From owner-freebsd-ports@FreeBSD.ORG  Wed Jun  1 10:17:40 2005
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
X-Original-To: freebsd-ports@freebsd.org
Delivered-To: freebsd-ports@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id AEA4E16A41C
	for <freebsd-ports@freebsd.org>; Wed,  1 Jun 2005 10:17:40 +0000 (GMT)
	(envelope-from fandino@ng.fadesa.es)
Received: from tierra2.ng.fadesa.es (tierra2.ng.fadesa.es [195.55.55.166])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2729E43D49
	for <freebsd-ports@freebsd.org>; Wed,  1 Jun 2005 10:17:37 +0000 (GMT)
	(envelope-from fandino@ng.fadesa.es)
Received: from [195.55.55.163] ([195.55.55.163]) (authenticated bits=0)
	by tierra2.ng.fadesa.es (8.12.10/8.12.10) with ESMTP id j51AHVnZ005496
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
	for <freebsd-ports@freebsd.org>; Wed, 1 Jun 2005 12:17:32 +0200
Message-ID: <429D8B3B.50203@ng.fadesa.es>
Date: Wed, 01 Jun 2005 12:17:31 +0200
From: fandino <fandino@ng.fadesa.es>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.6) Gecko/20050319
X-Accept-Language: gl, en, es
MIME-Version: 1.0
To: freebsd-ports@freebsd.org
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-Authenticated-Sender: user fandino from 195.55.55.163
Subject: kadmin (heimdal port) ignores the ldap backend
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: fandino@ng.fadesa.es
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
	<mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Jun 2005 10:17:40 -0000

Hello,

  I'm testing a new configuration with heimdal and the ldap backend
but kadmin is completely ignoring the ldap directive in the dbname
definition.

last cvsup of the ports was yesterday and LDAP was defined in
the heimdal port config:

root@damocles:/usr/ports/security/heimdal# make showconfig
===> The following configuration options are set for heimdal-0.6.3_2:
      LDAP=on "Use OpenLDAP as the KDC backend"
      CRACKLIB=on "Use CrackLib for password quality checking"
      X11=on "Build X11 utilies

and indeed it's linked with ldap as you can see:

# ldd /usr/local/sbin/kadmin
/usr/local/sbin/kadmin:
     ....
         libldap-2.2.so.7 => /usr/local/lib/libldap-2.2.so.7 (0x2812c000)
         liblber-2.2.so.7 => /usr/local/lib/liblber-2.2.so.7 (0x2818a000)
     ....

when the realm is initied kadmin creates a couple of files with the literal
dbname definition (adding ldap: as filename prefix) instead of contacting
the openldap server.

# /usr/local/sbin/kadmin -l
kadmin> init OLIMPUS
Realm max ticket life [unlimited]:
Realm max renewable ticket life [unlimited]:
# ls -l
...
-rw-------  1 root  wheel  32768 May 31 10:19 ldap:ou=gods,dc=olimpus.db
-rw-------  1 root  wheel   7584 May 31 10:19 ldap:ou=gods,dc=olimpus.log
...

anyone knows what I'm missing?


Thank you.

     /---------/

# cat /etc/krb5.conf
[libdefaults]
     default_realm = OLIMPUS
     default_etypes_des = des3-cbc-sha1
     default_etypes = des3-cbc-sha1

[appdefaults]

[realms]
     OLIMPUS = {
         kdc = localhost.olimpus
         admin_server = localhost.olimpus
     }

[domain_realm]
     .olimpus = OLIMPUS

[kdc]
     database = {
     realm = OLIMPUS
     dbname = ldap:ou=gods,dc=olimpus
     mkey_file = /var/heimdal/m-key
}

[logging]
     kdc = SYSLOG
     admin_server = SYSLOG
     default = SYSLOG