[UniMacTech] leopard RFC 2307 authentication issue ?
Kemal Demis
kemal.demis at jcu.edu.au
Tue Nov 13 11:12:50 EST 2007
Krm
Thanks for the tip
http://discussions.apple.com/thread.jspa?messageID=5799888 worked for me.
I edited the edited the TLS_REQCERT /etc/openldap/ldap.conf and set it
to TLS_REQCERT = never
By default in Leopard, this is set to 'demand' (which is the openldap
default), but in Tiger, it's set to 'never'.
I then rebooted the machine, and now it LDAP and E-Directory
authentication works in Leopard.
kind regards :-)
Kemal Demis
JCU
krm at karemo.com wrote:
> Hi Kemal,
>
> There have been many reports of permissions/lockout related oddities with
> Leopard.
>
> Suggest reading through
> http://discussions.apple.com/thread.jspa?messageID=5799888
> and
> http://discussions.apple.com/thread.jspa?messageID=5817205&tstart=0
> and seeing if they help...
>
> Cheers,
> Kate.
>
>
>> Hi all,
>> I am currently testing OSX 10.5 (Leopard) and struck a problem with
>>
> LDAPv3 authentication against our unix server running ( iPlanet)
> Authentication works perfectly under OSX 10.4.10 ( user happily :-)
> authenticates against our unix based ldap server )
>
>> I have tried upgrading a working OSX 10.4.10 system to Leopard but once
>>
> installed, user authentication fails.
>
>> I also tried a clean install of leopard, and configured it using the
>>
> same LDAP
>
>> settings I use to configure working client running OSX 10.4.10, (once
>>
> again user using LDAP authentication fails to
>
>> authenticate).
>>
>> The LDAP mappings is based on RFC 2307 (unix)
>>
>> The test machine running leopard indicates that is communicating with
>>
> the LDAP server, and is setup exactly like the *OSX10.4.10 client machine
> that works*.
>
>> Does anyone know if the LDAP v3 schema settings has changed under
>>
> Leopard
>
>> ?
>> Has someone else experienced similar problems with LDAPv3 authentication
>>
> using the directory utility tool .
>
>> --
>> Kind regards
>> Kemal Demis
>> James Cook University - Cairns Campus
>> Email cckhd at jcu.edu.au
>>
>>
>> _______________________________________________
>> unimactech mailing list
>> unimactech at auc.edu.au
>> http://www.auc.edu.au/mailman/listinfo/unimactech
>>
>>
>
>
>
>
>
>
>
More information about the unimactech
mailing list