openldap-software January 2007

openldap-software@openldap.org

98 participants
123 discussions

configuring syncrepl with ManageDsaIt control
by Dieter Klünter 09 Jan '07

09 Jan '07

Hi, I have to setup a backup system and replication is done by syncrepl. The master has a few alias and referral entries, which are not replicated. How can be ManageDsaIt control be configured in order to replicate this entries als well. -Dieter -- Dieter Kluenter | Systemberatung http://www.dkluenter.de GPG Key ID:8EF7B6C6

1 0

Undefined symbols during make depend on AIX 5.3
by Justin Johnson 09 Jan '07

09 Jan '07

Hello, I am trying to build a static version of openldap 2.3.31 on AIX 5.3 using the IBM compiler. I configure it as follows. After the configure output is the output from running "make depend", which fails with unresolved symbols. A "make" with no target specified completes successfully with no errors, and the resulting executables (ldapadd, ldapsearch, etc) seem to work correctly. Does anyone have any idea what I'm doing wrong or if the errors can be ignored? Note that I have openssl built and installed to /svn/static/(lib,include,ssl, etc). Thanks, Justin svnadm /svn/static/build/openldap-2.3.31>se_dir/include -I/usr/include" \ < > CPPFLAGS="-I$base_dir/include -I/usr/include" \ > LDFLAGS="-L$base_dir/lib -L/usr/lib" \ > ./configure \ > --prefix=$base_dir \ > --enable-slapd=no \ > --enable-bdb=no \ > --enable-static=yes \ > --enable-shared=no Configuring OpenLDAP 2.3.31-Release ... checking build system type... powerpc-ibm-aix5.3.0.0 checking host system type... powerpc-ibm-aix5.3.0.0 checking target system type... powerpc-ibm-aix5.3.0.0 checking for a BSD-compatible install... build/shtool install -c checking whether build environment is sane... yes checking for gawk... no checking for mawk... no checking for nawk... nawk checking whether make sets $(MAKE)... yes checking configure arguments... configure: WARNING: slapd disabled, ignoring --enable-hdb argument configure: WARNING: slapd disabled, ignoring --enable-monitor argument configure: WARNING: slapd disabled, ignoring --enable-relay argument configure: WARNING: slapd disabled, ignoring --enable-syncprov argument done checking for ar... ar checking for style of include used by make... GNU checking for gcc... xlc_r checking for C compiler default output file name... a.out checking whether the C compiler works... yes checking whether we are cross compiling... no checking for suffix of executables... checking for suffix of object files... o checking whether we are using the GNU C compiler... no checking whether xlc_r accepts -g... yes checking for xlc_r option to accept ANSI C... none needed checking dependency style of xlc_r... none checking for a sed that does not truncate output... /bin/sed checking for egrep... grep -E checking for non-GNU ld... /bin/ld checking if the linker (/bin/ld) is GNU ld... no checking for /bin/ld option to reload object files... -r checking for BSD-compatible nm... /opt/freeware/bin/nm -B checking whether ln -s works... yes checking how to recognise dependent libraries... pass_all checking how to run the C preprocessor... xlc_r -E checking for ANSI C header files... yes checking for sys/types.h... yes checking for sys/stat.h... yes checking for stdlib.h... yes checking for string.h... yes checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking dlfcn.h usability... yes checking dlfcn.h presence... yes checking for dlfcn.h... yes checking the maximum length of command line arguments... 8192 checking command to parse /opt/freeware/bin/nm -B output from xlc_r object... ok checking for objdir... .libs checking for ranlib... ranlib checking for strip... strip checking if xlc_r static flag works... yes checking for xlc_r option to produce PIC... checking if xlc_r supports -c -o file.o... yes checking whether the xlc_r linker (/bin/ld) supports shared libraries... yes checking dynamic linker characteristics... aix5.3.0.0 ld.so checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... no checking for shl_load... no checking for shl_load in -ldld... no checking for dlopen... yes checking whether a program can dlopen itself... no checking if libtool supports shared libraries... yes checking whether to build shared libraries... no checking whether to build static libraries... yes configure: creating libtool checking how to run the C preprocessor... xlc_r -E checking for be_app in -lbe... no checking for gcc... (cached) xlc_r checking whether we are using the GNU C compiler... (cached) no checking whether xlc_r accepts -g... (cached) yes checking for xlc_r option to accept ANSI C... (cached) none needed checking dependency style of xlc_r... (cached) none checking for xlc_r depend flag... no configure: WARNING: do not know how to generate dependencies checking for afopen in -ls... yes checking for EBCDIC... no checking for ANSI C header files... yes checking for dirent.h that defines DIR... yes checking for library containing opendir... none required checking for sys/wait.h that is POSIX.1 compatible... yes checking whether termios.h defines TIOCGWINSZ... no checking whether sys/ioctl.h defines TIOCGWINSZ... yes checking arpa/inet.h usability... yes checking arpa/inet.h presence... yes checking for arpa/inet.h... yes checking arpa/nameser.h usability... yes checking arpa/nameser.h presence... yes checking for arpa/nameser.h... yes checking assert.h usability... yes checking assert.h presence... yes checking for assert.h... yes checking bits/types.h usability... no checking bits/types.h presence... no checking for bits/types.h... no checking conio.h usability... no checking conio.h presence... no checking for conio.h... no checking crypt.h usability... yes checking crypt.h presence... yes checking for crypt.h... yes checking direct.h usability... no checking direct.h presence... no checking for direct.h... no checking errno.h usability... yes checking errno.h presence... yes checking for errno.h... yes checking fcntl.h usability... yes checking fcntl.h presence... yes checking for fcntl.h... yes checking filio.h usability... no checking filio.h presence... no checking for filio.h... no checking getopt.h usability... no checking getopt.h presence... no checking for getopt.h... no checking grp.h usability... yes checking grp.h presence... yes checking for grp.h... yes checking io.h usability... no checking io.h presence... no checking for io.h... no checking libutil.h usability... no checking libutil.h presence... no checking for libutil.h... no checking limits.h usability... yes checking limits.h presence... yes