[Fedora-directory-users] Apple OS X 10.5 question

[Jonathan Barber]

On Wed, Feb 27, 2008 at 04:42:12PM -1000, John Call wrote:
> Aloha list,
> 
> My university has been authenticating Mac OS X 10.4 clients to FDS
> 1.04 for about a year now.  Things have been working great, as long as
> we keep an eye on the external SASL mechanisms.  However, now that our
> staff is deploying the new OS X 10.5 things aren't working.  To the
> best of our knowledge we have maintained the same client LDAP
> configuration from 10.4 to 10.5, but the Apple clients refuse to
> authenticate.  Has anybody else experienced this?

Are you doing SSL to the ldap? If so, check the clientside SSL
verification. I'm not big on the different Mac OS X versions, so can't
say when it occured, but for one of the revisions we did see the default
openldap SSL verification change from "never" to "demand" on the clients.  

I don't think we found a GUI widget to config this behaviour, but you
can via /etc/openldap/ldap.conf like linux.

> Mahalo (thanks),
> John Call
> 
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

-- 
Jonathan Barber
High Performance Computing Analyst
Tel. +44 (0) 1382 386389