Ситуация следующая имеется openldap сервер, рабочий. Имеем задачу настроить ftp сервер с авторизацией через ldap. Настраиваем все скучно по документации ldap.conf
<IfModule mod_ldap.c>
LDAPServer ldap://ldap.domain.com
LDAPDNInfo "cn=reader readonly,ou=people,dc=domain,dc=com" "password"
LDAPDoAuth on "dc=domain,dc=com" "(&(uid=%v)(objectclass=PureFTPdUser))"
LDAPDoUIDLookups off
LDAPDoGIDLookups off
LDAPNegativeCache on
</IfModule>
Пытаемся логинится и получаем
mod_ldap/2.8.22: generated filter dc=domain,dc=com from template dc=domain,dc=com and value disel
mod_ldap/2.8.22: generated filter (&(uid=disel)(objectclass=PureFTPdUser)) from template (&(uid=%v)(objectclass=PureFTPdUser)) and value disel
mod_ldap/2.8.22: WARNING: LDAP URL search scopes default to 'base' (not 'sub') and may not be what you want.
mod_ldap/2.8.22: attempting connection to ldap://ldap.domain.com
mod_ldap/2.8.22: set protocol version to 3
mod_ldap/2.8.22: connected to ldap://ldap.domain.com
mod_ldap/2.8.22: successfully bound as cn=reader readonly,ou=people,dc=domain,dc=com with password password
mod_ldap/2.8.22: set dereferencing to 0
mod_ldap/2.8.22: set query timeout to 5s
mod_ldap/2.8.22: searched under base DN dc=domain,dc=com using filter (&(uid=disel)(objectclass=PureFTPdUser))
mod_ldap/2.8.22: no entries for filter (&(uid=disel)(objectclass=PureFTPdUser)) under base DN dc=domain,dc=com
При этом
ldapsearch -x -b "ou=people,ou=People,dc=domain,dc=com" "(&(uid=disel)(objectclass=PureFTPdUser))"
