From e31ad3ddf3f36b212115061ab55f9b0e4d811e75 Mon Sep 17 00:00:00 2001
From: Martin Goik <goik@hdm-stuttgart.de>
Date: Sun, 1 Jan 2023 21:22:02 +0100
Subject: [PATCH] Newer LDAP client config link
---
Doc/Sdi/Ldap/ldap.xml | 38 +++++++++++++++-----------------------
1 file changed, 15 insertions(+), 23 deletions(-)
diff --git a/Doc/Sdi/Ldap/ldap.xml b/Doc/Sdi/Ldap/ldap.xml
index 556710e55..66887d1d9 100644
--- a/Doc/Sdi/Ldap/ldap.xml
+++ b/Doc/Sdi/Ldap/ldap.xml
@@ -1269,30 +1269,23 @@ tar zxf /root/pam.tgz # Restore your working PAM configuration</screen>
<itemizedlist>
<listitem>
- <para>Activation of OS level <xref linkend="glo_LDAP"/> user and
- group support is being outlined in <link
- xlink:href="https://wiki.debian.org/LDAP/PAM">Configuring LDAP
- Authentication</link>.</para>
+ <para>Activation of OS level <xref linkend="glo_LDAP"/> user, group
+ and password support is being outlined in <link
+ xlink:href="https://computingforgeeks.com/how-to-configure-ubuntu-as-ldap-client">Configure
+ LDAP Client on Ubuntu</link>.</para>
</listitem>
<listitem>
- <para>Follow the «newer» <link
- xlink:href="https://wiki.debian.org/LDAP/PAM#PAM_Setup_with_libpam-ldapd">PAM
- Setup with libpam-ldapd approach</link> rather than using the older
- <package>libpam-ldap</package> package.</para>
- </listitem>
-
- <listitem>
- <para>If your <xref linkend="glo_LDAP"/> server features a user
- having e.g. <code>uid=ldaptest</code> this should allow for viewing
- its meta data on the client side:</para>
+ <para> <xref linkend="glo_LDAP"/> user entry DN's must be addressed
+ by uid e.g. <code>uid=ldaptest,ou=people,...</code> . On successful
+ configuration you should see:</para>
<screen>$ id ldaptest
uid=1001(ldaptest) gid=1001(ldaptest) groups=1001(ldaptest)</screen>
<para>A <quote>id: ‘<code>ldaptest</code>’: no such user</quote>
- message indicates your <xref linkend="glo_LDAP"/> setup does not yet
- work.</para>
+ message indicates your <xref linkend="glo_LDAP"/> setup does not
+ (yet) work.</para>
<tip>
<itemizedlist>
@@ -1325,20 +1318,19 @@ shadow: files ldap</programlisting>
</listitem>
<listitem>
- <para>On your <xref linkend="glo_LDAP"/> server side: Enable
- an appropriate <link
+ <para>For debugging login attempts you may want setting your
+ <xref linkend="glo_LDAP"/> server's <link
xlink:href="http://www.zytrax.com/books/ldap/ch6/#loglevel">logging
- level</link> for debugging connection attempts. You may want
- to select <option>conns</option>, <option>config</option> and
- <option>stats</option>.</para>
+ level</link> to at least including <option>conns</option>,
+ <option>config</option> and <option>stats</option>.</para>
</listitem>
</itemizedlist>
</tip>
</listitem>
<listitem>
- <para>Create the required user home directory manually and change
- owner and group accordingly.</para>
+ <para>Create the required user home directory manually beforehand
+ setting owner and group accordingly.</para>
</listitem>
</itemizedlist>
--
GitLab