Re: On PAM and authentication
On Thu, Sep 17, 1998 at 10:33:29AM -0700, Marc Singer wrote:
> > I recently tried out LDAP on my machine for authentication. I used tools
> > available at http://www.rage.net/ldap/, and I'm pleased to say it works.
> > By using the NSS module, it works with all existing tools, including XDM,
> > etc., that I have tried, except for tin (my version is libc5 though),
> > and passwd, gpasswd, etc (for users authenticated via LDAP).
> This is good news. I spent some time hacking at LDAP and wasn't as
> successful. I was interested in using it for e-mail directories.
> I didn't think it was hard to setup once I figured out what had to be
> done. It was the browsing tools that seems to be hokey.
Using the MigrationTools pkg and some custom editing magic due to me using
shadow passwords, it took me less than 5 minutes to figure out.
WARNING: There was ONE other package which went VERY wrong with LDAP/NSS.
This was exim. I don't know why, though I suspect it has something to
do with the other libs it is linked to:-
lpsg:~$ ldd /usr/sbin/exim
libpcre.so.1 => /usr/lib/libpcre.so.1 (0x40010000)
libnsl.so.1 => /lib/libnsl.so.1 (0x40017000)
libdb.so.2 => /lib/libdb.so.2 (0x4001d000)
libresolv.so.2 => /lib/libresolv.so.2 (0x4002b000)
libc.so.6 => /lib/libc.so.6 (0x40039000)
/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)
libnsl is NIS-related, in particular.
Can anyone shed more light on this?
Tom Lees <email@example.com> <firstname.lastname@example.org> http://www.lpsg.demon.co.uk/
PGP Key: finger email@example.com, http://www.lpsg.demon.co.uk/pgpkeys.asc.