Thread: OpenLDAP for 10.04
hello,
i'm complete beginner ubuntu. i've been looking after ms/windows environment 10 years, have been asked implement ubuntu network few of our sites. have had partial success of elements (dhcp, clonezilla, static ip addresses etc.) stuck on ldap, or method of user account creation/authentication.
brief description of requirement.
1 server (for dhcp/dns/small amount of file storage space)
approx 30 pcs running ubuntu desktop users need able use login , access shared folder.
educational suite private company might require turnover of new user account creation/deletion on weekly basis.
there no other type of servers connected network.
have worked through document here initial installation. works fine. don't want domain called "example.com" have tried substituting "example.com" "mydomain.local". but, once this, have following error:
ldap_bind: invlaid credentials (49)
have not changed password example ldif files works fine before attempt change of domain informaiton.
said, complete beginer @ this, have ms experience try , draw on when comes making comparison.
appreciate if possible.
many thanks
hbed
hello again,
in addition post above, content of ldif files.
backend.example.com.ldif
# load dynamic backend modules
dn: cn=module,cn=config
objectclass: olcmodulelist
cn: module
olcmodulepath: /usr/lib/ldap
olcmoduleload: back_hdb
# database settings
dn: olcdatabase=hdb,cn=config
objectclass: olcdatabaseconfig
objectclass: olchdbconfig
olcdatabase: {1}hdb
olcsuffix: dc=winmarleigh,dc=local
olcdbdirectory: /var/lib/ldap
olcrootdn: cn=admin,dc=winmarleigh,dc=local
olcrootpw: secret
olcdbconfig: set_cachesize 0 2097152 0
olcdbconfig: set_lk_max_objects 1500
olcdbconfig: set_lk_max_locks 1500
olcdbconfig: set_lk_max_lockers 1500
olcdbindex: objectclass eq
olclastmod: true
olcdbcheckpoint: 512 30
olcaccess: attrs=userpassword dn="cn=admin,dc=winmarleigh,dc=local" write anonymous auth self write * none
olcaccess: attrs=shadowlastchange self write * read
olcaccess: dn.base="" * read
olcaccess: * dn="cn=admin,dc=winmarleigh,dc=local" write * read
, other...
frontend.example.com.ldif
# create top-level object in domain
dn: dc=winmarleigh,dc=local
objectclass: top
objectclass: dcobject
objectclass: organization
o: example organization
dc: example
description: ldap example
# admin user.
dn: cn=admin,dc=winmarleigh,dc=local
objectclass: simplesecurityobject
objectclass: organizationalrole
cn: admin
description: ldap administrator
userpassword: secret
dn: ou=people,dc=winmarleigh,dc=local
objectclass: organizationalunit
ou: people
dn: ou=groups,dc=winmarleigh,dc=local
objectclass: organizationalunit
ou: groups
dn: uid=john,ou=people,dc=winmarleigh,dc=local
objectclass: inetorgperson
objectclass: posixaccount
objectclass: shadowaccount
uid: john
sn: doe
givenname: john
cn: john doe
displayname: john doe
uidnumber: 1000
gidnumber: 10000
userpassword: password
gecos: john doe
loginshell: /bin/bash
homedirectory: /home/john
shadowexpire: -1
shadowflag: 0
shadowwarning: 7
shadowmin: 8
shadowmax: 999999
shadowlastchange: 10877
mail: john.doe@example.com
postalcode: 31000
l: toulouse
o: example
mobile: +33 (0)6 xx xx xx xx
homephone: +33 (0)5 xx xx xx xx
title: system administrator
postaladdress:
initials: jd
dn: cn=example,ou=groups,dc=winmarleigh,dc=local
objectclass: posixgroup
cn: example
gidnumber: 10000
thanks
hbed
Forum The Ubuntu Forum Community Ubuntu Specialised Support Ubuntu Servers, Cloud and Juju Server Platforms [SOLVED] OpenLDAP for 10.04
Ubuntu
Comments
Post a Comment