I emptied my ldap database to start fresh. I created a base of dc=ibg,dc=com and loaded 2 hostname/IPs. I configured my client to use ldap for hosts in /etc/nsswitch.conf. Its using ldap for host lookups only, nothing else. The client works fine, it can find the 2 hosts in ldap. If I try to telnet from a host not in ldap it works but if I try to telnet from one of the hosts in ldap to my client, it hangs. If I set binddn on the client, then the hosts in ldap can telnet to the client but the client can't lookup host names. I'm new to ldap so I'm not sure if this is a pam or ldap issue. I don't understand why enabling the binddn allows the remote host to telnet but breaks local name lookups.
Get everything working using the pam_ldap docs and man pages, without ACLs in OpenLDAP, then come back to the OpenLDAP lists if you are still having problems.
Your OS should have an authentication GUI for setting up this, then it's just a case of ACLs etc. on the LDAP server.
Thanks,
Gavin.