openldap-technical

openldap-technical@openldap.org

5 participants
9899 discussions

Error when trying to setup olcMirrorMode
by Gremaud Cyrill 09 Sep '14

09 Sep '14

Hello, I'm trying to setup N-way multimaster replication for cn=config only (for the moment). I have problem when I try to add olcMirrorMode: TRUE. Here is my ldif file to do this: dn: olcDatabase={0}config,cn=config changetype: modify add: olcMirrorMode olcMirrorMode: TRUE and the error is the following : root@ldap1:~/downloads/ldif/config# ldapmodify -Y EXTERNAL -H ldapi:// -f 7_addMirrorMode.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "olcDatabase={0}config,cn=config" ldap_modify: Server is unwilling to perform (53) additional info: shadow context; no update referral I have tried a lot of things but nothing working. Please I really need your help. Thanks a lot. Cyrill Gremaud

3 6

what mean null_callback : error code 0x35
by Gremaud Cyrill 09 Sep '14

09 Sep '14

Hi all, I have freshly installed 3 openLDAP 2.4 with cn=config and setting up N-Way multi master replication. When I check the logs, I have a lot of this error: slapd[2534] : null_callback : error code 0x35 What this error means ? thanks in advance for your help. cyrill gremaud

1 0

Q: frontend and cn=Subschema
by Ulrich Windl 08 Sep '14

08 Sep '14

Hi! forgive a beginner's question, but: If I examine cn=Subschema, I see the following object classes: objectClass[0] top objectClass[1] subentry objectClass[2] subschema objectClass[3] extensibleObject And among the attributes is ldapSyntaxes. ldapSyntaxes however is not part of subentry or subschema; according to the schemata presented, ldapSyntaxes is only part of olcGlobal and olcSchemaConfig. So should cn=Subentry have olcSchemaConfig as auxiliary object class? And in which object class should structuralObjectClass (and things like createTimestamp) belong? Regards, Ulrich

2 1

OpenLDAP self-signed certificates issue
by Vijay Ganesan 08 Sep '14

08 Sep '14

For SSL, I'm trying to install a self-signed certificate to OpenLDAP (version 2.4.28 on Ubuntu 12.04). Followed the following steps: *1. Created server certificate using:* openssl req -newkey rsa:1024 -x509 -nodes -out server.pem -keyout server.pem -days 365 *2. Added following entries to /usr/share/slapd/slapd.conf:* TLSCACertificateFile server.pem TLSCertificateFile server.pem TLSCertificateKeyFile server.pem *3. Restarted openldap:* sudo /etc/init.d/slapd restart *4. Tried to read the certs:* openssl s_client -connect localhost:636 -showcerts This causes the following error: *CONNECTED(00000003)* *140409289410208:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:177:* *---* *no peer certificate available* *---* *No client certificate CA names sent* *---* *SSL handshake has read 0 bytes and written 213 bytes* *---* *New, (NONE), Cipher is (NONE)* *Secure Renegotiation IS NOT supported* *Compression: NONE* *Expansion: NONE* *---* Can someone help with what might be wrong in the setup? Thanks -- - Vijay

5 9

LDAP gateway to RADIUS serverf
by David R 08 Sep '14

08 Sep '14

Dear All, I have setup 2 factor authentication on a RADIUS server (OTP).The user has to authenticate using:login: adusernamepassword: ADpasswordGENERATEDPIN My issue is that some applications like VMWare supports only LDAP authentication. So i was wondering how i could use RADIUS server for authentication inside LDAP. I have found some elements like pw-radius.so, but this is clearly not fully documented. So I was wondering if one of you has ever implemented this kind of solution and how... Kind reagrds, David

3 2

accesslog search filter using reqAttr
by John Alex. 08 Sep '14

08 Sep '14

Hi all, Is anyone using "reqAttr" of accesslog overlay to find ldap requests for specific attributes? Our accesslog db contains some entries like for example: dn: reqStart=20140902092840.000001Z,cn=accesslog objectClass: auditSearch reqStart: 20140902092840.000001Z reqEnd: 20140902092840.000002Z reqType: search reqSession: 1018 reqAuthzID: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth reqDN: dc=example,dc=com reqResult: 0 reqScope: sub reqDerefAliases: never reqAttrsOnly: FALSE reqFilter: (objectClass=*) reqAttr: userPassword reqEntries: 7 reqTimeLimit: 3600 reqSizeLimit: 500 I am trying to search using the filter "(reqAttr=userPassword)" but no results are returned, while "(reqAttr=*)" returns all entries. What am I missing? Using version 2.4.39 John

1 1

slap_client_connect error
by Gremaud Cyrill 08 Sep '14

08 Sep '14

Hello ! I’m trying to setup N-way multi master replication with openLDAP 2.4 but I have an error when I reload my servers. slapd_client_connect : URI=ldap://lda2.gremaud.local DN=“cn=config” ldap_sasl_bind_s failed (-1) How this error is possible ? I can make a ldapsearch with dn=config and correct password on all my servers… thanks for your help.

1 0

LMDB : MDB_BAD_RSLOT on mdb_txn_begin
by Venkat Murty 06 Sep '14

06 Sep '14

Hello, What is the reason I get MDB_BAD_RSLOT on mdb_txn_begin? This is a read transaction. -venkat

1 0

Mail System Error - Returned Mail
by dieter＠dkluenter.de 06 Sep '14

06 Sep '14

Your message could not be delivered

1 0

sha2 module and 2.4.39, iterations question
by bitsofinfo 05 Sep '14

05 Sep '14

Hi - openldap version = 2.4.39 With: moduleload pw-sha2.la I have an application that generates SHA256 b64 encoded hashes w/ a 4byte (16bit) salt and stores them in userPassword and binds work fine When I add this to slapd.conf: password-crypt-salt-format $5$rounds=1000$%.16s And change my application to add 1000 iterations when it writes to userPassword, then binds fail pw in userPassword is generated in this format: {SSHA256}b64Encoded(sha256Digest1000Iterations(pw+salt)+salt) Is "password-crypt-salt-format" the correct place to specify we want to use iterations on our hashes? Is this configurable?

2 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical