Okay, now I am really lost. Replication works between hosts on port 389.
What I have changed thus far is setup stunnel between hosts and set the
target to 127.0.0.1:637. Then I get the 'not mine' records. I also upgraded
to the latest stable release and I get the same thing. What is odd is that
if I change the replication target to use 389, then it works just fine. Any
ideas? The fact that it works fine on 389 and changing IPs & port breaking
makes me think my configuration order is fine. Looking over the docs I don't
see any directives that makes me thing my setup is wrong. I've tested the
stunnel forwarding, that is getting me to the correct target.
/etc/openldap/slapd.conf
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/rfc2307bis.schema
include /etc/openldap/schema/yast.schema
pidfile /var/run/slapd/slapd.pid
argsfile /var/run/slapd/slapd.args
modulepath /usr/lib/openldap/modules
access to dn.base=""
by * read
access to dn.base="cn=Subschema"
by * read
access to attrs=userPassword,userPKCS12
by self write
by * auth
access to attrs=shadowLastChange
by self write
by * read
access to *
by * read
loglevel 0
#Creating keys and certs for these BUT we are skipping
#using them because of a bug in the current SuSE OpenLDAP kit
TLSCACertificateFile /etc/openldap/servercert.pem
TLSCertificateFile /etc/openldap/servercert.pem
TLSCertificateKeyFile /etc/openldap/serverkey.pem
database bdb
suffix "dc=remote,dc=binc,dc=net"
rootdn "ROOTDNACCOUNT"
rootpw "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
directory /var/lib/ldap/dc=remote_dc=binc_dc=net
checkpoint 1024 5
replogfile /var/lib/ldap/replog/ldap.dc=remote_dc=binc_dc=net.replog
replica uri="ldap://127.0.0.1:637/"
binddn="ROOTDNACCOUNT"
bindmethod=simple credentials=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
cachesize 10000
index objectClass,uidNumber,gidNumber eq
index member,mail eq,pres
index cn,displayname,uid,sn,givenname sub,eq,pres
slurpd debug logs:
/usr/lib/openldap/slurpd -t /var/lib/slurpd -d -1
@(#) $OpenLDAP: slurpd 2.3.32 (Feb 5 2007 16:10:48) $
binc@custa-rmon01:/home/binc/rpmbuild/BUILD/openldap-2.3.32/servers/slurpd
Config: opening config file "/etc/openldap/slapd.conf"
Config: (include /etc/openldap/schema/core.schema)
Config: opening config file "/etc/openldap/schema/core.schema"
Config: (include /etc/openldap/schema/cosine.schema)
Config: opening config file "/etc/openldap/schema/cosine.schema"
Config: (attributetype ( 0.9.2342.19200300.100.1.2 NAME 'textEncodedORAddress'
EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{256} ))
Config: (attributetype ( 0.9.2342.19200300.100.1.4 NAME 'info' DESC 'RFC1274:
general information' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{2048} ))
Config: (attributetype ( 0.9.2342.19200300.100.1.5 NAME
( 'drink' 'favouriteDrink' ) DESC 'RFC1274: favorite drink' EQUALITY
caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{256} ))
Config: (attributetype ( 0.9.2342.19200300.100.1.6 NAME 'roomNumber'
DESC 'RFC1274: room number' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
Config: (attributetype ( 0.9.2342.19200300.100.1.7 NAME 'photo' DESC 'RFC1274:
photo (G3 fax)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.23{25000} ))
Config: (attributetype ( 0.9.2342.19200300.100.1.8 NAME 'userClass'
DESC 'RFC1274: category of user' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
Config: (attributetype ( 0.9.2342.19200300.100.1.9 NAME 'host' DESC 'RFC1274:
host computer' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
Config: (attributetype ( 0.9.2342.19200300.100.1.10 NAME 'manager'
DESC 'RFC1274: DN of manager' EQUALITY distinguishedNameMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.12 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.11 NAME 'documentIdentifier'
DESC 'RFC1274: unique identifier of document' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
Config: (attributetype ( 0.9.2342.19200300.100.1.12 NAME 'documentTitle'
DESC 'RFC1274: title of document' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
Config: (attributetype ( 0.9.2342.19200300.100.1.13 NAME 'documentVersion'
DESC 'RFC1274: version of document' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
Config: (attributetype ( 0.9.2342.19200300.100.1.14 NAME 'documentAuthor'
DESC 'RFC1274: DN of author of document' EQUALITY distinguishedNameMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.15 NAME 'documentLocation'
DESC 'RFC1274: location of document original' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
Config: (attributetype ( 0.9.2342.19200300.100.1.20 NAME
( 'homePhone' 'homeTelephoneNumber' ) DESC 'RFC1274: home telephone number'
EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.50 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.21 NAME 'secretary'
DESC 'RFC1274: DN of secretary' EQUALITY distinguishedNameMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.12 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.22 NAME 'otherMailbox' SYNTAX
1.3.6.1.4.1.1466.115.121.1.39 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.26 NAME 'aRecord' EQUALITY
caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.27 NAME 'mDRecord' EQUALITY
caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.28 NAME 'mXRecord' EQUALITY
caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.29 NAME 'nSRecord' EQUALITY
caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.30 NAME 'sOARecord' EQUALITY
caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.31 NAME 'cNAMERecord'
EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.38 NAME 'associatedName'
DESC 'RFC1274: DN of entry associated with domain' EQUALITY
distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.39 NAME 'homePostalAddress'
DESC 'RFC1274: home postal address' EQUALITY caseIgnoreListMatch SUBSTR
caseIgnoreListSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.40 NAME 'personalTitle'
DESC 'RFC1274: personal title' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
Config: (attributetype ( 0.9.2342.19200300.100.1.41 NAME
( 'mobile' 'mobileTelephoneNumber' ) DESC 'RFC1274: mobile telephone number'
EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.50 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.42 NAME
( 'pager' 'pagerTelephoneNumber' ) DESC 'RFC1274: pager telephone number'
EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.50 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.43 NAME
( 'co' 'friendlyCountryName' ) DESC 'RFC1274: friendly country name' EQUALITY
caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.44 NAME 'uniqueIdentifier'
DESC 'RFC1274: unique identifer' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{256} ))
Config: (attributetype ( 0.9.2342.19200300.100.1.45
NAME 'organizationalStatus' DESC 'RFC1274: organizational status' EQUALITY
caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{256} ))
Config: (attributetype ( 0.9.2342.19200300.100.1.46 NAME 'janetMailbox'
DESC 'RFC1274: Janet mailbox' EQUALITY caseIgnoreIA5Match SUBSTR
caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} ))
Config: (attributetype ( 0.9.2342.19200300.100.1.47
NAME 'mailPreferenceOption' DESC 'RFC1274: mail preference option' SYNTAX
1.3.6.1.4.1.1466.115.121.1.27 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.48 NAME 'buildingName'
DESC 'RFC1274: name of building' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
Config: (attributetype ( 0.9.2342.19200300.100.1.49 NAME 'dSAQuality'
DESC 'RFC1274: DSA Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.19
SINGLE-VALUE ))
Config: (attributetype ( 0.9.2342.19200300.100.1.50 NAME 'singleLevelQuality'
DESC 'RFC1274: Single Level Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.13
SINGLE-VALUE ))
Config: (attributetype ( 0.9.2342.19200300.100.1.51
NAME 'subtreeMinimumQuality' DESC 'RFC1274: Subtree Mininum Quality' SYNTAX
1.3.6.1.4.1.1466.115.121.1.13 SINGLE-VALUE ))
Config: (attributetype ( 0.9.2342.19200300.100.1.52
NAME 'subtreeMaximumQuality' DESC 'RFC1274: Subtree Maximun Quality' SYNTAX
1.3.6.1.4.1.1466.115.121.1.13 SINGLE-VALUE ))
Config: (attributetype ( 0.9.2342.19200300.100.1.53 NAME 'personalSignature'
DESC 'RFC1274: Personal Signature (G3 fax)' SYNTAX
1.3.6.1.4.1.1466.115.121.1.23 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.54 NAME 'dITRedirect'
DESC 'RFC1274: DIT Redirect' EQUALITY distinguishedNameMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.12 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.55 NAME 'audio'
DESC 'RFC1274: audio (u-law)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.4{25000} ))
Config: (attributetype ( 0.9.2342.19200300.100.1.56 NAME 'documentPublisher'
DESC 'RFC1274: publisher of document' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ))
Config: (objectclass ( 0.9.2342.19200300.100.4.4 NAME
( 'pilotPerson' 'newPilotPerson' ) SUP person STRUCTURAL MAY ( userid $
textEncodedORAddress $ rfc822Mailbox $ favouriteDrink $ roomNumber $
userClass $ homeTelephoneNumber $ homePostalAddress $ secretary $
personalTitle $ preferredDeliveryMethod $ businessCategory $ janetMailbox
$ otherMailbox $ mobileTelephoneNumber $ pagerTelephoneNumber $
organizationalStatus $ mailPreferenceOption $ personalSignature ) ))
Config: (objectclass ( 0.9.2342.19200300.100.4.5 NAME 'account' SUP top
STRUCTURAL MUST userid MAY ( description $ seeAlso $ localityName $
organizationName $ organizationalUnitName $ host ) ))
Config: (objectclass ( 0.9.2342.19200300.100.4.6 NAME 'document' SUP top
STRUCTURAL MUST documentIdentifier MAY ( commonName $ description $ seeAlso $
localityName $ organizationName $ organizationalUnitName $
documentTitle $ documentVersion $ documentAuthor $ documentLocation $
documentPublisher ) ))
Config: (objectclass ( 0.9.2342.19200300.100.4.7 NAME 'room' SUP top
STRUCTURAL MUST commonName MAY ( roomNumber $ description $ seeAlso $
telephoneNumber ) ))
Config: (objectclass ( 0.9.2342.19200300.100.4.9 NAME 'documentSeries' SUP top
STRUCTURAL MUST commonName MAY ( description $ seeAlso $ telephonenumber $
localityName $ organizationName $ organizationalUnitName ) ))
Config: (objectclass ( 0.9.2342.19200300.100.4.13 NAME 'domain' SUP top
STRUCTURAL MUST domainComponent MAY ( associatedName $ organizationName $
description $ businessCategory $ seeAlso $ searchGuide $ userPassword
$ localityName $ stateOrProvinceName $ streetAddress $
physicalDeliveryOfficeName $ postalAddress $ postalCode $ postOfficeBox
$ streetAddress $ facsimileTelephoneNumber $ internationalISDNNumber
$ telephoneNumber $ teletexTerminalIdentifier $ telexNumber $
preferredDeliveryMethod $ destinationIndicator $ registeredAddress $
x121Address ) ))
Config: (objectclass ( 0.9.2342.19200300.100.4.14 NAME 'RFC822localPart' SUP
domain STRUCTURAL MAY ( commonName $ surname $ description $ seeAlso $
telephoneNumber $ physicalDeliveryOfficeName $ postalAddress $ postalCode $
postOfficeBox $ streetAddress $ facsimileTelephoneNumber $
internationalISDNNumber $ telephoneNumber $ teletexTerminalIdentifier $
telexNumber $ preferredDeliveryMethod $ destinationIndicator $
registeredAddress $ x121Address ) ))
Config: (objectclass ( 0.9.2342.19200300.100.4.15 NAME 'dNSDomain' SUP domain
STRUCTURAL MAY ( ARecord $ MDRecord $ MXRecord $ NSRecord $ SOARecord $
CNAMERecord ) ))
Config: (objectclass ( 0.9.2342.19200300.100.4.17 NAME 'domainRelatedObject'
