Re: Connect Solaris ldapclient to a Oracle internet directory

On 19 Jun., 16:07, Chris Ridd <chrisr...@[EMAIL PROTECTED]
> wrote:
> On 2008-06-18 15:28:01 +0100, denis <Denis.Nick...@[EMAIL PROTECTED]
> said:
>
> > As far as I know the native Solaris ldap client doesn't have this
> > commands.
> > I found only:
> > ldapadd =A0 =A0 ldapaddent =A0ldapclient =A0ldapdelete =A0ldaplist
> > ldapmodify =A0ldapmodrdn =A0ldapsearch
>
> You should first test whether NSS is working against your Oracle
> directory - test using tools like id. The ldaplist tool is specific to
> NSS as well, and a useful test tool.
>
> Once you're happy all that's working, *then* go and fight PAM. If
> memory serves, the objectcl***** present on directory entries is
> im****tant for pam_ldap.
>
> Cheers,
>
> Chris

Thanks for all your answers.

Here is an intermediate state:
Thanks to shakespeare I found the Oracle=AE Authentication Services for
Operating Systems Administrator=92s Guide.
In which I have learned that oracle provides client setup scripts
(sslConfig_OIDclient.sh). I trying to find a test environment. I will
post the results.

According to Chris' advice I got ldaplist up and running but not id.
The Sol version I am using is 10.
NS_LDAP_SERVICE_AUTH_METHOD is added by using the  ldapclient -v mod  -
a "serviceSearchDescriptor=3D..." command

I found another very interesting thread:
http://forum.java.sun.com/thread.jspa?threadID=3D5176398&messageID=3D968213=
7

At the Moment I get the following error:

Jun 23 12:02:46 sun1 sshd[10553]: [ID 285619 auth.debug] ldap
pam_sm_authenticate(sshd-kbdint user1), flags =3D 0
Jun 23 12:02:46 sun1 sshd[10553]: [ID 647000 auth.debug] ldap
pam_sm_authenticate(sshd-kbdint user1), AUTHTOK not set
Jun 23 12:03:10 sun1 sshd[10553]: [ID 800047 auth.info] Keyboard-
interactive (PAM) userauth failed[9] while authenticating:
Authentication failed

Denis