Re: openldap and openbsd

2011-06-30 Thread Stuart Henderson
On 2011-06-29, Stuart Henderson wrote: > On 2011-06-29, Remco wrote: >> >> Apart from the other advise you got I think you need to set the KRB5_KTNAME >> environment variable to tell slapd where to find your LDAP keytab, e.g.: >> (yeah, I edited the default slapd rc script, I don't know if there'

Re: openldap and openbsd

2011-06-29 Thread Remco
Stuart Henderson wrote: > On 2011-06-29, Remco wrote: >> >> Apart from the other advise you got I think you need to set the >> KRB5_KTNAME environment variable to tell slapd where to find your LDAP >> keytab, e.g.: (yeah, I edited the default slapd rc script, I don't know >> if there's a better w

Re: openldap and openbsd

2011-06-29 Thread Stuart Henderson
On 2011-06-29, Remco wrote: > > Apart from the other advise you got I think you need to set the KRB5_KTNAME > environment variable to tell slapd where to find your LDAP keytab, e.g.: > (yeah, I edited the default slapd rc script, I don't know if there's a > better way) this will cause you hassle

Re: openldap and openbsd

2011-06-29 Thread Remco
Friedrich Locke wrote: > Dear list members, > > i have just installed openldap from ports (OpenBSD 4.9/amd64) and i am > testing it. My doubt is: > > It seems to me that openldap should be run as user "x" and group "y" > accordingly the ports collection. The problem is that i want to use > kerbe

Re: openldap and openbsd

2011-06-29 Thread Janne Johansson
2011/6/28 Friedrich Locke > Dear list members, > > i have just installed openldap from ports (OpenBSD 4.9/amd64) and i am > testing it. My doubt is: > > It seems to me that openldap should be run as user "x" and group "y" > accordingly the ports collection. The problem is that i want to use > ker

Re: openldap and openbsd

2011-06-28 Thread Jeremie Courreges-Anglas
Friedrich Locke writes: > How could i run openldap as another user not root and provide it with > a ldap/x.y.z ticket? Use kadmin and ktadd -k. Remember that openldap (and only openldap) should only have read access to the new keytab.

openldap and openbsd

2011-06-28 Thread Friedrich Locke
Dear list members, i have just installed openldap from ports (OpenBSD 4.9/amd64) and i am testing it. My doubt is: It seems to me that openldap should be run as user "x" and group "y" accordingly the ports collection. The problem is that i want to use kerberos authentication. The system (OS conte