Авторизация на LDAP-сервере (Проблемка...)

Обсуждение настройки и работы сервисов, резервирования, сетевых настроек и вопросов безопасности ОС.

Модераторы: SLEDopit, Модераторы разделов

Juffin
Сообщения: 3
ОС: SuSe Linux 11.1

Авторизация на LDAP-сервере

Сообщение Juffin »

Всем привет!
Никак не могу настроить авторизацию с LDAP-сервера в сети: часть пользователей клиент получает (они входят в одну группу), других пользователей нет (которые входят в другие группы):

IB-NAS4220-B

IB-NAS4220-B> id gbeine uid=1000(gbeine) gid=100(users) IB-NAS4220-B> id amitaev id: unknown user name: s IB-NAS4220-B> id fgrimm id: unknown user name:


Конфиги примерно такие:

IB-NAS4220-B

IB-NAS4220B>cat /etc/nsswitch.conf passwd: files ldap group: files ldap shadow files ldap hosts: files dns networks: files protocols: db files services: db files ethers: db files rpc: db files netgroup: db files


IB-NAS4220-B

IB-NAS4220-B>cat /etc/ldap.conf uri 192.168.110.1 base dc=domain,dc=de ldap_version 3 bind_policy soft pam_lookup_policy yes bind_timelimit 10 pam_filter objectclass=posixAccount pam_password exop nss_initgroups_ignoreusers root,ldap nss_schema rfc2307bis nss_map_attribute uniqueMember member tls_checkpeer no nss_base_passwd ou=People,dc=domain,dc=de?one nss_base_shadow ou=People,dc=domain,dc=de?one nss_base_group ou=Group,dc=domain,dc=de?one ssl no


При этом немного смущает что при конфигурировании NSS_LDAP с ключами и без ключей --enable-rfc2307bis --enable-schema-mapping после сборки размер libnss_ldap.so.2 никак не изменяется. И еще: это все работает на NAS (конкретно IB-NAS4220), поэтому прихоидтся собирать все из исходников на компе, используя кросс-компилер, и затем файлы по отдельности закидывать на девайс. Из файлов пока установлены только:

IB-NAS4220-B

/lib/libnss_ldap.so.2 /lib/libldap-2.4.so.2 /lib/liblber-2.4.so.2 /etc/openldap/schema/rfc2307bis.schema


При проверке соединения с девайса через ldapsearch все работает на ура. PAM еще не устанавливал, насколько понимаю он не требуется пока не настраиваю остальную софтину.
Спасибо сказали:
Аватара пользователя
Ленивая Бестолочь
Бывший модератор
Сообщения: 2760
ОС: Debian; gentoo

Re: Авторизация на LDAP-сервере

Сообщение Ленивая Бестолочь »

влючите на сервере ldap логи(LogLevel 256) и посмотрите, чего творится при разных запросах.
Солнце садилось в море, а люди с неоконченным высшим образованием выбегали оттуда, думая, что море закипит.
Спасибо сказали:
Juffin
Сообщения: 3
ОС: SuSe Linux 11.1

Re: Авторизация на LDAP-сервере

Сообщение Juffin »

Я бы с радостью, но к сожалению полного доступа к этому серверу мне не дают, на LDAP так же имею только ограниченную учетную запись :(
Спасибо сказали:
Juffin
Сообщения: 3
ОС: SuSe Linux 11.1

Re: Авторизация на LDAP-сервере

Сообщение Juffin »

Вот такое примерно содержимое бд:

Код: Выделить всё

version: 1

dn: dc=domain,dc=de
objectClass: organization
objectClass: top
objectClass: dcObject
dc: domain
o: tra-ta-ta GmbH
l: Lichtentanne OT Stenn

dn: ou=ldapconfig,dc=domain,dc=de
objectClass: top
objectClass: organizationalUnit
ou: ldapconfig

dn: ou=group,dc=domain,dc=de
objectClass: top
objectClass: organizationalUnit
ou: group

dn: ou=people,dc=domain,dc=de
objectClass: top
objectClass: organizationalUnit
ou: people

dn: cn=grouptemplate,ou=ldapconfig,dc=domain,dc=de
cn: grouptemplate
objectClass: top
objectClass: suseObjectTemplate
objectClass: suseGroupTemplate
suseNamingAttribute: cn
susePlugin: UsersPluginLDAPAll

dn: cn=usertemplate,ou=ldapconfig,dc=domain,dc=de
cn: usertemplate
objectClass: top
objectClass: suseObjectTemplate
objectClass: suseUserTemplate
suseDefaultValue: homedirectory=/home/%uid
suseDefaultValue: loginshell=/bin/bash
suseNamingAttribute: uid
susePlugin: UsersPluginLDAPAll

