1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
|
Using nss-ldap with BIND/IRS under FreeBSD / Quick'n'Dirty guide
================================================================
[ Instructions from Emile Heitor <eheitor@isdnet.net> ]
Tested under FreeBSD 4.1, but should work under 3.x & 4.x.
o Get nss_ldap (http://www.padl.com/nss_ldap.html)
o Get bind-8.2.2p5 (http://www.isc.org)
nss_ldap includes a patch to IRS in irs-nss.diff.
then:
tar zxvf nss_ldap-115.tar.gz
mkdir bind-nss
cd bind-nss
tar zxvf ../bind-src.tar.gz
patch -p1 < ../irs-nss.diff
cd src
make depend
cd ../../nss_ldap
At this point, you may modify Makefile's TOP variable to suit to your
needs. Quit/Save.
make clean && make
cd ../bind-nss/src
make all
Ok, I know about nslookup's warnings and errors here, this is because of
newly linked nss-ldap stuff, just ignore it if you plan to use only
libbind for its IRS feature ( hey, I said "Quick'n'Dirty ;) ).
This will be cleaner very soon, i.e. when I'll make it a dynamic library
& will work around bind Makefiles.
See if it works !
=================
Launch an LDAP server with your favourite data inside, then compile the
following :
[cut here]
/* NSS-LDAP use exemple code */
#include <sys/types.h>
#include <pwd.h>
int main(int argc, char **argv) {
struct passwd *pw;
if (argc < 2 ) {
printf("bad arg number\n");
return(1);
}
pw=getpwnam(argv[1]);
if (!pw)
printf("Failure\n", argv[1]);
else
printf("getpwnam return value:\n%s\ns%s\n",
pw->pw_name, pw->pw_passwd);
return(0);
}
[cut here]
With the following Makefile :
( change LIBBIND and LIBDIR to suit to your needs )
[cut here]
LIBBIND=/home/imil/pub/net/bind-nss/src/lib/libbind.a
LIBDIR=-L/usr/local/openldap2/lib
LIBS=-lldap_r -llber -lc_r
all: tpass
tpass: tpass.o $(LIBBIND)
cc -g -o tpass tpass.o $(LIBBIND) $(LIBDIR) $(LIBS)
clean:
rm -f *.o tpass
[cut here]
launch it:
./tpass user
Watch your LDAP server logs, they should be nice ;)
---
All the best,
--------------------------
Emile Heitor
Ingenieur Systeme Unix
Cable & Wireless isdnet
http://www.isdnet.net
Email : eheitor@isdnet.net
Tel : 06.03.29.65.70
--------------------------
Subject: Re: Documentation for IRS in BIND 8.x
From: Paul Vixie <paul@vix.com>
Date: 1997/06/26
Message-ID: <g3radp5avm.fsf@wisdom.home.vix.com>
Newsgroups: comp.protocols.dns.bind
_[More Headers]_
Ooops. I forgot to check in the man page for irs.conf(5). Here's one:
IRS.CONF(5) BSD Programmer's Manual IRS.CONF(5)
NAME
irs.conf - Information Retrieval System configuration file
SYNOPSIS
irs.conf
DESCRIPTION
The irs(3) functions are a set of routines in the C library which provide
access to various system maps. The maps that irs currently controls are
the following: passwd, group, services, protocols, hosts, networks and
netgroup. When a program first calls a function that accesses one of
these maps, the irs configuration file is read, and the source of each
map is determined for the life of the process.
If this file does not exist, the irs routines default to using local
sources for all information, with the exception of the host and networks
maps, which use the Domain Name System (DNS).
Each record in the file consists of one line. A record consists of a
map-name, an access-method and possibly a (comma delimited) set of op-
tions, separated by tabs or spaces. Blank lines, and text between a #
and a newline are ignored.
Available maps:
Map name Information in map
========= ==================================
passwd User authentication information
group User group membership information
services Network services directory
protocols Network protocols directory
hosts Network hosts directory
networks Network "network names" directory
netgroup Network "host groups" directory
Available access methods:
Access method Description
============= =================================================
local Use a local file, usually in /etc
dns Use the domain name service (includes hesiod)
nis Use the Sun-compatible Network Information Service
>> ldap Use the Lightweight Directory Access Protocol
Available options:
Option Description
======== ================================================
continue don't stop searching if you can't find something
merge don't stop searching if you CAN find something
The continue option creates ``union namespaces'' whereby subsequent ac-
cess methods of the same map type can be tried if a name cannot be found
using earlier access methods. This can be quite confusing in the case of
host names, since the name to address and address to name mappings can be
visibly asymmetric even though the data used by any given access method
is entirely consistent. This behavior is, therefore, not the default.
The merge option only affects lookups in the groups map. If set, subse-
quent access methods will be tried in order to cause local users to ap-
pear in NIS (or other remote) groups in addition to the local groups.
EXAMPLE
# Get password entries from local file, or failing that, NIS
passwd local continue
passwd nis
# Build group membership from both local file, and NIS.
group local continue,merge
group nis
# Services comes from just the local file.
services local
protocols local
# Hosts comes first from DNS, failing that, the local file
hosts dns continue
hosts local
networks local
netgroup local
NOTES
If a local user needs to be in the local host's ``wheel'' group but not
in every host's ``wheel'' group, put them in the local host's /etc/group
``wheel'' entry and set up the ``groups'' portion of your /etc/irs.conf
file as:
group local continue,merge
group nis
The dns access method is only supported for the ``hosts'' and
``networks'' maps. The other maps fall under the control of Hesiod, and
have not been well tested.
NIS takes a long time to time out. Especially for hosts if you use the
-d option to your server's ``ypserv'' daemon.
It is important that the irs.conf file contain an entry for each map. If
a map is not mentioned in the irs.conf file, all queries to that map will
fail.
FILES
/etc/irs.conf The file irs.conf resides in /etc.
SEE ALSO
groups(5), hosts(5), netgroup(5), networks(5), passwd(5),
protocols(5), services(5)
BSDI August 8, 1996 2
--
Paul Vixie
La Honda, CA
<_paul@vix.com_> "Many NANOG members have been around
pacbell!vixie!paul longer than most." --Jim Fleming
|
