OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Vincent Danen (vdanenmandrakesoft.com)
Date: Mon Mar 25 2002 - 12:15:43 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Mon Mar 25, 2002 at 08:27:42AM +0100, Martin Fahrendorf wrote:

    > Hi all,
    >
    > I've played a little bit with mdk8.2 at this weekend and found something realy
    > strange with groups and nss_ldap. Everything works right with my mdk8.1
    > installation. After the update, the user have no additional groups (like they
    > had before). After a little investigation I found out that only the groups
    > lost which are defined in the ldap repository.
    >
    > So, the advantage of OpenSource is the availability of the source, I load the
    > nss_ldap source rpm and looked around in there and found a little flag in the
    > configure statement. The switch '--enable-rfc2307bis' was not set. after
    > setting this switch in the .spec file and recreate the rpm (and installing)
    > everything works as expected, All groups are back again.

    Hmmm... what does this --enable-rfc2307bis switch do, exactly? Maybe
    this is the reason why it's using the LDAP user password to
    authenticate instead of the userPassword field in the account data?

    Dang... now I don't recall if it was with a cooker version or 8.2
    final that I was doing this with.

    Methinks I'm going to have to try this.

    > BTW realy great work those mdk8.2; congratulation. And to those who are
    > looking for a imap server, mdk8.2 shipes courier imap as rpm files.

    -- 
    MandrakeSoft Security; http://www.mandrakesecure.net/
    "lynx -source http://www.freezer-burn.org/bios/vdanen.gpg | gpg --import"
    1024D/FE6F2AFD   88D8 0D23 8D4B 3407 5BD7  66F9 2043 D0E5 FE6F 2AFD
    

    Current Linux kernel 2.4.18-6mdk uptime: minutes.

    -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org

    iD8DBQE8n2lPIEPQ5f5vKv0RAviHAJ9Hb4l32l/VGQyJZj2P6flWHwcpzQCghyh5 jwhnyh18k1A+68paGdBQRcE= =sEip -----END PGP SIGNATURE-----