Re: LDAP и SUSE

Здравствуйте,

Subscriber wrote:
> Пытаемся настроить связку Communigate LDAP и SUSE LDAP Client. Конечная
> цель - дать пользователям возможность заходить на ftp-сервер под своими
> ldap-аккаунтами.
>
> В настоящее время застряли на следующем: ftp-сервер ругается на
> некорректное имя пользователя (error 530), в логах Communigate в это
> время видно следующее:
> --------------------
> 17:34:29.911 4 LDAP-072962([172.16.0.81]) searching(sub) 'cn=rspu.ryazan.ru'
> 17:34:29.911 4 LDAP-072962([172.16.0.81]) searching where
> (&(objectclass=posixAccount)(uid=foboss))

objectclass=posixAccount в CGPro нет.

> 17:34:29.911 4 LDAP-072962([172.16.0.81]) searching for (uid
> userPassword uidNumber...)
> 17:34:29.922 2 LDAP-072962([172.16.0.81]) search finished
> 17:34:29.927 4 LDAP-072992([172.16.0.81]) got connection on
> [213.137.238.132]:389(cgp.rsu.edu.ru) from [172.16.0.81]:53998
> 17:34:29.927 4 LDAP-072992([172.16.0.81]) STARTTLS request received
> 17:34:29.933 4 LDAP-072992([172.16.0.81]) SSLv2 client hello as TLSv1:
> method=DES3_SHA, session=6139 < 00 00 17 FB 46 D2 D2 E5 84 2E E5 A7 06
> C3 17 C1 B6 C9 E3 C8 A7 E6 02 86 9B BA 0D 6D EA D9 71 ED>
> 17:34:29.933 4 LDAP-072992([172.16.0.81]) TLS handshake: sending
> 'server_hello'
> 17:34:29.933 4 LDAP-072992([172.16.0.81]) TLS handshake: sending the
> certificate
> 17:34:29.933 4 LDAP-072992([172.16.0.81]) TLS handshake: sending
> 'hello_done'
> 17:34:29.975 4 LDAP-072992([172.16.0.81]) TLS client key exchange processed
> 17:34:29.975 4 LDAP-072992([172.16.0.81]) security initiated
> 17:34:29.975 4 LDAP-072992([172.16.0.81]) TLS 'change cipher' processed
> 17:34:29.975 4 LDAP-072992([172.16.0.81]) TLS 'change cipher' sending
> 17:34:29.975 4 LDAP-072992([172.16.0.81]) TLS 'finish handshake' processed
> 17:34:29.975 4 LDAP-072992([172.16.0.81]) TLS handshake: sending 'finished'
> 17:34:29.975 4 LDAP-072992([172.16.0.81]) TLS(DES3_SHA) connection
> accepted for 'cgp.rsu.edu.ru', session 6139
> 17:34:30.012 4 LDAP-072992([172.16.0.81]) BINDing as ''
> 17:34:30.012 4 LDAP-072992([172.16.0.81]) Logged in as anyone. authType=0
> 17:34:30.013 4 LDAP-072992([172.16.0.81]) searching(sub) 'cn=rspu.ryazan.ru'
> 17:34:30.013 4 LDAP-072992([172.16.0.81]) searching where
> (&(objectclass=CommuniGateAccount)(uid=foboss))
> 17:34:30.013 4 LDAP-072992([172.16.0.81]) searching for ALL
> 17:34:30.028 4 LDAP-072992([172.16.0.81]) 'uid=foboss,cn=rspu.ryazan.ru'
> retrieved
> 17:34:30.028 2 LDAP-072992([172.16.0.81]) search finished
> 17:34:30.068 4 LDAP-072992([172.16.0.81]) BINDing as 'foboss@rspu.ryazan.ru'
> 17:34:30.068 2 LDAP-072992([172.16.0.81]) 'foboss@rspu.ryazan.ru'
> connected from [172.16.0.81]:53998
> 17:34:30.068 4 LDAP-072992([172.16.0.81]) Logged in as
> uid=foboss,cn=rspu.ryazan.ru. authType=0
> 17:34:30.069 2 LDAP-072992([172.16.0.81]) 'foboss@rspu.ryazan.ru'
> disconnected ([172.16.0.81]:53998)
> 17:34:30.069 4 LDAP-072992([172.16.0.81]) BINDing as ''
> 17:34:30.069 4 LDAP-072992([172.16.0.81]) Logged in as anyone. authType=0
> 17:34:30.070 4 LDAP-072992([172.16.0.81]) disconnecting
> --------------------
>
> Через OpenLDAP все работает нормально. Снимите с ручника, подскажите где
> подкрутить...

-- 
Best regards,
Maria Gorbatova