openldap-technical

openldap-technical@openldap.org

3 participants
9990 discussions

Creating LDAP schema issue
by Leander Schäfer 22 Jan '15

22 Jan '15

Hi Unfortunately I'm struggeling, since since 2.5 days. I have to create individual a LDAP schema which suits the currently used LDAP structure. The current tructure looks like this: => dc=MyDomain,dc=TLD ==> ou=People ===> uid=User-1 ====> ou=mail ===> uid=User-2 ====> ou=mail ... and so on ... Within ou=mail should be the individual mail account(s) information of a user. So in the end I want to add a(nother) mail account by something like this: cat << EOF > ./newUser.ldif dn: mailAddress=Test(a)Domain.TLD,ou=mail,uid=User-1,ou=people,dc=MyDomain,dc=TLD objectclass: top objectclass: mailAccount mailAddress: Test(a)Domain.TLD MailPassword: {SSHA}SomePassword MailAccountStatus: active [...] EOF Therefore I setup a LDAP schema like the following, but it seems to ignore the attributes "MailPassword" and "noMailAccountStatus". Why? I don't understand what I'm missing here on my objectclass? I'm sure it is an easy little thing to fix - but I just can't figure it out with the tutarials provided I went thorugh ;/ # ====================== LDAP schema ======================= # # # OID Macros (10001 should be IANA-registered) # objectidentifier nameSpace 1.3.6.1.4.1.10001 objectidentifier mail nameSpace:1 objectidentifier objectClassAccount mail:1 objectidentifier objectClassAccountInfo mail:2 # # Attributes: objectClass[NAME]:1.[SERIAL] # attributetype ( objectClassAccount:1.1 NAME 'mailAddress' DESC 'The hosted mail addresses' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} SINGLE-VALUE ) attributetype ( objectClassAccount:1.2 NAME 'MailPassword' DESC 'The hosted mail password' EQUALITY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{128} ) attributetype ( objectClassAccount:1.3 NAME 'MailAccountStatus' DESC 'The status of a user account: active, noaccess, disabled, deleted' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ) [...] # # Objects: objectClass[NAME]:2.[SERIAL] # objectclass ( objectClassAccount:2.1 NAME 'mailAccount' SUP ( top ) STRUCTURAL DESC 'Mail account' MUST ( mailAddress ) MAY ( MailPassword $ MailAccountStatus ) ) # ====================================================== # Thanks Best Regards, Leander

2 1

Replication
by sofien BLOUZA 22 Jan '15

22 Jan '15

Hi all, Is it possible to associate multi-master Replication and delta-syncrepl ? Thunks a lot ? Sofiene BLOUZA -- Sofiene BLOUZA Ingénieur R & D 0645492223

1 0

LDAP Search with non-existent attributes
by Dirk-Willem van Gulik 21 Jan '15

21 Jan '15

W’re comparing various LDAP server setups; and we are wondering what the ‘correct’ search result is for a search which is done such as '(|(|(|(givenname=fred*)(sn=fred*)(mail=fred*)(cn=fred*) in a situation where we have records which do not have a certain attribute (e.g. no givenname or cn) — e.g. a record as light weight as: dn: uid= 1234 objectClass: person uid: 1234 sn: fred fred telephoneNumber: 1234 As we notice that some servers will return this given above query; and some do not. And I cannot find the exact spot in the RFC where the ‘correct’ behaviour is mentioned. Would anyone have a pointer or a suggestion ? And would OpenLDAP 2.4 be intentionally more accommodating than the spec ? Dw.

