openldap-software November 2006

openldap-software@openldap.org

81 participants
81 discussions

localized group names?
by Kenneth Rogers 07 Nov '06

07 Nov '06

Hi, Is the objectclass of an LDAP group localized or can I expect to find "groupOfNames" etc. when I search against any OpenLDAP server? Ken R. -- "Linux doesn't exist." -- Kieren O'Shaghnessy (Director of SCO Australia)

2 1

ldapmodify doesnot allow to add
by Mr raju varghese 07 Nov '06

07 Nov '06

hi, I set up an openldap server and added some entries .Its ok but now I want to extend the ldiff files and add new object classes but it gives some error some body have any idea about it? this is the current ldiff files i used to add entries to my ldap. dn: uid=james,ou=Users,dc=hosting,dc=net uid: james cn: james objectClass: person objectClass: organizationalPerson objectClass: top objectClass: inetOrgPerson userPassword: mypassword mail: james(a)hosting.net givenname: james sn: james street: downtown l: rubl st:new stret postalcode: 8547 pager: 111 homePhone: 12-123 mobile: 4578 Now i want to add the above user as a system user and samba user so i created ldiff as dn: uid=james,ou=Users,dc=hosting,dc=net changetype: add objectClass: account objectClass: shadowAccount objectClass: sambaSamAccount objectClass: posixAccount host: * uid: james uidNumber: 1049 sn: james sambaLogoffTime: 2147483647 sambaPwdLastSet: 1162282281 sambaAcctFlags: [UX] loginShell: /sbin/nologin gidNumber: 1049 shadowMax: 99999 sambaPwdMustChange: 2147483647 sambaNTPassword: D137DEDB0DB6C8BDFB2D4E55CE8235CD sambaPwdCanChange: 0 sambaSID: S-1-5-21-924209702-1057988766-553982440-3096 homeDirectory: /home/s4 sambaKickoffTime: 2147483647 shadowWarning: 7 ldapmodify -x -D "cn=Manager,dc=hosting,dc=net" -W -f james.ldiff but it does not allow to add the objectclass and gives error like uid exists thanks ____________________________________________________________________________________ Sponsored Link Mortgage rates near 39yr lows. $420k for $1,399/mo. Calculate new payment! http://www.LowerMyBills.com/lre

2 1

Maximum number objects
by julio.carrillo＠ife.org.mx 06 Nov '06

06 Nov '06

Hello, I have master with 30,000 objects in DB berkeley 4.2 and OpenLDAP 2.3.21, but some time, i can´t modify objects database hangup. I think should berkeley but the logs not report errors. i don't have DB_CONFIG. We i need do, for debug database and after tunning. Thanks ---------------------------------------------------------------- Este mensaje fue enviado por el servidor de correo de RedIFE: correo.ife.org.mx

2 1

Is it safe to use slapcat for live ldap server backups?
by Marc Rovner 06 Nov '06

06 Nov '06

Greetings folks, The subject says it all. Is it safe to use `slapcat` for live ldap server backups? The slapcat page doesn't say anything regarding this, and the OpenLDAP FAQ-O-Matic page at http://www.openldap.org/faq/data/cache/287.html says rather non-definitely: For BDB and HDB, slapcat(8) can generally be used while the server is running The few entries on this list an the Internet I've found, mostly of folks having problems with backups and slapcat, folks are always asked "Did you stop theserver before running slapcat?", which any answer I find has the people saying "Yes". Does that mean there's a non-zero chance of a mangled backups? What situations can't you use slapcat in? Thanks in advance for your help and advice. -- - Marc David Rovner ************************************************************************** DemandTec Email Notice This email and any attachments may contain confidential and/or proprietary information and is intended solely for the use of the addressee. If you are not the intended recipient we request that you notify us via email or telephone and delete all copies of the message from your systems. Additionally, although DemandTec has taken reasonable precautions to ensure the security of this email and any attachments, we encourage you to take similar precautions and accept no liability for any loss or damage resulting from its use. DemandTec, 1 Circle Star Way, Suite 200, San Carlos, CA 94070, 650-226-4600

2 1

Re: ldapadd fails with "ldap_add: No such object (32)"
by Kurt D. Zeilenga 06 Nov '06

06 Nov '06

At 07:46 AM 11/3/2006, Reed Kempf wrote: >Hello, > >I am new to openldap and am having trouble with ldapadd. This is the error I am getting when running the command. > >[root@centutl1 openldap]# ldapadd -x -D "cn=ldapadmin,dc=cent,dc=lan" -w "foo" -f /etc/openldap/passwd.LDIF >adding new entry "uid=root,ou=People,dc=cent,dc=lan" >ldap_add: No such object (32) Have you reviewed the FAQ? In particular, http://www.openldap.org/faq/index.cgi?file=157 -- Kurt

