L. V. Lammert wrote:
quoted text
> On Wed, 21 Feb 2007, Marc Balmer wrote:
> 
>> Cory Albrecht wrote:
>>
>>> I'm trying to get my OpenBSD firewall to authenticate normal user
>>> accounts off of an LDAP server running on a different machine.
>> On a side note, you are aware that you must create the accounts
>> locally as well for things to work properly?  It is not enough
>> to have the accounts in LDAP only.
>>
> PMFJI, but could you clarify that? Requiring local accounts totally
> defeats the purpose of an LDAP server.
> 
> I have seem mail configs using LDAP only, .. and I believe Samba can also
> be configured to use LDAP properly.

yes, you can have mailserver setups or ftp server setups where only
one system user is needed.  e.g. the virtual_chroot flavor of
net/pure-ftpd does this and using courier-imap, a mail server can
be setup that does store all email under the same uid.

on OpenBSD, for things like samba servers or user logins to the
machine, the account must be created locally as well as in the LDAP
database.  at least this is the current state of affairs.


quoted text
> 
> What apps have you found do NOT work properly with LDAP?
> 
> 	Lee
> 
> ================================================
>   Leland V. Lammert            lvl@omnitec.net
>     Chief Scientist     Omnitec Corporation
>  Network/Internet Consultants   www.omnitec.net
> ================================================