8. Solaris 2.7 Client

Attempt to get mir.csu.umist.ac.uk, Solaris 2.7, working as an authentication client for RedHat 7.2 OpenLDAP server.

8.1. Initial Investigation

• does not appear to be a /usr/lib/ldap/ldap_cachemgr in Solaris 7 and therefore there is no /etc/init.d/ldap.client;
  
  
• under Solaris 2.7 there are no

          /usr/lib/nss_ldap.so.1 
          /usr/lib/security/pam_ldap.so.1 
      

  i.e., neither Name Services nor PAM support LDAP within Solaris 2.7. No luck there then.
  
  
• Checked what was installed:

          pkginfo -i | grep -i ldap
          system      SUNWldapx      LDAP Libraries (64-bit)
          system      SUNWlldap      LDAP Libraries
      

  seems to include:

          ldapsearch
          ldapmodify
          ldapadd
          ldapdelete...
      

  So there is at least LDAP client software within Solaris 2.7.
  
  
• Cosmos (Solaris 2.7) has a man page for

          /usr/local/etc/openldap/ldap.conf
      

  From the man page:

        The ldap.conf configuration file is used to set  system-wide
        defaults  to  be  applied when running ldap clients.  
        ...
      

  So Solaris 2.7 seems to recognise "/etc/ldap.conf" as the LDAP client configuration file.
  
  
• Downloaded GNU make and GCC from sunfreeware.com (binaries in both cases) and installed using pkgadd -d <package_name>.pkg.
  
  
• Downloaded nss_ldap.tgz and pam_ldap.tgz from www.padl.com (source): nss_ldap-188 and pam_ldap-144.

8.2. Library Compilation

• Attempted to compile up the pam_ldap source against the installed Solaris 2.7 headerfiles and libraries. Wouldn't.
  
  
• Downloaded openldap-2.0.23 source as a replacement for the Solaris 2.7 LDAP stuff --- this compiled ok it self (once put /usr/ccs/bin/ was on path...).
  
  Installed the Open LDAP stuff in /usr/local/lib and /usr/local/include
  
  
• Now nss_ldap and pam_ldap sources both compile and link against these new, OpenLDAP, header files and libraries --- each configure script found the new header files (in /usr/local/include) ok, but both needed to be told to look in /usr/local/lib for the new libs from openldap.
  
  
• Now have new stuff:

          /usr/local/lib/libldap.so
          /usr/local/lib/libldap.so.2
          /usr/local/lib/libldap.a
      

  plus supporting bits and pieces; also

          /usr/lib/nss_ldap.so
          /usr/lib/nss_ldap.so.1
      

  also

          /lib/security/pam_ldap.so
          /lib/security/pam_ldap.so.1
      

8.3. Configuration

• Next, need to configure the Solaris 2.7 client: /etc/pam.conf, /etc/ldap.conf, /etc/nsswitch.conf and the files in /var/ldap (ldap_client_cred, ldap_client_file and LDAP_Profile.ldif):
  
  /etc:
  nsswitch.conf
  ldap.profile
  ldap.conf
  
  /var/ldap:
  ldap_client_cred
  ldap_client_file
  LDAP_Profile.ldif

 ldapsearch -h 130.88.100.87 -p389 -s sub -b "o=talbycsuumist,c=gb" "uid=si4"

8.4. Debugging and Library Jiggery-Pokery

Neither finger and telnet work; trussed finger and found that a call to /usr/lib/liblber.so.2 fails; and

    ldd nss_ldap.so

    libldap.so.2 =>  /usr/lib/libldap.so.2
    liblber.so.2 =>  (file not found)
    ...
    ...

    ln -s /usr/local/lib/liblber.so.2.0.15 liblber.so.2

Solved it! Here it is the library configuration for Solaris 2.7:

One needs to do a certain about of jiggery-pokery with the .sos and their links. In particular, notice the difference between libldap.so.2 and libldap.so.3: the former is and OpenLDAP library; the latter is Sun's (Solaris 2.7) library --- some apps and utils like one, some the other.

All this was found by trussing finger.

 	
  ls -l /lib/*ldap*

      32 Jun 11 13:30 /lib/libldap.so.2 -> /usr/local/lib/libldap.so.2.0.15
  214540 Sep  1  1998 /lib/libldap.so.3
    9927 Sep  1  1998 /lib/llib-lldap
      18 May  8 11:44 /lib/nss_ldap.so -> /lib/nss_ldap.so.1
  813496 May  8 11:44 /lib/nss_ldap.so.1


  ls -l /usr/lib/*ldap*

      32 Jun 11 13:30 /usr/lib/libldap.so.2 -> /usr/local/lib/libldap.so.2.0.15
  214540 Sep  1  1998 /usr/lib/libldap.so.3
    9927 Sep  1  1998 /usr/lib/llib-lldap
      18 May  8 11:44 /usr/lib/nss_ldap.so -> /lib/nss_ldap.so.1
  813496 May  8 11:44 /usr/lib/nss_ldap.so.1


 ls -l /usr/lib/*lber*

      32 Jun 11 13:31 /usr/lib/liblber.so.2 -> /usr/local/lib/liblber.so.2.0.15


 ls -l /usr/local/lib/*ldap*

    2054984 May  8 11:19 /usr/local/lib/libldap.a
        712 May  8 11:19 /usr/local/lib/libldap.la
         17 May  8 11:19 /usr/local/lib/libldap.so -> libldap.so.2.0.15
         17 May  8 11:19 /usr/local/lib/libldap.so.2 -> libldap.so.2.0.15
    2001560 May  8 11:19 /usr/local/lib/libldap.so.2.0.15
    2132132 May  8 11:19 /usr/local/lib/libldap_r.a
        724 May  8 11:19 /usr/local/lib/libldap_r.la
         19 May  8 11:19 /usr/local/lib/libldap_r.so -> libldap_r.so.2.0.15
         19 May  8 11:19 /usr/local/lib/libldap_r.so.2 -> libldap_r.so.2.0.15
    2071636 May  8 11:19 /usr/local/lib/libldap_r.so.2.0.15