Anonymous

Equipment/Turing: Difference between revisions

From London Hackspace Wiki
SSL fixed and we just don't bother with sambaLMPassword
(mostly self service now)
(SSL fixed and we just don't bother with sambaLMPassword)
Line 35: Line 35:


It sort of works.
It sort of works.
on [[denning]] we get these errors in the logs:
<nowiki>
Sep 11 21:53:33 denning slapd[786]: slap_client_connect: URI=ldaps://turing.hackspace.org.uk DN="cn=admin,dc=london,dc=hackspace,dc=org,dc=uk" ldap_sasl_bind_s failed (-1)
Sep 11 21:53:33 denning slapd[786]: do_syncrepl: rid=000 rc -1 retrying
Sep 11 22:37:37 denning slapd[786]: do_syncrep2: rid=000 (-1) Can't contact LDAP server
Sep 11 22:37:37 denning slapd[786]: do_syncrepl: rid=000 rc -1 retrying
Sep 11 22:50:27 denning slapd[786]: do_syncrep2: rid=000 (-1) Can't contact LDAP server
Sep 11 22:50:27 denning slapd[786]: do_syncrepl: rid=000 rc -1 retrying
</nowiki>
They appear to be harmless.


Turing has iptables rules that allow access to the LDAP server from denning.
Turing has iptables rules that allow access to the LDAP server from denning.
Line 63: Line 50:
* the sambaNTPassword attribute would be for a different password from the userPassword  
* the sambaNTPassword attribute would be for a different password from the userPassword  


Currently we're using '!' for the sambaLMPassword attribute value.
Currently we are not adding sambaLMPassword attribute's to the database.


=== cheat sheet at the moment ===
=== cheat sheet at the moment ===