« Parliament on Spam | Main | Time to get serious about training! (Rock Chute? Check.) »
May 17, 2003
Grrr!! Computer make Adam MAAD!!
For work, I'm setting up this uber-server that will have mail, webmail, mailing lists, dns, our public websites, some databases, our intranet, etc... Given all these applications, I thought it would be easier to centralize user management with LDAP. I spent 4 hours wrestling with why everything but pam_ldap wouldn't work. Mind you, getting LDAP to work with TLS and SSL was tough, but no where near as painful as trying to make the system use LDAP for its users, passwords and groups.I knew everything was installed ok because all the other LDAP applications worked. I just kept editing my /etc/openldap/ldap.conf file with different permutations to try and figure out what it was. Early on I found that RedHat comes with a GUI tool to edit that file, but since it doesn't give you many options I didn't bother with it. 5 hours later, I decided to look at it again. To my surprise it hadn't picked up my new values. Bells started going off. I looked around and sure enough there was an /etc/ldap.conf!!!! I had been editing the wrong file for 5 hours! You may think that sounds dumb, but in my search for answers I consulted every guide, HOWTO, FAQ, and forum I could find. ALL of them talked about the ldap.conf in /etc/openldap/. Thank you RedHat. Thank you for arbitrarily moving the file and not telling anyone or documenting it. I'll be sure to return the favor.
Still, I enjoy doing this type of work, especially when I can begin right, ensuring easier management down the road.
Posted by wonko at May 17, 2003 10:20 PM
Trackback Pings
TrackBack URL for this entry:
http://www.wayfargone.com/cgi-bin/mt-tb.cgi/34
Comments
Just think, you have another 3 hours worth of updating all of those Readme,HOWTO,FAQ, and Forums with the RIGHT procedures!
Posted by: Obigabu at May 18, 2003 11:03 PM
I'm just another great fan of your blog.
Posted by: zipcode at October 12, 2003 05:27 AM
Post a comment
Thanks for signing in, . Now you can comment. (sign out)
(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)