LDAP authentication on Leopard

[grahamfw]

I cannot get my Leopard machine to authenticate to our school’s LDAP proxy. Here’s what I’ve done:

1.) verified a working cert using the openssl command
2.) “hashed” the name and put it in the /usr/share/curl directory with the other bundled certs
3.) specified in ldap.conf to look in /usr/share/curl for these
4.) copied all of the certs to /System/Library/OpenSSL/certs (since in ~OpenSSL/openssl.cnf there is a line to specify where to look for certs)
5.) properly configured all of the clientside directory settings, as compared to a 10.4.x machine with authentication working (including specifying Directory Utility to use ldap for authentication!)

For some reason, authentication is still not working. Am I missing something here? Shouldn’t I also be able to run the openssl command without specifying -CAfile or -CApath and have it work if I’ve configured everything properly? I’m thinking that the cert and cert path is fine, but for some reason ldap is not looking there automatically. Any suggestions?

Forever grateful,

Graham Wells

[grahamfw]

Also, does anyone know if Leopard specifically will not allow the use of an LDAP proxy? A lookup of our ldap proxy shows the IP for one of the ldap servers, and of course the reverse dns shows that same ldap server, not the hostname of the proxy.

Basically, I need to know if I need to tell our network team/infrastructure team to give that ldap proxy its own DNS entry. Thanks for any help.

[Author]

Posts