November 2008 - openldap-devel

by manu＠netbsd.org

Hello As far as I know, it is not possible to match an IP subnet. For instance, if I have an object like this: dn: cn=foo,o=example managedAddr: 192.0.2.0/24 And this kind of thing does not seems available: ldapsearch 'managedAddr:addressInSubnetMatch:=192.0.2.1' I can think of a few useful matching rules: addressInSubnetMatch subnetInSubnetMatch subnetContainsSubnetMatch subnetContainsAddressMatch subnetExactMatch (192.0.2.5/24 and 192.0.2.10/24 are the same) Questions: - can someone confirm this cannot be done yet? - is there a RFC to implement that does this? Or should I start with what I have though about and presented above? - is this functionnality welcome? - where do I start to implement it? The thing happen in schema_init.c and schema_prep.c, but I need to select an OID. How? The motivation is DNS configuration stored in LDAP. That feature could enable the delegation of subnet management to different administrators, the access being enforced by slapd ACL. -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu(a)netbsd.org

14 years, 10 months

4
9
0 / 0

Re: commit: ldap/servers/slapd acl.c aclparse.c proto-slap.h

by Hallvard B Furuseth

manu(a)OpenLDAP.org wrote: > acl.c 1.342 -> 1.343 > Add ACL <who> regex-substitution from attribute value submatches. Cf ITS#5804 This change: acl_string_expand( struct berval *bv, struct berval *pat, - char *match, - int nmatch, - regmatch_t *matches) + char *dn_match, + char *val_match, + AclRegexMatches *matches) needs to update the acl_string_expand() call at aci.c:406 to match. -- Hallvard

14 years, 10 months

1
0
0 / 0

Re: commit: ldap/servers/slapd syncrepl.c

by Howard Chu

hyc(a)OpenLDAP.org wrote: > Update of /repo/OpenLDAP/pkg/ldap/servers/slapd > > Modified Files: > syncrepl.c 1.422 -> 1.423 > > Log Message: > ITS#5809 fix 1.421, avoid modrdn falling thru to modify unnecessarily This passes test019 but it's still not quite right. It will break if an entry is renamed followed by a genuine modify that alters the naming attribute, changing values that were not related to the modrdn values. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

14 years, 10 months

1
0
0 / 0

Re: commit: ldap/servers/slapd acl.c

by Hallvard B Furuseth

manu(a)OpenLDAP.org writes: > Fix warnings an a real bug hidden by the lack of warning... gcc -Wparentheses or -Wall would have caught that one. -- Hallvard

14 years, 10 months

1
0
0 / 0

Re: Please test RE24

by Quanah Gibson-Mount

--On Friday, November 14, 2008 10:25 PM +0100 Pierangelo Masarati <ando(a)sys-net.it> wrote: > Quanah Gibson-Mount wrote: >> Please test RE24. > > passes all tests on CentOS 5.2 (i386) Great, although I'm concerned about the latest post to -technical about RE24 & syncrepl. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

14 years, 10 months

2
2
0 / 0

Re: commit: ldap/doc/man/man5 slapo-syncprov.5

by Howard Chu

ghenry(a)OpenLDAP.org wrote: > Update of /repo/OpenLDAP/pkg/ldap/doc/man/man5 > > Modified Files: > slapo-syncprov.5 1.15 -> 1.16 > > Log Message: > (ITS#5806) slapo-syncprov man page and syncprov-sessionlog And move the ITS to the Documentation section, and mark it's state Test, please. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

14 years, 10 months

3
2
0 / 0

Re: Please test RE24

by Quanah Gibson-Mount

--On Friday, November 14, 2008 9:52 PM +0000 Gavin Henry <ghenry(a)OpenLDAP.org> wrote: > Thanks. Can you keep replies on the results to openldap-devel? ;) --Quanah > ----- "Quanah Gibson-Mount" <quanah(a)zimbra.com> wrote: > >> Please test RE24. > > All pass here on a dual core 32bit Fedora 8. More later. > > -- > Kind Regards, > > Gavin Henry. > OpenLDAP Engineering Team. > > E ghenry(a)OpenLDAP.org > > Community developed LDAP software. > > http://www.openldap.org/project/ -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

14 years, 10 months

1
0
0 / 0

MS AD <-> OpenLDAP

by marcelo.xavier＠caixa.gov.br

Hi, I'm developing a MS Active Directory plug-in to replicate users and passwords to OpenLDAP The main objective is improve migration from MS AD to OpenLDAP Have anyone interest on this? This project can make part off OpenLdap solution or not? Thanks Xavier

14 years, 10 months

6
7
0 / 0

Re: commit: ldap/servers/slapd/back-ldif ldif.c

by Hallvard B Furuseth

hallvard(a)OpenLDAP.org writes: > ldif.c 1.98 -> 1.99 > ITS#5319 - support rename to same DN. Sorry, hadn't tested this well - this patch broke ./run -b ldif test018-syncreplication-persist (producer and consumer databases differ) and test048-syncrepl-multiproxy (master and P1 slave databases differ). Don't know why. Works with rev 1.98. Test scripts edited to not skip $BACKEND = ldif. -- Hallvard

14 years, 10 months

2
1
0 / 0

Split lines in LDIF comments

by Hallvard B Furuseth

I suggest we make ldapsearch split comments with "\n# " instead of "\n ". That way scripting like ldapsearch ... | grep -v '^#' will correctly remove comments. Currently that breaks. Look at e.g. ldapsearch -xhldap.uio.no -b"dc=uio,dc=no" "(ou=*sentrum/*)" -- Hallvard

14 years, 10 months

1
0
0 / 0

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-devel November 2008