dn: cn=userconfiguration,ou=ldapconfig,dc=domain,dc=de
cn: userconfiguration
objectClass: top
objectClass: suseModuleConfiguration
objectClass: suseUserConfiguration
suseDefaultBase: ou=people,dc=domain,dc=de
suseDefaultTemplate: cn=usertemplate,ou=ldapconfig,dc=domain,dc=de
suseMaxPasswordLength: 8
suseMaxUniqueId: 60000
suseMinPasswordLength: 5
suseMinUniqueId: 1000
susePasswordHash: CRYPT
suseSearchFilter: objectclass=posixaccount
suseSkelDir: /etc/skel
suseNextUniqueId: 1006

dn: uid=gbeine,ou=people,dc=domain,dc=de
cn: Gerrit Beine
gidNumber: 100
givenName: Gerrit
homeDirectory: /home/gbeine
loginShell: /bin/bash
objectClass: top
objectClass: posixAccount
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: shadowAccount
sn: Beine
uid: gbeine
uidNumber: 1000
sambaSID: S-1-5-21-2516931439-2693827619-8925970-3000
displayName: Gerrit Beine
sambaPasswordHistory: 00000000000000000000000000000000000000000000000000000000
 00000000
shadowLastChange: 14561

dn: uid=wgolubski,ou=people,dc=domain,dc=de
cn: W. Golubski
gidNumber: 100
givenName: Golubski
homeDirectory: /home/wgolubski
loginShell: /bin/bash
objectClass: top
objectClass: posixAccount
objectClass: inetOrgPerson
objectClass: shadowAccount
objectClass: sambaSamAccount
sn: Golubski
uid: wgolubski
uidNumber: 1002
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 0
sambaSID: S-1-5-21-2516931439-2693827619-8925970-3004
shadowLastChange: 14209
shadowMax: 45

dn: sambaDomainName=DOMAIN,dc=domain,dc=de
sambaAlgorithmicRidBase: 1000
sambaNextUserRid: 1000
sambaMinPwdLength: 5
sambaPwdHistoryLength: 0
sambaLogonToChgPwd: 0
sambaMaxPwdAge: -1
sambaMinPwdAge: 0
sambaLockoutDuration: 30
sambaLockoutObservationWindow: 30
sambaLockoutThreshold: 0
sambaForceLogoff: -1
sambaRefuseMachinePwdChange: 0
gidNumber: 1000
sambaDomainName: DOMAIN
sambaSID: S-1-5-21-2516931439-2693827619-8925970
objectClass: top
objectClass: sambaDomain
objectClass: sambaUnixIdPool
sambaNextRid: 1005
uidNumber: 1018

dn: ou=machine,dc=domain,dc=de
objectClass: top
objectClass: organizationalUnit
ou: machine

dn: ou=idmap,dc=domain,dc=de
objectClass: top
objectClass: organizationalUnit
ou: idmap

dn: cn=Domain Admins,ou=group,dc=domain,dc=de
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 512
cn: Domain Admins
description: Netbios Domain Administrators
sambaSID: S-1-5-21-2516931439-2693827619-8925970-512
sambaGroupType: 2
displayName: Domain Admins
memberUid: root
memberUid: gbeine

dn: cn=Domain Users,ou=group,dc=domain,dc=de
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 513
cn: Domain Users
description: Netbios Domain Users
sambaGroupType: 2
displayName: Domain Users
sambaSID: S-1-5-21-2516931439-2693827619-8925970-513
memberUid: wgolubski

dn: cn=Domain Guests,ou=group,dc=domain,dc=de
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 514
cn: Domain Guests
description: Netbios Domain Guests Users
sambaSID: S-1-5-21-2516931439-2693827619-8925970-514
sambaGroupType: 2
displayName: Domain Guests
memberUid: amitaev

dn: uid=amitaev,ou=people,dc=domain,dc=de
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
cn: Alexandr Mitaev
sn: Mitaev
givenName: Alexandr
uid: amitaev
uidNumber: 1017
gidNumber: 514
homeDirectory: /home/amitaev
loginShell: /bin/bash
gecos: System User
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 0
displayName: Alexandr Mitaev
sambaSID: S-1-5-21-2516931439-2693827619-8925970-3034
sambaPrimaryGroupSID: S-1-5-21-2516931439-2693827619-8925970-514
sambaLogonScript: logon.bat
sambaHomeDrive: H:
shadowLastChange: 14561

dn: sambaDomainName=IB-NAS4220-B,dc=domain,dc=de
sambaDomainName: IB-NAS4220-B
sambaSID: S-1-5-21-1606064471-2129358587-3168734747
sambaAlgorithmicRidBase: 1000
objectClass: sambaDomain


