more than 500 users. I want to send the request to server as an > authenticated user but users are 500+. Then, how do I specify this in > binddn and bindpw. I don't want to specify 'root' (admin) in binddn and > bindpw. I have rootbinddn as root's dn and his password in /etc/ldap.secret > (mode 600). Create a (single, or per-host) "proxy user". I note that deploying Kerberos can be an option for the per-host "proxy user" which has additional benefits. Regards, Buchan |