Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Install LDAP has a number of issues and doesn't seem to be working as described #86

Open
toddobryan opened this issue Nov 25, 2024 · 0 comments

Comments

@toddobryan
Copy link

toddobryan commented Nov 25, 2024

I've attached PR#87 with these issues fixed, but if it's better to open separate issues for each one, I can do that instead.

  1. Throughout the page, the bash commands and their responses are not separated, meaning that when a reader uses the copy icon, not just the command the user should type is copied, but that command plus its output. The examples also include the $ prompt, contrary to the style guide. I'm actually not sure which syntax highlighting should be used for the shell responses, but I've gone with console. Let me know if there's a better choice.
  2. The second ldapsearch command does not produce what the page says it should. When I type ldapsearch -x -LLL -H ldap:/// -b dc=example,dc=com dn I get just dn: dc=example,dc=com without the entry for cn=admin. I'm not sure what the right command should be or if this is correct, since I'm trying to follow the how-to to set up LDAP, but either the command or the output should be fixed. The PR has a note about this that should get fixed before merge.
  3. The more complicated filter (&(objectClass=posixGroup)(memberUid=john)) doesn't return anything. Maybe picking a query that the user could try would be more helpful. Again, there's a note about this that should be fixed before merge.
  4. After changing John's password, it would probably be helpful to show that you can use John as the binding DN to query the database. I've added a small section to do this.

There are a couple of other small issues that the PR doesn't address, but could.

  1. It's not clear that there is a difference between the root password and the admin password until we have to change both of them late in the how-to. If there is some way to authenticate with the root password directly, it would be good to show that and call it out. If you can only use sudo and -Y EXTERNAL, then should the how-to even mention slappasswd?
  2. Setting up my server to follow along was quite a pain. I wasn't getting the same results as the how-to said I should, so I tried to exactly mimic the ldap01.example.com set-up on my own machine. Instructions something like "If you want to follow along exactly as this how-to does, do the following: (and then the modifications to /etc/hosts and /etc/hostname that you need to make)." would be very helpful. In addition, there is a host at ldap01.example.com, so if you don't get those settings right, it will try to connect to that host using the DNS entry.

Document: how-to/openldap/install-openldap.md

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant