[Solved] Slapd broken after latest update

davidep · November 11, 2016, 5:04pm

What are the other services?

The Nextcloud configuration should be fixed here

NethServer/nethserver-nextcloud/blob/master/root/etc/e-smith/events/actions/nethserver-nextcloud-occ-conf#L45


      
          
          sub list_system_groups
          {
              my ($systemName, $domainName) = split(/\./, Sys::Hostname::hostname(), 2);
              my $timeout = 10;
          
              my $ldap = NethServer::LdapClient::connect($sssd, 'timeout' => $timeout);
          
              if( ! $ldap) {
                  return;
              }
          
              NethServer::LdapClient::paged_search($sssd, $ldap,
                  'base' => $sssd->groupDN(),
                  'scope' => 'subtree',
                  'deref' => 'never',
                  'timelimit' => $timeout,
                  'filter' => $config{'filter'},
                  'callback' => \&_cb_group_push
              );

The line

ldapAgentName cn=libuser,dc=directory,dc=nh";

Should be

ldapAgentName ".$sssd->bindDN();

/cc @alep @dev_team

This is a regression due to

github.com/NethServer/dev

LDAP account with read-only privileges

opened 09:43AM - 08 Nov 16 UTC

closed 10:32AM - 14 Nov 16 UTC

DavidePrincipi

verified

One of the purposes of ``NethServer::SSSD`` Perl module is providing an API for …other NethServer modules to access the LDAP server with the right credentials. The LDAP server can be an Active Directory (use machine account credentials), builtin LDAP (``libuser`` credentials), other LDAP (read credentials from DB props). ``libuser`` has full read/write access to the LDAP tree. Instead, we must provide a restricted account credentials with read-only access to the LDAP tree.