I have a RHEL5 Server and some dual-boot XP/CentOS 5 systems (Linux
systems all 64-bit). All Linux is out-of-box, with all packages, minus
international languages, installed. No patching has been done.
On the server, I selected system-config-authentication and enabled
LDAP for User Information, Kerberos, LDAP, and SMB for Authentication, and
Shadow and MD5 Passwords, along with Authenticate system accounts by
network services for Options.
All machines are on an isolated LAN, with no DNS server (I could always
enable and configure DNS on the server if it helps the cause).
I also don't know if it matters, but the server is running the
virtualization kernel (xen), but the clients are not.
I only have LDAP service enabled on the server. Kerberos services are
enabled on both client and server.
I tweaked the LDAP and Kerberos settings using the CentOS/RH GUIs, and
have the clients looking to the RH box for authentication.
I also have the firewall enabled, but am letting kerberos and ldap ports
through as tcp.
During a login test, /var/log/messages on the client showed:
lin1 gdm[pid]: nss_ldap: failed to bind to LDAP server
ldap://192.168.1.100: Can't contact LDAP server
lin1 gdm[pid]: nss_ldap: reconnecting to LDAP server (sleeping 32
seconds)...
lin1 dbus-daemon: nss_ldap: failed to bind to LDAP server
ldap://192.168.1.100: Can't contact LDAP server
lin1 dbus-daemon: dss_ldap: failed to bind to LDAP server...
lin1 xfs: ...
During boot time, Starting system message bus: [long pause] then error
messages about DB_CONFIG and /var/lib/ldap, the usual cannot find
DB_CONFIG in /var/lib/ldap, showing the example.com instead of my
customized ldap settings, etc.
I've checked openldap.org, but I figured if the configuration appears to
be simplified via an included GUI, I shouldn't have much trouble gettigns
things going.
Anyway, what am I missing? Anything special RH 5 is doing compared to
the openldap docs?
Both servers have been rebooted since adding the respective ports in the
firewall.
The goal is a to permit my test user, created on the server, to sit at a
workstation, boot into either Linux or XP, and get their home directory.
Ideally, the server only needs to consist of one account for them, which
they get upon login on the workstation.
I want to highly restrict _any_ third-party tools/apps/etc. I will be
happy to take suggestions and leads, but I want to try and rely on what RH
has provided.
Thanks for any insight/help.
Scott