I configured the LDAP access on the Mac, and it can indeed see the users and groups from the openldap server. But when I try to login after clicking "Other...", the login window shakes around, and nothing happens.
Also, please realize that OS X is aware of some SASL mechanisms, although it is (at least historically) sadly unconfigurable on this matter. As such, if your installation expects simple binds, please see
http://www.openldap.org/lists/openldap-software/200602/msg00210.html
It's a bit late to reply to this, but it may be useful for others.
Indeed, as Aaron suggested, I had to disable SASL. I did it in the server config ("cn=config") by setting "olcSaslSecProps" to "noanonymous,noplain,noactive,nodict".
Then there was a different problem, easy to solve once found. On the Mac, under Accounts: Login Options, "Allow network users to log in ...", behind the Options button, the selection was "Only these network users:", with an empty list!! Really stupid. Setting it to "All network users" fixed the problem.
Thanks for your help.
MI
Mac OS X ships with OpenLDAP's command line tools. You may wish to verify that ldapwhoami(1) and similar OpenLDAP programs work first, prior to introducing additional software like DSLDAPv3.
Such testing may well reveal a need for configuration of OpenLDAP's ldap.conf(5).
Also, please realize that OS X is aware of some SASL mechanisms, although it is (at least historically) sadly unconfigurable on this matter. As such, if your installation expects simple binds, please see
http://www.openldap.org/lists/openldap-software/200602/msg00210.html
On Fri, 27 May 2011, Mi wrote:
We added a Mac to our network, and I would like the network users to be able to login with their existing credentials on our Debian openLDAP server.
I configured the LDAP access on the Mac, and it can indeed see the users and groups from the openldap server. But when I try to login after clicking "Other...", the login window shakes around, and nothing happens.
The server logs show the connection from the Mac and it's searches ( http://pastebin.com/MB2JswAa).
(Logging is configured with Parse, Stats, Stats2, Sync. Is there something else I should add to logging that may be useful?)
On the Mac, I didn't find anything looking helpful in the logs (http://pastebin.com/yRreFQrJ), but maybe I don't know what to look for.
I found many instructions on the Internet which concentrate on mounting user homes from the server over NFS. This is NOT what we want. Users would be authenticated with openldap, but have their homes locally on the Mac, like normal users.
I also saw many mentions of adding the apple schema, and I have done that. But maybe I now need to actually use parts of that schema in the user records?
Thanks for any help...