O'Reilly has a really good book on LDAP "LDAP System Administration" - includes a chapter on how to migrate from NIS to LDAP.
IMO that's one of the few bad oreilly books the orielly book is more of a cookbook, but does'nt really explain what's going on.
You have a problem, and you want to solve it. I find the O'Reilly book a good guide. I didn't claim it will give you a complete understanding of the protocol or X.509 etc. But it will show you how to solve the problem at hand, and give ideas of how to exploit LDAP further.
NetBSD is almost finished integrating pluggable nsswitch modules, I doubt openbsd will be far behind. No offence to the openbsd crew but if you waited for them to support something before using it on freebsd you wouldn't be running much...
I think the whole idea of pam is against their fundamental philosophy, so I wouldn't expect to see this any time soon.
Also, LDAP requires you to obtain Object Identifiers if you defnine new types, I haven't heard of OID that can be used for private/experimental purposes only (like the private ip address spaces).
There's no need to get an OID registered (unlike IP addresses; it's not like it's routed) but it's free and they'll happily give you one if you ask.
You will need to have your directory service available for the internet if you eg. want to distribute certificates - the most common use I think. And you will need OID if you want to add your own extensions to the v3 certificate.
But even if not, just to make sure that your choice of OID will not clash with commonly distributed entries, it would be convenient to have a private playground, where any interference is _your_ problem.
I know they will give you a branch for free if you ask, but I guess that will change if we all request such a branch.
Anyway, the predefined schemes much satturates the need of most SOHO's.
Cheers, Erik
-- Ph: +34.666334818 web: http://www.locolomo.org S/MIME Certificate: http://www.locolomo.org/crt/2004071206.crt Subject ID: A9:76:7A:ED:06:95:2B:8D:48:97:CE:F2:3F:42:C8:F2:22:DE:4C:B9 Fingerprint: 4A:E8:63:38:46:F6:9A:5D:B4:DC:29:41:3F:62:D3:0A:73:25:67:C2 _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
