openldap-software September 2008

openldap-software@openldap.org

60 participants
64 discussions

Compilation on OpenVMS
by Senn, Michael - Acision 06 Sep '08

06 Sep '08

Good Morning, I am currently involved in an investigation to start using OpenLDAP on OpenVMS within our company. Part of this investigation has been digging through the mail lists, I find that there were some questions about compilation on OpenVMS back between 2000 and 2003. Since then it appears to have gone quiet. At the end of the initial questions there was no definitive answer that I was able to find for the following questions: Has anyone successfully compiled OpenLDAP on OpenVMS, the release 2.4 is preferred? An additional question is that since OpenVMS is in the config.guess file is this a start point or does it mean that compilation is supported out of the box? Thanks Michael Senn This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.

2 2

openldap nightmare
by John Nietzsche 05 Sep '08

05 Sep '08

Dear members, I was trying to use slapd with configurations within itself, i mean: not using /etc/openldap/slapd.conf. Since i could not get authentication working i decided to switch configuration to /etc/opendalp/slapd.conf, and everything worked. My doube is what kinf of error i am doing ? Could some tell me? Here is my ldap.ldif: ################################# # # # Global configuration settings # # # ################################# dn: cn=config objectClass: olcGlobal cn: config olcIdleTimeout: 64 olcLogLevel: -1 olcReferral: ldap://root.openldap.org ############################ # # # Included file directives # # # ############################ dn: cn=include{0},cn=config objectClass: olcIncludeFile cn: include{0} olcInclude: /etc/openldap/schema/core.schema dn: cn=include{1},cn=config objectClass: olcIncludeFile cn: include{1} olcInclude: /etc/openldap/schema/cosine.schema dn: cn=include{2},cn=config objectClass: olcIncludeFile cn: include{2} olcInclude: /etc/openldap/schema/corba.schema dn: cn=include{3},cn=config objectClass: olcIncludeFile cn: include{3} olcInclude: /etc/openldap/schema/dyngroup.schema dn: cn=include{4},cn=config objectClass: olcIncludeFile cn: include{4} olcInclude: /etc/openldap/schema/inetorgperson.schema dn: cn=include{5},cn=config objectClass: olcIncludeFile cn: include{5} olcInclude: /etc/openldap/schema/java.schema dn: cn=include{6},cn=config objectClass: olcIncludeFile cn: include{6} olcInclude: /etc/openldap/schema/misc.schema dn: cn=include{7},cn=config objectClass: olcIncludeFile cn: include{7} olcInclude: /etc/openldap/schema/nis.schema dn: cn=include{8},cn=config objectClass: olcIncludeFile cn: include{8} olcInclude: /etc/openldap/schema/openldap.schema dn: cn=include{9},cn=config objectClass: olcIncludeFile cn: include{9} olcInclude: /etc/openldap/schema/ppolicy.schema ############################################################### # # # If openldap was compiled with support for modules, then ... # # # ############################################################### dn: cn=module{0},cn=config objectClass: olcModuleList cn: module{0} olcModulePath: /usr/local/libexec/openldap olcModuleLoad: back_ldbm.la #dn: cn=module{1},cn=config #objectClass: olcModuleList #cn: module{1} #olcModulePath: /usr/local/libexec/openldap #olcModuleLoad: back_ldap.la ################ # # # Schema entry # # # ################ dn: cn=schema,cn=config objectClass: olcSchemaConfig cn: cn=schema #################### # # # Backend # # # #################### dn: olcBackend=ldbm,cn=config objectClass: olcBackendConfig olcBackend: ldbm ############# # # # Databases # # # ############# dn: olcDatabase=ldbm,cn=config objectClass: olcDatabaseConfig objectClass: olcLdbmConfig olcDatabase: ldbm olcSuffix: "dc=cpd,dc=ufv,dc=br" olcDbDirectory: /asd/var/ldap olcDbIndex: objectClass eq olcAccess: to * by users read olcRootDN: "cn=Manager,dc=cpd,dc=ufv,dc=br" olcRootPW: {SSHA}q1mH0pWNnHF0+K4hV5yOV4I7p/VfIIYs END OF ldap.ldif Now, my slapd.conf sioux@etosha$ cat /etc/openldap/slapd.conf # # See slapd.conf(5) for details on configuration options. # This file should NOT be world readable. # include /etc/openldap/schema/core.schema # Define global ACLs to disable default read access. # Do not enable referrals until AFTER you have a working directory # service AND an understanding of referrals. #referral ldap://root.openldap.org pidfile /var/run/openldap/slapd.pid argsfile /var/run/openldap/slapd.args # Load dynamic backend modules: modulepath /usr/local/libexec/openldap # moduleload back_bdb.la moduleload back_ldap.la moduleload back_ldbm.la # moduleload back_passwd.la # moduleload back_shell.la # Sample security restrictions # Require integrity protection (prevent hijacking) # Require 112-bit (3DES or better) encryption for updates # Require 63-bit encryption for simple bind # security ssf=1 update_ssf=112 simple_bind=64 # Sample access control policy: # Root DSE: allow anyone to read it # Subschema (sub)entry DSE: allow anyone to read it # Other DSEs: # Allow self write access # Allow authenticated users read access # Allow anonymous users to authenticate # Directives needed to implement policy: # access to dn.base="" by * read # access to dn.base="cn=Subschema" by * read # access to * # by self write # by users read # by anonymous auth # # if no access controls are present, the default policy # allows anyone and everyone to read anything but restricts # updates to rootdn. (e.g., "access to * by * read") # # rootdn can always read and write EVERYTHING! ####################################################################### # BDB database definitions ####################################################################### database ldbm suffix "dc=cpd,dc=ufv,dc=br" rootdn "cn=Manager,dc=cpd,dc=ufv,dc=br" # Cleartext passwords, especially for the rootdn, should # be avoid. See slappasswd(8) and slapd.conf(5) for details. # Use of strong authentication encouraged. rootpw {SSHA}q1mH0pWNnHF0+K4hV5yOV4I7p/VfIIYs # The database directory MUST exist prior to running slapd AND # should only be accessible by the slapd and slap tools. # Mode 700 recommended. directory /var/openldap-data # Indices to maintain index objectClass eq OpenLDAP works if i am using the slapd.conf, but if i choose -F /x/y/z it does not work. Thanks a lot for your time and cooperation, best regards

