Procedures:New LDAP Client/Solaris 10 Setup - Revision history

Brandond at 19:57, 13 April 2009

2009-04-13T19:57:48Z

← Older revision		Revision as of 19:57, 13 April 2009
Line 1:		Line 1:
	This is a subpage of [[Procedures:New_LDAP_Client\|New LDAP Client]]		This is a subpage of [[Procedures:New_LDAP_Client\|New LDAP Client]].

	This was a ton of fun to figure out and debug. It works almost exactly as expected, and supports the full nss_ldap/pam_ldap feature set as available on linux with the same configuration file syntax. It also supports start_tls, which the Solaris LDAP libraries do not. The only drawback is a lack of support for the Name Service Cache daemon, as it expects to talk to Sun's ldap_cachemgr. If NSCd is enabled, LDAP passwd and group information will not be available.		This was a ton of fun to figure out and debug. It works almost exactly as expected, and supports the full nss_ldap/pam_ldap feature set as available on linux with the same configuration file syntax. It also supports start_tls, which the Solaris LDAP libraries do not. The only drawback is a lack of support for the Name Service Cache daemon, as it expects to talk to Sun's ldap_cachemgr. If NSCd is enabled, LDAP passwd and group information will not be available.

Brandond at 19:44, 13 April 2009

2009-04-13T19:44:13Z

← Older revision		Revision as of 19:44, 13 April 2009
Line 1:		Line 1:
			This is a subpage of [[Procedures:New_LDAP_Client\|New LDAP Client]]

	This was a ton of fun to figure out and debug. It works almost exactly as expected, and supports the full nss_ldap/pam_ldap feature set as available on linux with the same configuration file syntax. It also supports start_tls, which the Solaris LDAP libraries do not. The only drawback is a lack of support for the Name Service Cache daemon, as it expects to talk to Sun's ldap_cachemgr. If NSCd is enabled, LDAP passwd and group information will not be available.		This was a ton of fun to figure out and debug. It works almost exactly as expected, and supports the full nss_ldap/pam_ldap feature set as available on linux with the same configuration file syntax. It also supports start_tls, which the Solaris LDAP libraries do not. The only drawback is a lack of support for the Name Service Cache daemon, as it expects to talk to Sun's ldap_cachemgr. If NSCd is enabled, LDAP passwd and group information will not be available.

Brandond: Compute:Apollo/LDAP moved to Procedures:New LDAP Client/Solaris 10 Setup

2009-04-13T19:18:27Z

Compute:Apollo/LDAP moved to Procedures:New LDAP Client/Solaris 10 Setup

← Older revision	Revision as of 19:18, 13 April 2009
(No difference)

128.223.202.203 at 22:47, 3 December 2008

2008-12-03T22:47:51Z

← Older revision		Revision as of 22:47, 3 December 2008
Line 99:		Line 99:
	cp pam_ldap.so /usr/lib/security/pam_ldap.so.1		cp pam_ldap.so /usr/lib/security/pam_ldap.so.1
	ln -sf /usr/lib/security/pam_ldap.so.1 /usr/lib/security/pam_ldap.so		ln -sf /usr/lib/security/pam_ldap.so.1 /usr/lib/security/pam_ldap.so
			</pre>

			=== Add directories to linker path ===
			<pre>
			crle -u -l /lib:/usr/lib:/usr/local/lib -s /lib/secure:/usr/lib/secure:/usr/local/lib
			crle -64 -u -l /lib/64:/usr/lib/64:/usr/local/lib/amd64 -s /lib/secure/64:/usr/lib/secure/64:/usr/local/lib/amd64
	</pre>		</pre>

128.223.202.203 at 22:44, 3 December 2008

2008-12-03T22:44:07Z

← Older revision		Revision as of 22:44, 3 December 2008
Line 32:		Line 32:
	<pre>		<pre>
	declare -x LD_LIBRARY_PATH="/usr/local/lib/amd64:/usr/sfw/lib/amd64"		declare -x LD_LIBRARY_PATH="/usr/local/lib/amd64:/usr/sfw/lib/amd64"
	declare -x CFLAGS="-m64"		declare -x CFLAGS="-m64 -DHAVE_SASL_AUXPROP_REQUEST"
	declare -x LDFLAGS="-L/usr/local/lib/amd64 -R/usr/local/lib/amd64"		declare -x LDFLAGS="-L/usr/local/lib/amd64 -R/usr/local/lib/amd64"
	./configure		./configure
Line 48:		Line 48:
	<pre>		<pre>
	declare -x LD_LIBRARY_PATH="/usr/local/lib:/usr/sfw/lib"		declare -x LD_LIBRARY_PATH="/usr/local/lib:/usr/sfw/lib"
	declare -x CFLAGS=""		declare -x CFLAGS="-DHAVE_SASL_AUXPROP_REQUEST"
	declare -x LDFLAGS="-L/usr/local/lib/amd -R/usr/local/lib/amd"		declare -x LDFLAGS="-L/usr/local/lib/amd -R/usr/local/lib/amd"
	./configure		./configure
Line 77:		Line 77:
	<pre>		<pre>
	declare -x LD_LIBRARY_PATH="/usr/local/lib/amd64:/usr/sfw/lib/amd64"		declare -x LD_LIBRARY_PATH="/usr/local/lib/amd64:/usr/sfw/lib/amd64"
	declare -x CFLAGS="-m64"		declare -x CFLAGS="-m64 -DHAVE_SASL_AUXPROP_REQUEST"
	declare -x LDFLAGS="-L/usr/local/lib/amd64 -R/usr/local/lib/amd64"		declare -x LDFLAGS="-L/usr/local/lib/amd64 -R/usr/local/lib/amd64"
	./configure		./configure
	make		make
	cp pam_ldap.so /usr/lib/security/amd64/pam_ldap.so.1		cp pam_ldap.so /usr/lib/security/amd64/pam_ldap.so.1
	ln -s /usr/lib/security/amd64/pam_ldap.so.1 /usr/lib/security/amd64/pam_ldap.so		ln -sf /usr/lib/security/amd64/pam_ldap.so.1 /usr/lib/security/amd64/pam_ldap.so
	</pre>		</pre>

Line 92:		Line 92:
	=== Build and install 32 bit ===		=== Build and install 32 bit ===
	<pre>		<pre>
	declare -x LD_LIBRARY_PATH="/usr/local/lib/~~amd64~~:/usr/sfw/lib"		declare -x LD_LIBRARY_PATH="/usr/local/lib/amd:/usr/sfw/lib"
	declare -x CFLAGS=""		declare -x CFLAGS="-DHAVE_SASL_AUXPROP_REQUEST"
	declare -x LDFLAGS="-L/usr/local/lib -R/usr/local/lib"		declare -x LDFLAGS="-L/usr/local/lib -R/usr/local/lib"
	./configure		./configure
	make		make
	cp pam_ldap.so /usr/lib/security/pam_ldap.so.1		cp pam_ldap.so /usr/lib/security/pam_ldap.so.1
	ln -s /usr/lib/security/pam_ldap.so.1 /usr/lib/security/pam_ldap.so		ln -sf /usr/lib/security/pam_ldap.so.1 /usr/lib/security/pam_ldap.so
	</pre>		</pre>

Brandond at 09:31, 7 December 2006

2006-12-07T09:31:23Z

← Older revision		Revision as of 09:31, 7 December 2006
Line 1:		Line 1:
			This was a ton of fun to figure out and debug. It works almost exactly as expected, and supports the full nss_ldap/pam_ldap feature set as available on linux with the same configuration file syntax. It also supports start_tls, which the Solaris LDAP libraries do not. The only drawback is a lack of support for the Name Service Cache daemon, as it expects to talk to Sun's ldap_cachemgr. If NSCd is enabled, LDAP passwd and group information will not be available.

	== Build and install OpenLDAP ==		== Build and install OpenLDAP ==
	=== Build 64 bit ===		=== Build 64 bit ===

Brandond: /* Configure autofs */

2006-12-07T09:26:08Z

Configure autofs

← Older revision		Revision as of 09:26, 7 December 2006
Line 184:		Line 184:

	Create /etc/auto_netapp with the following contents:		Create /etc/auto_netapp with the following contents:
	</pre>		<pre>
	home -fstype=nfs,hard,intr,async,rsize=32768,wsize=32768,nfsvers=3,udp 172.17.8.63:/vol/home		home -fstype=nfs,hard,intr,async,rsize=32768,wsize=32768,nfsvers=3,udp 172.17.8.63:/vol/home
	research -fstype=nfs,hard,intr,async,rsize=32768,wsize=32768,nfsvers=3,udp 172.17.8.64:/vol/research		research -fstype=nfs,hard,intr,async,rsize=32768,wsize=32768,nfsvers=3,udp 172.17.8.64:/vol/research
	</pre>		</pre>

			Enable/reload autofs

			<pre>
			svcadm disable autofs
			svcadm enable autofs
			</pre>

	== Configure LDAP Environment ==		== Configure LDAP Environment ==

Brandond at 09:25, 7 December 2006

2006-12-07T09:25:00Z

@@ Line 169: / Line 169: @@
 other   password required       pam_authtok_store.so.1
+#
 </pre>

Brandond: /* Build and install nss_ldap using OpenLDAP */

2006-12-07T09:13:51Z

Build and install nss_ldap using OpenLDAP

← Older revision		Revision as of 09:13, 7 December 2006
Line 27:		Line 27:
	</pre>		</pre>

	* Build and install 64 bit:		=== Build and install 64 bit ===
	<pre>		<pre>
	declare -x LD_LIBRARY_PATH="/usr/local/lib/amd64:/usr/sfw/lib/amd64"		declare -x LD_LIBRARY_PATH="/usr/local/lib/amd64:/usr/sfw/lib/amd64"
Line 38:		Line 38:
	</pre>		</pre>

	* Clean up for next install		=== Clean up for next install ===
	<pre>		<pre>
	make clean		make clean
	</pre>		</pre>

	* Build and install 32 bit:		=== Build and install 32 bit ===
	<pre>		<pre>
	declare -x LD_LIBRARY_PATH="/usr/local/lib:/usr/sfw/lib"		declare -x LD_LIBRARY_PATH="/usr/local/lib:/usr/sfw/lib"
Line 54:		Line 54:
	</pre>		</pre>

	* Configure Name Service Switch		=== Configure Name Service Switch ===
	Make sure /etc/nsswitch.conf contains the following lines:		Make sure /etc/nsswitch.conf contains the following lines:
	<pre>		<pre>
Line 61:		Line 61:
	</pre>		</pre>

	* Restore SASL headers		=== Restore SASL headers ===
	<pre>		<pre>
	mv /usr/include/sasl.old /usr/include/sasl		mv /usr/include/sasl.old /usr/include/sasl

Brandond: /* 32 bit */

2006-12-07T09:13:17Z

32 bit

← Older revision		Revision as of 09:13, 7 December 2006
Line 13:		Line 13:
	</pre>		</pre>

	=== 32 bit ===		=== Build 32 bit ===
	<pre>		<pre>
	./configure --enable-tls --disable-slapd --prefix=/usr/local		./configure --enable-tls --disable-slapd --prefix=/usr/local