checking for limits.h... yes checking locale.h usability... yes checking locale.h presence... yes checking for locale.h... yes checking malloc.h usability... yes checking malloc.h presence... yes checking for malloc.h... yes checking for memory.h... (cached) yes checking psap.h usability... no checking psap.h presence... no checking for psap.h... no checking pwd.h usability... yes checking pwd.h presence... yes checking for pwd.h... yes checking process.h usability... no checking process.h presence... no checking for process.h... no checking sgtty.h usability... yes checking sgtty.h presence... yes checking for sgtty.h... yes checking shadow.h usability... no checking shadow.h presence... no checking for shadow.h... no checking stddef.h usability... yes checking stddef.h presence... yes checking for stddef.h... yes checking for string.h... (cached) yes checking for strings.h... (cached) yes checking sysexits.h usability... yes checking sysexits.h presence... yes checking for sysexits.h... yes checking sys/file.h usability... yes checking sys/file.h presence... yes checking for sys/file.h... yes checking sys/filio.h usability... no checking sys/filio.h presence... no checking for sys/filio.h... no checking sys/errno.h usability... yes checking sys/errno.h presence... yes checking for sys/errno.h... yes checking sys/ioctl.h usability... yes checking sys/ioctl.h presence... yes checking for sys/ioctl.h... yes checking sys/param.h usability... yes checking sys/param.h presence... yes checking for sys/param.h... yes checking sys/resource.h usability... yes checking sys/resource.h presence... yes checking for sys/resource.h... yes checking sys/select.h usability... yes checking sys/select.h presence... yes checking for sys/select.h... yes checking sys/socket.h usability... yes checking sys/socket.h presence... yes checking for sys/socket.h... yes checking for sys/stat.h... (cached) yes checking sys/syslog.h usability... yes checking sys/syslog.h presence... yes checking for sys/syslog.h... yes checking sys/time.h usability... yes checking sys/time.h presence... yes checking for sys/time.h... yes checking for sys/types.h... (cached) yes checking sys/uio.h usability... yes checking sys/uio.h presence... yes checking for sys/uio.h... yes checking syslog.h usability... yes checking syslog.h presence... yes checking for syslog.h... yes checking termios.h usability... yes checking termios.h presence... yes checking for termios.h... yes checking for unistd.h... (cached) yes checking utime.h usability... yes checking utime.h presence... yes checking for utime.h... yes checking for resolv.h... yes checking for netinet/tcp.h... yes checking for sys/ucred.h... no checking for sigaction... yes checking for sigset... yes checking for socket... yes checking for select... yes checking for sys/select.h... (cached) yes checking for sys/socket.h... (cached) yes checking types of arguments for select... int,fd_set *,struct timeval * checking for poll... yes checking poll.h usability... yes checking poll.h presence... yes checking for poll.h... yes checking sys/epoll.h usability... no checking sys/epoll.h presence... no checking for sys/epoll.h... no checking declaration of sys_errlist... yes checking for strerror... yes checking for strerror_r... yes checking non-posix strerror_r... no checking regex.h usability... yes checking regex.h presence... yes checking for regex.h... yes checking for library containing regfree... none required checking for compatible POSIX regex... yes checking sys/uuid.h usability... no checking sys/uuid.h presence... no checking for sys/uuid.h... no checking to see if -lrpcrt4 is needed for win32 UUID support... no checking for resolver link (default)... yes checking for hstrerror... yes checking for getaddrinfo... yes checking for getnameinfo... yes checking for gai_strerror... yes checking for inet_ntop... yes checking INET6_ADDRSTRLEN... yes checking struct sockaddr_storage... yes checking sys/un.h usability... yes checking sys/un.h presence... yes checking for sys/un.h... yes checking openssl/ssl.h usability... yes checking openssl/ssl.h presence... yes checking for openssl/ssl.h... yes checking for SSL_library_init in -lssl... yes checking OpenSSL library version (CRL checking capability)... yes checking for _beginthread... no checking pthread.h usability... yes checking pthread.h presence... yes checking for pthread.h... yes checking POSIX thread version... 10 checking for LinuxThreads pthread.h... no checking for GNU Pth pthread.h... no checking sched.h usability... yes checking sched.h presence... yes checking for sched.h... yes checking for pthread_create in default libraries... yes checking for sched_yield... yes checking for pthread_yield... no checking for thr_yield... no checking for pthread_kill... yes checking for pthread_rwlock_destroy... yes checking for pthread_detach with <pthread.h>... yes checking for pthread_setconcurrency... yes checking for pthread_getconcurrency... yes checking for thr_setconcurrency... no checking for thr_getconcurrency... no checking for pthread_kill_other_threads_np... no checking for LinuxThreads implementation... no checking for LinuxThreads consistency... no checking if pthread_create() works... yes checking if select yields when using pthreads... yes checking for thread specific errno... yes checking for thread specific h_errno... yes checking for ctime_r... yes checking for gethostbyname_r... yes checking for gethostbyaddr_r... yes checking number of arguments of ctime_r... 2 checking number of arguments of gethostbyname_r... 0 checking number of arguments of gethostbyaddr_r... 0 checking for openlog... yes checking sasl/sasl.h usability... no checking sasl/sasl.h presence... no checking for sasl/sasl.h... no checking sasl.h usability... no checking sasl.h presence... no checking for sasl.h... no configure: WARNING: Could not locate Cyrus SASL configure: WARNING: SASL authentication not supported! checking fetch(3) library... no checking for setproctitle... no checking for setproctitle in -lutil... no checking for mode_t... yes checking for off_t... yes checking for pid_t... yes checking for ssize_t... yes checking for caddr_t... yes checking for size_t... yes checking for long long... yes checking for ptrdiff_t... yes checking for socklen_t... yes checking return type of signal handlers... void checking for sig_atomic_t... yes checking for uid_t in sys/types.h... yes checking whether time.h and sys/time.h may both be included... yes checking whether struct tm is in sys/time.h or time.h... time.h checking for struct stat.st_blksize... yes checking for struct passwd.pw_gecos... yes checking for struct passwd.pw_passwd... yes checking if toupper() requires islower()... no checking for an ANSI C-conforming const... yes checking if compiler understands volatile... yes checking whether byte ordering is bigendian... yes checking for short... yes checking size of short... 