Re: ldap && squid authentication

[Maximilian Wilhelm <max@rfc2324.org>]

Am Dienstag, den 15. März hub Gavin McCullagh folgendes in die Tasten:

Hi!

[...]
> Oops, you're correct.  It isn't yet requiring members of the teachers
> group.  It is however validating username/password which is useful in
> itself.  Just ignoring the teachers bit.  I will return to the drawing
> board.

:-)

> > No.
> > You have to use "ldap" as hostname, if you want to connect via SSL to
> > the LDAP server.
> > You may want to use -ZZ instead of -Z to enforce TLS, so the connection
> > will fail, if SSL could not be used.

> I see.  I hadn't got this far yet but thanks.  ldap seems to resolve to
> 127.0.0.1. 

In Debian EDU/SLX ldap should resolve as a CNAME (DNS alias) to tjener
which should resolve to 10.0.2.2.

> Is it possible to connect from a remote host?

Sure it is; all you have to make sure is that ldap resolve (somehow,
maybe by using tjener as your nameserver) to the host LDAP is running
on.

Ciao
Max
-- 
	Follow the white penguin.