[clue] Speaker for 2013-05-14.

[David L. Willson]

A couple thoughts, disqualified by the fact that I'm nobody's LDAP expert. 
- well-defined schema mods can be applied to AD by a Schema Administrator 
- FreeIPA is also a consistent, dependable LDAP implementation, and takes schema mods 
- It's almost certainly a security setting or a broken trust. 

-- 
David L. Willson 
Trainer, Engineer, Enthusiast 
RHCE Network+ A+ Linux+ LPIC-1 Ubuntu 
Mobile 720-333-LANS(5267) 

This is a good time for a r3VOLution. 

----- Original Message -----

> Anyone interested in discussing the rough edges of ldap?

> At work we have an ldap system in place for 8-9 years with locally
> generated and signed certs. This has worked flawlessly up through
> RHEL/CentOS/etc. rel 5, but on rel 6.2 and later, starttls will no
> longer accpt our certs. So, I'm looking for one of 2 solutions. 1.
> Fix the problem. 2. Switch over to using AD for authentication.
> Complicating #2 is the fact that we use a modified schema to allow
> authorizing acess for specific hosts. Without that requirement, #2
> would be no problem.

> On Mon, May 13, 2013 at 11:45 AM, David L. Anselmi <
> anselmi at anselmi.us > wrote:

> > So I have no speaker lined up for tomorrow and I won't be able to
> > be
> > there to amaze you with what I
> 
> > can talk about off the top of my head. (Amaze, bore, depends on
> > your
> > perspective I guess.)
> 

> > I'd encourage everyone to get together anyway though. Maybe someone
> > will show up with an
> 
> > interesting topic. Or just throw out questions and ideas. I'd be up
> > for that if I were able
> 
> > because someone always has something I don't know about to share.
> 

> > Thanks!
> 
> > Dave
> 

> > _______________________________________________
> 
> > clue mailing list: clue at cluedenver.org
> 
> > For information, account preferences, or to unsubscribe see:
> 
> > http://cluedenver.org/mailman/listinfo/clue
> 

> --
> Collins Richey
> If you fill your heart with regrets of yesterday and the worries
> of tomorrow, you have no today to be thankful for.
> _______________________________________________
> clue mailing list: clue at cluedenver.org
> For information, account preferences, or to unsubscribe see:
> http://cluedenver.org/mailman/listinfo/clue
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://cluedenver.org/pipermail/clue/attachments/20130513/aaaf6f51/attachment.html