openldap-technical

openldap-technical@openldap.org

14 participants
9796 discussions

How can I solve "OpenLdap additional info:objectClass value#0 invalid per syntax" Error?
by Jason Long 29 Aug '15

29 Aug '15

Hello. I used below URL for configure my OpenLdap on CentOS 7 but when I want to add a user I got an error " OpenLdap additional info:objectClass value#0 invalid per syntax" How can I solve it? http://docs.adaptivecomputing.com/viewpoint/hpc/Content/topics/1-setup/inst… Thank you.

3 13

RHEL7 OpenLDAP server is not enforcing password expirations
by Real, Elizabeth (392K) 29 Aug '15

29 Aug '15

Hello, I’ve done a lot or research and re-read the OpenLDAP configuration guides but I cannot get my OpenLDAP 2.39 server to not allow users with expired passwords to login to ldap enabled clients. What directive in the /etc/pam.d/ files controls the users password expiration attribute? pam_unix or pam_ldap? Setup: Server: RHEL7 OS Software: OpenLdap 2.4.39 server using slapd service Client: RHEL7 OS Software: enabled Ldap via authconfig, using sssd service Thank you, Liz

2 1

2.4.17 -> 2.4.39 replication: null callback : error code 0x10
by Andrei Valoshyn 29 Aug '15

29 Aug '15

Hello! > > Aug 21 01:42:45 slapd[4658]: null_callback : error code 0x10 > Aug 21 01:42:45 slapd[4658]: syncrepl_entry: rid=107 be_modify failed > (16) > Aug 21 01:42:45 slapd[4658]: do_syncrepl: rid=107 rc 16 retrying (9 > retries left) > > Master (OpenLDAP: slapd 2.4.17, 64bit openSUSE 11.2) and slave > (OpenLDAP: slapd 2.4.31, 64bit openSUSE 12.2) > > master slapd.conf syncprov configuration : > ....... > overlay syncprov > syncprov-checkpoint 100 10 > syncprov-sessionlog 100 > .......... > > slave master slapd.conf syncprov configuration: > ................................... > syncrepl rid=107 provider=ldaps://master.domen.com \ > type=refreshOnly \ > interval=00:00:02:00 \ > scope=sub \ > schemachecking=off \ > searchbase="dc=domen,dc=com" \ > bindmethod=simple \ > binddn="dc=domen,dc=com" \ > credentials=**** \ > retry="60 10 300 10" > ...................... > > I have these errors on all my slaves. What may be the cause of those > errors? I have no idea about that. Please HELP! > >

2 1

openLDAP upgrate
by mdii 28 Aug '15

28 Aug '15

Hi all, I'm starting as an openLDAP administrator, and here in my company they are running the openLDAP 2.4.35. - I found this avec la commande ldapsearch -VV I want to upgrade to the letest version available (2.4.42), how should I procede ? I read that I just need to download the new package, stop the server, install the new version and then restart the server, is that all? Thanks in advance for your help, Marc

2 1

disable unique overlay from member attributes
by Fischer, Johannes 27 Aug '15

27 Aug '15

Hi @all, I try to allow double entries for the attribute member. I’ve tried it with the ldif: dn: olcOverlay=unique,olcDatabase={1}hdb,cn=config changetype: add objectClass: olcOverlayConfig objectClass: olcUniqueConfig olcOverlay: unique olcUniqueUri: ignore ldap:///?members?sub but when I load it to the config with: ldapmodify the Error: ldap_add: invalid syntax (21) additional info: objectClass: value #1 invalid per syntax What is going wrong here? Greetings John -- Johannes Fischer Wissenschaftlicher Angestellter Fraunhofer-Institut für Produktionstechnik und Automatisierung IPA Kompetenzzentrum Digitale Werkzeuge in der Produktion Nobelstraße 12 │ 70569 Stuttgart Telefon +49 711 970-1217 johannes.fischer(a)ipa.fraunhofer.de<mailto:johannes.fischer@ipa.fraunhofer.de> www.ipa.fraunhofer.de<http://www.ipa.fraunhofer.de/> [cid:image001.png@01D0DE8D.A482B990]

3 3

Mail attribute: how to make it mandatory.
by Simone Taliercio 27 Aug '15

27 Aug '15

Hi again :p Since there's a lot of posting about attributes and unique overlay then I decided to make it even worse ;) I'm using OpenLDAP for storing entries which have *inetOrgPerson* as objectclass. What would be required to switch the "mail" attribute from optional to mandatory ? Thanks a lot for the support! Simone