DESC 'RFC1274: an object related to an domain' SUP top AUXILIARY MUST
associatedDomain ))
Config: (objectclass ( 0.9.2342.19200300.100.4.18 NAME 'friendlyCountry' SUP
country STRUCTURAL MUST friendlyCountryName ))
Config: (objectclass ( 0.9.2342.19200300.100.4.20 NAME 'pilotOrganization' SUP
( organization $ organizationalUnit ) STRUCTURAL MAY buildingName ))
Config: (objectclass ( 0.9.2342.19200300.100.4.21 NAME 'pilotDSA' SUP dsa
STRUCTURAL MAY dSAQuality ))
Config: (objectclass ( 0.9.2342.19200300.100.4.22 NAME 'qualityLabelledData'
SUP top AUXILIARY MUST dsaQuality MAY ( subtreeMinimumQuality $
subtreeMaximumQuality ) ))
Config: ** configuration file successfully read and parsed
Config: (attributetype ( 2.5.4.2 NAME 'knowledgeInformation' DESC 'RFC2256:
knowledge information' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{32768} ))
Config: (attributetype ( 2.5.4.4 NAME ( 'sn' 'surname' ) DESC 'RFC2256: last
(family) name(s) for which the entity is known by' SUP name ))
Config: (attributetype ( 2.5.4.5 NAME 'serialNumber' DESC 'RFC2256: serial
number of the entity' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{64} ))
Config: (attributetype ( 2.5.4.6 NAME ( 'c' 'countryName' ) DESC 'RFC2256:
ISO-3166 country 2-letter code' SUP name SINGLE-VALUE ))
Config: (attributetype ( 2.5.4.7 NAME ( 'l' 'localityName' ) DESC 'RFC2256:
locality which this object resides in' SUP name ))
Config: (attributetype ( 2.5.4.8 NAME ( 'st' 'stateOrProvinceName' )
DESC 'RFC2256: state or province which this object resides in' SUP name ))
Config: (attributetype ( 2.5.4.9 NAME ( 'street' 'streetAddress' )
DESC 'RFC2256: street address of this object' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ))
Config: (attributetype ( 2.5.4.10 NAME ( 'o' 'organizationName' )
DESC 'RFC2256: organization this object belongs to' SUP name ))
Config: (attributetype ( 2.5.4.11 NAME ( 'ou' 'organizationalUnitName' )
DESC 'RFC2256: organizational unit this object belongs to' SUP name ))
Config: (attributetype ( 2.5.4.12 NAME 'title' DESC 'RFC2256: title associated
with the entity' SUP name ))
Config: (attributetype ( 2.5.4.14 NAME 'searchGuide' DESC 'RFC2256: search
guide, deprecated by enhancedSearchGuide' SYNTAX
1.3.6.1.4.1.1466.115.121.1.25 ))
Config: (attributetype ( 2.5.4.15 NAME 'businessCategory' DESC 'RFC2256:
business category' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ))
Config: (attributetype ( 2.5.4.16 NAME 'postalAddress' DESC 'RFC2256: postal
address' EQUALITY caseIgnoreListMatch SUBSTR caseIgnoreListSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 ))
Config: (attributetype ( 2.5.4.17 NAME 'postalCode' DESC 'RFC2256: postal
code' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{40} ))
Config: (attributetype ( 2.5.4.18 NAME 'postOfficeBox' DESC 'RFC2256: Post
Office Box' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{40} ))
Config: (attributetype ( 2.5.4.19 NAME 'physicalDeliveryOfficeName'
DESC 'RFC2256: Physical Delivery Office Name' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ))
Config: (attributetype ( 2.5.4.20 NAME 'telephoneNumber' DESC 'RFC2256:
Telephone Number' EQUALITY telephoneNumberMatch SUBSTR
telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50{32} ))
Config: (attributetype ( 2.5.4.21 NAME 'telexNumber' DESC 'RFC2256: Telex
Number' SYNTAX 1.3.6.1.4.1.1466.115.121.1.52 ))
Config: (attributetype ( 2.5.4.22 NAME 'teletexTerminalIdentifier'
DESC 'RFC2256: Teletex Terminal Identifier' SYNTAX
1.3.6.1.4.1.1466.115.121.1.51 ))
Config: (attributetype ( 2.5.4.23 NAME ( 'facsimileTelephoneNumber' 'fax' )
DESC 'RFC2256: Facsimile (Fax) Telephone Number' SYNTAX
1.3.6.1.4.1.1466.115.121.1.22 ))
Config: (attributetype ( 2.5.4.24 NAME 'x121Address' DESC 'RFC2256: X.121
Address' EQUALITY numericStringMatch SUBSTR numericStringSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{15} ))
Config: (attributetype ( 2.5.4.25 NAME 'internationaliSDNNumber'
DESC 'RFC2256: international ISDN number' EQUALITY numericStringMatch SUBSTR
numericStringSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{16} ))
Config: (attributetype ( 2.5.4.26 NAME 'registeredAddress' DESC 'RFC2256:
registered postal address' SUP postalAddress SYNTAX
1.3.6.1.4.1.1466.115.121.1.41 ))
Config: (attributetype ( 2.5.4.27 NAME 'destinationIndicator' DESC 'RFC2256:
destination indicator' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{128} ))
Config: (attributetype ( 2.5.4.28 NAME 'preferredDeliveryMethod'
DESC 'RFC2256: preferred delivery method' SYNTAX
1.3.6.1.4.1.1466.115.121.1.14 SINGLE-VALUE ))
Config: (attributetype ( 2.5.4.29 NAME 'presentationAddress' DESC 'RFC2256:
presentation address' EQUALITY presentationAddressMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.43 SINGLE-VALUE ))
Config: (attributetype ( 2.5.4.30 NAME 'supportedApplicationContext'
DESC 'RFC2256: supported application context' EQUALITY objectIdentifierMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 ))
Config: (attributetype ( 2.5.4.31 NAME 'member' DESC 'RFC2256: member of a
group' SUP distinguishedName ))
Config: (attributetype ( 2.5.4.32 NAME 'owner' DESC 'RFC2256: owner (of the
object)' SUP distinguishedName ))
Config: (attributetype ( 2.5.4.33 NAME 'roleOccupant' DESC 'RFC2256: occupant
of role' SUP distinguishedName ))
Config: (attributetype ( 2.5.4.36 NAME 'userCertificate' DESC 'RFC2256: X.509
user certificate, use ;binary' EQUALITY certificateExactMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.8 ))
Config: (attributetype ( 2.5.4.37 NAME 'cACertificate' DESC 'RFC2256: X.509 CA
certificate, use ;binary' EQUALITY certificateExactMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.8 ))
Config: (attributetype ( 2.5.4.38 NAME 'authorityRevocationList'