2 checking for int... yes checking size of int... 4 checking for long... yes checking size of long... 4 checking for long long... (cached) yes checking size of long long... 8 checking for wchar_t... yes checking size of wchar_t... 2 checking for working memcmp... yes checking for strftime... yes checking for inet_aton()... yes checking for _spawnlp... no checking for _snprintf... no checking for _vsnprintf... no checking for vprintf... yes checking for _doprnt... yes checking for snprintf... yes checking for vsnprintf... yes checking for bcopy... yes checking for closesocket... no checking for chroot... yes checking for endgrent... yes checking for endpwent... yes checking for fcntl... yes checking for flock... no checking for fstat... yes checking for getdtablesize... yes checking for getgrgid... yes checking for gethostname... yes checking for getpass... yes checking for getpassphrase... no checking for getpwuid... yes checking for getpwnam... yes checking for getspnam... no checking for gettimeofday... yes checking for initgroups... yes checking for inet_ntoa_b... no checking for lockf... yes checking for memcpy... yes checking for memmove... yes checking for memrchr... no checking for mkstemp... yes checking for mktemp... yes checking for pipe... yes checking for read... yes checking for recv... yes checking for recvfrom... yes checking for setpwfile... yes checking for setgid... yes checking for setegid... yes checking for setsid... yes checking for setuid... yes checking for seteuid... yes checking for signal... yes checking for strdup... yes checking for strpbrk... yes checking for strrchr... yes checking for strsep... yes checking for strstr... yes checking for strtol... yes checking for strtoul... yes checking for strtoq... no checking for strtouq... no checking for strtoll... yes checking for strspn... yes checking for sysconf... yes checking for waitpid... yes checking for wait4... yes checking for write... yes checking for send... yes checking for sendmsg... yes checking for sendto... yes checking for getopt... yes checking for getpeereid... yes configure: creating ./config.status config.status: creating Makefile config.status: creating doc/Makefile config.status: creating doc/man/Makefile config.status: creating doc/man/man1/Makefile config.status: creating doc/man/man3/Makefile config.status: creating doc/man/man5/Makefile config.status: creating doc/man/man8/Makefile config.status: creating clients/Makefile config.status: creating clients/tools/Makefile config.status: creating include/Makefile config.status: creating libraries/Makefile config.status: creating libraries/liblber/Makefile config.status: creating libraries/libldap/Makefile config.status: creating libraries/libldap_r/Makefile config.status: creating libraries/liblunicode/Makefile config.status: creating libraries/liblutil/Makefile config.status: creating libraries/librewrite/Makefile config.status: creating servers/Makefile config.status: creating servers/slapd/Makefile config.status: creating servers/slapd/back-bdb/Makefile config.status: creating servers/slapd/back-dnssrv/Makefile config.status: creating servers/slapd/back-hdb/Makefile config.status: creating servers/slapd/back-ldap/Makefile config.status: creating servers/slapd/back-ldbm/Makefile config.status: creating servers/slapd/back-ldif/Makefile config.status: creating servers/slapd/back-meta/Makefile config.status: creating servers/slapd/back-monitor/Makefile config.status: creating servers/slapd/back-null/Makefile config.status: creating servers/slapd/back-passwd/Makefile config.status: creating servers/slapd/back-perl/Makefile config.status: creating servers/slapd/back-relay/Makefile config.status: creating servers/slapd/back-shell/Makefile config.status: creating servers/slapd/back-sql/Makefile config.status: creating servers/slapd/shell-backends/Makefile config.status: creating servers/slapd/slapi/Makefile config.status: creating servers/slapd/overlays/Makefile config.status: creating servers/slurpd/Makefile config.status: creating tests/Makefile config.status: creating tests/run config.status: creating tests/progs/Makefile config.status: creating include/portable.h config.status: include/portable.h is unchanged config.status: creating include/ldap_features.h config.status: include/ldap_features.h is unchanged config.status: creating include/lber_types.h config.status: include/lber_types.h is unchanged config.status: executing depfiles commands config.status: executing default commands Making servers/slapd/backends.c Add config ... Add ldif ... Making servers/slapd/overlays/statover.c Please run "make depend" to build dependencies svnadm /svn/static/build/openldap-2.3.31> svnadm /svn/static/build/openldap-2.3.31>make depend Making depend in /svn/static/build/openldap-2.3.31 Entering subdirectory include make[1]: Entering directory `/svn/static/build/openldap-2.3.31/include' Making ldap_config.h make[1]: Leaving directory `/svn/static/build/openldap-2.3.31/include' Entering subdirectory libraries make[1]: Entering directory `/svn/static/build/openldap-2.3.31/libraries' Making depend in /svn/static/build/openldap-2.3.31/libraries Entering subdirectory liblutil make[2]: Entering directory `/svn/static/build/openldap-2.3.31/libraries/liblutil' ../../build/mkdep -d "." -c "xlc_r" -m "" -I../../include -I../../include -I/svn/static/include -I/usr/include base64.c csn.c entropy.c sasl.c signal.c hash.c passfile.c md5.c passwd.c sha1.c getpass.c lockf.c utils.c uuid.c sockpair.c avl.c tavl.c ldif.c fetch.c testavl.c setproctitle.c detach.c "fetch.c", line 52.19: 1506-068 (E) Operation between types "char*" and "const char*" is not allowed. ld: 0711-317 ERROR: Undefined symbol: .ber_memfree ld: 0711-317 ERROR: Undefined symbol: .ber_memalloc ld: 0711-317 ERROR: Undefined symbol: .ber_memrealloc ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more information. make[2]: Leaving directory `/svn/static/build/openldap-2.3.31/libraries/liblutil' Entering subdirectory liblber make[2]: Entering directory `/svn/static/build/openldap-2.3.31/libraries/liblber' ../../build/mkdep -l -d "." -c "xlc_r" -m "" -I../../include -I../../include -I/svn/static/include -I/usr/include assert.c decode.c encode.c io.c bprint.c debug.c