5 4

Re: (ITS#5545) Inconsistency in multi-master setup
by Gavin Henry 04 Sep '08

04 Sep '08

Not at all. Don't worry about it. ----- "ST Wong (ITSC)" <ST(a)itsc.cuhk.edu.hk> wrote: > Get it. Sorry for the trouble caused, and thanks a lot. > > Best Regards, > /ST Wong > > -----Original Message----- > From: Gavin Henry [mailto:ghenry@suretecsystems.com] > Sent: Friday, September 05, 2008 2:58 AM > To: ST Wong (ITSC) > Cc: openldap-its(a)openldap.org > Subject: Re: (ITS#5545) Inconsistency in multi-master setup > > ST(a)itsc.cuhk.edu.hk wrote: > > Oops, I tested on both nodes, which is not supposed to do so in > > mirrormode, right? Sorry for the trouble caused. > > > > Thanks. > > > > > > Not at the same time, no. The point is to have one node available to > the > clients at one time and the other in hot standby, whereby your > network > infrastructure redirects clients if one node goes down etc. > > -- > Kind Regards, > > Gavin Henry. > Managing Director. > > T +44 (0) 1224 279484 > M +44 (0) 7930 323266 > F +44 (0) 1224 824887 > E ghenry(a)suretecsystems.com > > Open Source. Open Solutions(tm). > > http://www.suretecsystems.com/ > > Suretec Systems is a limited company registered in Scotland. > Registered > number: SC258005. Registered office: 13 Whiteley Well Place, > Inverurie, > Aberdeenshire, AB51 4FP. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/ Suretec Systems is a limited company registered in Scotland. Registered number: SC258005. Registered office: 13 Whiteley Well Place, Inverurie, Aberdeenshire, AB51 4FP.

1 0

Failure populating ldap.
by John Nietzsche 04 Sep '08

04 Sep '08

Hi openldap comunnity, i am having a hard time to populate my ldap server. Below is what i get: etosha# ldapadd -x -D 'cn=Manager,dc=cpd,dc=ufv,dc=br' -W -f top.ldif Enter LDAP Password: ldap_bind: Invalid DN syntax (34) additional info: invalid DN etosha# cat top.ldif etosha# ldapadd -x -D 'cn=Manager,dc=cpd,dc=ufv,dc=br' -W -f top.ldif Enter LDAP Password: ldap_bind: Invalid DN syntax (34) additional info: invalid DN etosha# Does anybody have any ideia about what is going on? Thanks.