Вот так конфигурируется NSS:

Код: Выделить всё

IB-NAS4220-B> env CC=/usr/local/920t_le/bin/arm_920t_le-gcc ./configure --host=armv4tl-hardhat-linux --target=armv4tl-hardhat-linux --build=i686-pc-linux --with-ldap-dir=/source/openldap-2.4.16/build --enable-schema-mapping --enable-rfc2307bis --prefix=/source/nss_ldap/build

Do you want to make disclean before compile?(Y/N)[Y]:
rm -f config.h
rm -f *.tab.c
rm -f TAGS ID
rm -rf .deps
rm -f Makefile
rm -f config.cache config.log stamp-h stamp-h[0-9]*
test -z "nss_ldap.so " || rm -f nss_ldap.so
rm -f *.o core *.core
rm -f config.status
creating cache ./config.cache
checking host system type... armv4tl-hardhat-linux-gnu
checking target system type... armv4tl-hardhat-linux-gnu
checking build system type... i686-pc-linux-gnu
checking for a BSD compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking whether make sets ${MAKE}... yes
checking for working aclocal... missing
checking for working autoconf... found
checking for working automake... missing
checking for working autoheader... missing
checking for working makeinfo... missing
checking for gcc... /usr/local/920t_le/bin/arm_920t_le-gcc
checking whether the C compiler (/usr/local/920t_le/bin/arm_920t_le-gcc  ) works... yes
checking whether the C compiler (/usr/local/920t_le/bin/arm_920t_le-gcc  ) is a cross-compiler... yes
checking whether we are using GNU C... yes
checking whether /usr/local/920t_le/bin/arm_920t_le-gcc accepts -g... yes
checking how to run the C preprocessor... /usr/local/920t_le/bin/arm_920t_le-gcc -E
checking for a BSD compatible install... /usr/bin/install -c
checking for lber.h... yes
checking for ldap.h... yes
checking for ldap_ssl.h... no
checking for nss.h... yes
checking for nsswitch.h... no
checking for irs.h... no
checking for thread.h... no
checking for pthread.h... yes
checking for synch.h... no
checking for malloc.h... yes
checking for shadow.h... yes
checking for prot.h... no
checking for port_before.h... no
checking for port_after.h... no
checking for aliases.h... yes
checking for net/route.h... yes
checking for netinet/if_ether.h... yes
checking for netinet/ether.h... yes
checking for ctype.h... yes
checking for alignof.h... no
checking for rpc/rpcent.h... no
checking for sys/byteorder.h... no
checking for sys/un.h... yes
checking for libc-lock.h... no
checking for bits/libc-lock.h... yes
checking for sasl.h... no
checking for sasl/sasl.h... no
checking for strings.h... yes
checking for gssldap.h... no
checking for gsssasl.h... no
checking for gssapi/gssapi_krb5.h... no
checking for gssapi.h... no
checking for main in -lresolv... yes
checking for main in -lnsl... yes
checking for main in -lsocket... no
checking for strtok_r... yes
checking for sigaction... yes
checking for sigset... yes
checking for res_search... yes
checking for dn_expand... yes
checking for snprintf... yes
checking for gethostbyname... yes
checking for nsdispatch... no
checking for pthread_atfork... no
checking for ether_aton... yes
checking for ether_ntoa... yes
checking for struct ether_addr... yes
checking for socklen_t... yes
checking for pw_change in struct passwd... no
checking for pw_expire in struct passwd... no
checking for dlopen in -ldl... yes
checking for gss_krb5_ccache_name in -lgssapi... no
checking for gss_krb5_ccache_name in -lgssapi_krb5... no
checking for main in -llber... yes
checking for main in -lldap... yes
checking for ldap_gss_bind in -lgssldap... no
checking for sasl_auxprop_request... no
checking for ldap_init... yes
checking for ldap_get_lderrno... no
checking for ldap_parse_result... yes
checking for ldap_memfree... yes
checking for ldap_controls_free... yes
checking for ldap_ld_free... yes
checking for ldap_explode_rdn... yes
checking for ldap_set_option... yes
checking for ldap_get_option... yes
checking for ldap_sasl_interactive_bind_s... yes
checking for ldap_initialize... yes
checking for ldap_search_ext... yes
checking for ldap_create_control... yes
checking for ldap_create_page_control... yes
checking for ldap_parse_page_control... yes
checking for ldapssl_client_init... no
checking for ldap_start_tls_s... yes
checking for ldap_pvt_tls_set_option... no
checking for ldap_start_tls... yes
checking for gethostbyname_r... yes
checking whether gethostbyname_r takes 6 arguments... 6
checking for ldap_set_rebind_proc... yes
checking whether ldap_set_rebind_proc takes 3 arguments... 3
updating cache ./config.cache
creating ./config.status
creating Makefile
creating config.h
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c ldap-nss.c
ldap-nss.c:21: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c ldap-pwd.c
ldap-pwd.c:21: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c ldap-grp.c
ldap-grp.c:21: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c ldap-netgrp.c
ldap-netgrp.c:24: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c ldap-rpc.c
ldap-rpc.c:30: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c ldap-hosts.c
ldap-hosts.c:23: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c ldap-network.c
ldap-network.c:25: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c ldap-proto.c
ldap-proto.c:30: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c ldap-spwd.c
ldap-spwd.c:21: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c ldap-alias.c
ldap-alias.c:24: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c ldap-service.c
ldap-service.c:30: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c ldap-schema.c
ldap-schema.c:23: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c ldap-ethers.c
ldap-ethers.c:24: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c ldap-bp.c
ldap-bp.c:24: warning: 'rcsId' defined but not used
ldap-bp.c:71: warning: '_nss_ldap_parse_bp' defined but not used
ldap-bp.c:64: warning: 'bp_context' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c ldap-automount.c
ldap-automount.c:24: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c util.c
util.c:61: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c ltf.c
ltf.c:21: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c snprintf.c
snprintf.c:1: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c resolve.c
resolve.c:55: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c dnsconfig.c
dnsconfig.c:30: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c irs-nss.c
irs-nss.c:21: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c pagectrl.c
pagectrl.c:23: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -I/source/openldap-2.4.16/build_dist/include  -g -O2 -Wall -fPIC -c ldap-sldap.c
ldap-sldap.c:24: warning: 'rcsId' defined but not used
/usr/local/920t_le/bin/arm_920t_le-gcc  -g -O2 -Wall -fPIC  -L/source/openldap-2.4.16/build_dist/lib -Wl,-rpath,/source/openldap-2.4.16/build_dist/lib -o nss_ldap.so -shared -Wl,-Bdynamic -Wl,--version-script,./exports.linux ldap-nss.o ldap-pwd.o ldap-grp.o ldap-netgrp.o ldap-rpc.o ldap-hosts.o ldap-network.o ldap-proto.o ldap-spwd.o ldap-alias.o ldap-service.o ldap-schema.o ldap-ethers.o ldap-bp.o ldap-automount.o util.o ltf.o snprintf.o resolve.o dnsconfig.o irs-nss.o pagectrl.o ldap-sldap.o  -lldap -llber -ldl -lnsl -lresolv
make[1]: Entering directory `/source/openldap_packets/nss_ldap'
rm -f /source/openldap_packets/nss_ldap/build/lib/libnss_ldap-`ls /lib/libc-*.so | tail -n 1 |sed -e 's/\/lib\/libc-\(.*\)\.so/\1/'`.so
/bin/sh ./mkinstalldirs /source/openldap_packets/nss_ldap/build/lib
/usr/bin/install -c  -o root -g root nss_ldap.so /source/openldap_packets/nss_ldap/build/lib/libnss_ldap-`ls /lib/libc-*.so | tail -n 1 |sed -e 's/\/lib\/libc-\(.*\)\.so/\1/'`.so
(cd /source/openldap_packets/nss_ldap/build/lib; ln -sf libnss_ldap-`ls /lib/libc-*.so | tail -n 1 |sed -e 's/\/lib\/libc-\(.*\)\.so/\1/'`.so libnss_ldap.so.2)
/bin/sh ./mkinstalldirs /usr/source/openldap_packets/nss_ldap/build/lib
(cd /usr/source/openldap_packets/nss_ldap/build/lib; ln -sf ../../source/openldap_packets/nss_ldap/build/lib/libnss_ldap.so.2 .)
make  install-man5
make[2]: Entering directory `/source/openldap_packets/nss_ldap'
/bin/sh ./mkinstalldirs /source/openldap_packets/nss_ldap/build/man/man5
 /usr/bin/install -c -m 644 ./nss_ldap.5 /source/openldap_packets/nss_ldap/build/man/man5/nss_ldap.5
make[2]: Leaving directory `/source/openldap_packets/nss_ldap'
/usr/bin/install -c -m 644 -o root -g root ./nsswitch.ldap /source/openldap_packets/nss_ldap/build/etc/nsswitch.ldap;
make[1]: Leaving directory `/source/openldap_packets/nss_ldap'
Спасибо сказали: