All of lore.kernel.org
 help / color / mirror / Atom feed
From: Guillaume Rousse <Guillaume.Rousse@inria.fr>
To: autofs mailing list <autofs@linux.kernel.org>
Subject: autofs5: unable to locate ldap master map
Date: Wed, 28 Jun 2006 11:59:45 +0200	[thread overview]
Message-ID: <44A25311.2040501@inria.fr> (raw)

I just tested autofs5 (beta5), and I'm a bit confused about using
LDAP-defined master map... Especially when eveything worked out of the
box with autofs 4 :)

First, how the master map is located is still a bit obscure for me...
From the man page, it seems they are two different way to find it:
- file based
- nss based
The first occurs when automount argument or default value for this
argument is an explicit filename, the second occurs otherwise

nss-based master map lookup use the line 'automount' in
/etc/nsswitch.conf, and may use at least the following values (from
autofs4 init script):
- file
- ldap
- nis

Explanations about how behave each of those option is missing, but I
expect ldap value to behave as previously, meaning automagically using
openldap libraries.

So, to use a an ldap master map, I could either
1) used file-based master map lookup, by using "/usr/sbin/automount
/etc/autofs/auto.master" (or just "/usr/sbin/automount" as it is the
default value), and insert something as:
+ldap:ou=auto.master,ou=autofs,dc=village,dc=inria,dc=fr

2) using nss-based master map lookup, by using "/usr/sbin/automount
name-without-path", and insert a "ldap" value in "automount" line in
"/etc/nsswitch.conf"

However, the only way I found to force nss-based master map lookup was
"/usr/sbin/automount +auto.master" (where description says: name has no
 path), or to add +auto.master in auto.master file (where documentation
says: + [map-type,format:]map[options]) and use file-based lookup.

Second, searching master map in ldap doesn't work either, and I'm unable
to understand why:
- what is supposed to happen in the absence of autofs_ldap_auth.conf ?
- what are configuration options available there, beyond the one given
in example (ssl or just tls, for instance) ?
- what are precedence with system configuration for openldap libraries ?
- are the various variables defined in /etc/sysconfig/autofs mandatory,
or are they just alternate default values ?
- are they supposed to be exported in environment before launching
automount, passed to it through a bunch of -Dkey=value ?

The only hints I was able to collect were those error messages in the logs:
Jun 28 11:45:13 alceste automount[4191]: get_server_SASL_mechanisms: No
SASL authentication mechanisms are supported by the LDAP server.
Jun 28 11:45:13 alceste automount[4191]: lookup_init: lookup(ldap):
cannot initialize auth setup

If this matter, I build autofs with --with-mapdir=/etc/autofs as
argument, on x86_64 running mandriva cooker. And i'm running a 2.6.17
kernel.

Thanks for your help.
-- 
Guillaume Rousse
Projet Estime, INRIA
Domaine de Voluceau
Rocquencourt - B.P. 105
78153 Le Chesnay Cedex - France

             reply	other threads:[~2006-06-28  9:59 UTC|newest]

Thread overview: 21+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2006-06-28  9:59 Guillaume Rousse [this message]
2006-06-29  4:09 ` autofs5: unable to locate ldap master map Ian Kent
2006-06-29 11:17   ` Guillaume Rousse
2006-06-29 12:59     ` Ian Kent
2006-06-30  8:40       ` Guillaume Rousse
2006-07-01 19:11         ` Ian Kent
2006-07-03 13:53           ` Guillaume Rousse
2006-07-03 16:15             ` Ian Kent
2006-07-03 16:30               ` Ian Kent
2006-07-05 12:53               ` Jeff Moyer
2006-07-26  8:13               ` Guillaume Rousse
2006-08-23 14:55                 ` Guillaume Rousse
2006-08-24 14:49                   ` Guillaume Rousse
2006-08-25  5:53                     ` Piete.Brooks--autofs
2006-08-25  7:27                       ` Guillaume Rousse
2006-08-25 11:10                       ` Ian Kent
2006-08-23 13:43       ` Guillaume Rousse
  -- strict thread matches above, loose matches on Subject: below --
2006-08-25  9:03 Piete Brooks, Piete.Brooks--autofs
2006-08-25 11:15 ` Ian Kent
2006-08-25 11:14 Piete Brooks, Piete.Brooks--autofs
2006-08-25 11:26 ` Ian Kent

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=44A25311.2040501@inria.fr \
    --to=guillaume.rousse@inria.fr \
    --cc=autofs@linux.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.