Uploaded image for project: 'Couchbase Documentation'
  1. Couchbase Documentation
  2. DOC-2014

Improvements to LDAP Documentation

    XMLWordPrintable

Details

    • Task
    • Resolution: Unresolved
    • Critical
    • None
    • 4.0.x, 4.1, 4.5, 4.5.1, 4.6
    • security
    • DOC-S6-Dec29, DOC-S7-Jan12, DOC-S8-Jan26, DOC-S9-Feb09

    Description

      Suggest that users run a test before installing/configuring saslauthd to make sure that the server can already talk to the LDAP server, e.g. with ldapsearch:

      ldapsearch -LLL -H ldap://ldapserver:389 -D cn=someuser,ou=users,dc=mydomain,dc=com -w Passw0rd -x -bou=users,dc=mydomain,dc=com cn=someuser
      

      Split out correct steps by OS (e.g. different package names).

      Remove the chmod - shouldn't be used on any platform. Not needed when I tested on CentOS. On Ubuntu/Debian adding couchbase to the sasl group was enough:

      sudo adduser couchbase sasl

      The ldap_filter shouldn't have brackets round the parameter.

      The first example contains samAccountName which is Windows/AD specific - given that there is a Windows example below this should be changed to uid.

      The formatting on all the block quoting has indents after the first line.

      The Troubleshooting page could probably be merged in to the saslauthd page - we certainly shouldn't be recommending the chmod or the sym-link. And you should be able to debug with the aforementioned ldapsearch, or by running saslauthd -d.

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              richard.smedley Richard Smedley
              malarky Chris Malarky
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty