From owner-freebsd-questions@FreeBSD.ORG  Wed Aug  6 16:17:46 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id B1F2037B401
	for <questions@FreeBSD.org>; Wed,  6 Aug 2003 16:17:46 -0700 (PDT)
Received: from cultdeadsheep.org (charon.cultdeadsheep.org [80.65.226.72])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 34C2A43F75
	for <questions@FreeBSD.org>; Wed,  6 Aug 2003 16:17:45 -0700 (PDT)
	(envelope-from sheepkiller@cultdeadsheep.org)
Received: (qmail 83799 invoked from network); 6 Aug 2003 23:17:43 -0000
Received: from unknown (HELO chuck.cultdeadsheep.org) (192.168.0.12)
  by goofy.cultdeadsheep.org with SMTP; 6 Aug 2003 23:17:43 -0000
Date: Thu, 7 Aug 2003 01:17:47 +0200
From: Clement Laforet <sheepkiller@cultdeadsheep.org>
To: questions@FreeBSD.org
Message-Id: <20030807011747.33a104af.sheepkiller@cultdeadsheep.org>
Organization: tH3 cUlt 0f tH3 d3@d sH33p
X-Mailer: Sylpheed version 0.9.4 (GTK+ 1.2.10; i386-portbld-freebsd5.1)
X-Face: ._cVVRDn#-2((lnfi^P7CoD4htI$4+#G/G)!w|,}H5yK~%(3-C.JlEYbOjJGFwJkt*7N^%z
	jYeu[;}]}F"3}l5R'l"X0HbvT^D\Q&%deCo)MayY`);TO
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Subject: Fw: Re: nss_ldap in -CURRENT
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Aug 2003 23:17:47 -0000

If someone wants to add/correct something.

Begin forwarded message:

Date: Thu, 7 Aug 2003 01:14:50 +0200
From: Clement Laforet <sheepkiller@cultdeadsheep.org>
To: Kerberus <kerberus@microbsd.net>
Cc: thomas@deniau.org
Subject: Re: nss_ldap in -CURRENT


On 06 Aug 2003 18:03:30 -0500
Kerberus <kerberus@microbsd.net> wrote:

> is there a quick howto some where on doing this setup, cause its killing
> me.... 

1. Get a working -CURRENT system
2. install /usr/ports/net/openldap21
3. install /usr/ports/net/nss_ldap
4. install /usr/ports/security/pam_ldap
5. set up your openldap server, don't forget to include schema/nis.schema
6. fill users using ldiff (or get a web frontend)
7. configure you /usr/local/etc/ldap.conf
8. ln -s /usr/local/etc/ldap.conf /etc/ldap.conf
9. configure /etc/nsswitch
10. id <user> to test

troubleshouting :
- if you get an error like this one :
Entry (uid=test,ou=users,dc=cultdeadsheep,dc=org), attribute 'field' not allowed
in your /var/log/debug log, you have to add it in the schema (see core.schema)

should be ok now :)

regards,

clem