memory.c options.c sockbuf.c stdio.c ld: 0711-317 ERROR: Undefined symbol: .main ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more information. make[2]: Leaving directory `/svn/static/build/openldap-2.3.31/libraries/liblber' Entering subdirectory liblunicode make[2]: Entering directory `/svn/static/build/openldap-2.3.31/libraries/liblunicode' ../../build/mkdep -d "." -c "xlc_r" -m "" -I../../include -I../../include -I/svn/static/include -I/usr/include ucstr.c ucdata.c ucgendat.c ure.c urestubs.c "ucdata.c", line 411.21: 1506-068 (E) Operation between types "unsigned long*" and "const unsigned long*" is not allowed. ld: 0711-317 ERROR: Undefined symbol: .lutil_progname ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more information. make[2]: Leaving directory `/svn/static/build/openldap-2.3.31/libraries/liblunicode' Entering subdirectory libldap make[2]: Entering directory `/svn/static/build/openldap-2.3.31/libraries/libldap' ../../build/mkdep -l -d "." -c "xlc_r" -m "" -I../../include -I../../include -I/svn/static/include -I/usr/include bind.c open.c result.c error.c compare.c search.c controls.c messages.c references.c extended.c cyrus.c modify.c add.c modrdn.c delete.c abandon.c sasl.c sbind.c kbind.c unbind.c cancel.c filter.c free.c sort.c passwd.c whoami.c getdn.c getentry.c getattr.c getvalues.c addentry.c request.c os-ip.c url.c sortctrl.c vlvctrl.c init.c options.c print.c string.c util-int.c schema.c charray.c tls.c os-local.c dnssrv.c utf-8.c utf-8-conv.c turn.c groupings.c txn.c ppolicy.c ld: 0711-317 ERROR: Undefined symbol: .main ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more information. make[2]: Leaving directory `/svn/static/build/openldap-2.3.31/libraries/libldap' Entering subdirectory libldap_r make[2]: Entering directory `/svn/static/build/openldap-2.3.31/libraries/libldap_r' touch .links ../../build/mkdep -l -d "." -c "xlc_r" -m "" -I../../include -I../../include -DLDAP_R_COMPILE -I./../libldap -I/svn/static/include -I/usr/include threads.c rdwr.c tpool.c rq.c thr_posix.c thr_cthreads.c thr_thr.c thr_lwp.c thr_nt.c thr_pth.c thr_stub.c thr_debug.c apitest.c test.c bind.c open.c result.c error.c compare.c search.c controls.c messages.c references.c extended.c cyrus.c modify.c add.c modrdn.c delete.c abandon.c sasl.c sbind.c kbind.c unbind.c cancel.c filter.c free.c sort.c passwd.c whoami.c getdn.c getentry.c getattr.c getvalues.c addentry.c request.c os-ip.c url.c sortctrl.c vlvctrl.c init.c options.c print.c string.c util-int.c schema.c charray.c tls.c os-local.c dnssrv.c utf-8.c utf-8-conv.c turn.c groupings.c txn.c ppolicy.c "tls.c", line 118.33: 1506-280 (E) Function argument assignment between types "unsigned long(*)(void)" and "unsigned int(*)(void)" is not allowed. ld: 0711-224 WARNING: Duplicate symbol: .main ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more information. ld: 0711-317 ERROR: Undefined symbol: .ber_memalloc_x ld: 0711-317 ERROR: Undefined symbol: .ber_strdup_x ld: 0711-317 ERROR: Undefined symbol: .ber_memfree_x ld: 0711-317 ERROR: Undefined symbol: .ber_memrealloc_x ld: 0711-317 ERROR: Undefined symbol: .ber_memcalloc_x ld: 0711-317 ERROR: Undefined symbol: ber_pvt_log_print ld: 0711-317 ERROR: Undefined symbol: .ber_memvfree_x ld: 0711-317 ERROR: Undefined symbol: .ber_bvecfree ld: 0711-317 ERROR: Undefined symbol: .X509_get_ext_by_NID ld: 0711-317 ERROR: Undefined symbol: .X509_get_ext ld: 0711-317 ERROR: Undefined symbol: .X509V3_EXT_d2i ld: 0711-317 ERROR: Undefined symbol: .sk_num ld: 0711-317 ERROR: Undefined symbol: .sk_value ld: 0711-317 ERROR: Undefined symbol: .ASN1_STRING_data ld: 0711-317 ERROR: Undefined symbol: .ASN1_STRING_length ld: 0711-317 ERROR: Undefined symbol: .GENERAL_NAMES_free ld: 0711-317 ERROR: Undefined symbol: .X509_get_subject_name ld: 0711-317 ERROR: Undefined symbol: .X509_NAME_get_text_by_NID ld: 0711-317 ERROR: Undefined symbol: .X509_free ld: 0711-317 ERROR: Undefined symbol: .SSL_get_verify_result ld: 0711-317 ERROR: Undefined symbol: .SSL_version ld: 0711-317 ERROR: Undefined symbol: .ssl3_send_alert ld: 0711-317 ERROR: Undefined symbol: .SSL_get_peer_certificate ld: 0711-317 ERROR: Undefined symbol: .ber_sockbuf_ctrl ld: 0711-317 ERROR: Undefined symbol: ber_sockbuf_io_debug ld: 0711-317 ERROR: Undefined symbol: .ber_sockbuf_add_io ld: 0711-317 ERROR: Undefined symbol: .SSL_connect ld: 0711-317 ERROR: Undefined symbol: .ERR_peek_error ld: 0711-317 ERROR: Undefined symbol: .ERR_error_string ld: 0711-317 ERROR: Undefined symbol: .ber_sockbuf_remove_io ld: 0711-317 ERROR: Undefined symbol: .SSL_write ld: 0711-317 ERROR: Undefined symbol: .SSL_get_error ld: 0711-317 ERROR: Undefined symbol: .SSL_read ld: 0711-317 ERROR: Undefined symbol: .SSL_pending ld: 0711-317 ERROR: Undefined symbol: .SSL_shutdown ld: 0711-317 ERROR: Undefined symbol: .SSL_free ld: 0711-317 ERROR: Undefined symbol: .ber_memfree ld: 0711-317 ERROR: Undefined symbol: .ber_memalloc ld: 0711-317 ERROR: Undefined symbol: .BIO_new ld: 0711-317 ERROR: Undefined symbol: .SSL_set_bio ld: 0711-317 ERROR: Undefined symbol: .SSL_new ld: 0711-317 ERROR: Undefined symbol: .CRYPTO_set_locking_callback ld: 0711-317 ERROR: Undefined symbol: .CRYPTO_set_id_callback ld: 0711-317 ERROR: Undefined symbol: .BIO_new_mem_buf ld: 0711-317 ERROR: Undefined symbol: .PEM_read_bio_DHparams ld: 0711-317 ERROR: Undefined symbol: .BIO_free ld: 0711-317 ERROR: Undefined symbol: .DH_generate_parameters ld: 0711-317 ERROR: Undefined symbol: .SSL_load_client_CA_file ld: 0711-317 ERROR: Undefined symbol: .sk_new_null ld: 0711-317 ERROR: Undefined symbol: .SSL_add_dir_cert_subjects_to_stack ld: 0711-317 ERROR: Undefined symbol: .sk_free ld: 0711-317 ERROR: Undefined symbol: .RSA_generate_key ld: 0711-317 ERROR: Undefined symbol: .X509_STORE_CTX_get_current_cert ld: 0711-317 ERROR: Undefined symbol: .X509_STORE_CTX_get_error ld: 0711-317 ERROR: Undefined symbol: .X509_STORE_CTX_get_error_depth ld: 0711-317 ERROR: Undefined symbol: .X509_get_issuer_name ld: 0711-317 ERROR: Undefined symbol: .X509_NAME_oneline ld: 0711-317 ERROR: Undefined symbol: .X509_verify_cert_error_string ld: 0711-317 ERROR: Undefined symbol: .CRYPTO_free ld: 0711-317 ERROR: Undefined symbol: .SSL_state_string_long ld: 0711-317 ERROR: Undefined symbol: .SSL_alert_type_string_long ld: 0711-317 ERROR: Undefined symbol: .SSL_alert_desc_string_long ld: 0711-317 ERROR: Undefined symbol: .ERR_get_error_line ld: 0711-317 ERROR: Undefined symbol: .ERR_error_string_n ld: 0711-317 ERROR: Undefined symbol: .SSL_get_current_cipher ld: 0711-317 ERROR: Undefined symbol: .SSL_CIPHER_get_bits