Re: [Nufw-users] Pb with nuauth

[Jean-Philippe Zimmer]

Good Morning,
I send the principal configuration files. I am working
with the Centos distribution ( RedHat Entreprise).
nuauth works well with plaintext but not with libsystem.
Sincerely.
JPZ

host 192.168.5.10
base dc=.....
binddn cn=reqauth,cn=Users,dc=.....
bindpw mypass
rootbinddn cn=myrequser,cn=Users,dc=....
scope sub
timelimit 1000
bind_timelimit 1000
nss_base_passwd         ou=Comptes,dc=.....?sub
nss_base_shadow         ou=Comptes,dc=.....?sub
nss_base_group          ou=Groupes,dc=.....?sub
nss_map_objectclass posixAccount user
nss_map_objectclass shadowAccount user
nss_map_attribute uid sAMAccountName
nss_map_attribute gidNumber description
nss_map_attribute uidNumber uid
nss_map_attribute loginShell houseIdentifier
nss_map_attribute shadowLastChange pwdLastSet
nss_map_objectclass posixGroup group
nss_map_attribute primaryGroupID cn
pam_login_attribute sAMAccountName
pam_filter objectclass=User
pam_password md5
ssl no
tls_cacertdir /etc/openldap/cacerts

nuauth_client_listen_addr="0.0.0.0"
nuauth_nufw_listen_addr="127.0.0.1"
nuauth_gw_packet_port=4129
nuauth_user_packet_port=4130
nufw_gw_addr="192.168.5.1 192.168.5.250"
nufw_gw_port=4128
nuauth_prio_to_nok=1
nuauth_push_to_client=1
nuauth_do_ip_authentication=0
nuauth_packet_timeout=15
nuauth_datas_persistance=300
nuauth_auth_nego_timeout=30
nuauth_number_usercheckers=3
nuauth_number_aclcheckers=3
nuauth_number_loggers=2
nuauth_number_authcheckers=5
        
nuauth_number_ipauthcheckers=2
nuauth_user_check_module="libsystem"
nuauth_acl_check_module="libplaintext"
nuauth_acl_cache=1
nuauth_ip_authentication_module="libipauthident"
nuauth_tls_key="/etc/nufw/nuauth-key.pem"
nuauth_tls_cert="/etc/nufw/nuauth-cert.pem"
nuauth_tls_cacert="/etc/nufw/NuFW-cacert.pem"
nuauth_tls_request_cert=0
nuauth_log_users=8
nuauth_log_users_sync=1
nuauth_log_users_strict=1
nuauth_log_users_without_realm=1
nuauth_user_logs_module="syslog"
plaintext_userfile="/etc/nufw/users.nufw"
plaintext_aclfile="/etc/nufw/acls.nufw"
system_convert_username_to_uppercase=0
system_convert_username_to_lowercase=0
system_pam_module_not_threadsafe=1
ldap_server_addr="192.168.5.10"
ldap_server_port=389
ldap_bind_dn="cn=myrequser,cn=Users,dc=...."
ldap_bind_password=mypass
ldap_filter_type=0
ldap_request_timeout=4
ldap_basedn="dc=....."
ldap_acls_base_dn="ou=acls,dc=....."
ldap_users_base_dn="ou=Comptes,dc=....."
mysql_server_addr="127.0.0.1"
mysql_server_port=3306
mysql_user="myuser"
mysql_passwd="secret"
mysql_db_name="nufw"
mysql_table_name="ulog"
mysql_request_timeout=5
mysql_use_ssl=0 
mysql_ssl_keyfile="/etc/nufw/ssl/mysql.key"
mysql_ssl_certfile="/etc/nufw/ssl/mysql.cert"
mysql_ssl_ca="/etc/nufw/ssl/mysql.ca"
mysql_ssl_capath="/etc/nufw/ssl/mysql.cas/"
mysql_ssl_cipher="ALL:!ADH:+RC4:@STRENGTH"
pgsql_server_addr="127.0.0.1"
pgsql_server_port=5432
pgsql_user="myuser"
pgsql_passwd="secret"
pgsql_ssl="prefer"
pgsql_db_name="nufw"
pgsql_table_name="ulog"
pgsql_request_timeout=5

Jean-Philippe.Zimmer.vcf
Description: Vcard