Re: [Phpgroupware-users] Understanding LDAP Authentication

[Marco Gaiarin]

Mandi! Des Dougan
  In chel di` si favelave...

> Marco,

I?! I don't remember... ;)))


> >I'm using IMAP authentication, and i've condifured IMAP server to use
> >PAM auth. O;-)

> Could you elaborate on how you did this? As I noted in a previous message, 
> when setting up pGW to use LDAP, it seems to only see one existing user 
> account in the LDAP data store, rather than all there. I've added the two 
> schema files to the openldap/schema directory on my server, and amended the 
> slapd.conf file as indicated in the README, but the pGW LDAP implementation 
> still appears to have problems (I'm using.001).

I've 2 installation of phpgw under testing.

One, at work, user LDAP for both contacts and users, but for auth i'm
using IMAP (via pam) because we have a NT domain with a NT 4.0 box as a
PDC.
Pratically i've the intention to use phpgw to move account from NT box
to LDAP, moving the centralized account from the NT domain to the LDAP
server.

Another, for hobby, will serve a local catholic association (Azione
Cattolica), and have LDAP for account but DB for contacts.


In the two cases i've found the same problem:

+ after the first LDAP setup in phpgw setup III (creating or importing,
  doesn't mind), the first user and group got UID='' (or NULL), so user
  ``exist but doesn't work''.
  After this all went well, but this user have to be removed by hand
  (dump & restore of ldif file, ...)

+ phpgw save little or no data apart users and groups itself into the
  LDAP database, so it is not really usable to manage account.
  EG, user on creation got GID=UID (and tipically GID doesn't exist ;),
  or if i put a user in some groups, this info are saved in the DB (i
  suppose, phpgw record it ;) and not in LDAP.


For the rest... it works like a charm.

-- 
dott. Marco Gaiarin                                 GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''                http://www.sv.lnf.it/
  Polo FVG  -  Via della Bontà, 7 - 33078  -  San Vito al Tagliamento (PN)
  gaio(at)sv.lnf.it             tel +39-0434-842711    fax +39-0434-842797

        Difendiamo la Legge 185/90 dall'assalto della lobby delle armi.
                Blocchiamo subito il disegno di legge n. 1927.
                          http://web.vita.it/185/
                   http://www.retelilliput.org/petizioni/
                        http://www.banchearmate.it/