openldap-devel

openldap-devel@openldap.org

1425 discussions

(Dumb?) X-ORDERED 'VALUES' question
by Pierangelo Masarati 24 Aug '07

24 Aug '07

I'm implementing the Control syntax in draft-chu-ldap-logschema, which is used for the reqControls and reqRespControls as X-ORDERED 'VALUES', and I'm having a little bit of trouble in understanding how I should encode values. Right now, I'm putting the DER encoded controls in the pretty values, and the control OID in the normalized values as per the objectIdentifierFirstComponentMatch equality matching rule. However, it's not clear whether I should put the ordering prefix in either value. If I do, matching fails because test_filter() ignores the fact that an attribute may be ordered; in fact, it uses value_match() instead of ordered_value_match(). I suspect this is a bug, but I might be missing something __really__ obvious... p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati(a)sys-net.it ---------------------------------------

3 5

accesslog schema
by Pierangelo Masarati 24 Aug '07

24 Aug '07

Howard Chu wrote: > I suppose I should at least write up an Informational RFC to go along > with this what's its status? I think the reqControls and reqRespControls (not implemented yet by accesslog; I'm working at it) should have "X-ORDERED 'VALUES'", as ordering __might__ matter (RFC 4511 is not quite definitive on the subject: Additionally, unless order-dependent semantics are given in a specification, the order of a combination of controls in the SEQUENCE is ignored. but at least it leaves room for specifying order-based semantics). p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati(a)sys-net.it ---------------------------------------

2 2

2.3 vs 2.4 Features/Differences/Additions List
by Gavin Henry 24 Aug '07

24 Aug '07

Dear All, I know Howard wrote this: http://www.openldap.org/lists/openldap-software/200702/msg00277.html But I'd like to gather a quick (if possible) list of 2.3 vs 2.4 features/differences/additions, so I can make sure we have a relevant section in the Admin Guide to point to and cover/discuss it etc. If there are nice things not mentioned in the above post that is. This will give me a reference list to make sure our guide is complete as possible. Thanks all, Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

3 2

memberOf attribute (was: commit: ldap/servers/slapd/overlays memberof.c Makefile.in)
by Hallvard B Furuseth 23 Aug '07

23 Aug '07

ando(a)OpenLDAP.org writes: > memberof.c NONE -> 1.1 Your 'memberOf' attribute definition says { "( 1.2.840.113556.1.2.102 " (...) "EQUALITY distinguishedNameMatch " /* added */ "USAGE directoryOperation " /* questioned */ /* "NO-USER-MODIFICATION " */ "X-ORIGIN 'iPlanet Delegated Administrator' )", Why iPlanet? 1.2.840.113556 is Microsoft. What happens if some of Microsoft's schema has already been imported? I didn't find it at microsoft's site, but I found an old one (which I have not tested) at http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/schema/Attic/microso… -- Hallvard

2 1

Re: commit: ldap/servers/slapd/overlays dyngroup.c
by Pierangelo Masarati 23 Aug '07

23 Aug '07

hyc(a)OpenLDAP.org wrote: > Update of /repo/OpenLDAP/pkg/ldap/servers/slapd/overlays > > Modified Files: > dyngroup.c 1.13 -> 1.14 > > Log Message: > Add cn=config support I thought this was going to be replaced by dynlist, whose functionality it provides a subset. Note that in HEAD dynlist can also be instantiated under the name "dyngroup" (see obsolete names), with the same configuration syntax. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati(a)sys-net.it ---------------------------------------

3 10

late declaration of variable (2.3, backglue.c)
by Buchan Milne 23 Aug '07

23 Aug '07

I need the patch below (since 2.3.37, maybe before) to be able to compile backglue.c on gcc 2.9x. Regards, Buchan --- servers/slapd/backglue.c Thu Aug 23 14:48:24 2007 +++ servers/slapd/backglue.c.latedeclaration Thu Aug 23 14:44:22 2007 @@ -619,9 +619,9 @@ int rw, Entry **e ) { - int rc; BackendDB *b0 = op->o_bd; op->o_bd = glue_back_select( b0, dn ); + int rc; if ( op->o_bd->be_fetch ) { rc = op->o_bd->be_fetch( op, dn, oc, ad, rw, e );

3 3

TLS Certificate Generation section and Troubleshooting Checklist
by Gavin Henry 22 Aug '07

22 Aug '07

Dear All, Should we merge the TLS cert generation seciton of the FAQ into TLS.sdf? Could you all think of some simple questions to ask when troubleshooting an OpenLDAP "problem" as our users call it ;-) See the the "Checklist" in the Troubleshooting section I've started. Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

3 3

ldapsearch scrables utf-8 dn
by TJ 22 Aug '07

22 Aug '07

Hi all, I hope that this will lead to some discussion on better utf-8 support. It seems that ldapsearch does'n like dn's with utf-8 chars in it. see: $ ldapsearch -xLLL "(uid=dwrc)" dn dn:: Y249RMW1ciBDeW1ydSxvdT11c2VyQWNjb3VudHMsZGM9Y3NpcnQsZGM9amFuZXQ= $ locale LANG=en_GB.UTF-8 LC_CTYPE="en_GB.UTF-8" LC_NUMERIC="en_GB.UTF-8" LC_TIME="en_GB.UTF-8" LC_COLLATE="en_GB.UTF-8" LC_MONETARY="en_GB.UTF-8" LC_MESSAGES="en_GB.UTF-8" LC_PAPER="en_GB.UTF-8" LC_NAME="en_GB.UTF-8" LC_ADDRESS="en_GB.UTF-8" LC_TELEPHONE="en_GB.UTF-8" LC_MEASUREMENT="en_GB.UTF-8" LC_IDENTIFICATION="en_GB.UTF-8" LC_ALL= add -u and doesn't get much better: ufn: D\C5\B5r Cymru, userAccounts, csirt.janet While 'getent passwd' via libnss-ldap is more then happy with utf-8 usernames: $ getent passwd dwrc:*:1111:100:Dŵr Cymru:/tmp:/bin/bash (for those that have issues with utf-8 email, the 'w' in Dwr has a hat '^' on). I am told on the irc channel that anything 'strange' is changed to base64. Some thoughts on this: * I don't consider UTF-8 to be strange. * If it really has to be this way then ldap* -D args (and others) should accept the base64 form. * This behaviour should at least have an off switch, so the user can decide on the output form. I was asked to post this issue to the list for discussion. My own position is that I have yet to hear any good reason why utf-8 support should not be a goal. Regards, Thorben

3 2

-enable-phonetic=mod ?
by Gavin Henry 21 Aug '07

21 Aug '07

Hi all, Is this valid? I can see it in our source, but not in configure. I ask as I see it as a build option at: http://preview.tinyurl.com/357n79 Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

3 3

Re: Guide PDF changes
by Kari Mattsson 20 Aug '07

20 Aug '07

Gavin Henry wrote: > > Should we change the outputed PDF to be called: > > OpenLDAP-Admin-Guide.pdf Yes. > or are you really happy with just: > > guide.pdf No. > Do we need to do for htmldoc: > > --size a4 > > Or do we want to stick with Letter? > > You can change this prior to print anyway. Maybe you should choose the smaller paper size? I've had some success by creating hybrid paper size of A4 width (210 mm), and Letter height (some inches). That is, take the smaller values of both. That way the printers (atleast some) seem to be happier. Most new printers seem to be able to scale between A4 and Letter. Ciao, Michael. //Kari

3 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-devel