LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 12-06-2011, 10:33 AM   #1
SteveInTallyFL
Member
 
Registered: May 2008
Location: Tallahassee, FL
Distribution: RHEL4, RHEL 5, OEL4, OEL5
Posts: 58

Rep: Reputation: 17
Linux 5U7 LDAP setup incorrect


I am implementing virtual servers using Active Directory as LDAP source. I have had success with the user accounts (though it stopped working last week). Now I want to set up computer name resolution without maintaining individual host files on each Linux guest server. My resolve.conf points to Google public dns, but I need to resolve my internal servers by name internally. I added the computers in my Active Directory within the local domain container. I set the Unix Atrributes for nisplus to my internal container that also has my user accounts and put in the static IP address as appropriate.

in nsswitch.conf I have "hosts: files dns". Do I need to add nisplus?
 
Old 12-06-2011, 11:14 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,374

Rep: Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962
what has any of this got to do with ldap? should you not just be using the DNS services provided by AD? Your servers should never be going to an external DNS service, AD should be forwarding public requests centrally.

Nothing to do with Networking - moved to Linux - Software.
 
Old 12-06-2011, 01:56 PM   #3
SteveInTallyFL
Member
 
Registered: May 2008
Location: Tallahassee, FL
Distribution: RHEL4, RHEL 5, OEL4, OEL5
Posts: 58

Original Poster
Rep: Reputation: 17
UPDATE:
changed nameservers in resolv.conf to my primary and backup Active Directory servers. Verified that they would forward for external resolution by "dig @<AD IP address> cnn.com" and got affirmative response.

Rebooted server server. Still cannot resolve a name.
 
Old 12-06-2011, 04:30 PM   #4
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,374

Rep: Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962
well what requests are actually being made? tcpdump on port 53 and watch what the DC actually says.
 
Old 12-06-2011, 07:02 PM   #5
agentbuzz
Member
 
Registered: Oct 2010
Location: Texas
Distribution: Debian, Ubuntu, CentOS, RHEL
Posts: 118

Rep: Reputation: 22
LDAP and Windows computer names.

SteveInTallyFL,
You are not using NIS, so there is no need to include that in nsswitch.conf. If you are implementing Linux servers using AD as an LDAP directory, then you can just hit it with the stock LDAP client and command line tools on either port 389 or port 3268.
If you get no response for DNS name resolution from the DCs, check the iptables config with an "iptables -L" and check the host-based firewall on the Windows DC and any intermediate device, such as an ASA, between the hosts. If the DC is Server 2008, try a "netsh advfirewall set allprofiles state off" and then try to hit it from the Linux host again.
 
  


Reply

Tags
configuration, ldap, rhel5


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
how to setup LDAP server lovingaditya28 Linux - Server 3 06-01-2010 12:33 PM
how to setup open ldap server and solaris 10 as ldap client maheshlad Linux - Software 1 10-10-2009 12:55 AM
ldap setup for authentication rexthecoollion Suse/Novell 2 04-14-2006 02:18 AM
LDAP howto? simple setup up? linux logon? sirmonkey Linux - Networking 1 04-07-2006 09:00 AM
getting ldap setup aaronj Linux - Software 2 08-31-2004 08:30 PM


All times are GMT -5. The time now is 04:31 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration