Help w/ LDAP

[xentek dev]

hi all,

I've recently set up a Linux box in order to expand my knowledge on the
subject, as well as run a few dedicated services that i see being useful
for my home network.

i choose fedora core 2, as it was the next evolution of red hat 9 (many
of the web servers i host on are red hat 9).

i was at first impressed that it seemed to include packages for all of
the things i was looking at accomplishing:

samba
apache
php
mysql
ldap
subversion

Thinking these packages would be ready to go out of the box, has me in a
bit of a quandary, as many seem to take much more to get going.


Today i was successful in getting apache and subversion running. Apache
ended up being installed, i just need to get it to autostart as a
service on boot-up.

Subversion took a bit of work, but was able to piece it together using
the RPMs linked to on their server.

However, I have still yet to get php working with apache. but i will
save that for another day.

I am interested in getting LDAP set up. I would like to consolidate my
address book, for both my windows and linux clients into an LDAP
directory. However, I am a bit lost at getting it installed / configured
/ and running. I have found openldap directories scatterd about my
system... and when reviewing the documentation there was a mention of
adding config options to a sldap.conf file. only l file similiar was
found and that was ldap.conf

Any help on getting openldap working on my fedora core 2 system would be
much appreciated.

This is what has me in a bit of a quandary... so far the things that the
o/s install said got installed with it are either not fully installed or
configured. I understand that it is up to me to get it configured, and
all of that, however, when doing a which or find for the actual program,
nothing is returned. even broader searches of the system find no mention
of the files even existing on my system (case in point... when looking
for the subversion install... searches for subversion, svn, or svnadmin
pulled back nothing... which had me install it from the RPMs linked to
from the subversion site).

I am new to Linux, and am willing to learn / teach myself. However, i'm
left a bit confused by having it tell me that these things have been
installed for me, yet not actually finding evidence of such.

Well, my samba book just arrived from amazon, so i'm going to pour
myself into that tonight and see what I come up with. My other use for
LDAP was to combine it with samba, so i'd like to get ldap up and
running first.

thanks in advance for your input, answers, and links to resources. i
appreciate it.


-- 

- eric marden
- http://xentek.net/

[Pedro Fernandes Macedo]

xentek development wrote:

> Today i was successful in getting apache and subversion running.
> Apache
> ended up being installed, i just need to get it to autostart as a
> service on boot-up.
>
>   
>  
go to system-config-services and enable httpd (or use the good and old 
chkconfig)

> However, I have still yet to get php working with apache. but i will
> save that for another day.
>
>   
>  
That's weird... I have apache running here and the only things I had to 
change were related to the directories I wanted use as base directories...
PHP was installed and is working (at least php_info() returns the info page)

> I am interested in getting LDAP set up. I would like to consolidate
> my
> address book, for both my windows and linux clients into an LDAP
> directory. However, I am a bit lost at getting it installed / configured
> / and running. I have found openldap directories scatterd about my
> system... and when reviewing the documentation there was a mention of
> adding config options to a sldap.conf file. only l file similiar was
> found and that was ldap.conf
>
> Any help on getting openldap working on my fedora core 2 system would be
> much appreciated.
>   
>  
Well, ldap is a difficult subject.. I only started to understand it a 
bit when I read the ldap book published by O"reilly...
If you have the change to get this book , do it.. it's focused on 
openldap and gives details on how to configure not only authentication , 
but also mail , web , ftp and radius with ldap.

> This is what has me in a bit of a quandary... so far the things that
> the
> o/s install said got installed with it are either not fully installed or
> configured. I understand that it is up to me to get it configured, and
> all of that, however, when doing a which or find for the actual program,
> nothing is returned. even broader searches of the system find no mention
> of the files even existing on my system (case in point... when looking
> for the subversion install... searches for subversion, svn, or svnadmin
> pulled back nothing... which had me install it from the RPMs linked to
> from the subversion site).
>
>   
>  
Is this a clean install or a upgrade? I never got a upgrade working 
perfectly....


--
Pedro Macedo

[xentek dev]

>  >However, I have still yet to get php working with apache. but i
> will
>  >save that for another day. 
>  That's weird... I have apache running here and the only things I
> had to 
>  change were related to the directories I wanted use as base directories...
>  PHP was installed and is working (at least php_info() returns the info page) 
hmm, i'll have to take another look at it... my phpinfo() returned
nothing.

>  >I am interested in getting LDAP set up. I would like to
> consolidate my
>  >address book, for both my windows and linux clients into an LDAP
>  >directory. However, I am a bit lost at getting it installed / configured
>  >/ and running. I have found openldap directories scatterd about my
>  >system... and when reviewing the documentation there was a mention of
>  >adding config options to a sldap.conf file. only l file similiar was
>  >found and that was ldap.conf
>  >
>  >Any help on getting openldap working on my fedora core 2 system would be
>  >much appreciated.
>  >  
>  >
>  Well, ldap is a difficult subject.. I only started to understand it a 
>  bit when I read the ldap book published by O"reilly...
>  If you have the change to get this book , do it.. it's focused on 
>  openldap and gives details on how to configure not only authentication , 
>  but also mail , web , ftp and radius with ldap. 
yeah, i recently invested in two linux books and one on samba. i wanted
to get the ldap book from O'reilly but the funds weren't there to
support it. I will have to pick it up in the next week or so.