DESC 'RFC2256: X.509 authority revocation list, use ;binary' SYNTAX
1.3.6.1.4.1.1466.115.121.1.9 ))
Config: (attributetype ( 2.5.4.39 NAME 'certificateRevocationList'
DESC 'RFC2256: X.509 certificate revocation list, use ;binary' SYNTAX
1.3.6.1.4.1.1466.115.121.1.9 ))
Config: (attributetype ( 2.5.4.40 NAME 'crossCertificatePair' DESC 'RFC2256:
X.509 cross certificate pair, use ;binary' SYNTAX
1.3.6.1.4.1.1466.115.121.1.10 ))
Config: (attributetype ( 2.5.4.42 NAME ( 'givenName' 'gn' ) DESC 'RFC2256:
first name(s) for which the entity is known by' SUP name ))
Config: (attributetype ( 2.5.4.43 NAME 'initials' DESC 'RFC2256: initials of
some or all of names, but not the surname(s).' SUP name ))
Config: (attributetype ( 2.5.4.44 NAME 'generationQualifier' DESC 'RFC2256:
name qualifier indicating a generation' SUP name ))
Config: (attributetype ( 2.5.4.45 NAME 'x500UniqueIdentifier' DESC 'RFC2256:
X.500 unique identifier' EQUALITY bitStringMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.6 ))
Config: (attributetype ( 2.5.4.46 NAME 'dnQualifier' DESC 'RFC2256: DN
qualifier' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44 ))
Config: (attributetype ( 2.5.4.47 NAME 'enhancedSearchGuide' DESC 'RFC2256:
enhanced search guide' SYNTAX 1.3.6.1.4.1.1466.115.121.1.21 ))
Config: (attributetype ( 2.5.4.48 NAME 'protocolInformation' DESC 'RFC2256:
protocol information' EQUALITY protocolInformationMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.42 ))
Config: (attributetype ( 2.5.4.50 NAME 'uniqueMember' DESC 'RFC2256: unique
member of a group' EQUALITY uniqueMemberMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.34 ))
Config: (attributetype ( 2.5.4.51 NAME 'houseIdentifier' DESC 'RFC2256: house
identifier' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{32768} ))
Config: (attributetype ( 2.5.4.52 NAME 'supportedAlgorithms' DESC 'RFC2256:
supported algorithms' SYNTAX 1.3.6.1.4.1.1466.115.121.1.49 ))
Config: (attributetype ( 2.5.4.53 NAME 'deltaRevocationList' DESC 'RFC2256:
delta revocation list; use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 ))
Config: (attributetype ( 2.5.4.54 NAME 'dmdName' DESC 'RFC2256: name of DMD'
SUP name ))
Config: (attributetype ( 2.5.4.65 NAME 'pseudonym' DESC 'X.520(4th): pseudonym
for the object' SUP name ))
Config: (objectclass ( 2.5.6.2 NAME 'country' DESC 'RFC2256: a country' SUP
top STRUCTURAL MUST c MAY ( searchGuide $ description ) ))
Config: (objectclass ( 2.5.6.3 NAME 'locality' DESC 'RFC2256: a locality' SUP
top STRUCTURAL MAY ( street $ seeAlso $ searchGuide $ st $ l $
description ) ))
Config: (objectclass ( 2.5.6.4 NAME 'organization' DESC 'RFC2256: an
organization' SUP top STRUCTURAL MUST o MAY ( userPassword $ searchGuide $
seeAlso $ businessCategory $ x121Address $ registeredAddress $
destinationIndicator $ preferredDeliveryMethod $ telexNumber $
teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $
facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $
postalAddress $ physicalDeliveryOfficeName $ st $ l $ description ) ))
Config: (objectclass ( 2.5.6.5 NAME 'organizationalUnit' DESC 'RFC2256: an
organizational unit' SUP top STRUCTURAL MUST ou MAY ( userPassword $
searchGuide $ seeAlso $ businessCategory $ x121Address $
registeredAddress $ destinationIndicator $ preferredDeliveryMethod $
telexNumber $ teletexTerminalIdentifier $ telephoneNumber $
internationaliSDNNumber $ facsimileTelephoneNumber $ street $
postOfficeBox $ postalCode $ postalAddress $
physicalDeliveryOfficeName $ st $ l $ description ) ))
Config: (objectclass ( 2.5.6.6 NAME 'person' DESC 'RFC2256: a person' SUP top
STRUCTURAL MUST ( sn $ cn ) MAY ( userPassword $ telephoneNumber $ seeAlso $
description ) ))
Config: (objectclass ( 2.5.6.7 NAME 'organizationalPerson' DESC 'RFC2256: an
organizational person' SUP person STRUCTURAL MAY ( title $ x121Address $
registeredAddress $ destinationIndicator $ preferredDeliveryMethod $
telexNumber $ teletexTerminalIdentifier $ telephoneNumber $
internationaliSDNNumber $ facsimileTelephoneNumber $ street $
postOfficeBox $ postalCode $ postalAddress $
physicalDeliveryOfficeName $ ou $ st $ l ) ))
Config: (objectclass ( 2.5.6.8 NAME 'organizationalRole' DESC 'RFC2256: an
organizational role' SUP top STRUCTURAL MUST cn MAY ( x121Address $
registeredAddress $ destinationIndicator $ preferredDeliveryMethod $
telexNumber $ teletexTerminalIdentifier $ telephoneNumber $
internationaliSDNNumber $ facsimileTelephoneNumber $ seeAlso $ roleOccupant
$ preferredDeliveryMethod $ street $ postOfficeBox $ postalCode $
postalAddress $ physicalDeliveryOfficeName $ ou $ st $ l $
description ) ))
Config: (objectclass ( 2.5.6.9 NAME 'groupOfNames' DESC 'RFC2256: a group of
names (DNs)' SUP top STRUCTURAL MUST ( member $ cn ) MAY ( businessCategory $
seeAlso $ owner $ ou $ o $ description ) ))
Config: (objectclass ( 2.5.6.10 NAME 'residentialPerson' DESC 'RFC2256: an
residential person' SUP person STRUCTURAL MUST l MAY ( businessCategory $
x121Address $ registeredAddress $ destinationIndicator $
preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $
telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber
$ preferredDeliveryMethod $ street $ postOfficeBox $ postalCode $
postalAddress $ physicalDeliveryOfficeName $ st $ l ) ))
Config: (objectclass ( 2.5.6.11 NAME 'applicationProcess' DESC 'RFC2256: an
application process' SUP top STRUCTURAL MUST cn MAY ( seeAlso $ ou $ l $
description ) ))
Config: (objectclass ( 2.5.6.12 NAME 'applicationEntity' DESC 'RFC2256: an
application entity' SUP top STRUCTURAL MUST ( presentationAddress $ cn ) MAY
( supportedApplicationContext $ seeAlso $ ou $ o $ l $ description ) ))
Config: (objectclass ( 2.5.6.13 NAME 'dSA' DESC 'RFC2256: a directory system
agent (a server)' SUP applicationEntity STRUCTURAL MAY
knowledgeInformation ))
Config: (objectclass ( 2.5.6.14 NAME 'device' DESC 'RFC2256: a device' SUP top
STRUCTURAL MUST cn MAY ( serialNumber $ seeAlso $ owner $ ou $ o $ l $
description ) ))
Config: (objectclass ( 2.5.6.15 NAME 'strongAuthenticationUser' DESC 'RFC2256:
a strong authentication user' SUP top AUXILIARY MUST userCertificate ))
Config: (objectclass ( 2.5.6.16 NAME 'certificationAuthority' DESC 'RFC2256: a
certificate authority' SUP top AUXILIARY MUST ( authorityRevocationList $
certificateRevocationList $ cACertificate ) MAY crossCertificatePair ))
Config: (objectclass ( 2.5.6.17 NAME 'groupOfUniqueNames' DESC 'RFC2256: a
group of unique names (DN and Unique Identifier)' SUP top STRUCTURAL MUST (
uniqueMember $ cn ) MAY ( businessCategory $ seeAlso $ owner $ ou $ o $
description ) ))
Config: (objectclass ( 2.5.6.18 NAME 'userSecurityInformation' DESC 'RFC2256:
a user security information' SUP top AUXILIARY MAY ( supportedAlgorithms ) ))
Config: (objectclass ( 2.5.6.16.2 NAME 'certificationAuthority-V2' SUP
certificationAuthority AUXILIARY MAY ( deltaRevocationList ) ))
Config: (objectclass ( 2.5.6.19 NAME 'cRLDistributionPoint' SUP top STRUCTURAL
MUST ( cn ) MAY ( certificateRevocationList $ authorityRevocationList $
deltaRevocationList ) ))
Config: (objectclass ( 2.5.6.20 NAME 'dmd' SUP top STRUCTURAL MUST ( dmdName )
MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ x121Address
$ registeredAddress $ destinationIndicator $ preferredDeliveryMethod $
telexNumber $ teletexTerminalIdentifier $ telephoneNumber $
internationaliSDNNumber $ facsimileTelephoneNumber $ street $ postOfficeBox
$ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l $
description ) ))
Config: (objectclass ( 2.5.6.21 NAME 'pkiUser' DESC 'RFC2587: a PKI user' SUP
top AUXILIARY MAY userCertificate ))
Config: (objectclass ( 2.5.6.22 NAME 'pkiCA' DESC 'RFC2587: PKI certificate
authority' SUP top AUXILIARY MAY ( authorityRevocationList $
certificateRevocationList $ cACertificate $ crossCertificatePair ) ))
Config: (objectclass ( 2.5.6.23 NAME 'deltaCRL' DESC 'RFC2587: PKI user' SUP
top AUXILIARY MAY deltaRevocationList ))
Config: (objectclass ( 1.3.6.1.4.1.250.3.15 NAME 'labeledURIObject'
DESC 'RFC2079: object that contains the URI attribute type' SUP top AUXILIARY
MAY ( labeledURI ) ))
Config: (attributetype ( 0.9.2342.19200300.100.1.3 NAME
( 'mail' 'rfc822Mailbox' ) DESC 'RFC1274: RFC822 Mailbox' EQUALITY
caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.26{256} ))
Config: (objectclass ( 0.9.2342.19200300.100.4.19 NAME 'simpleSecurityObject'
DESC 'RFC1274: simple security object' SUP top AUXILIARY MUST userPassword ))
Config: (attributetype ( 0.9.2342.19200300.100.1.25 NAME
( 'dc' 'domainComponent' ) DESC 'RFC1274/2247: domain component' EQUALITY
caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ))
Config: (objectclass ( 1.3.6.1.4.1.1466.344 NAME 'dcObject' DESC 'RFC2247:
domain component object' SUP top AUXILIARY MUST dc ))
Config: (objectclass ( 1.3.6.1.1.3.1 NAME 'uidObject' DESC 'RFC2377: uid
object' SUP top AUXILIARY MUST uid ))
Config: (attributetype ( 0.9.2342.19200300.100.1.37 NAME 'associatedDomain'
DESC 'RFC1274: domain associated with object' EQUALITY caseIgnoreIA5Match
SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
Config: (attributetype ( 1.2.840.113549.1.9.1 NAME
( 'email' 'emailAddress' 'pkcs9email' ) DESC 'RFC3280: legacy attribute for
email addresses in DNs' EQUALITY caseIgnoreIA5Match SUBSTR
caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} ))
Config: ** configuration file successfully read and parsed
Config: (include /etc/openldap/schema/inetorgperson.schema)
Config: opening config file "/etc/openldap/schema/inetorgperson.schema"
Config: (include /etc/openldap/schema/rfc2307bis.schema)
Config: opening config file "/etc/openldap/schema/rfc2307bis.schema"
Config: (attributetype ( 1.3.6.1.1.1.1.2 NAME 'gecos' DESC 'The GECOS field;
the common name' EQUALITY caseIgnoreIA5Match SUBSTR
caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.3 NAME 'homeDirectory' DESC 'The
absolute path to the home directory' EQUALITY caseExactIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.4 NAME 'loginShell' DESC 'The path to
the login shell' EQUALITY caseExactIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange' EQUALITY
integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.6 NAME 'shadowMin' EQUALITY
integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.7 NAME 'shadowMax' EQUALITY
integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.8 NAME 'shadowWarning' EQUALITY
integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.9 NAME 'shadowInactive' EQUALITY
integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.10 NAME 'shadowExpire' EQUALITY
integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.11 NAME 'shadowFlag' EQUALITY
integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.12 NAME 'memberUid' EQUALITY
caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
Config: (attributetype ( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup' EQUALITY
caseExactIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.26 ))
Config: (attributetype ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple'
DESC 'Netgroup triple' EQUALITY caseIgnoreIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26 ))
Config: (attributetype ( 1.3.6.1.1.1.1.15 NAME 'ipServicePort' DESC 'Service
port number' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol'
DESC 'Service protocol name' SUP name ))
Config: (attributetype ( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber' DESC 'IP
protocol number' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber' DESC 'ONC RPC
number' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber' DESC 'IPv4
addresses as a dotted decimal omitting leading zeros or IPv6 addresses
as defined in RFC2373' SUP name ))
Config: (attributetype ( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber' DESC 'IP
network as a dotted decimal, eg. 192.168, omitting leading zeros' SUP
name SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber' DESC 'IP
netmask as a dotted decimal, eg. 255.255.255.0, omitting leading
zeros' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.22 NAME 'macAddress' DESC 'MAC address
in maximal, colon separated hex notation, eg. 00:00:92:90:ee:e2'
EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
Config: (attributetype ( 1.3.6.1.1.1.1.23 NAME 'bootParameter'
DESC 'rpc.bootparamd parameter' EQUALITY caseExactIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26 ))
Config: (attributetype ( 1.3.6.1.1.1.1.24 NAME 'bootFile' DESC 'Boot image
name' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
Config: (attributetype ( 1.3.6.1.1.1.1.26 NAME 'nisMapName' DESC 'Name of a A
generic NIS map' SUP name ))
Config: (attributetype ( 1.3.6.1.1.1.1.27 NAME 'nisMapEntry' DESC 'A generic
NIS entry' EQUALITY caseExactIA5Match SUBSTR caseExactIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.28 NAME 'nisPublicKey' DESC 'NIS
public key' EQUALITY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.29 NAME 'nisSecretKey' DESC 'NIS
secret key' EQUALITY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.30 NAME 'nisDomain' DESC 'NIS domain'
EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26))
Config: (attributetype ( 1.3.6.1.1.1.1.31 NAME 'automountMapName'
DESC 'automount Map Name' EQUALITY caseExactIA5Match SUBSTR
caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.32 NAME 'automountKey' DESC 'Automount
Key value' EQUALITY caseExactIA5Match SUBSTR caseExactIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ))
Config: (attributetype ( 1.3.6.1.1.1.1.33 NAME 'automountInformation'
DESC 'Automount information' EQUALITY caseExactIA5Match SUBSTR
caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE ))
Config: (objectclass ( 1.3.6.1.1.1.2.0 NAME 'posixAccount' SUP top AUXILIARY
DESC 'Abstraction of an account with POSIX attributes' MUST ( cn $ uid $
uidNumber $ gidNumber $ homeDirectory ) MAY ( userPassword $ loginShell $
gecos $ description ) ))
Config: (objectclass ( 1.3.6.1.1.1.2.1 NAME 'shadowAccount' SUP top AUXILIARY
DESC 'Additional attributes for shadow passwords' MUST uid MAY (
userPassword $ description $ shadowLastChange $ shadowMin $ shadowMax
$ shadowWarning $ shadowInactive $ shadowExpire $
shadowFlag ) ))
Config: (objectclass ( 1.3.6.1.1.1.2.2 NAME 'posixGroup' SUP top AUXILIARY
DESC 'Abstraction of a group of accounts' MUST gidNumber MAY ( userPassword
$ memberUid $ description ) ))
Config: (objectclass ( 1.3.6.1.1.1.2.3 NAME 'ipService' SUP top STRUCTURAL
DESC 'Abstraction an Internet Protocol service. Maps an IP port and
protocol (such as tcp or udp) to one or more names; the distinguished
value of the cn attribute denotes the services canonical name'
MUST ( cn $ ipServicePort $ ipServiceProtocol ) MAY description ))
Config: (objectclass ( 1.3.6.1.1.1.2.4 NAME 'ipProtocol' SUP top STRUCTURAL
DESC 'Abstraction of an IP protocol. Maps a protocol number to one or
more names. The distinguished value of the cn attribute denotes the
protocols canonical name' MUST ( cn $ ipProtocolNumber ) MAY description ))
Config: (objectclass ( 1.3.6.1.1.1.2.5 NAME 'oncRpc' SUP top STRUCTURAL
DESC 'Abstraction of an Open Network Computing (ONC) [RFC1057] Remote
Procedure Call (RPC) binding. This class maps an ONC RPC number to a
name. The distinguished value of the cn attribute denotes the RPC
services canonical name' MUST ( cn $ oncRpcNumber ) MAY description ))
Config: (objectclass ( 1.3.6.1.1.1.2.6 NAME 'ipHost' SUP top AUXILIARY
DESC 'Abstraction of a host, an IP device. The distinguished value of
the cn attribute denotes the hosts canonical name. Device SHOULD be
used as a structural class' MUST ( cn $ ipHostNumber ) MAY ( userPassword $
l $ description $ manager ) ))
Config: (objectclass ( 1.3.6.1.1.1.2.7 NAME 'ipNetwork' SUP top STRUCTURAL
DESC 'Abstraction of a network. The distinguished value of the cn
attribute denotes the networks canonical name' MUST ipNetworkNumber MAY (
cn $ ipNetmaskNumber $ l $ description $ manager ) ))
Config: (objectclass ( 1.3.6.1.1.1.2.8 NAME 'nisNetgroup' SUP top STRUCTURAL
DESC 'Abstraction of a netgroup. May refer to other netgroups' MUST cn MAY
( nisNetgroupTriple $ memberNisNetgroup $ description ) ))
Config: (objectclass ( 1.3.6.1.1.1.2.9 NAME 'nisMap' SUP top STRUCTURAL
DESC 'A generic abstraction of a NIS map' MUST nisMapName MAY
description ))
Config: (objectclass ( 1.3.6.1.1.1.2.10 NAME 'nisObject' SUP top STRUCTURAL
DESC 'An entry in a NIS map' MUST ( cn $ nisMapEntry $ nisMapName ) MAY
description ))
Config: (objectclass ( 1.3.6.1.1.1.2.11 NAME 'ieee802Device' SUP top AUXILIARY
DESC 'A device with a MAC address; device SHOULD be used as a
structural class' MAY macAddress ))
Config: (objectclass ( 1.3.6.1.1.1.2.12 NAME 'bootableDevice' SUP top
AUXILIARY DESC 'A device with boot parameters; device SHOULD be used
as a structural class' MAY ( bootFile $ bootParameter ) ))
Config: (objectclass ( 1.3.6.1.1.1.2.14 NAME 'nisKeyObject' SUP top AUXILIARY
DESC 'An object with a public and secret key' MUST ( cn $ nisPublicKey $
nisSecretKey ) MAY ( uidNumber $ description ) ))
Config: (objectclass ( 1.3.6.1.1.1.2.15 NAME 'nisDomainObject' SUP top
AUXILIARY DESC 'Associates a NIS domain with a naming context' MUST
nisDomain ))
Config: (objectclass ( 1.3.6.1.1.1.2.16 NAME 'automountMap' SUP top STRUCTURAL
MUST ( automountMapName ) MAY description ))
Config: (objectclass ( 1.3.6.1.1.1.2.17 NAME 'automount' SUP top STRUCTURAL
DESC 'Automount information' MUST ( automountKey $ automountInformation )
MAY description ))
Config: (objectclass ( 1.3.6.1.4.1.5322.13.1.1 NAME 'namedObject' SUP top
STRUCTURAL MAY cn ))
Config: ** configuration file successfully read and parsed
Config: (attributetype ( 2.16.840.1.113730.3.1.1 NAME 'carLicense'
DESC 'RFC2798: vehicle license or registration plate' EQUALITY
caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 ))
Config: (attributetype ( 2.16.840.1.113730.3.1.2 NAME 'departmentNumber'
DESC 'RFC2798: identifies a department within an organization' EQUALITY
caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 ))
Config: (attributetype ( 2.16.840.1.113730.3.1.241 NAME 'displayName'
DESC 'RFC2798: preferred name to be used when displaying entries' EQUALITY
caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ))
Config: (attributetype ( 2.16.840.1.113730.3.1.3 NAME 'employeeNumber'
DESC 'RFC2798: numerically identifies an employee within an organization'
EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ))
Config: (attributetype ( 2.16.840.1.113730.3.1.4 NAME 'employeeType'
DESC 'RFC2798: type of employment for a person' EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ))
Config: (attributetype ( 0.9.2342.19200300.100.1.60 NAME 'jpegPhoto'
DESC 'RFC2798: a JPEG image' SYNTAX 1.3.6.1.4.1.1466.115.121.1.28 ))
Config: (attributetype ( 2.16.840.1.113730.3.1.39 NAME 'preferredLanguage'
DESC 'RFC2798: preferred written or spoken language for a person' EQUALITY
caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ))
Config: (attributetype ( 2.16.840.1.113730.3.1.40 NAME 'userSMIMECertificate'
DESC 'RFC2798: PKCS#7 SignedData used to support S/MIME' SYNTAX
1.3.6.1.4.1.1466.115.121.1.5 ))
Config: (attributetype ( 2.16.840.1.113730.3.1.216 NAME 'userPKCS12'
DESC 'RFC2798: personal identity information, a PKCS #12 PFX' SYNTAX
1.3.6.1.4.1.1466.115.121.1.5 ))
Config: (objectclass ( 2.16.840.1.113730.3.2.2 NAME 'inetOrgPerson'
DESC 'RFC2798: Internet Organizational Person' SUP organizationalPerson
STRUCTURAL MAY ( audio $ businessCategory $ carLicense $
departmentNumber $ displayName $ employeeNumber $ employeeType $ givenName
$ homePhone $ homePostalAddress $ initials $ jpegPhoto $ labeledURI $
mail $ manager $ mobile $ o $ pager $ photo $ roomNumber $ secretary $
uid $ userCertificate $ x500uniqueIdentifier $ preferredLanguage $
userSMIMECertificate $ userPKCS12 ) ))
Config: ** configuration file successfully read and parsed
Config: (include /etc/openldap/schema/yast.schema)
Config: opening config file "/etc/openldap/schema/yast.schema"
Config: (pidfile /var/run/slapd/slapd.pid)
Config: (objectidentifier SUSE 1.3.6.1.4.1.7057)
Config: (objectidentifier SUSE.YaST SUSE:10.1)
Config: (objectidentifier SUSE.YaST.ModuleConfig SUSE:10.1.2)
Config: (objectidentifier SUSE.YaST.ModuleConfig.OC SUSE.YaST.ModuleConfig:1)
Config: (objectidentifier SUSE.YaST.ModuleConfig.Attr
SUSE.YaST.ModuleConfig:2)
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:2 NAME
( 'suseDefaultBase' ) DESC 'Base DN where new Objects should be created by
default' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
SINGLE-VALUE ))
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:3 NAME
( 'suseNextUniqueId' ) DESC 'Next unused unique ID, can be used to generate
directory wide uniqe IDs' EQUALITY integerMatch ORDERING integerOrderingMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) )
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:4 NAME
( 'suseMinUniqueId' ) DESC 'lower Border for Unique IDs' EQUALITY
integerMatch ORDERING integerOrderingMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:5 NAME
( 'suseMaxUniqueId' ) DESC 'upper Border for Unique IDs' EQUALITY
integerMatch ORDERING integerOrderingMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:6 NAME
( 'suseDefaultTemplate' ) DESC 'The DN of a template that should be used by
default' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
SINGLE-VALUE ))
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:7 NAME
( 'suseSearchFilter' ) DESC 'Search filter to localize Objects' SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ))
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:11 NAME
( 'suseDefaultValue' ) DESC 'an Attribute-Value-Assertions to define defaults
for specific Attributes' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 ))
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:12 NAME
( 'suseNamingAttribute' ) DESC 'AttributeType that should be used as the RDN'
EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE ))
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:15 NAME
( 'suseSecondaryGroup' ) DESC 'seconday group DN' EQUALITY
distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 ))
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:16 NAME
( 'suseMinPasswordLength' ) DESC 'minimum Password length for new users'
EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:17 NAME
( 'suseMaxPasswordLength' ) DESC 'maximum Password length for new users'
EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:18 NAME
( 'susePasswordHash' ) DESC 'Hash method to use for new users' EQUALITY
caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE ))
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:19 NAME ( 'suseSkelDir' )
DESC '' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:20 NAME ( 'susePlugin' )
DESC 'plugin to use upon user/ group creation' EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ))
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:21 NAME
( 'suseMapAttribute' ) DESC '' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 ))
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:22 NAME
( 'suseImapServer' ) DESC '' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ))
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:23 NAME
( 'suseImapAdmin' ) DESC '' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ))
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:24 NAME
( 'suseImapDefaultQuota' ) DESC '' EQUALITY integerMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
Config: (attributetype ( SUSE.YaST.ModuleConfig.Attr:25 NAME
( 'suseImapUseSsl' ) DESC '' EQUALITY booleanMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE ))
Config: (objectClass ( SUSE.YaST.ModuleConfig.OC:2
NAME 'suseModuleConfiguration' SUP top STRUCTURAL DESC 'Contains
configuration of Management Modules' MUST ( cn ) MAY ( suseDefaultBase )))
Config: (objectClass ( SUSE.YaST.ModuleConfig.OC:3
NAME 'suseUserConfiguration' SUP suseModuleConfiguration STRUCTURAL
DESC 'Configuration of user management tools' MAY ( suseMinPasswordLength $
suseMaxPasswordLength $ susePasswordHash $ suseSkelDir $
suseNextUniqueId $ suseMinUniqueId $ suseMaxUniqueId $
suseDefaultTemplate $ suseSearchFilter $ suseMapAttribute )))
Config: (objectClass ( SUSE.YaST.ModuleConfig.OC:4 NAME 'suseObjectTemplate'
SUP top STRUCTURAL DESC 'Base Class for Object-Templates' MUST ( cn ) MAY (
susePlugin $ suseDefaultValue $ suseNamingAttribute )))
Config: (objectClass ( SUSE.YaST.ModuleConfig.OC:5 NAME 'suseUserTemplate'
SUP suseObjectTemplate STRUCTURAL DESC 'User object template' MUST ( cn ) MAY
( suseSecondaryGroup )))
Config: (objectClass ( SUSE.YaST.ModuleConfig.OC:6 NAME 'suseGroupTemplate'
SUP suseObjectTemplate STRUCTURAL DESC 'Group object template' MUST ( cn )))
Config: (objectClass ( SUSE.YaST.ModuleConfig.OC:7
NAME 'suseGroupConfiguration' SUP suseModuleConfiguration STRUCTURAL
DESC 'Configuration of user management tools' MAY ( suseNextUniqueId $
suseMinUniqueId $ suseMaxUniqueId $ suseDefaultTemplate $
suseSearchFilter $ suseMapAttribute )))
Config: (objectClass ( SUSE.YaST.ModuleConfig.OC:8 NAME 'suseCaConfiguration'
SUP suseModuleConfiguration STRUCTURAL DESC 'Configuration of CA management
tools'))
Config: (objectClass ( SUSE.YaST.ModuleConfig.OC:9 NAME 'suseDnsConfiguration'
SUP suseModuleConfiguration STRUCTURAL DESC 'Configuration of mail server
management tools') )
Config: (objectClass ( SUSE.YaST.ModuleConfig.OC:10
NAME 'suseDhcpConfiguration' SUP suseModuleConfiguration STRUCTURAL
DESC 'Configuration of DHCP server management tools'))
Config: (objectClass ( SUSE.YaST.ModuleConfig.OC:11
NAME 'suseMailConfiguration' SUP suseModuleConfiguration STRUCTURAL
DESC 'Configuration of IMAP user management tools' MUST (
suseImapServer $ suseImapAdmin $ suseImapDefaultQuota $
suseImapUseSsl )))
Config: ** configuration file successfully read and parsed
Config: (argsfile /var/run/slapd/slapd.args)
Config: (modulepath /usr/lib/openldap/modules)
Config: (access to dn.base="" by * read)
Config: (access to dn.base="cn=Subschema" by * read)
Config: (access to attrs=userPassword,userPKCS12 by self write
by * auth)
Config: (access to attrs=shadowLastChange by self write by *
read)
Config: (access to * by * read)
Config: (loglevel 0)
Config: (TLSCACertificateFile /etc/openldap/servercert.pem)
Config: (TLSCertificateFile /etc/openldap/servercert.pem)
Config: (TLSCertificateKeyFile /etc/openldap/serverkey.pem)
Config: (database bdb)
Config: (suffix "dc=remote,dc=binc,dc=net")
Config: (rootdn "ROOTDNACCOUNT")
Config: (rootpw "XXXXXXXXXXXXXXXXXXXXXX")
Config: (directory /var/lib/ldap/dc=remote_dc=binc_dc=net)
Config: (checkpoint 1024 5)
Config: (replogfile /var/lib/ldap/replog/ldap.dc=remote_dc=binc_dc=net.replog)
Config: (replica uri="ldap://127.0.0.1:637/" binddn="ROOTDNACCOUNT"
bindmethod=simple credentials=XXXXXXXXXXXXXXXXXXXXXXXX)
ldap_url_parse_ext(ldap://127.0.0.1:637/)
Config: ** successfully added replica "127.0.0.1:637"
Config: (cachesize 10000)
Config: (index objectClass,uidNumber,gidNumber eq)
Config: (index member,mail eq,pres)
Config: (index cn,displayname,uid,sn,givenname sub,eq,pres)
Config: ** configuration file successfully read and parsed
begin replication thread for 127.0.0.1:637
Replica 127.0.0.1:637, skip repl record for dc=remote,dc=binc,dc=net (not
mine)
Replica 127.0.0.1:637, skip repl record for
ou=ldapconfig,dc=remote,dc=binc,dc=net (not mine)
Replica 127.0.0.1:637, skip repl record for ou=group,dc=remote,dc=binc,dc=net
(not mine)
Replica 127.0.0.1:637, skip repl record for ou=people,dc=remote,dc=binc,dc=net
(not mine)
Replica 127.0.0.1:637, skip repl record for
ou=binc,ou=people,dc=remote,dc=binc,dc=net (not mine)
Replica 127.0.0.1:637, skip repl record for
ou=binc,ou=group,dc=remote,dc=binc,dc=net (not mine)
Replica 127.0.0.1:637, skip repl record for
cn=grouptemplate,ou=ldapconfig,dc=remote,dc=binc,dc=net (not mine)
Replica 127.0.0.1:637, skip repl record for
cn=usertemplate,ou=ldapconfig,dc=remote,dc=binc,dc=net (not mine)
Replica 127.0.0.1:637, skip repl record for
cn=groupconfiguration,ou=ldapconfig,dc=remote,dc=binc,dc=net (not mine)
Replica 127.0.0.1:637, skip repl record for
cn=userconfiguration,ou=ldapconfig,dc=remote,dc=binc,dc=net (not mine)
--
--------------------------------------------------
Jeremy M. Guthrie jeremy.guthrie(a)berbee.com
Senior Network Engineer Phone: 608-298-1061
Berbee - A CDW Company Fax: 608-288-3007
5520 Research Park Drive NOC: 608-298-1102
Madison, WI 53711