ld: 0711-317 ERROR: Undefined symbol: .ber_strndup_x ld: 0711-317 ERROR: Undefined symbol: .ber_dup ld: 0711-317 ERROR: Undefined symbol: .ber_scanf ld: 0711-317 ERROR: Undefined symbol: .ber_peek_tag ld: 0711-317 ERROR: Undefined symbol: .ber_printf ld: 0711-317 ERROR: Undefined symbol: .ber_first_element ld: 0711-317 ERROR: Undefined symbol: .ber_next_element ld: 0711-317 ERROR: Undefined symbol: .ber_flatten2 ld: 0711-317 ERROR: Undefined symbol: .ber_free ld: 0711-317 ERROR: Undefined symbol: .ber_str2bv ld: 0711-317 ERROR: Undefined symbol: .ber_write ld: 0711-317 ERROR: Undefined symbol: .ber_log_dump ld: 0711-317 ERROR: Undefined symbol: .ber_flush ld: 0711-317 ERROR: Undefined symbol: .ber_pvt_socket_set_nonblock ld: 0711-317 ERROR: Undefined symbol: .ber_sockbuf_free ld: 0711-317 ERROR: Undefined symbol: .ber_sockbuf_alloc ld: 0711-317 ERROR: Undefined symbol: ber_sockbuf_io_tcp ld: 0711-317 ERROR: Undefined symbol: ber_sockbuf_io_fd ld: 0711-317 ERROR: Undefined symbol: .ber_dupbv ld: 0711-317 ERROR: Undefined symbol: .ber_bvfree ld: 0711-317 ERROR: Undefined symbol: .ber_reset ld: 0711-317 ERROR: Undefined symbol: .ber_skip_tag ld: 0711-317 ERROR: Undefined symbol: .ber_alloc_t ld: 0711-317 ERROR: Undefined symbol: .ber_get_enum ld: 0711-317 ERROR: Undefined symbol: .ber_get_next ld: 0711-317 ERROR: Undefined symbol: .ber_get_int ld: 0711-317 ERROR: Undefined symbol: .ber_set_option ld: 0711-317 ERROR: Undefined symbol: .X509_NAME_entry_count ld: 0711-317 ERROR: Undefined symbol: .X509_NAME_get_entry ld: 0711-317 ERROR: Undefined symbol: .X509_NAME_ENTRY_get_object ld: 0711-317 ERROR: Undefined symbol: .X509_NAME_ENTRY_get_data ld: 0711-317 ERROR: Undefined symbol: .OBJ_obj2nid ld: 0711-317 ERROR: Undefined symbol: .OBJ_nid2sn ld: 0711-317 ERROR: Undefined symbol: .OBJ_obj2txt ld: 0711-317 ERROR: Undefined symbol: .ber_memvfree ld: 0711-317 ERROR: Undefined symbol: .SSL_get_certificate ld: 0711-317 ERROR: Undefined symbol: .SSL_accept ld: 0711-317 ERROR: Undefined symbol: .SSLv23_method ld: 0711-317 ERROR: Undefined symbol: .SSL_CTX_new ld: 0711-317 ERROR: Undefined symbol: .SSL_CTX_set_session_id_context ld: 0711-317 ERROR: Undefined symbol: .SSL_CTX_set_cipher_list ld: 0711-317 ERROR: Undefined symbol: .SSL_CTX_load_verify_locations ld: 0711-317 ERROR: Undefined symbol: .SSL_CTX_set_default_verify_paths ld: 0711-317 ERROR: Undefined symbol: .SSL_CTX_set_client_CA_list ld: 0711-317 ERROR: Undefined symbol: .SSL_CTX_use_PrivateKey_file ld: 0711-317 ERROR: Undefined symbol: .SSL_CTX_use_certificate_file ld: 0711-317 ERROR: Undefined symbol: .SSL_CTX_check_private_key ld: 0711-317 ERROR: Undefined symbol: .BIO_new_file ld: 0711-317 ERROR: Undefined symbol: .DH_size ld: 0711-317 ERROR: Undefined symbol: .SSL_CTX_set_verify ld: 0711-317 ERROR: Undefined symbol: .SSL_CTX_set_tmp_rsa_callback ld: 0711-317 ERROR: Undefined symbol: .SSL_CTX_set_tmp_dh_callback ld: 0711-317 ERROR: Undefined symbol: .SSL_CTX_get_cert_store ld: 0711-317 ERROR: Undefined symbol: .X509_STORE_set_flags ld: 0711-317 ERROR: Undefined symbol: .SSL_CTX_free ld: 0711-317 ERROR: Undefined symbol: .SSL_load_error_strings ld: 0711-317 ERROR: Undefined symbol: .SSL_library_init ld: 0711-317 ERROR: Undefined symbol: .X509V3_add_standard_extensions ld: 0711-317 ERROR: Undefined symbol: .EVP_cleanup ld: 0711-317 ERROR: Undefined symbol: .ERR_remove_state ld: 0711-317 ERROR: Undefined symbol: .ERR_free_strings make[2]: Leaving directory `/svn/static/build/openldap-2.3.31/libraries/libldap_r' Entering subdirectory librewrite make[2]: Entering directory `/svn/static/build/openldap-2.3.31/libraries/librewrite' ../../build/mkdep -d "." -c "xlc_r" -m "" -I../../include -I../../include -I/svn/static/include -I/usr/include config.c context.c info.c ldapmap.c map.c params.c rule.c session.c subst.c var.c xmap.c parse.c rewrite.c ld: 0711-317 ERROR: Undefined symbol: .lutil_atoix ld: 0711-317 ERROR: Undefined symbol: .ber_set_option ld: 0711-317 ERROR: Undefined symbol: .ldap_set_option ld: 0711-317 ERROR: Undefined symbol: .ldap_pvt_thread_mutex_destroy ld: 0711-317 ERROR: Undefined symbol: .ldap_pvt_thread_mutex_lock ld: 0711-317 ERROR: Undefined symbol: .ldap_pvt_thread_mutex_unlock ld: 0711-317 ERROR: Undefined symbol: .ldap_free_urldesc ld: 0711-317 ERROR: Undefined symbol: .ldap_init ld: 0711-317 ERROR: Undefined symbol: .ldap_search_s ld: 0711-317 ERROR: Undefined symbol: .ldap_unbind ld: 0711-317 ERROR: Undefined symbol: .ldap_count_entries ld: 0711-317 ERROR: Undefined symbol: .ldap_first_entry ld: 0711-317 ERROR: Undefined symbol: .ldap_msgfree ld: 0711-317 ERROR: Undefined symbol: .ldap_get_dn ld: 0711-317 ERROR: Undefined symbol: .ldap_get_values ld: 0711-317 ERROR: Undefined symbol: .ldap_value_free ld: 0711-317 ERROR: Undefined symbol: ldap_int_global_options ld: 0711-317 ERROR: Undefined symbol: .ldap_log_printf ld: 0711-317 ERROR: Undefined symbol: .ldap_pvt_thread_mutex_init ld: 0711-317 ERROR: Undefined symbol: .ldap_url_parse ld: 0711-317 ERROR: Undefined symbol: .ldap_unbind_s ld: 0711-317 ERROR: Undefined symbol: .ldap_initialize ld: 0711-317 ERROR: Undefined symbol: .ldap_simple_bind_s ld: 0711-317 ERROR: Undefined symbol: .avl_free ld: 0711-317 ERROR: Undefined symbol: .avl_insert ld: 0711-317 ERROR: Undefined symbol: .avl_delete ld: 0711-317 ERROR: Undefined symbol: .avl_find ld: 0711-317 ERROR: Undefined symbol: .ldap_pvt_thread_rdwr_wlock ld: 0711-317 ERROR: Undefined symbol: .ldap_pvt_thread_rdwr_wunlock ld: 0711-317 ERROR: Undefined symbol: .ldap_pvt_thread_rdwr_destroy ld: 0711-317 ERROR: Undefined symbol: .ldap_pvt_thread_rdwr_rlock ld: 0711-317 ERROR: Undefined symbol: .ldap_pvt_thread_rdwr_runlock ld: 0711-317 ERROR: Undefined symbol: .ldap_pvt_thread_rdwr_init ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more information. make[2]: Leaving directory `/svn/static/build/openldap-2.3.31/libraries/librewrite' make[1]: Leaving directory `/svn/static/build/openldap-2.3.31/libraries' Entering subdirectory clients make[1]: Entering directory `/svn/static/build/openldap-2.3.31/clients' Making depend in /svn/static/build/openldap-2.3.31/clients Entering subdirectory tools make[2]: Entering directory `/svn/static/build/openldap-2.3.31/clients/tools' ../../build/mkdep -d "." -c "xlc_r" -m "" -I../../include -I../../include -I/svn/static/include -I/usr/include ldapsearch.c ldapmodify.c ldapdelete.c ldapmodrdn.c ldappasswd.c ldapwhoami.c ldapcompare.c common.c ld: 0711-224 WARNING: Duplicate symbol: .main ld: 0711-224 WARNING: Duplicate symbol: .handle_private_option ld: 0711-224 WARNING: Duplicate