openldap-devel November 2008

openldap-devel@openldap.org

20 participants
40 discussions

Matching rule against IP subnet
by manu＠netbsd.org 16 Nov '08

16 Nov '08

Hello As far as I know, it is not possible to match an IP subnet. For instance, if I have an object like this: dn: cn=foo,o=example managedAddr: 192.0.2.0/24 And this kind of thing does not seems available: ldapsearch 'managedAddr:addressInSubnetMatch:=192.0.2.1' I can think of a few useful matching rules: addressInSubnetMatch subnetInSubnetMatch subnetContainsSubnetMatch subnetContainsAddressMatch subnetExactMatch (192.0.2.5/24 and 192.0.2.10/24 are the same) Questions: - can someone confirm this cannot be done yet? - is there a RFC to implement that does this? Or should I start with what I have though about and presented above? - is this functionnality welcome? - where do I start to implement it? The thing happen in schema_init.c and schema_prep.c, but I need to select an OID. How? The motivation is DNS configuration stored in LDAP. That feature could enable the delegation of subnet management to different administrators, the access being enforced by slapd ACL. -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu(a)netbsd.org

4 9

Re: commit: ldap/servers/slapd acl.c aclparse.c proto-slap.h
by Hallvard B Furuseth 15 Nov '08

15 Nov '08

manu(a)OpenLDAP.org wrote: > acl.c 1.342 -> 1.343 > Add ACL <who> regex-substitution from attribute value submatches. Cf ITS#5804 This change: acl_string_expand( struct berval *bv, struct berval *pat, - char *match, - int nmatch, - regmatch_t *matches) + char *dn_match, + char *val_match, + AclRegexMatches *matches) needs to update the acl_string_expand() call at aci.c:406 to match. -- Hallvard

1 0

Re: commit: ldap/servers/slapd syncrepl.c
by Howard Chu 15 Nov '08

15 Nov '08

hyc(a)OpenLDAP.org wrote: > Update of /repo/OpenLDAP/pkg/ldap/servers/slapd > > Modified Files: > syncrepl.c 1.422 -> 1.423 > > Log Message: > ITS#5809 fix 1.421, avoid modrdn falling thru to modify unnecessarily This passes test019 but it's still not quite right. It will break if an entry is renamed followed by a genuine modify that alters the naming attribute, changing values that were not related to the modrdn values. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: commit: ldap/servers/slapd acl.c
by Hallvard B Furuseth 15 Nov '08

15 Nov '08

manu(a)OpenLDAP.org writes: > Fix warnings an a real bug hidden by the lack of warning... gcc -Wparentheses or -Wall would have caught that one. -- Hallvard

1 0

Re: Please test RE24
by Quanah Gibson-Mount 15 Nov '08

15 Nov '08

--On Friday, November 14, 2008 10:25 PM +0100 Pierangelo Masarati <ando(a)sys-net.it> wrote: > Quanah Gibson-Mount wrote: >> Please test RE24. > > passes all tests on CentOS 5.2 (i386) Great, although I'm concerned about the latest post to -technical about RE24 & syncrepl. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

2 2

Re: commit: ldap/doc/man/man5 slapo-syncprov.5
by Howard Chu 14 Nov '08

14 Nov '08

ghenry(a)OpenLDAP.org wrote: > Update of /repo/OpenLDAP/pkg/ldap/doc/man/man5 > > Modified Files: > slapo-syncprov.5 1.15 -> 1.16 > > Log Message: > (ITS#5806) slapo-syncprov man page and syncprov-sessionlog And move the ITS to the Documentation section, and mark it's state Test, please. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

3 2

Re: Please test RE24
by Quanah Gibson-Mount 14 Nov '08

14 Nov '08

--On Friday, November 14, 2008 9:52 PM +0000 Gavin Henry <ghenry(a)OpenLDAP.org> wrote: > Thanks. Can you keep replies on the results to openldap-devel? ;) --Quanah > ----- "Quanah Gibson-Mount" <quanah(a)zimbra.com> wrote: > >> Please test RE24. > > All pass here on a dual core 32bit Fedora 8. More later. > > -- > Kind Regards, > > Gavin Henry. > OpenLDAP Engineering Team. > > E ghenry(a)OpenLDAP.org > > Community developed LDAP software. > > http://www.openldap.org/project/ -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

MS AD <-> OpenLDAP
by marcelo.xavier＠caixa.gov.br 14 Nov '08

14 Nov '08

Hi, I'm developing a MS Active Directory plug-in to replicate users and passwords to OpenLDAP The main objective is improve migration from MS AD to OpenLDAP Have anyone interest on this? This project can make part off OpenLdap solution or not? Thanks Xavier

6 7

Re: commit: ldap/servers/slapd/back-ldif ldif.c
by Hallvard B Furuseth 12 Nov '08

12 Nov '08

hallvard(a)OpenLDAP.org writes: > ldif.c 1.98 -> 1.99 > ITS#5319 - support rename to same DN. Sorry, hadn't tested this well - this patch broke ./run -b ldif test018-syncreplication-persist (producer and consumer databases differ) and test048-syncrepl-multiproxy (master and P1 slave databases differ). Don't know why. Works with rev 1.98. Test scripts edited to not skip $BACKEND = ldif. -- Hallvard

2 1

Split lines in LDIF comments
by Hallvard B Furuseth 12 Nov '08

12 Nov '08

I suggest we make ldapsearch split comments with "\n# " instead of "\n ". That way scripting like ldapsearch ... | grep -v '^#' will correctly remove comments. Currently that breaks. Look at e.g. ldapsearch -xhldap.uio.no -b"dc=uio,dc=no" "(ou=*sentrum/*)" -- Hallvard

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-devel November 2008