From owner-freebsd-security  Wed Nov 14 15:24:41 2001
Delivered-To: freebsd-security@freebsd.org
Received: from rly-ip02.mx.aol.com (rly-ip02.mx.aol.com [152.163.225.160])
	by hub.freebsd.org (Postfix) with ESMTP id 4681A37B405
	for <security@freebsd.org>; Wed, 14 Nov 2001 15:24:39 -0800 (PST)
Received: from logs-tk.proxy.aol.com (logs-tk.proxy.aol.com [152.163.206.132])
	  by rly-ip02.mx.aol.com (8.8.8/8.8.8/AOL-5.0.0)
	  with ESMTP id SAA10236 for <security@freebsd.org>;
	  Wed, 14 Nov 2001 18:21:34 -0500 (EST)
Received: from blah (AC9E7596.ipt.aol.com [172.158.117.150])
	by logs-tk.proxy.aol.com (8.10.0/8.10.0) with SMTP id fAENHii334602
	for <security@freebsd.org>; Wed, 14 Nov 2001 18:17:44 -0500 (EST)
Message-Id: <200111142317.fAENHii334602@logs-tk.proxy.aol.com>
Date: Wed, 14 Nov 2001 23:18:27 +0100
To: security@freebsd.org
From: eberkut <eberkut@minithins.net>
Subject: Re: NIS, rsync, and LDAP Re: sharing /etc/passwd
Organization: CNS / Minithins
X-Mailer: Opera 5.11 build 904b
X-Priority: 3 (Normal)
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
X-Apparently-From: SinkSuffering@aol.com
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

08/11/01 18:05:20, Alexey Zakirov <frank@agava.com> a écrit:

>On Wed, 7 Nov 2001, Jano Lukac wrote:
>
>> new implementations of the openldap 2 have connections via ssl, or you could
>> wrap the old openldap 1 through an stunnel.  But a small warning: I've been
>> working about a month now trying to figgure out how to allow users to change
>> passwords, without luck.  I went as far as setting up an ldap v3 with
>
>something like a custom passwd(1) program would be pretty trivial.

A little late but, there is a recent nice C API called EasyLDAP which could help
in this purpose. It support password management and SSL/TLS. The main developper
is a FreeBSD addict so it works fine :)

just my 0.02 euros

--eberkut
ex diffinientium cognitione diffiniti resultat cognitio
. Prelude : http://prelude.sf.net
. CNS : http://minithins.net


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message