LDAP does not work

acid_kewpie · 01-21-2011, 07:59 AM

It sounds like you're going to be failing at the "getent passwd" stage in the fault tracing I'd recommend, which given success with ldapsearch would say that most likely the /etc/ldap.conf file is invalid in some way.

guna_pmk · 01-21-2011, 08:48 AM

Chris, I am not very clear on what you are saying here. But as it stands I can able to log on as the ldap user from the ldap client machine (which, as I originally mentioned, is Fedora14) let alone ldapsearch.

It only takes a very very long time to log on into the gnome session after the reboot (as I also mentioned for some reason, the mdmonitor takes a very long time to start - but I can disable mdmonitor for now). Then it takes no time to log in from the terminals, even if it is the ldap user. I have no /etc/ldap.conf on the client machine.

But I do have one on the server to which I have made changes as follows:
#host 127.0.0.1
base dc=mydomain,dc=com
uri ldap://servername.mydomain.com/
ssl no
tls_cacertdir /etc/openldap/cacerts

Please help

Cheers

guna_pmk · 01-24-2011, 05:48 AM

Any idea guys?

Cheers

dlugasx · 01-24-2011, 07:24 AM

Quote:

Originally Posted by guna_pmk

Hi Guys,

Sadly I have to reopen this thread. The problems regarding the ldap server and client are solved now. But my problem with the log in time still remains. It takes painfully a long long time to log in even as the local user. Another thing I noticed was that the mdmonitor service takes a very very long time to start. If I disable ldap from the nsswitch.conf, the delay does not happen (and of course, I can not log on to the ldap server).

Anybody has any idea?

Thanks

Disable IPv6.

guna_pmk · 01-24-2011, 04:11 PM

Thanks. My client uses a wireless network with network manager running. Ignore option for IPv6 is what is chosen when I open 'Edit Connections' GUI. Is there any other way to do this?

Thanks

frndrfoe · 01-24-2011, 06:11 PM

Check you /etc/nsswitch.conf file for ldap entries for services and protocols. If you are using ldap for only user info you can remove ldap for those services. It is possible that attempted ldap lookups are having to time out on login.

chrism01 · 01-24-2011, 11:04 PM

There's some good stuff here: http://www.linuxhomenetworking.com/w...DAP_and_RADIUS ... you can ignore where it talks about RADIUS

guna_pmk · 01-26-2011, 05:16 AM

Thanks for your responses. For now I am taking a slight diversion on what I am doing. I shall re-ignite this thread when I restart this task.

Thanks