Hi All,

While trying to setup login_ldap, i stumbled on a somewhat misleading phrase in the manpage:

x-ldap-binddn  DN used by login_ldap to bind to the ldap server.
Can be "" (NULL) for anonymous bind.

x-ldap-bindpw  Password used by login_ldap to bind to the ldap server.
Can be "" (NULL) for anonymous bind.

This seems to suggest that you can put

        :x-ldap-binddn="":\

into your /etc/login.conf if you want to bind anonymously. This does not work and login is rejected without a proper debug message.
The entry *must* read:

        :x-ldap-binddn=:\

(without quotes)

Since this took me a few hours of debugging, i thought i should let you all know.

Regards,

Heinrich Rebehn

University of Bremen
Physics / Electrical and Electronics Engineering
- Department of Telecommunications -

Phone : +49/421/218-4664
Fax   :            -3341

Reply via email to