[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
adding usernames
I'm looking for some guidance
to help me add names and passwords to
an ldap server. (I realize these are somewhat
dump questions.)
My slapd.conf is boilerplate:
[root@rw openldap]# more slapd.conf
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /etc/openldap/slapd.at.conf
include /etc/openldap/slapd.oc.conf
schemacheck off
#referral ldap://root.openldap.org/
pidfile /var/run/slapd.pid
argsfile /var/run/slapd.args
#######################################################################
# ldbm database definitions
#######################################################################
database ldbm
suffix "dc=usuhs, dc=mil"
suffix "o=USUHS, c=US"
directory /usr/tmp
dbcachesize 5000000
rootdn "cn=Manager, dc=usuhs, dc=mil"
#rootdn "cn=Manager, o=USUHS, c=US"
rootpw uhnuhnuhaaa
# cleartext passwords, especially for the rootdn, should
# be avoid. See slapd.conf(5) for details.
directory /usr/tmp
_______________
I've added the following file (myldif.ldif)
using " ldapadd -D "cn=Manager, dc=usuhs, dc=mil" -w uhnuhnuhaaa <
new.ldif ":
[root@rw openldap]# more myldif.ldif
dn: dc=usuhs, dc=mil
dc: usuhs
o: USUHS
objectclass: organization
objectclass: dcObject
dn: cn=Manager, dc=usuhs, dc=mil
cn: Manager
sn: Manager
objectclass: person
_____________________
I can add the following file (new.ldif):
dn: cn=Robert Williams, dc=usuhs, dc=mil
cn: Robert
sn: Williams
objectclass: person
____________________
but the Netscape ldap client returns
with: ...ldap error "no such object" (0x20)
when searching for names containing any
part of "Robert Williams"
______________________
Why can't I add the following file (new2.ldif):
dn: cn=Robert Williams, o=USUHS, c=US
cn: Robert
sn: Williams
givenname: Bob
objectclass: person
_______________________________________
I guess I'm looking for a simple model
or tutorial
for putting together a ldap database with
usernames and passwords, that is
username searchable
(except for passwords)
and useful for ldap based authentication
(pam-ldap, etc).
Bob Williams