[SAC] [OSGeo] #2646: Ldap create/edit accounts via id.osgeo.org is broken

Committees SAC mailing list
1

#2646: Ldap create/edit accounts via id.osgeo.org is broken
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2021-II
Component: Systems Admin | Keywords:
---------------------------+---------------------------------------
Same issue as described in #2645

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2646&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

2

#2646: Ldap create/edit accounts via id.osgeo.org is broken
---------------------------+----------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: closed
Priority: normal | Milestone: Sysadmin Contract 2021-II
Component: Systems Admin | Resolution: fixed
Keywords: |
---------------------------+----------------------------------------
Changes (by robe):

* status: new => closed
* resolution: => fixed

Comment:

Same fixes:

/etc/apache2/mods-enabled/ldap.conf

{{{
LDAPVerifyServerCert Off
<Location /ldap-status>
     SetHandler ldap-status
     Order deny,allow
     Deny from all
     Allow from 127.0.0.1 ::1
     Satisfy all
</Location>

}}}

after

{{{
service apache2 restart
}}}

/etc/nslcd.conf

{{{
tls_reqcert never
}}}

#to fix ssh login
{{{
service nslcd restart
}}}

#to fix ldapsearch /etc/ldap.conf

{{{
TLS_REQCERT never
}}}

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2646#comment:1&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.