I can't get my head around LDAP configuration under OSX (Yosemite).
The thing is that I have received the following parameters from the IT department. I have replaced fields that are internal with somestring, example and myhostname:
binddn cn=somestring,ou=connectors,dc=example,dc=com
bindpw somepassword
nss_base_passwd ou=people,dc=example,dc=com?onehost=myhostname
nss_base_shadow ou=people,dc=example,dc=com?onehost=myhostname
nss_base_group ou=group,dc=example,dc=com?onehost=myhostname
I am not sure how to connect the nss_base information with the OSX config? Also, ou=people,dc=example,dc=com is the container with users.
What I did in OSX Sys Preferences/Users & Groups/Login Options is:
- I added two Network Account Servers
- Once added, I edited them in Open Directory Utility.
- I changed LDAPv3 configuration where:
a. On one server I set LDAP Mappings to "From Server" and on second one to "One Directory"
b. Then I edited, and on security, I configured authentication with the below. This should ensure that this host first authenticates with LDAP and then executes user authentication:
- Distinguished name: cn=somestring,ou=connectors,dc=example,dc=com
- Password: somepassword c. None of the options worked
I have no idea why it does not work now. The log file does not tell anything about the unsuccessful/successful communication to LDAP, and this command lists the user details:
ldapsearch -h xxx.yyy.zzz.www -p 389 -v -D "cn=somestring,ou=connectors,dc=example,dc=com" -b "dc=example,dc=com" -w somepassword -t "(uid=username)"
Any suggestions?