openldap-technical

openldap-technical@openldap.org

14 participants
9796 discussions

uniqueness unique_uri specification help
by Peter Heinemann 14 Sep '15

14 Sep '15

Good Day, openldap 2.4.39 RHEL 6.5 Working with an ldap implementation that builds the dit from scratch daily using extracts from an RDBMS. The nature of the source data/tables and the code that creates the extracts builds an ldif (imported via slapadd) that has some multi-value attributes, specifically cn, sn, and givenName because the RDBMS does no case checking. Stanzas like this can occur in the ldif: dn: uid=aperson,ou=people,dc=school,dc=edu cn: Andrew Person cn: ANDREW PERSON sn: Person sn: PERSON givenName: Andrew givenName: ANDREW and slapadd will happily write them all, but ldapmodify etc. can (and do) return errors when encountering these entries. What I'd like to do is use ldapadd under the uniqueness overlay instead of slapadd. But I'm unsure of the specific syntax for the unique_uri specification so that that cn, sn, and givenName attributes are unique under/in each DN. Most of the examples I've found are how to enforce uniqueness over an entire branch. Still reading the specifics about uri specification but would appreciate any assistance. Peter

2 1

Building OpenLDAP for Windows
by Ilja Maki 14 Sep '15

14 Sep '15

Hi, I have googled and browsed your mailing list archives for instructions on how to build OpenLDAP for Windows but haven’t found any up-to-date information on it. Is such a thing still supported? I found out that at least Visual Studio workspace files were dropped away some years and versions ago. I would need an OpenLDAP lib that can be linked by Visual Studio 2013 (and probably by later VS versions in the future). I have Windows 8.1, Cygwin 1.7.35(0.287/5/3) and MinGW. I have tried to do according to this: http://www.openldap.org/faq/data/cache/897.html but ran into issues already in the ./configure phase (btw, it says “WARNING: unrecognized options: --disable-slurpd”). The final error in running that is this: configure: error: select() required. I’m not familiar with Unixes but Google told me that select() is a native Unix command. Is that correct and if so, what should I do with a Windows machine to handle that? Or should I do the whole building task according to some completely different instructions? I need only the client side of OpenLDAP. Thanks for any help in advance! Ps. Just in case it matters, this is the corresponding part extracted from my config.log: | /* Override any GCC internal prototype to avoid an error. | Use char because int might match the return type of a GCC | builtin and then its argument prototype would still apply. */ | #ifdef __cplusplus | extern "C" | #endif | char select (); | /* The GNU C library defines this for functions which it implements | to always fail with ENOSYS. Some functions are actually named | something starting with __ and the normal name is an alias. */ | #if defined __stub_select || defined __stub___select | choke me | #endif | | int | main () | { | return select (); | ; | return 0; | } configure:14150: result: no configure:14154: error: select() required. -- Learn why you should attend BroadSoft Connections 2015 <http://www.broadsoftconnections.com> This email is intended solely for the person or entity to which it is addressed and may contain confidential and/or privileged information. If you are not the intended recipient and have received this email in error, please notify BroadSoft, Inc. immediately by replying to this message, and destroy all copies of this message, along with any attachment, prior to reading, distributing or copying it.

4 5

Re: send_search_entry: conn xxx ber write failed
by Édnei Rodrigues 10 Sep '15

10 Sep '15

Hey Quanah, thank you for your answer. I will ask to application team to update openldap client. Regards. Em 10/09/2015 15:19, "Quanah Gibson-Mount" <quanah(a)zimbra.com> escreveu: > --On Thursday, September 10, 2015 1:04 PM -0300 Édnei Rodrigues < > ednei.felipe.rodrigues(a)gmail.com> wrote: > > >> Good morning. How are you doing ? >> >> Guys, I have a application that do many connections to my ldap server and >> I am getting the error "send_search_entry: conn xxx ber write failed." >> and "(connection lost on write)". >> >> This error occur only with that application, but The noise is large, >> because this one is very importante. >> >> > So, Do this message mean a problem with my LDAP Server? Will I need >> deploy a other LDAP server and balance these connections ? >> > > IIRC, this generally occurs when a client has disconnected w/o telling the > server it has done so. I.e., this is caused by the client, not the server. > > --Quanah > > -- > > Quanah Gibson-Mount > Platform Architect > Zimbra, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration >

