[nzlug] Bootstrapping LDAP

[Daniel Pittman]

Martin Kealey <martin at kurahaupo.gen.nz> writes:

> This is arguably a bit OT, so apologies in advance.

I don't think so -- configuring a Linux system seems pretty on-topic to
me.  In deference to that, though, feel free to take this offline with
me and I can help you through some of this.

> I've administered LDAP servers many times over the years, but now I'm
> faced with getting one working from scratch, I have to admit I'm a bit
> stumped.
>
> I've installed slapd on Debian, started the daemon, but it's "lights
> on nobody home". Or more precisely, all the doors are locked and
> nobody's answering.
>
> I've read a gazillion web guides, varying in quality from excellent to
> execrable, and basically I can't get authorisation to add the base
> records which are supposed to be the authorisation for everything
> else. I've added a DN and secret in /etc/slapd/ldap.conf (and several
> other places), but to no avail.
>
> Does anyone have any tips?

Er, yes.  For example "never clear your ears with pointed objects."

If you want some that are on-topic to your request, though, you will
need to be a little more specific about what you actually want to do.

Do you want to:

 - authenticate local Unix users from LDAP
 - migrate existing accounts to LDAP
 - authenticate web users from LDAP
 - manage mail aliases from LDAP
 - synchronise with another directory service

Also, anything else that I have missed?

Regards,
        Daniel
-- 
Digital Infrastructure Solutions -- making IT simple, stable and secure
Phone: 0401 155 707        email: contact at digital-infrastructure.com.au
                 http://digital-infrastructure.com.au/