2 2

Access to dn.subtree with dnatrr=attrname
by Tomasz Lesniewski 20 Jan '15

20 Jan '15

Hi. I have ldap tree which i'm trying to migrate from 389-ds to openldap, with structure like this: o=company ou=admins uid=admin1 ... dc=domain ou=users uid=user1 service=service1 ... uid=user2 service=service2 At uid=user1,ou=users,dc=domain,o=company there is admin entry (and no admin entry in childrens) which points to uid=admin1,ou=admins,o=company. Now i want to grant access to all entries below uid=user1,ou=users,dc=domain,o=company to uid=admin1. In 389-ds it was easy, but in openldap it seems not easy to do. I tried to use: olcAccess: to dn.subtree="uid=*,ou=users,dc=domain,o=company" by dnattr="admin" but it grant access only uid=user1,ou=users,dc=domain,o=company and for no childrens access is granted. Maybe i'm doing something wrong or should i use other functionality to solve this problem? Any help will be appreciate. -- Pozdrawiam/Best regards Tomasz Leśniewski

2 1

LMDB and Android
by Kristoffer Sjögren 18 Jan '15

18 Jan '15

Hi I'm a Android noob and need to build LMDB for Android. Is Android NDK the way to go? https://developer.android.com/tools/sdk/ndk/index.html Any tricks I should be aware of? Cheers, -Kristoffer

2 4

Re: back-sql deployment woes
by Nick Atzert 15 Jan '15

15 Jan '15

I personally wouldn't move to a sql backend.. I've recommended against it. This is what the boss wants though so here we are. :-) Any ideas? Thanks. On Jan 5, 2015 8:03 PM, "Quanah Gibson-Mount" <quanah(a)zimbra.com> wrote: > --On Monday, January 05, 2015 7:27 PM -0500 thelastknowngod < > tlkg.me(a)gmail.com> wrote: > > I've finished moving my existing LDAP user data into MySQL >> > > Why would you move to SQL for an LDAP server? > > for use with >> back-sql on my testing machine and everything is working perfectly. >> > > back-sql is entirely experimental and generally unsupported. > > --Quanah > > -- > > Quanah Gibson-Mount > Platform Architect > Zimbra, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration >

7 10

Update openldap version from 2.3.43 to latest
by Tian Zhiying 15 Jan '15

15 Jan '15

Hi Admin I'm running OpenLDAP 2.3.43 in CentOS 5.8 64bit, now I want to update OpenLDAP from 2.3.43 to latest. How can I do it ? If no way update from 2.3.43 to latest, how can I migration data of 2.3.43 to new OpenLDAP? Thanks. Tian Zhiying ----- 在此邮件中未发现病毒。检查工具：AVG - www.avg.com 版本：2012.0.2249 / 病毒数据库：4257/8428 - 发布日期：01/14/15

2 1

[Openldap] Replicate olcAccess and olcLimits from Provider to consumer
by coma 14 Jan '15

14 Jan '15

Dear List, I am currently trying to find out if it is possible to replicate the olcAccess and olcLimits from a master server to a slave server for a specific database (in my case, replicate olcAccess and olcLimits configured on my "dc=example,dc=com" database only, i don't replicates cn=config and other databases). can you give me advice on this? Thanks in advance for any help, Sincerely

1 0

resynchronizing partial replica after ACL change
by Ferenc Wagner 13 Jan '15

13 Jan '15

Hi, I'm running a couple of partial replicas, where the replicated content is narrowed by provider ACLs. All is fine. Now, I need to extend the replicas with a new attribute, so I extend the ACL to allow reading of this attribute as well. How can I get the replicas synchronize this new attribute without downtime? Is forcing a full reload by slapd -c rid=1 a good solution? Does that incur the slapd restart downtime only, or would the replica database be in a crippled state until the full resync finishes? -- Thanks, Feri.

5 6

[Openldap] Add new node in existant n-way multimaster environment
by coma 13 Jan '15

13 Jan '15

Dear list, I'm currently trying to understand how to adding a new node (new master server) in an existant n-way multimaster environment by adding the new node as a "scratch node" (without any data, and without declare all the other servers in the cn=config), so, to do that, i'm would to know if it's possible to add a new master but force an "initial replication" (force it first to replicate config and data from an other master)? Thank you in advance for any answers,

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical