|
From: Michael E. <men...@ka...> - 2002-10-27 17:30:16
|
> clean or not, it does not work out of the box ;) Huh?? We're talking about Mac OS X desktop here right? Why does having to adjust a configuration file before you run slapd considered not working out of the box? How would you have them pre-configure it??? It's not any different than having to configure an email client to read email from your POP account. In my mind I would say that it totally works out of the box. All I had to do was add the following to /etc/openldap/slapd.conf (making changes to work within your needs --- I also commented out the netinfo stuff because I'm not using NetInfo) database ldbm suffix "o=mydomain.com" rootdn "cn=Directory Manager,o= mydomain.com" rootpw somepw directory /var/db/openldap/openldap-data/ cachesize 1000000 dbcachesize 10000000 index uid,cn,sn,givenName pres,eq,sub sizelimit 5000 -- I wouldn't expect Apple to guess for me what I wanted here :-) Then you can either set LDAP to run at startup (which has been discussed here) or type /usr/libexec/slapd and you're up and running. You of course need to add the entries (either with the command line ldapadd or via some GUI admin tool) you want to search on to it to make it do what you want but I assume that's true of any LDAP server. BTW, the database you're talking about not existing with the default slapd.conf is because you probably don't have anything in your netinfo setup. Try launching slapd and then going into Netinfo and adding users and see if it gets created. Mike On Sunday, October 27, 2002, at 10:39 AM, Jens Vagelpohl wrote: > clean or not, it does not work out of the box ;) the slapd.conf > points to a database that does not exist, at least on my own system. i > assume you have to make some explicit gesture to build that database > file. > > even if this database existed and some unsuspecting person started > using it i wonder what kind of security hole you open by not > explicitly disabling the serving of netinfo data... > > on my own system i have now switched to using the built-in OpenLDAP by > adjusting the slapd.conf (and commenting out the pieces pertaining to > the netinfo bridge) and use it without problems through python-ldap > compiled against my self-built python 2.1.3. > > jens |