2 4

authz-regexp behavior with GSSAPI
by Peter Heinemann 26 Aug '15

26 Aug '15

Good day, I am trying to figure out different behaviors with authz-regexp in slapd.conf. openldap 2.4-39 RHEL 6.5 cyrus-sasl and cyrus-sasl-gssapi 2.1.23-15 krb5-libs 1.10.3-42 We're mapping based on a search for the presence of the userPassword attribute. In production is: sasl-host pennid.upenn.edu sasl-realm UPENN.EDU authz-regexp uid=(.*),cn=UPENN.EDU,cn=gssapi,cn=auth ldap:///ou=entities,dc=upenn,dc=edu??one?(userPassword={SASL}$1@UPENN.EDU) and the authentication mapping works as desired; the user@realm gets mapped to the just the username and the search succeeds: ldapwhoami -Y GSSAPI -U netmon -H ldaps://pennid.upenn.edu SASL/GSSAPI authentication started SASL username: netmon(a)UPENN.EDU SASL SSF: 56 SASL data security layer installed. dn:uid=netmon,ou=entities,dc=upenn,dc=edu However, on development in a different kerberos realm, that statement will not map properly. The mapping doesn't take place, so user@realm is used for the (unsuccessful) search: sasl-host pennid-dev.net.isc.upenn.edu sasl-realm TEST.NET.ISC.UPENN.EDU authz-regexp uid=(.*),cn=TEST.NET.ISC.UPENN.EDU,cn=gssapi,cn=auth ldap:///ou=entities,dc=upenn,dc=edu??one?(userPassword={SASL}$1@TEST.NET.ISC.UPENN.EDU) no mapping takes place: ldapwhoami -Y GSSAPI -U netmon -H ldaps://pennid-dev.net.isc.upenn.edu SASL/GSSAPI authentication started SASL username: netmon(a)TEST.NET.ISC.UPENN.EDU SASL SSF: 56 SASL data security layer installed. dn:uid=netmon@test.net.isc.upenn.edu,cn=test.net.isc.upenn.edu,cn=gssapi,cn=auth However, a change to the regexp on the development system will cause mapping to work there: authz-regexp uid=(.*)(a)TEST.NET.ISC.UPENN.EDU,cn=TEST.NET.ISC.UPENN.EDU,cn=gssapi,cn=auth ldap:///ou=entities,dc=upenn,dc=edu??one?(userPassword={SASL}$1@TEST.NET.ISC.UPENN.EDU) $ ldapwhoami -Y GSSAPI -U netmon -H ldaps://pennid-dev.net.isc.upenn.edu SASL/GSSAPI authentication started SASL username: netmon(a)TEST.NET.ISC.UPENN.EDU SASL SSF: 56 SASL data security layer installed. dn:uid=netmon,ou=entities,dc=upenn,dc=edu But a similar regexp in production will not map properly: authz-regexp uid=(.*)(a)UPENN.EDU,cn=UPENN.EDU,cn=gssapi,cn=auth ldap:///ou=entities,dc=upenn,dc=edu??one?(userPassword={SASL}$1@UPENN.EDU) ldapwhoami -Y GSSAPI -U netmon -H ldaps://pennid.upenn.edu SASL/GSSAPI authentication started SASL username: netmon(a)UPENN.EDU SASL SSF: 56 SASL data security layer installed. dn:uid=netmon,cn=upenn.edu,cn=gssapi,cn=auth Can anyone shed light on the different behavior? - only the authz-regexp has been modified - slapd was restarted after the changes. Thanks, Peter

1 0

Re: Slapd is coming down
by Édnei Rodrigues 25 Aug '15

25 Aug '15

I have two process because I am replicating the production three to this environment ( dev, port 1389) and I have a translucent service to overlap a few attributes (port 389 ). Thanks. Em 20/08/2015 15:43, "Quanah Gibson-Mount" <quanah(a)zimbra.com> escreveu: > --On Thursday, August 20, 2015 4:00 PM -0300 Édnei Rodrigues < > ednei.felipe.rodrigues(a)gmail.com> wrote: > > >> Hello quanah! >> Yes, I know, my SO killed the slapd because it was configured. >> But I don't have any other service in the server, only the openldap. >> > > Why do you have two slapd processes on the server? Your setup seems > somewhat odd. > > --Quanah > > -- > > Quanah Gibson-Mount > Platform Architect > Zimbra, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration >

1 1

How to create multiple schema at the same level in openldap
by PRATIK SINGAL 25 Aug '15

25 Aug '15

Hello all, Can any one help me on how the schema files will be created where multiple schema can be present at the same level.Below is the diagram where Schema C And Schema D are two Schema which needs to be present at the same third level under Schema B. Schema A | Schema B | | Schema C Schema D Regards, Pratik

2 1

Centos 7/openldap/samba
by Alex Moen 25 Aug '15

25 Aug '15

Setting up a new openldap server on Centos 7. I am trying to add the samba.schema that comes with samba. I got the schema file from the newest distribution of Samba, copied it to /etc/openldap/schema, and ran "ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/samba.schema". This command worked perfectly with the cosine and inetorgperson schema files, but I got an 'invalid format (line 1) entry: ""' response. I grepped the internet for this response, and found that some people have needed to change all "attryibutetype" entries to "attributetype:". So, I did that. It got me to line 2, where the leading descriptor is "DESC". I changed all the "DESC" to "DESC:", which was also helpful and moved me on to line 3, and so on. So, now I have gotten to line 236, which is an objectclass statement, so I am lost. None of the other files that worked with this exact same command syntax has any of the colons on the descriptors (IDK what they are really called), so I wonder if I'm not barking up the wrong tree. I also can't find anything on the net that speaks to this issue, so I am guessing that I probably have some other problem with the server. Any suggestions??? TIA! Alex -- Alex Moen NSTII North Dakota Telephone Company 701-662-6481

3 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical