AFP548 Changing the world one server at a time.

Leopard not authenticating via LDAP

Home › Forums › OS X Server and Client Discussion › Misc. › Leopard not authenticating via LDAP

Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • #371883
    kfattic
    Participant

    I can’t get any machine using Leopard to authenticate to our LDAP server.

    We use LDAP to authenticate our users and once the LDAP server verifies the account as valid, we point the account towards a static mapped user account on the client computer.

    This worked fine with all our 10.4 machines, but ever since 10.5 this doesn’t work.

    Here is a quick rundown:

    I can successfully add our LDAP server with the Directory Utility on my current 10.5.2 test box (I’ve had the same results with 10.5, and 10.5.1 as well). I get a nice green light showing I have successfully bound the server (This server is responding normally) and have gone in to the LDAPv3 and edited the following info:

    I choose the RFC 2307 (Unix) mappings and move that to custom to change three lines to make the static mapping changes:

    I change Users -> UniqueID to #502 (the student account)
    next is PrimaryGroupID which gets changed to #20
    last is NFSHomeDirectory which gets a #/Users/student

    Again, with 10.4, this is all that is needed. Restart the machine and all is well. In 10.5, I get the shaky login window and it will not authenticate. It also says that Network Accounts are Active with the green dot in that window as well.

    In the command line, dscl can see the account and get a full record of the listings. In reading a few threads here and there I have also gone into /etc/openldap and configured ldap.conf to change the line TLS_REQCERT from demand to never, but that still hasn’t allowed me to log in.

    What can I do to get this working and what else can I provide via logs or anything else to help you help me figure this out?

    Thanks.

    #372354
    kakkoiimac
    Participant

    I am having the same problem. However, I can use the LDAP to login using SSH from another computer. Can you use SSH? Has anyone found a workaround for this problem.

    #373303
    craigsheppard
    Participant

    Workaround described here:

    http://discussions.apple.com/thread.jspa?threadID=1411870&tstart=30

    but still not fully functioning, eg the OS doesn’t report the name of the LDAP user, but reports the name of the piggyback account.

    Any ideas on what to do next?

Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.