Hi everyone!

I've configured several Linux devices (Debian 7/8 and Ubuntu 16.04) to work with the LDAP server in ClearOS. However, while it works using ClearOS 5, with ClearOS 7.2 it does not.

In ClearOS 7.2, I configured LDAP (installing OpenLDAP from the Marketplace) editing the settings and policies in Server - Directory - Directory Server. This part is quite similar to ClearOS 5.

After that, I added some users and groups from System - Accounts - Groups/Users. This is different than ClearOS 5, where LDAP users/groups were added in Directory - Accounts - Users/Groups. ¿Am I doing it propperly? Because I don't really know if these users are LDAP users or just system users, but I can't find any other way to do it. Also, I find quite strange that, in System - Account Manager, where it says "The Account Manager manages the underlying accounts system system, as well as provides an overview of installed plugins and extensions for users and groups.", I can't see nothing... just "No data available in table" in Plugins section and "Windows Networking" in Extensions section, but I can't do nothing. Is it okay?

As for Linux clients, I installed libnss-ldap and libpam-ldap and modified some files such as /etc/ldap/ldap.conf, /etc/libnss-ldap.conf, /etc/nsswith.conf, /etc/pam.d/common-password and /etc/pam.d/common-session.

/etc/ldap/ldap.conf:

#

# LDAP Defaults

#



#BASE   dc=example,dc=com

#URI    ldap://ldap.example.com ldap://ldap-master.example.com:666



#SIZELIMIT      12

#TIMELIMIT      15

#DEREF          never



# TLS certificates (needed for GnuTLS)

TLS_CACERT      /etc/ssl/certs/ca-certificates.crt

/etc/libnss-ldap.conf, commenting line 53:

#rootbinddn cn=manager,cn=internal,dc=example,dc=com

/etc/nsswitch.conf: (adding "ldap" in passwd, group, shadow)

passwd:         compat ldap

group:          compat ldap

shadow:         compat ldap



hosts:          files dns

networks:       files



protocols:      db files

services:       db files

ethers:         db files

rpc:            db files



netgroup:       nis

/etc/pam.d/common-password, adding:

password        required        pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3

/etc/pam.d/common-session, adding:

session         required        pam_mkhomedir.so skel=/etc/skel/ umask=0022

So, when I write “getent passwd” I should see both system users and LDAP users. This works great with ClearOS 5, where I can see the full list of users and I can reboot the Linux machine and log in with a LDAP user, creating its home directory and that. However, with ClearOS 7.2, LDAP users are not shown in “passwd”, so it isn’t possible to log in with these users. Ldapsearch displays results in both cases.

I saw the LDAP log and it can be seen that server can see the requests, that manager user and its password are correct, but it suddenly stops the connection (unbind). I thought I was doing something wrong in the client side, but it is quite strange since it works for Debian 7 and 8 and Ubuntu 16.04 with ClearOS 5 but it doesn’t with ClearOS 7.2.

To sum up, ClearOS 7.2 doesn’t provide its LDAP users to the Linux client. Is it maybe a new security measure? Or am I doing something wrong? Did anyone have the same problem? I’ve been several week working on this and I don’t know what to do or how to go on, because I can't find nothing on the Internet. I’d really appreciate your help.

Thanks in advance!