Re: OpenLDAP/nss_ldap/pam_ldap

Steve Lee wrote:
> Sorry for my ignorance, i am new to FreeBSD.  i have tried to use it
> in the past ( 2years ago ) but decided to wait to till the nss_ldap
> support was added for nsswitch so i can use openldap.  Now, when you
> say rebuild, how would i rebuild FreeBSD dynamically, or are you saying
> to rebuild the application that were statically linked dynamically ?
> I just checked the FreeBSD site and do not see any release 5.2

You might do best to sit back and wait a little while and try again.
5.2 is not available yet.  I don't know what the current schedule is,
exactly, but I'm guessing 3 months or so in the future.

To the get the dynamic root capability that Antoine spoke of, you'll
need to update your 5.1 FreeBSD to the latest development sources, which
can be rather dicey (especially if you're new to FreeBSD).  If you want
to try it, the docs are here:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cutting-edge.html

If you decide to try upgrading to -CURRENT to try this feature out,
don't hesitate to ask this (or the questions_at_freebsd.org) list if you
have problems, we'll help.

After you do the cvsup, but before doing the make steps, you'll need
to create a custom /etc/make.conf to tell FreeBSD to build a dynamic
root.
Just create the file /etc/make.conf and put the line
"WITH_DYNAMICROOT=true" in it (you can also add other build options
to /etc/make.conf per the docs).  Then run the make steps in the
documentation.

Hope this helps.

> On Wed, 29 Oct 2003, Antoine Jacoutot wrote:
> 
> 
>>On Tuesday 28 October 2003 23:52, Steve Lee wrote:
>>
>>>I have gotten FreeBSD 5.1 to authenticate user remotely
>>>ssh ing to the box.  They can log in, but when they log
>>>in, the system shows their userid instead of the username
>>>when you do a ps.   this tells me something might be
>>>wrong with nss_ldap.  but not sure what i am doing wrong.
>>>
>>>I can do "id <username>"  which it returns the user information.
>>
>>You need to build FreeBSD with dynamic libraries...
>>It only works under -CURRENT with the "WITH_DYNAMICROOT=true" option in your 
>>make.conf.
>>I think it is supposed to be the default for 5.2-RELEASE.
>>
>>Antoine

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com