Re: [389-users] Console breaks when enabling no anoymous binding

2010-08-10 Thread Rich Megginson
Brandon G wrote: > Rich Megginson wrote: >> When you first log in to the console, and you type in your ID, the >> directory server has no credentials, and has to perform an anonymous >> search for uid=youruid to find your BIND DN. This is the same as when >> you log in to the operating system -

Re: [389-users] Console breaks when enabling no anoymous binding

2010-08-10 Thread Brandon G
Rich Megginson wrote: When you first log in to the console, and you type in your ID, the directory server has no credentials, and has to perform an anonymous search for uid=youruid to find your BIND DN. This is the same as when you log in to the operating system - pam has to do a search like

Re: [389-users] Console breaks when enabling no anoymous binding

2010-08-10 Thread Rich Megginson
Gerrard Geldenhuis wrote: What's not necessary? Note that the admin server and directory server have separate cert databases. Also note that the NSS crypto team is working towards a unified system-wide cert db. >>> That could have been more clear, I meant that a

Re: [389-users] Console breaks when enabling no anoymous binding

2010-08-10 Thread Rich Megginson
Gerrard Geldenhuis wrote: >> >> From: 389-users-boun...@lists.fedoraproject.org >> [389-users-boun...@lists.fedoraproject.org] on behalf of Gerrard Geldenhuis >> [gerrard.geldenh...@betfair.com] >> Sent: 10 August 2010 16:00 >> To: 389-us...@lists.fedorapr

Re: [389-users] Console breaks when enabling no anoymous binding

2010-08-10 Thread Gerrard Geldenhuis
> >From: 389-users-boun...@lists.fedoraproject.org >[389-users-boun...@lists.fedoraproject.org] on behalf of Gerrard Geldenhuis >[gerrard.geldenh...@betfair.com] >Sent: 10 August 2010 16:00 >To: 389-us...@lists.fedoraproject.org >Subject: [389-users] Consol

Re: [389-users] Console breaks when enabling no anoymous binding

2010-08-10 Thread Rich Megginson
Gerrard Geldenhuis wrote: > Hi > If I set > nsslapd-allow-anonymous-access: off > I am not able to login to the 389-console. I can remedy this by checking the > checkbox "Use SSL in Console" in the Encryption tab on the Directory Server > console. This seems a strange solution to the problem. Wh