A headache regarding openldap configuration.

Submitted by douglas.w.needham on

So, I ran into an interesting problem tonight, and I figured I would share my solution. I have been doing some additional hardening of my site, such as re-encrypting certain passwords to use stronger encryption standards. And rather than using the old NIS+/YP protocols which came out of the SunOS world and which quickly made its way into the BSD world and eventually into other UN*X OSes including Linux, I have been using LDAP, and specifically OpenLDAP with SSSD.