I need help to configure NethServer to use external OpenLDAP server

davidep · November 30, 2016, 2:28pm

Could you run a test? Now BaseDN, UserDN and GroupDN props should be honored!

Please update the packages from nethserver-testing:

yum --enablerepo=nethserver-testing update nethserver-sssd

Also the following packages have been updated in testing. You can update them, too:

nethserver-nextcloud
nethserver-ejabberd
nethserver-roundcubemail
nethserver-directory

Enable LDAPs protocol on Active Directory clients

opened 01:57PM - 23 Nov 16 UTC

closed 05:18PM - 15 Dec 16 UTC

DavidePrincipi

verified

Recent Active Directory admin practice allows LDAP simple binds over SSL-protect…ed connections only. Our configuration uses clear-text protocol. This is not a problem if the Samba Active Directory provider is local but has two drawbacks: * With a remote Microsoft AD provider, apps like SOGo, NextCloud that don't rely on PAM can't authenticate with the default configuration from SSSD. * Machine credentials are sent in clear text. We can enable ldaps against ns7 Samba Active Directory, because Samba generates an SSL certificate automatically. On Microsoft environments some additional configuration steps are required. References: 1. https://blogs.technet.microsoft.com/russellt/2016/01/13/identifying-clear-text-ldap-binds-to-your-dcs/ 2. https://blogs.technet.microsoft.com/russellt/2016/06/03/custom-ldap-certs/ This is the list of core packages that require the LDAPs setup: - [x] roundcubemail (addressbook) - [x] nextcloud - [x] ejabberd - [x] ~~webtop4~~ cantfix - [x] nsdc (restore Samba defaults)