Solved

HOw to modify Ldap Record

Posted on 2008-10-17
10
1,080 Views
Last Modified: 2013-12-19
Hi, i am new in LDAP so may be i used wrong header for the questions.
I followed this http://www.grennan.com/ldap-HOWTO.html to configure Ldap server. and its works
from client pc, I am using user from server, i can connect .
but problem is, its saying :
NO direcotry /home/user1

(1)
how can i edit the existing one and add home directory for user
(2) One thing i realized, if i change the password for user1, and if i try to access with that new password, it does not work, i have to use the old password what i have used at time of migrate_password.pl

please help me to solve this..
if you think 2 questions is 2 diffrent issue then i will open another quesition for the password one.
0
Comment
Question by:fosiul01
  • 6
  • 3
10 Comments
 
LVL 20

Accepted Solution

by:
edster9999 earned 250 total points
ID: 22741429
You can edit with

LDAP Browser/Editor (requires Java version 1.2.2 or greater.)
    http://www-unix.mcs.anl.gov/~gawor/ldap

(text from your link)

If you have already added the users then check the ldif file was correctly made by the tool
0
 
LVL 29

Author Comment

by:fosiul01
ID: 22741488
the server i got for ldap server, this does not have any GUI,
i am working on runlevel 3, i just got command line
so is there any command to do this ??
0
 
LVL 20

Expert Comment

by:edster9999
ID: 22741841
$ ldapmodify

dn: uid=donald.duck,ou=People,dc=example,dc=com
changetype:modify
replace:homeDirectory
homeDirectory:/home/donaldduck
^Z

0
 
LVL 29

Author Comment

by:fosiul01
ID: 22742025
omm hi,
i am typing ldapmodify
then when i am presing enter
its asking for password,
after pressing password,
its saying
ldap_sasl_interactive_bind_s: Internal (implementation specific) error (80)
        additional info: SASL(-13): user not found: no secret in database
0
 
LVL 29

Author Comment

by:fosiul01
ID: 22742470
check this commmand

[root@localhost ~]# ldapsearch -x -b 'dc=mydomain,dc=com' 'objectclass=*' | grep yusuf
# yusuf, People, mydomain.com
dn: uid=yusuf,ou=People,dc=mydomain,dc=com
uid: yusuf
cn: yusuf
homeDirectory: /home/yusuf
# yusuf, Group, mydomain.com
dn: cn=yusuf,ou=Group,dc=mydomain,dc=com
cn: yusuf

according to this, its saying /home/yusuf is there,
so home directory is there, then why its saying its does not appear to exist ??
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 3

Assisted Solution

by:ricardoelena
ricardoelena earned 250 total points
ID: 22742486
try reseting the password
in the /etc/slapd.conf file add the rootdn and rootpw attributes, for example:
rootdn "cn=admin,dc=nodomain"
rootpw "changeme"
restart slapd service
execute something like these
ldappasswd -x -D cn=admin,dc=nodomain -w changeme
removed the rootdb and rootpw entrys from the /etc/slapd.conf file and restart again
 
0
 
LVL 29

Author Comment

by:fosiul01
ID: 22755881
HI sorry for late reply
but my first problem is, ldap user unable to get the home direcotry

and from my previous post you can see, in ldap server, home directory is defined
then why its unable to get the direcotry ??
0
 
LVL 20

Expert Comment

by:edster9999
ID: 22756012
What have you got in the file
/etc/nsswitch.conf

It should be something like :

 passwd:         files ldap
 group:          files ldap
 shadow:         files ldap

This means for each one use the local file first and then the ldap server after.  You then need to remove the local users you have moved over or it will use the local references.  Maybe backup your files before starting this step :)

You can swap the ldap / file bit round to use ldap first but you should not remove the 'file' bit in case you loose contact with the ldap server.  You should keep 'file' and make sure you do have a local root or admin type user to take control back if needed.
0
 
LVL 29

Author Comment

by:fosiul01
ID: 22756034
HI, currently /etc/nsswitch.conf  is like this as you said

 passwd:         files ldap
 group:          files ldap
 shadow:         files ldap

so you said, i should write like this

 passwd:          ldap
 group:            ldap
 shadow:          ldap
0
 
LVL 29

Author Comment

by:fosiul01
ID: 22756378
HI,
i have solve the problem of home direcotry sharing.
i had to configure NFS server and had to share /home direcotry with that,
now its fine.

http://fedoranews.org/mediawiki/index.php/How_to_setup_and_maintain_OpenLDAP_server_for_your_network#Testing


now only answer i need, how to change pasword.
let me try what ricardoelena said
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

Suggested Solutions

The purpose of this article is to demonstrate how we can use conditional statements using Python.
Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now