Felipe Alfaro Solana wrote:
Most tools are there already, but not designed or tested
to work well together. And it's because very few people
go through the pain of setting up an LDAP-based LAN.
I have set up some LDAP-based LAN's and I think that, although not
straightforward as installing Linux and clicking Next, Next, Next,
i'ts not as difficult as it could seem.
Really? Have you imported and existing userbase? Did you
enable TLS? Replication? Kerberos? SASL?
After months of occasional research and fiddling, I'm still unable
to do effective Single Sign On for the intranet services
(IMAP, Apache, NFS...) with any of the clients (NT, Linux, OSX).
You can use "libuser", which supports several backends, being LDAP on
of then. I'm using
luseradd/lusermod/luserdel/lgroupadd/lgroupdel/lgroupmod from libuser
to manage my LDAP users and its work very well.
Looks nice!
I'm currently unable to make any changes because of this:
Error initializing libuser: could not negotiate TLS with LDAP server.
And it's weird, because I've configured my ldap.conf to use
the ldapi socket locally and no TLS is needed for the other
tools I use.
--
// Bernardo Innocenti - Develer S.r.l., R&D dept.
\X/ http://www.develer.com/
--
fedora-devel-list mailing list
fedora-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-devel-list