symbol: .usage ld: 0711-224 WARNING: Duplicate symbol: options ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more information. ld: 0711-317 ERROR: Undefined symbol: .ldap_err2string ld: 0711-317 ERROR: Undefined symbol: .ldap_cancel_s ld: 0711-317 ERROR: Undefined symbol: .ldap_abandon ld: 0711-317 ERROR: Undefined symbol: .ber_init2 ld: 0711-317 ERROR: Undefined symbol: .ldap_pvt_put_filter ld: 0711-317 ERROR: Undefined symbol: .ber_flatten2 ld: 0711-317 ERROR: Undefined symbol: .ldap_str2charray ld: 0711-317 ERROR: Undefined symbol: .ber_printf ld: 0711-317 ERROR: Undefined symbol: .ldap_charray_free ld: 0711-317 ERROR: Undefined symbol: .ldap_set_option ld: 0711-317 ERROR: Undefined symbol: .ldap_pvt_tls_destroy ld: 0711-317 ERROR: Undefined symbol: .ldap_unbind_ext ld: 0711-317 ERROR: Undefined symbol: .ldap_bind ld: 0711-317 ERROR: Undefined symbol: .ldap_perror ld: 0711-317 ERROR: Undefined symbol: .ldap_result ld: 0711-317 ERROR: Undefined symbol: .ldap_parse_result ld: 0711-317 ERROR: Undefined symbol: .ldap_find_control ld: 0711-317 ERROR: Undefined symbol: .ldap_parse_passwordpolicy_control ld: 0711-317 ERROR: Undefined symbol: .ldap_passwordpolicy_err2txt ld: 0711-317 ERROR: Undefined symbol: .ldap_controls_free ld: 0711-317 ERROR: Undefined symbol: .ber_memfree ld: 0711-317 ERROR: Undefined symbol: .ber_memvfree ld: 0711-317 ERROR: Undefined symbol: .ber_set_option ld: 0711-317 ERROR: Undefined symbol: .lutil_sigaction ld: 0711-317 ERROR: Undefined symbol: .ldap_url_desc2str ld: 0711-317 ERROR: Undefined symbol: .ldap_initialize ld: 0711-317 ERROR: Undefined symbol: ber_pvt_opt_on ld: 0711-317 ERROR: Undefined symbol: .ldap_start_tls_s ld: 0711-317 ERROR: Undefined symbol: .ber_strdup ld: 0711-317 ERROR: Undefined symbol: .ldap_get_option ld: 0711-317 ERROR: Undefined symbol: __Version ld: 0711-317 ERROR: Undefined symbol: .ldap_memfree ld: 0711-317 ERROR: Undefined symbol: .lutil_progname ld: 0711-317 ERROR: Undefined symbol: ldif_debug ld: 0711-317 ERROR: Undefined symbol: .lutil_get_filed_password ld: 0711-317 ERROR: Undefined symbol: .ber_alloc_t ld: 0711-317 ERROR: Undefined symbol: .ber_free ld: 0711-317 ERROR: Undefined symbol: .ber_flatten ld: 0711-317 ERROR: Undefined symbol: .ldap_put_vrFilter ld: 0711-317 ERROR: Undefined symbol: .ber_init ld: 0711-317 ERROR: Undefined symbol: .ber_scanf ld: 0711-317 ERROR: Undefined symbol: .ldap_search_ext ld: 0711-317 ERROR: Undefined symbol: .ldap_sort_entries ld: 0711-317 ERROR: Undefined symbol: .ldap_first_message ld: 0711-317 ERROR: Undefined symbol: .ldap_msgtype ld: 0711-317 ERROR: Undefined symbol: .ldap_msgid ld: 0711-317 ERROR: Undefined symbol: .ldap_parse_intermediate ld: 0711-317 ERROR: Undefined symbol: .ber_bvfree ld: 0711-317 ERROR: Undefined symbol: .ldap_extended_operation ld: 0711-317 ERROR: Undefined symbol: .ldap_next_message ld: 0711-317 ERROR: Undefined symbol: .ldap_msgfree ld: 0711-317 ERROR: Undefined symbol: .ldif_put ld: 0711-317 ERROR: Undefined symbol: .ber_memalloc ld: 0711-317 ERROR: Undefined symbol: .lutil_b64_ntop ld: 0711-317 ERROR: Undefined symbol: .ldap_parse_extended_result ld: 0711-317 ERROR: Undefined symbol: .ldap_parse_reference ld: 0711-317 ERROR: Undefined symbol: .ldap_get_dn_ber ld: 0711-317 ERROR: Undefined symbol: .ldap_dn2ufn ld: 0711-317 ERROR: Undefined symbol: .ldap_get_entry_controls ld: 0711-317 ERROR: Undefined symbol: .ldap_get_attribute_ber ld: 0711-317 ERROR: Undefined symbol: .ldif_is_not_printable ld: 0711-317 ERROR: Undefined symbol: .ber_str2bv make[2]: Leaving directory `/svn/static/build/openldap-2.3.31/clients/tools' make[1]: Leaving directory `/svn/static/build/openldap-2.3.31/clients' Entering subdirectory servers make[1]: Entering directory `/svn/static/build/openldap-2.3.31/servers' Making depend in /svn/static/build/openldap-2.3.31/servers Entering subdirectory slapd make[2]: Entering directory `/svn/static/build/openldap-2.3.31/servers/slapd' run configure with --enable-slapd to make slapd slapadd slapcat slapdn slapindex slappasswd slaptest slapauth slapacl make[2]: Leaving directory `/svn/static/build/openldap-2.3.31/servers/slapd' Entering subdirectory slurpd make[2]: Entering directory `/svn/static/build/openldap-2.3.31/servers/slurpd' run configure with --enable-slurpd to make slurpd make[2]: Leaving directory `/svn/static/build/openldap-2.3.31/servers/slurpd' make[1]: Leaving directory `/svn/static/build/openldap-2.3.31/servers' Entering subdirectory tests make[1]: Entering directory `/svn/static/build/openldap-2.3.31/tests' Making depend in /svn/static/build/openldap-2.3.31/tests Entering subdirectory progs make[2]: Entering directory `/svn/static/build/openldap-2.3.31/tests/progs' ../../build/mkdep -d "." -c "xlc_r" -m "" -I../../include -I../../include -I/svn/static/include -I/usr/include slapd-tester.c slapd-search.c slapd-read.c slapd-addel.c slapd-modrdn.c slapd-modify.c slapd-bind.c ld: 0711-224 WARNING: Duplicate symbol: .main ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more information. ld: 0711-317 ERROR: Undefined symbol: .lutil_atoix make[2]: Leaving directory `/svn/static/build/openldap-2.3.31/tests/progs' make[1]: Leaving directory `/svn/static/build/openldap-2.3.31/tests' Entering subdirectory doc make[1]: Entering directory `/svn/static/build/openldap-2.3.31/doc' Making depend in /svn/static/build/openldap-2.3.31/doc Entering subdirectory man make[2]: Entering directory `/svn/static/build/openldap-2.3.31/doc/man' Making depend in /svn/static/build/openldap-2.3.31/doc/man Entering subdirectory man1 make[3]: Entering directory `/svn/static/build/openldap-2.3.31/doc/man/man1' make[3]: Nothing to be done for `depend'. make[3]: Leaving directory `/svn/static/build/openldap-2.3.31/doc/man/man1' Entering subdirectory man3 make[3]: Entering directory `/svn/static/build/openldap-2.3.31/doc/man/man3' make[3]: Nothing to be done for `depend'. make[3]: Leaving directory `/svn/static/build/openldap-2.3.31/doc/man/man3' Entering subdirectory man5 make[3]: Entering directory `/svn/static/build/openldap-2.3.31/doc/man/man5' make[3]: Nothing to be done for `depend'. make[3]: Leaving directory `/svn/static/build/openldap-2.3.31/doc/man/man5' Entering subdirectory man8 make[3]: Entering directory `/svn/static/build/openldap-2.3.31/doc/man/man8' make[3]: Nothing to be done for `depend'. make[3]: Leaving directory `/svn/static/build/openldap-2.3.31/doc/man/man8' make[2]: Leaving directory `/svn/static/build/openldap-2.3.31/doc/man' make[1]: Leaving directory `/svn/static/build/openldap-2.3.31/doc' svnadm /svn/static/build/openldap-2.3.31>