1 0

2.4.42 RPMs for openSUSE
by Michael Ströder 10 Sep '15

10 Sep '15

HI! I've updated my OpenLDAP builds for openSUSE and SLES12 to release 2.4.42. Build status and files: <https://build.opensuse.org/package/show/home:stroeder:branches:network:ldap…> Important note: If you're using the openldap packages shipped with openSUSE make sure to read the .changes files to see whether something could break your current setup. As usual I've tested the packages openSUSE Tumbleweed x86_64 and Factory_ARM on rasperry pi. The download repos are here: <http://download.opensuse.org/repositories/home:/stroeder:/branches:/network…> Make yourself familiar with zypper commands. Example: Add the repo in openSUSE 13.2 (command in one line): zypper addrepo --refresh http://download.opensuse.org/repositories/home:/stroeder:/branches:/network… Please test. Your feedback is appreciated. Especially have a look at whether the RPMs behave well regarding config files, package descriptions etc. Compared to stock SUSE packages there are two additional packages: 1. openldap2-contrib with a selection of overlays from, you might have guessed, the contrib/ source directory: allop, allowed, autogroup, cloak, denyop, lastbind, noopsrch, nops, pw-sha2, pw-pbkdf2, smbk5pwd 2. openldap2-back-sock (see http://www.openldap.org/software/man.cgi?query=slapd-sock) Ciao, Michael.