4 4

Documentation
by John Nietzsche 04 Sep '08

04 Sep '08

Hi List Members, reading documentation for ldap administration version 2.3 and 2.4 i realized the figure 5.1 are different! Which one is the correct one? Thanks in advance.

4 4

Entry size on disk
by Senn, Michael - Acision 04 Sep '08

04 Sep '08

Good Morning, Is there a way to calculate the amount of space required (disk and memory) when the schema (plus data) and index set are known? When loading up from an ldif file I was surprised that the size from the ldif was about doubled when in the database. The backend I am using is the back-hdb. Thanks Michael Senn This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.

2 1

Initial configuration file
by John Nietzsche 04 Sep '08

04 Sep '08

Hi folks, i am preparing for configuring my openldap installation and my configuration file is the one inserted inline in the email message body. My question is: is there something wrong, that should not work? ################################# # Global configuration settings # ################################# dn: cn=config objectClass: olcGlobal cn: config olcIdleTimeout: 64 olcLogLevel: -1 olcReferral: ldap://root.openldap.org ############################ # Included file directives # ############################ dn: cn=include{0},cn=config objectClass: olcIncludeFile cn: include{0} olcInclude: /etc/openldap/schema/core.schema dn: cn=include{1},cn=config objectClass: olcIncludeFile cn: include{1} olcInclude: /etc/openldap/schema/cosine.schema dn: cn=include{2},cn=config objectClass: olcIncludeFile cn: include{2} olcInclude: /etc/openldap/schema/corba.schema dn: cn=include{3},cn=config objectClass: olcIncludeFile cn: include{3} olcInclude: /etc/openldap/schema/dyngroup.schema dn: cn=include{4},cn=config objectClass: olcIncludeFile cn: include{4} olcInclude: /etc/openldap/schema/inetorgperson.schema dn: cn=include{5},cn=config objectClass: olcIncludeFile cn: include{5} olcInclude: /etc/openldap/schema/java.schema dn: cn=include{6},cn=config objectClass: olcIncludeFile cn: include{6} olcInclude: /etc/openldap/schema/misc.schema dn: cn=include{7},cn=config objectClass: olcIncludeFile cn: include{7} olcInclude: /etc/openldap/schema/nis.schema dn: cn=include{8},cn=config objectClass: olcIncludeFile cn: include{8} olcInclude: /etc/openldap/schema/openldap.schema dn: cn=include{9},cn=config objectClass: olcIncludeFile cn: include{9} olcInclude: /etc/openldap/schema/ppolicy.schema ############################################################### # If openldap was compiled with support for modules, then ... # ############################################################### #dn: cn=module{0},cn=config #objectClass: olcModuleList #cn: module{0} #olcModuleLoad: /xx/yy/zz #dn: cn=module{1},cn=config #objectClass: olcModuleList #cn: module{1} #olcModulePath: /xx/yy #olcModuleLoad: aa.la #olcModuleLoad: bb.la ################ # Schema entry # ################ dn: cn=schema,cn=config objectClass: olcSchemaConfig cn: cn=schema

2 1

Substitute for include
by John Nietzsche 04 Sep '08

04 Sep '08

Dear list members, i am setting my ldap configuration. I read that includes are deprecated. What is it supposed to be the replacement? Thanks in advance.

3 2

new user
by John Nietzsche 04 Sep '08

04 Sep '08

Dear friends, i have just installed OpenBSD 2.3 in my OpenBSD server. I am totally new to this subject, so i am facing some lack of understanding about how openldap works. Reading the administrador guide, i realized that, there are three branches below cn=config. Reading the documentation, i saw that if openldap was compiled with support for dynamic module load i could put the entries below the cn=config (I saw an example in page 24 of administrator manual). How do i know what features where compiled with my openldap installation? For now, it is all. Thanks.

1 0

2.4 syncprov implementation
by Aaron Richton 03 Sep '08

03 Sep '08

Are there any wire-visible changes to syncprov in the 2.4 series? Specifically, are 2.3 slaves and 2.4 providers expected to interact well?

2 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-software September 2008