2 2

Re: openldap proxy issue
by jerrrry＠voila.fr 08 Jan '07

08 Jan '07

my issue is i need to install a rpm. i can take the RH entreprise 5 rpm for openldap : version 2.3.27 is it enough to have this wonderful feature ? if not, whitch is the first version i can have it ? Thanks, Thomas > Message du 08/01/07 à 12h22 > De : "Pierangelo Masarati" > A : jerrrry(a)voila.fr > Copie à : openldap-software(a)openldap.org > Objet : Re: openldap proxy issue > > jerrrry(a)voila.fr wrote: > > > > > > thank you very much: it works very well with slapd(8) 2.3.27. > > > > my issue now is that i will have to use the package supplied by RH > > enteprise 4: openldap-servers-2.2.13-6.4E > > > > and with this version i get this message: > > > > > > > > unknown directive "idassert-bind" inside backend database definition > > (ignored) > > > > line 80 (idassert-authzfrom "dn.regex=.+") > > > > > > > > slapd doesn't know idassert-authzfrom ! > > > > > > > > so, do you know if there is an other directive with this version that > > enable me to do the same things (anonymous bind rewrite as an admin DN) > > > 1) no there isn't. > 2) in 2.2, libldap and proxy backends were very buggy; things are much > better now (2.3.32), and will be even better with 2.3.33. There is no > good reason (not even support: you won't get any from RedHat) to stay > with that old buggy version. > > p. > > > > Ing. Pierangelo Masarati > OpenLDAP Core Team > > SysNet s.n.c. > Via Dossi, 8 - 27100 Pavia - ITALIA > http://www.sys-net.it > ------------------------------------------ > Office: +39.02.23998309 > Mobile: +39.333.4963172 > Email: pierangelo.masarati(a)sys-net.it > ------------------------------------------ > > >

5 4

Changing Schema without re-import
by Heinzmann, Robert 08 Jan '07

08 Jan '07

Hello, One more question regarding the changing of the LDAP Schema without reimporting all the data. Is it possible to add ORDERING clause to a schema definition without re-import ? E.g.: Changing attributetype ( 1.3.6.1.4.1.11048.1.1.1.5 NAME 'vacationEnd' SINGLE-VALUE SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 DESC 'End of vacation' EQUALITY generalizedTimeMatch ) To: attributetype ( 1.3.6.1.4.1.11048.1.1.1.5 NAME 'vacationEnd' SINGLE-VALUE SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 DESC 'End of vacation' EQUALITY generalizedTimeMatch ORDERING numericStringOrderingMatch ) To search for dates with >= and <= ? Regards, Robert ------------------------------------------------------------------------ COMPUTER CONCEPT CC Computersysteme und Kommunikationstechnik GmbH Robert Heinzmann Wiener Str. 114 - 116 Email: heinzmann(a)cc-dresden.de 01219 Dresden Telefon: +49 (0)351/8 76 92-0 Telefax: +49 (0)351/8 76 92-99 Internet: http://www.cc-dresden.de ------------------------------------------------------------------------

2 1

installing openldap openldap-2.3.31
by Douglas B. Jones 08 Jan '07

08 Jan '07

I have a problem installing openldap-2.3.31 on a Tru64 5.1 computer. First, here is the install script: LDFLAGS="-rpath /usr/local/BerkleyDB.4.5.20.NC/lib -L/usr/local/BerkleyDB.4.5.20.NC/lib" export LDFLAGS CPPFLAGS="-I/usr/local/BerkleyDB.4.5.20.NC/include -DHAVE_GETADDRINFO -I/usr/local" export CPPFLAGS ./configure --prefix=/usr/local/openldap --enable-crypt --enable-debug\ --enable-rewrite --enable-overlays -exec-prefix=/usr/local/openldap make depend make All of the above goes well. When I try to do: LDFLAGS="-rpath /usr/local/BerkleyDB.4.5.20.NC/lib -L/usr/local/BerkleyDB.4.5.20.NC/lib" export LDFLAGS CPPFLAGS="-I/usr/local/BerkleyDB.4.5.20.NC/include -DHAVE_GETADDRINFO -I/usr/local" export CPPFLAGS make install I get the following error: Entering subdirectory libldap ../../build/shtool mkdir -p /usr/local/openldap-2.3.31-nossl-902/lib /bin/sh ../..//libtool --mode=install ../../build/shtool install -c -m 644 libld ap.la /usr/local/openldap-2.3.31-nossl-902/lib libtool: install: error: cannot install `libldap.la' to a directory not ending in /usr/local/BerkleyDB.4.5.20.NC/lib *** Exit 1 Stop. *** Exit 1 Stop. *** Exit 1 Stop. Thanks for any help!