1 1

send_search_entry: conn xxx ber write failed
by Édnei Rodrigues 10 Sep '15

10 Sep '15

Good morning. How are you doing ? Guys, I have a application that do many connections to my ldap server and I am getting the error "send_search_entry: conn xxx ber write failed." and "(connection lost on write)". This error occur only with that application, but The noise is large, because this one is very importante. [root@ds1openldap2h log]# grep 132457 openldap.log Sep 10 09:46:28 ds1openldap2h slapd[16282]: conn=132457 fd=675 ACCEPT from IP=172.23.131.51:41958 (IP=0.0.0.0:389) Sep 10 09:46:28 ds1openldap2h slapd[16282]: conn=132457 op=0 SRCH base="cn=cvs_sicredi,ou=sistemas_cred_seg_consorcio,ou=sistemas_core_banking,ou=superintendencia_sistemas,ou=diretoria_exec_ti_operacoes,ou=confederacao_sicredi,cn=centralizadora,cn=entities,dc=sicredi,dc=com,dc=br" scope=0 deref=0 filter="(objectClass=*)" Sep 10 09:46:28 ds1openldap2h slapd[16282]: conn=132457 op=0 SRCH attr=cn Sep 10 09:46:28 ds1openldap2h slapd[16282]: conn=132457 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text= Sep 10 09:46:28 ds1openldap2h slapd[16282]: conn=132457 op=1 SRCH base="cn=as_modulo_ua,ou=campo_grande,cn=ua,cn=entities,dc=sicredi,dc=com,dc=br" scope=0 deref=0 filter="(objectClass=*)" Sep 10 09:46:28 ds1openldap2h slapd[16282]: conn=132457 op=1 SRCH attr=cn Sep 10 09:46:28 ds1openldap2h slapd[16282]: conn=132457 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Sep 10 09:46:28 ds1openldap2h slapd[16282]: conn=132457 op=2 SRCH base="cn=as_modulo_ua,ou=metropolis,cn=cooperativa,cn=entities,dc=sicredi,dc=com,dc=br" scope=0 deref=0 filter="(objectClass=*)" Sep 10 09:46:28 ds1openldap2h slapd[16282]: conn=132457 op=2 SRCH attr=cn Sep 10 09:46:28 ds1openldap2h slapd[16282]: conn=132457 op=3 SRCH base="ou=sistemas_core_banking,ou=superintendencia_sistemas,ou=diretoria_exec_ti_operacoes,ou=confederacao_sicredi,cn=centralizadora,cn=entities,dc=sicredi,dc=com,dc=br" scope=0 deref=0 filter="(objectClass=*)" Sep 10 09:46:28 ds1openldap2h slapd[16282]: conn=132457 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Sep 10 09:46:28 ds1openldap2h slapd[16282]: conn=132457 op=4 SRCH base="cn=groups,dc=sicredi,dc=com,dc=br" scope=2 deref=0 filter="(&(objectClass=SicrediGrupo)(cn=cvs_sicredi))" Sep 10 09:46:28 ds1openldap2h slapd[16282]: conn=132457 op=4 SRCH attr=cn Sep 10 09:46:28 ds1openldap2h slapd[16282]: send_search_entry: conn 132457 ber write failed. Sep 10 09:46:28 ds1openldap2h slapd[16282]: conn=132457 op=3 SRCH attr=ou sicredicodigoua sicrediapelido sicredientidadepai sicredicodigocooperativa sicredicodigoagencia sicreditipo sicrediatributosadicionais Sep 10 09:46:28 ds1openldap2h slapd[16282]: conn=132457 fd=675 closed (connection lost on write) [root@ds1openldap2h log]# grep 135338 openldap.log Sep 10 03:11:27 ds1openldap2h slapd[16282]: conn=96427 op=135338 SRCH base="cn=groups,dc=sicredi,dc=com,dc=br" scope=2 deref=0 filter="(&(objectClass=SicrediGrupo)(cn=as_modulo_ua))" Sep 10 03:11:27 ds1openldap2h slapd[16282]: conn=96427 op=135338 SRCH attr=cn Sep 10 03:11:27 ds1openldap2h slapd[16282]: conn=96427 op=135338 SEARCH RESULT tag=101 err=0 nentries=1 text= Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=3 SEARCH RESULT tag=101 err=0 nentries=1 text= Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=4 SRCH base="cn=groups,dc=sicredi,dc=com,dc=br" scope=2 deref=0 filter="(&(objectClass=SicrediGrupo)(cn=as_modulo_ua))" Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=4 SRCH attr=cn Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=5 SRCH base="ou=diretoria_exec_ti_operacoes,ou=confederacao_sicredi,cn=centralizadora,cn=entities,dc=sicredi,dc=com,dc=br" scope=0 deref=0 filter="(objectClass=*)" Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=5 SRCH attr=ou sicredicodigoua sicrediapelido sicredientidadepai sicredicodigocooperativa sicredicodigoagencia sicreditipo sicrediatributosadicionais Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=5 SEARCH RESULT tag=101 err=0 nentries=1 text= Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=6 SRCH base="cn=groups,dc=sicredi,dc=com,dc=br" scope=2 deref=0 filter="(uniqueMember=cn=riscodecredito_banco_projetonovorisco,cn=email,cn=groups,dc=sicredi,dc=com,dc=br)" Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=6 SRCH attr=1.1 cn Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=6 SEARCH RESULT tag=101 err=0 nentries=0 text= Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=7 SRCH base="cn=as_modulo_ua,ou=cooperucs,cn=cooperativa,cn=entities,dc=sicredi,dc=com,dc=br" scope=0 deref=0 filter="(objectClass=*)" Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=7 SRCH attr=cn Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=7 SEARCH RESULT tag=101 err=0 nentries=1 text= Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=8 SRCH base="cn=groups,dc=sicredi,dc=com,dc=br" scope=2 deref=0 filter="(&(objectClass=SicrediGrupo)(cn=as_modulo_ua))" Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=8 SRCH attr=cn Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=9 SRCH base="ou=banco,cn=centralizadora,cn=entities,dc=sicredi,dc=com,dc=br" scope=0 deref=0 filter="(objectClass=*)" Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=9 SRCH attr=ou sicredicodigoua sicrediapelido sicredientidadepai sicredicodigocooperativa sicredicodigoagencia sicreditipo sicrediatributosadicionais Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=10 SRCH base="cn=groups,dc=sicredi,dc=com,dc=br" scope=2 deref=0 filter="(uniqueMember=cn=vpn_homeoffice,cn=internet,cn=groups,dc=sicredi,dc=com,dc=br)" Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=10 SRCH attr=1.1 cn Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=11 SRCH base="cn=groups,dc=sicredi,dc=com,dc=br" scope=2 deref=0 filter="(&(objectClass=SicrediGrupo)(cn=as_modulo_ua))" Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=11 SRCH attr=cn Sep 10 09:47:58 ds1openldap2h slapd[16282]: connection_input: conn=135338 deferring operation: too many executing Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=10 SEARCH RESULT tag=101 err=0 nentries=0 text= Sep 10 09:47:58 ds1openldap2h slapd[16282]: connection_input: conn=135338 deferring operation: pending operations Sep 10 09:47:58 ds1openldap2h slapd[16282]: connection_input: conn=135338 deferring operation: too many executing Sep 10 09:47:58 ds1openldap2h slapd[16282]: send_search_entry: conn 135338 ber write failed. Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=12 SRCH base="ou=confederacao_sicredi,cn=centralizadora,cn=entities,dc=sicredi,dc=com,dc=br" scope=0 deref=0 filter="(objectClass=*)" Sep 10 09:47:58 ds1openldap2h slapd[16282]: conn=135338 op=12 SRCH attr=ou sicredicodigoua sicrediapelido sicredientidadepai sicredicodigocooperativa sicredicodigoagencia sicreditipo sicrediatributosadicionais So, Do this message mean a problem with my LDAP Server? Will I need deploy a other LDAP server and balance these connections ? Thanks for the help!

