[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: ldap tunneling question
On Fri, Jun 02, 2000 at 06:31:28PM -0300, Andreas Hasenack wrote:
> Em Fri, Jun 02, 2000 at 03:19:45PM -0500, blair christensen escreveu:
> > so, on odin, stunnel is already up and running, listening on port 636
> > so that it can then be forwarded to localhost(odin):389. then, on
> > blammo, i tried:
> >
> > blammo# stunnel -p .... -d localhost:ldap -c -r odin:ldaps -D 7 -f
>
> so stunnel is listening on localhost. Do you have your /etc/openldap/ldap.conf
> set to localhost too or to blammo? There is a difference.
>
i am using 'localhost' in there. i have tried it with 'blammo' as
well.
> > blammo# ldapsearch -b "dc=bsd,dc=uchicago,dc=edu" -D
> > "cn=Manager,dc=bsd,dc=uchicago,dc=edu" -W '(uid=blair)'
> > Enter LDAP Password:
> > ldapsearch gives me "ldap_bind: Can't contact LDAP server"
>
> Does this work without stunnel, i.e., add a -h odin to that
> command.
>
yep, that works.
> Do your /etc/hosts.allow & /etc/hosts.deny files deny some kind of access?
> stunnel and slapd are linked against libwrap.
>
i had this problem already because i forgot that it was configured for
libwrap. this has been fixed.
> I have a patched authconfig and a packaged stunnel which configure most
> of these files (nsswitch.conf, stunnel start-up scripts, etc) automatically
> for authentication with ldap. They don't just mess with /etc/pam.d/* files
> yet, but that's comming. If you want to take a look, check
> ftp://ftp.conectiva.com.br/pub/conectiva/EXPERIMENTAL/ldap, there are
> RPMs and SRPMs.
>
i'll take a look at that.
thanks,
blair christensen