1 1

Re: OpenLDAP user credentials lifetime issue
by Kurt D. Zeilenga 08 Jan '07

08 Jan '07

At 02:06 AM 1/3/2007, Alina Dubrovska wrote: >I have heard about "shadowAccount" objectclass, is it supported by OpenLDAP and could it be helpful? slapd(8) has no knowledge of semantics of shadowAccount class and the shadow* attributes. That is, slapd(8) just hold entries of this class... it doesn't make use shadow* attributes. Kurt

1 0

Re: openldap proxy issue
by jerrrry＠voila.fr 08 Jan '07

08 Jan '07

thank you very much: it works very well with slapd(8) 2.3.27. my issue now is that i will have to use the package supplied by RH enteprise 4: openldap-servers-2.2.13-6.4E and with this version i get this message: unknown directive "idassert-bind" inside backend database definition (ignored) line 80 (idassert-authzfrom "dn.regex=.+") slapd doesn't know idassert-authzfrom ! so, do you know if there is an other directive with this version that enable me to do the same things (anonymous bind rewrite as an admin DN) Thank you for your help ? > Message du 06/01/07 à 00h38 > De : "Pierangelo Masarati" > A : jerrrry(a)voila.fr > Copie à : openldap-software(a)openldap.org > Objet : Re: openldap proxy issue > > jerrrry(a)voila.fr wrote: > > > > hi, > > > > > > I'am configuring slapd(8) 2.3.27 for use as a proxy to another LDAP > > server. > > > > the purpose is to do an ldap authentication to a ldap backend, that > > need that an administator account bind to do a search, with > > applications that can only do an anonymous bind. > > > > can openldap rewrite the anonynous connection to bind with the > > administrator acount instead ? > > > Try something like: > > database ldap > suffix "dc=example,dc=com" > uri "ldap://:9011" > idassert-bind bindmethod="simple" > binddn="cn=Manager,dc=example,dc=com" > credentials="secret" > mode="self" > idassert-authzfrom "dn.regex=.+" > idassert-authzfrom "dn:" > > > p. > > > > Ing. Pierangelo Masarati > OpenLDAP Core Team > > SysNet s.n.c. > Via Dossi, 8 - 27100 Pavia - ITALIA > http://www.sys-net.it > ------------------------------------------ > Office: +39.02.23998309 > Mobile: +39.333.4963172 > Email: pierangelo.masarati(a)sys-net.it > ------------------------------------------ > > >

2 1

no structuralObjectClass operational attribute error
by Todd R Davis 08 Jan '07

08 Jan '07

I am setting up a new samba/openldap server. SLES 10 OS. I am trying to populate the database and receive an error. using command: ldapadd -x -h localhost -D "cn=Manager,dc=hrhtest2,dc=org" -f test3.ldif -W get error: adding new entry "cn=Domain Admins,ou=Groups,dc=hrhtest2,dc=org" ldap_add: Internal (implementation specific) error (80) additional info: no structuralObjectClass operational attribute test3.ldif: dn: cn=Domain Admins,ou=Groups,dc=hrhtest2,dc=org objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 512 cn: Domain Admins memberUid: Administrator description: Netbios Domain Administrators sambaSID: S-1-5-21-924382055-1192225092-1506617496-512 sambaGroupType: 2 displayName: Domain Admins Thanks in advance.... trdavis(a)hendricks.org ---------------------------------------------------------------------------------------------------- CONFIDENTIALITY NOTICE This e-mail and the files transmitted with it are intended solely for the use of addressee. If you are not the intended recipient, or a person responsible for delivering this e-mail to the intended recipient, you are hereby notified that you have received this e-mail in error and that any use, dissemination, distribution, forwarding, printing, or copying of this email is strictly prohibited. If you have received this e-mail in error, please notify the sender immediately by replying to this e-mail and deleting it from your computer.

4 3

syncrepl with refreshAndPersist works in 2.2.x, but not in 2.3.x
by Andreas Taschner 07 Jan '07

07 Jan '07

Hi Slave servers that are replicating changes using the refreshAndPersist operation type do not get updates from the master server until they are restarted. They will not be notified of any other changes. If I set the replication protocol operation type to refreshOnly and a suitable interval, the changes do get replicated as expected. I have verified that syncrepl with type=refreshAndPersist works with openldap2-2.2.24 and 2.2.27) also works as it should. However neither the 2.3.19-x (which is the current version on my platform - SLES 10, kernel 2.6.16) nor 2.3.30 work as expected. I have traversed the net and tried numerous configuration variations, but not found anything that changes the behavior. I always end up having to restart the slave to get the updates over. Needless to say that I have tried on different hardware (all x86-based) and all on complete fresh installations of the base OS. When loading the consumer/replica/slave, the apparently connects to the provider (Config: ** successfully added syncrepl "ldap://host1.nts.com:389"). There seems to be many people who have this working, but I have not yet been able to find a configuration example that works. Snip of consumer config (full config files attached) : ############################### database bdb suffix dc=example,dc=com directory /var/opt/ldap/master rootdn "cn=admin,dc=example,dc=com" rootpw secret index entryUUID,entryCSN,objectClass eq,pres index cn,displayname,uid,sn,givenname,telephoneNumber sub,eq,pres cachesize 250000 checkpoint 50 5 idlcachesize 750000 mode 0600 dbconfig set_cachesize 0 268435456 1 dbconfig set_lg_regionmax 262144 dbconfig set_lg_bsize 2097152 access to * by self write by dn.base="cn=admin,dc=example,dc=com" write by anonymous auth by * read syncrepl rid=101 provider=ldap://host1.nts.com type=refreshAndPersist retry="10 10 60 +" searchbase="dc=example,dc=com" filter="(objectClass=*)" scope=sub schemachecking=off sizelimit=500000 timelimit=360000 bindmethod=simple binddn="cn=admin,dc=example,dc=com" credentials=secret updateref ldap://host1.nts.com ############################### Snip of provider : ############################### overlay syncprov syncprov-checkpoint: 100 10 syncprov-sessionlog: 3000 database bdb suffix dc=example,dc=com directory /var/opt/ldap/master rootdn "cn=admin,dc=example,dc=com" rootpw secret index entryUUID,entryCSN,objectClass eq,pres index cn,displayname,uid,sn,givenname,telephoneNumber sub,eq,pres cachesize 250000 checkpoint 50 5 idlcachesize 750000 mode 0600 dbconfig set_cachesize 0 268435456 1 dbconfig set_lg_regionmax 262144 dbconfig set_lg_bsize 2097152 access to * by self write by dn.base="cn=admin,dc=example,dc=com" write by anonymous auth by * read ############################### Am I missing something or is refreshAndPersist broken ? Any hints would be most appreciated. Thank you Andreas Taschner Support Engineer Novell Inc.

4 4

multiple copies of openldap
by Ian Moroney 06 Jan '07

06 Jan '07

Hi all. I think that i have 2 copies of openldap installed on my server... My conf files exist at the following locations: /etc/ldap.conf /etc/openldap/ldap.conf /usr/local/etc/openldap/ldap.conf When i do a /usr/lib/openldap/slapd -V it comes up with: abuild@delius:/usr/src/packages/BUILD/openldap-2.3.19/servers/slapd I can also do a /usr/local/libexec/slapd -V which comes up with: root@svcs01:/tmp/openldap-2.3.27/servers/slapd (which is the correct one) Is it possible to remove one of the copies of openldap? preferrably 2.3.19... i am unsure of what files to delete. If necessary, i can delete all files, and all references, and configure openldap again. Advice is greatly appreciated. Thanks and Kind Regards, Ian Moroney Field Engineer T: 020 8891 3010 M: 07791 965924 F: 020 8288 2591 www.techdivision.co.uk <http://www.techdivision.co.uk/> TechDivision - Making IT Work

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-software January 2007