Authenticate Mac OS X users against OpenLDAP on Debian

[Mi <mi.lists.ldap@alma.ch>]

We added a Mac to our network, and I would like the network users to be able to login with their existing credentials on our Debian openLDAP server.

I configured the LDAP access on the Mac, and it can indeed see the users and groups from the openldap server. But when I try to login after clicking "Other...", the login window shakes around, and nothing happens.

The server logs show the connection from the Mac and it's searches ( http://pastebin.com/MB2JswAa).

(Logging is configured with Parse, Stats, Stats2, Sync. Is there something else I should add to logging that may be useful?)

On the Mac, I didn't find anything looking helpful in the logs (http://pastebin.com/yRreFQrJ), but maybe I don't know what to look for.

I found many instructions on the Internet which concentrate on mounting user homes from the server over NFS. This is NOT what we want. Users would be authenticated with openldap, but have their homes locally on the Mac, like normal users.

I also saw many mentions of adding the apple schema, and I have done that. But maybe I now need to actually use parts of that schema in the user records?

Thanks for any help...