I emptied my ldap database to start fresh. I created a base of
dc=ibg,dc=com and loaded 2 hostname/IPs. I configured my client to use
ldap for hosts in /etc/nsswitch.conf. Its using ldap for host lookups
only, nothing else. The client works fine, it can find the 2 hosts in
ldap. If I try to telnet from a host not in ldap it works but if I try
to telnet from one of the hosts in ldap to my client, it hangs. If I set
binddn on the client, then the hosts in ldap can telnet to the client
but the client can't lookup host names. I'm new to ldap so I'm not sure
if this is a pam or ldap issue. I don't understand why enabling the
binddn allows the remote host to telnet but breaks local name lookups.
Get everything working using the pam_ldap docs and man pages, without ACLs
in OpenLDAP, then come back to the OpenLDAP lists if you are still having
Your OS should have an authentication GUI for setting up this, then it's
just a case of ACLs etc. on the LDAP server.