[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?
Wiebe Cazemier wrote:
----- Original Message -----
(snip)
(long)
(snip)
I am by no means an LDAP expert, but as an experienced Linux sysadmin I do
have to say that I have had some very tricky issues with OpenLDAP.
One of them involved fiddling for days with difficulty changing the root
password, after finally finding out that the Ubuntu docs were wrong [1]; they
had cause me to create two admin users, with the passwords in plain text no less.
The other involved getting 'TLS required' on the TCP connection, which
seems
to be undocumented.
Nonsense. The security directive is documented in slapd.conf(5) and
slapd-config(5) manpages.
My question on Serverfault about it [2] is getting to be
quite popular. Forcing encryption would have been a lot easier if a different
port for SSL wasn't deprecated.
As usual when you go to unofficial support channels, all you get is garbage
from unqualified self-proclaimed experts. The highest ranked answer on your
question is flat wrong, and refers to Zytrax documentation, which is poorly
plagiarized from outdated copies of the OpenLDAP Admin Guide and mixed with a
generous helping of misinformation from their own addled brains.
[1] https://bugs.launchpad.net/serverguide/+bug/1094842
[2] https://serverfault.com/questions/459718/configure-openldap-with-tls-required
Regardless of what you may think about the tone of postings on this list
(which is ludicrous to begin with since emails by their nature are horrible at
conveying tone or emotion), actual subject matter experts monitor this list
and make sure that correct answers get posted and that BS is censured. That is
the purpose of this forum.
If you want to be coddled, feel free to look elsewhere. If you want real
answers, this is the place.
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/