3 2

Re: Is back-sql production ready ?
by Gavin Henry 06 Nov '06

06 Nov '06

<quote who="Mike Bloom"> > Gavin Henry wrote: >> <quote who="Mike Bloom"> >> >>> Hi, >>> >>> I've been using ldap for a few years now, but I've come to the >>> realization that I have a lot of mysql databases lying around that >>> should be integrated and unified. Its time to move to something more >>> robust. >>> >>> I'm using openldap-24 and am thrilled with the responsiveness and >>> extensibility of the software, but I'm curious about using mysql as a >>> back end instead of bdb. >>> >>> I've been able get unixODBC up and running without any problems, but >>> I'm >>> stumbling a bit over the 10,000 foot view on metadata and how to >>> generate metadata to insert a samba 3 object. >>> >>> After skimming for a few days, I found this lovely overview >>> (http://www.openldap.org/faq/data/cache/978.html) which didn't inspire >>> a >>> lot of confidence in how easy it would be to support abstract schemas >>> that we might want to host on this system. >>> >>> >>> From this discussion and subsequent threads >>> (http://www.openldap.org/lists/openldap-software/200511/msg00504.html) >>> , >>> I'm concerns about the practicality and that I might have unrealistic >>> expectations for being able to deploy 250k records on my mysql cluster >>> to service a series of ldap servers over back-sql. >>> >>> Does anyone run back-sql in production, and what kind of records on >>> what >>> scale of system are you using ? >>> >>> I have high confidence that I want to use ldap, but I'd rather right >>> provisioning software that talks to a mysql database than to talk to >>> the >>> ldap database. To make things more complicated, I suspect we will be >>> moving to oracle in the next few years. >>> >> >> I don't mean to sound cheeky or rude, but have you the great page about >> RDBMS vs Directories below? >> >> http://www.openldap.org/faq/index.cgi?_highlightWords=rdbms&file=378 >> >> It might help in your decision. >> >> Thanks. >> >> > Thanks Gavin, > > That's exactly the sort of thing I was looking for. I appreciate your > time. > No, no, we should appreciate the time of the people that wrote that FAQ page! ;-) Cheers. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

1 0

several replication questions
by Sepp 06 Nov '06

06 Nov '06

Hello, here is our three-level concept for replication, 1 provider, 2 subproviders, 10 consumers: * the provider should replicate most of his subtrees to both subproviders * a few subtrees should be replicated from the 2 subproviders to the provider * subprovider no1 should replicate his whole tree to 5 consumers * subprovider no2 should replicate his whole tree to the other 5 consumers * a few user entries (eg. the replication manager) should be replicated from subprovider no.1 to subprovider no.2, and from 1 consumer to the other 9 comsumers Here are the questions concerning this config: 1.) Is the best (and perhaps only ?) way for an implementation to devide the DITs in subordinate databases with the according syncrepl statements (similar to openldap-2.3.28/tests/data/slapd-glue-syncrepl*.conf, we have a successful test config for that) 2.) Do we need the glue overlay in this context (I don't think so) ? 3.) Is it necessary that one subordinate have all indexes from all other subordinates (I do think so, to prevent "index_param failed" error messages when searching from top level) 4.) Sorry, when that's a FAQ: Is it a must that the updatedn is not the same like the rootdn or is it only a recommendation ? Is this for security reasons or why ? 5.) With slurpd it is possible to replicate more than one subtrees from one database with several "suffix"-statements. How can I do that with syncrepl ? I didn't find a way to define more than one "searchbase" per "syncrepl rid" or to define more than one "syncrepl rid" per "database". I thank you for help in advance ! Regards Sepp

1 0

Copying database files from one platform to another
by François Beretti 06 Nov '06

06 Nov '06

Hi all, Is it safe to keep the same database files from one OpenLDAP server to another one, since the first one is 2.2.13 on ZLinux and the second one is 2.2.26 on an i386 architecture ? Of course, the configuration files and file paths are the same Thank you for your answer François

4 6

{Kerberos} Support in openldap
by john d 06 Nov '06

06 Nov '06

Hi, I like to know why the {KERBEROS} support in simple bind is deprecated in Openldap? Is it because of the security concerns (Kerberos password travelling over the wire and may travel in clear) or is it for some other reason? Thanks, John. __________________________________________________________________________________________ Check out the New Yahoo! Mail - Fire up a more powerful email and get things done faster. (http://advision.webevents.yahoo.com/mailbeta)

2 2

problems with existing entries disappearing
by Antonio Broughton 06 Nov '06

06 Nov '06

Hi, I am running OpenLDAP 2.2.13 on a CentOS 4.1 box (I am using the CentOS ldap rpm)... I have come across an issue, that I cannot seem to find the answer for anywhere!... The problem is that an entry has some how been removed from LDAP well, according to phpLDAPadmin and also ldapsearch. mytestentry _used to be_ in LDAP... it has now "gone?" I am using the following ldapsearch string.. ldapsearch -x -b "dc=tree,dc=internal,dc=company,dc=co,dc=nz" "uid=mytestentry" results in: # extended LDIF # # LDAPv3 # base <dc=tree,dc=internal,dc=company,dc=co,dc=nz> with scope sub # filter: uid=mytestentry # requesting: ALL # # search result search: 2 result: 0 Success # numResponses: 1 However, if I try to add this entry to LDAP using ldapadd ldapadd -x -D "cn=admin,dc=tree,dc=internal,dc=company,dc=co,dc=nz" -W -f mytestentry.ldif I get: adding new entry "uid=mytestentry,ou=Testing,dc=tree,dc=internal,dc=company,dc=co,dc=nz" ldap_add: Already exists (68) mytestentry.ldif contains: dn: uid=mytestentry,ou=Testing,dc=tree,dc=internal,dc=company,dc=co,dc=nz uid: mytestentry objectClass: account objectClass: top objectClass: simpleSecurityObject userPassword: {crypt}$1$wveq.Q8L6Hv$aYl5/TmfhgxC0Zs2F41 I have a few questions: 1) Why would this entry be removed? 2) Why when I try and add the entry, it says that it exists? 3) Is there a way to fix it? 4) Am I doing something wrong? Thanks Antonio Broughton

4 4

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-software November 2006