>  Is this a clean install or a upgrade? I never got a upgrade working 
>  perfectly.... 
clean install.

-- 

- eric marden
- http://xentek.net/

[Ben Steeves]

On Wed, 30 Jun 2004 19:32:03 -0400, xentek dev <linux(a)xentek.net&gt; wrote:

>  > >I am interested in getting LDAP set up. I would like to
> consolidate my
>  > >address book, for both my windows and linux clients into an LDAP
>  > >directory. However, I am a bit lost at getting it installed / configured
>  > >/ and running. I have found openldap directories scatterd about my
>  > >system... and when reviewing the documentation there was a mention of
>  > >adding config options to a sldap.conf file. only l file similiar was
>  > >found and that was ldap.conf 
I second the recommendation of the O'Rielly LDAP book.  It's a good
primer on LDAP in general and OpenLDAP specifically.  There's also
some good documentation on setting up OpenLDAP available on-line -- do
a Google search and you'll find lots of informative stuff.

-- 
Ben Steeves
            ben.steeves(a)gmail.com
            GPG ID: 0xB3EBF1D9
            http://www.metacon.ca/

[Ow Mun Heng]

On Wed, 2004-06-30 at 16:32, xentek dev wrote:
>  > >However, I have still yet to get php working with apache.
> but i will
>  > >save that for another day.
>  
>  > That's weird... I have apache running here and the only things I had to 
>  > change were related to the directories I wanted use as base directories...
>  > PHP was installed and is working (at least php_info() returns the info page)
>  
>  hmm, i'll have to take another look at it... my phpinfo() returned
>  nothing. 
Hmm.. worked fine on my box too. Fresh install of it. 

Are you sure httpd is up?

ps fax | grep http | grep -v grep 

gives you output??

maybe you have to check on your settings in 

/etc/httpd/conf  
(esp the fact that you've got the phpxx??.so loaded up. I can't remember
what the actual name is)

[xentek dev]

>  Hmm.. worked fine on my box too. Fresh install of it. 
>  
>  Are you sure httpd is up?
>  
>  ps fax | grep http | grep -v grep 
>  
>  gives you output?? 
yes

>  maybe you have to check on your settings in 
>  
>  /etc/httpd/conf   
i will check the conf file again

what's weird is that i can get to my subversion repos via apache (i.e.
http://127.0.1.1/repos/) but when going to a simple index.html file
(only text inside is hello world.) 

I get:

Forbidden
You don't have permission to access /index.html on this server.

I'm gonna double check my conf files, as i did find the php bin, so it
must be there... but not sure what this forbidden error is coming from.
the first time i got it, i chmod 777 the doc root (to just try to give
it 'all' the 'permissions' i could think of to get over the forbidden
error.

thanks.
 

- eric marden
- http://xentek.net/

[Ow Mun Heng]

On Thu, 2004-07-01 at 16:22, xentek dev wrote:
>  > Hmm.. worked fine on my box too. Fresh install of it. 
>  > 
>  > Are you sure httpd is up?
>  > 
>  > ps fax | grep http | grep -v grep 
>  > 
>  > gives you output??
>  
>  yes
>  
>  > maybe you have to check on your settings in 
>  > 
>  > /etc/httpd/conf  
>  
>  i will check the conf file again
>  
>  what's weird is that i can get to my subversion repos via apache (i.e.
>  http://127.0.1.1/repos/) but when going to a simple index.html file
>  (only text inside is hello world.)  
So ... in your http root dir , you have the
file called index.html which
the content is only "Hello world?"

Can you try deleting that file? By default, if you didn't have any
indec.html/php/htm it will come out with a "test page" of sorts.

Then you know it's working.


>  I get:
>  
>  Forbidden
>  You don't have permission to access /index.html on this server. 
The thing here is, maybe it's because you've can only view index.htm or
index.php (?) not sure.

>  
>  I'm gonna double check my conf files, as i did find the php bin, so it
>  must be there... but not sure what this forbidden error is coming from.
>  the first time i got it, i chmod 777 the doc root (to just try to give
>  it 'all' the 'permissions' i could think of to get over the forbidden
>  error. 
Actually, what you should be doing is checking your logs..

Look here

sudo less /var/log/httpd/access_log or 
                                 /error_log

And we'll go from there.

[Nigel Wade]

xentek development wrote:
[snip]
>  I am interested in getting LDAP set up. I would like to consolidate
> my
>  address book, for both my windows and linux clients into an LDAP
>  directory. However, I am a bit lost at getting it installed / configured
>  / and running. I have found openldap directories scatterd about my
>  system... and when reviewing the documentation there was a mention of
>  adding config options to a sldap.conf file. only l file similiar was
>  found and that was ldap.conf
>   
If you don't have slapd and slapd.conf then you probably don't have the 
openldap-servers package installed. slapd.conf should install to 
/etc/openldap. This package also contains the standard LDAP schema.

openldap is split into different packages on FC1, it's probably the same on 
FC2. There's the core package, openldap (for the basic functionality), the 
LDAP clients package openldap-clients (ldapsearch, ldapmodify etc. for 
performing manual lookups and modifications) and the LDAP server package 
openldap-servers (for servers only).

-- 
Nigel Wade, System Administrator, Space Plasma Physics Group,
             University of Leicester, Leicester, LE1 7RH, UK
E-mail :    nmw(a)ion.le.ac.uk
Phone :     [phone], Fax : [phone]