2 1

ldapsearch getting attribute list in specific order
by Craig White 09 Sep '15

09 Sep '15

I am surprised I haven't tripped over this before. ldapsearch -b ou=people, etc. uid pwdChangedTime mail Wanting to e-mail people with expiring passwords. I am counting on 4 lines for each person... Dn: UID: pwdChangedTime: mail: in this exact order but on the last one (which happens to be me, perhaps because I was the last one to change my password), my 'mail' attribute was returned before the pwdChangedTime attribute which would cause me to re-write the code to handle randomness of order of the output. Do I have to re-write my bash script? Craig White

2 2

LDAPCon 2015 booking now open
by Andrew Findlay 09 Sep '15

09 Sep '15

LDAPCon 2015, the fifth International Conference on LDAP, Directory Services and Identity Management will be held in the UK at the University of Edinburgh School of Informatics Forum. Tutorials: 11th November 2015 Conference: 12th and 13th November 2015 We have 22 peer-reviewed papers. Topics include service design, LDAP schema, protocol enhancements, server technology and client programming. There will be a poster display area for updates on the very latest work-in-progress, and a social event in a spectacular city-centre venue for networking with other LDAP professionals. http://ldapcon.org/2015/ Several of the regular contributors to this list will be speaking. Booking is now open and early-bird prices are available until the end of September. For full details see the booking page: http://ldapcon.org/2015/?page_id=112 Book now to get the early-bird price! There are opportunities for commercial sponsorship that will be of interest to companies working in related areas. See http://ldapcon.org/2015/?page_id=101 for details. Andrew Findlay Conference Chairman Thanks to our sponsors for their support. Our first Platinum sponsor: Symas http://symas.com/ -- ----------------------------------------------------------------------- | From Andrew Findlay, Skills 1st Ltd | | Consultant in large-scale systems, networks, and directory services | | http://www.skills-1st.co.uk/ +44 1628 782565 | -----------------------------------------------------------------------

1 0

ldapmodrdn accented characters with windows client
by LAROCHETTE Philippe 09 Sep '15

09 Sep '15

Hello, I can't use ldapmodrdn command when some attributes like givenname contains accented characters, the error is "Rename result: Invalid DN syntax(34) My configuration is a server with Linux centos 7 and Openldap 2.4.35 The client is a windows XP where i copy the binarie ldapmodrdn.exe from openldap for windows 2.4.32 When i launch this command for example on linux server it is ok but on the xp client it doesn't work : ldapmodrdn -h xx.xx.xx.xx:389 -D cn=admin,c=fr -w yyyyyy -s "ou=TEST,c=FR" "cn=TEST Véronique,ou=TEST2,c=FR" "cn=Myname Véronique" I think the problem is with the executable ldapmodrdn.exe. Where can i find an equivalent version of the linux version that can works on windows ? Have you an idea to solve the problem ? Thanks

3 3

basedn vs binddn
by Kaushal Shriyan 08 Sep '15

08 Sep '15

Hi, I am currently referring to http://www.openldap.org/doc/admin24/ I have still not understood the difference between basedn and binddn. I will appreciate if somebody can help me understand with some examples. Regards, Kaushal

2 1

ldapsearch blocks forever
by Oliver Kowalke 08 Sep '15

08 Sep '15

After inspecting the source files of ldapsearch I encountered that ldap_result() is called with tv.tv_sec = -1. As a result ldap_result() will block forever (poll() is invoked with -1) in some cases. If for instance the MTU is no big enough (likely in the context of IPv6 and tunnels), the data will not arrive and ldapsearch will 'hang'. I'd like to ask what was the intention to call ldap_result() with tv.tv_sec = -1 even if a timelimit (option -l) was applied at command line. thx, Oliver

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical