openldap-technical

openldap-technical@openldap.org

18 participants
9897 discussions

New objectClass
by Merve Temizer 11 Nov '13

11 Nov '13

How can i add mailacceptinggeneralid and maildrop attirbutes to use postfix with openldap ? I tried to adding a schema like (into /etc/ldap/schema) # # postfix.schema - basic attributes based on default queries # postfix will make for alias and virtual account lookups # I don't think there is an official postfix schema out there, # but if there is, this most certainly is not it. # # leah(a)frauerpower.com # # mailacceptinguser and mailAccount added by Barrie Bremner < bjb(a)netcraft.com> # attributetype ( 1.3.6.1.4.1.25260.1.000 NAME 'mailacceptinggeneralid' DESC 'Defines an address that we accept mail for' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) attributetype ( 1.3.6.1.4.1.25260.1.001 NAME 'maildrop' DESC 'Defines the address mail goes to' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) attributetype ( 1.3.6.1.4.1.25260.1.002 NAME 'mailacceptinguser' DESC 'Defines if this user accepts mail' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) objectClass ( 1.3.6.1.4.1.25260.1.1.100 NAME 'virtualaccount' DESC 'Holds mail info for a virtual account' STRUCTURAL MUST ( owner $ mailacceptinggeneralid $ maildrop $ cn ) ) objectClass ( 1.3.6.1.4.1.25260.1.1.101 NAME 'maillist' DESC 'Virtual account for holding mailing list info' STRUCTURAL MUST ( mailacceptinggeneralid $ maildrop $ cn ) ) objectClass ( 1.3.6.1.4.1.25260.1.1.102 NAME 'mailAccount' DESC 'Email account details' AUXILIARY MUST ( mailacceptinguser $ maildrop $ cn ) MAY ( mailacceptinggeneralid ) ) and add a line into /usr/share/slapd/slapd.conf " include /etc/ldap/schema/inetorgperson.schema" But i am geting ldap_add: Invalid syntax (21) additional info: objectClass: value #3 invalid per syntax when i try to add an object objectClass:mailAccount Where am i wrong? Thanks

2 1

ldapmodify replace olcAccess
by Daniel Jung 11 Nov '13

11 Nov '13

Hi all, Is it possible to use the replace the instead of delete then add again for olcAccess? dn: olcDatabase={2}hdb,cn=config changetype: modify replace: olcDbCacheSize olcDbCacheSize: 10240 - replace: olcAccess olcAccess: {0}to dn.base="" attrs=namingContexts by * none olcAccess: {1}to * by * read - Thanks

3 2

Re: ldap syncrepl issue.
by Ashok Kumar Shah 11 Nov '13

11 Nov '13

I don't see any fix done for syncrepl on 2.4.36. Speaking about the actual problem i have noticed that the do_syncrep* is not getting triggered as defined in the config: interval=00:00:05:00 retry="60 +" and get triggered after long delay about ~23hrs or so. Not sure if this a bug. Thanks, Ashok On Sun, Nov 10, 2013 at 6:14 AM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote: > I suggest you read the openldap changelog and upgrade to 2.4.36. > > --Quanah > > On Nov 9, 2013, at 12:34 AM, Ashok Kumar Shah <ashok.shah(a)flipkart.com> > wrote: > > I have upgraded to OpenLDAP 2.4.31. I was hoping that the syncrepl issue > will subside with the upgrade, but problem continue to persist even now. > Just to point out that the master still runs the older version i.e 2.4.31, > but i guess that should be ok since the issue is with the replication or > perhaps with contextCSN not getting updated on the client(slaves). > > Thanks, > Ashok > > > On Mon, Jul 15, 2013 at 3:47 AM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote: > >> --On Sunday, July 14, 2013 10:35 PM +0530 Ashok Kumar Shah < >> ashok.shah(a)flipkart.com> wrote: >> >> >>> I am running OpenLDAP 2.4.23. >>> >> >> I would advise you to run a modern release. I would strongly advise you >> to read the changes log since 2.4.23. >> >> >> --Quanah >> >> >> -- >> >> Quanah Gibson-Mount >> Sr. Member of Technical Staff >> Zimbra, Inc >> A Division of VMware, Inc. >> -------------------- >> Zimbra :: the leader in open source messaging and collaboration >> > >

3 2

How to say not to use a particular objectClass for a dn
by Harishkumar Pathangay 10 Nov '13

10 Nov '13

Hi,How to say not to use a particular objectClass for a dn. For example,harish@openSUSE:~> ldapsearch -x -b 'dc=my-domain,dc=com' '(objectclass=*)' # extended LDIF## LDAPv3# base <dc=my-domain,dc=com> with scope subtree# filter: (objectclass=*)# requesting: ALL# # my-domain.comdn: dc=my-domain,dc=comobjectClass: dcObjectobjectClass: organizationdc: my-domaino: Example Corporation # Manager, my-domain.comdn: cn=Manager,dc=my-domain,dc=comobjectClass: organizationalRolecn: Managerdescription: Directory Manager # search resultsearch: 2result: 0 Success Here, we see that dn: dc=my-domain,dc=com uses objectClass: organizationI want to say not to use objectClass: organization. How to do this? Thanks,Harish Pathangay

3 4

Restricting Login based on AD GID
by Manish Nene 10 Nov '13

10 Nov '13

Hello, I've LDAP authentication functioning well against Novell e-directory. Is there a way I can restrict the login access to appliance based on the GID of an user? Thanks, - Manish. ------------------------ Powered by BigRock.com

2 2

Re: ldap syncrepl issue.
by Ashok Kumar Shah 09 Nov '13

09 Nov '13

I have upgraded to OpenLDAP 2.4.31. I was hoping that the syncrepl issue will subside with the upgrade, but problem continue to persist even now. Just to point out that the master still runs the older version i.e 2.4.31, but i guess that should be ok since the issue is with the replication or perhaps with contextCSN not getting updated on the client(slaves). Thanks, Ashok On Mon, Jul 15, 2013 at 3:47 AM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote: > --On Sunday, July 14, 2013 10:35 PM +0530 Ashok Kumar Shah < > ashok.shah(a)flipkart.com> wrote: > > >> I am running OpenLDAP 2.4.23. >> > > I would advise you to run a modern release. I would strongly advise you > to read the changes log since 2.4.23. > > > --Quanah > > > -- > > Quanah Gibson-Mount > Sr. Member of Technical Staff > Zimbra, Inc > A Division of VMware, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration >

1 0

Re: Reseting content/database/schema
by Ryan Tandy 08 Nov '13

08 Nov '13

Hi, Please, let's keep the discussion on the list. On 13-11-08 12:26 AM, Merve Temizer wrote: > Tandy thanks for your answer. > > Might the problem be about default conf despite that i was able to add > my ldif at first installation? Sure, it's definitely possible that I was wrong. It doesn't really matter, though: stop the daemon and remove everything from /etc/ldap/slapd.d and from /var/lib/ldap, and you're immediately in a clean and unconfigured state. Purging and reinstalling the package doesn't do much else. If you want more detailed help, please provide more details about the problem: a full transcript of the commands you're running (including any input files) and their output, plus the exact version of OpenLDAP you're running, would be a good start. -- Ryan Tandy - Programmer/Analyst rtandy(a)sd63.bc.ca School District 63 (Saanich) +1 250 652 7385

1 0

PBKDF2 for OpenLDAP
by Tsukasa HAMANO 08 Nov '13

08 Nov '13

Hi, I was concerned that OpenLDAP have no modern key derivation function. (It seems eglibc's crypt(3) has bcrypt, but it's depends environment) So I just implemented PBKDF2 module for OpenLDAP. https://github.com/hamano/openldap-pbkdf2 # Installation $ cd <OPENLDAP_BUILD_DIR>/contrib/slapd-modules/passwd/ $ git clone https://github.com/hamano/openldap-pbkdf2.git $ cd openldap-pbkdf2/ $ make # make install in slapd.conf: moduleload pw-pbkdf2.so password-hash {PBKDF2} # Usage $ slappasswd -o module-load=pw-pbkdf2.la -h {PBKDF2} -s secret {PBKDF2}60000$Y6ZHtTTbeUgpIbIW0QDmDA$j/aU7jFKUSbH4UobNQDm9OEIwuw This format is compatible with Python's passlib.hash.ldap_pbkdf2_sha1 http://pythonhosted.org/passlib/lib/passlib.hash.ldap_pbkdf2_digest.html And also, I have roadmap to implement {PBKDF2-SHA256} and {PBKDF2-SHA512} schemes in the future. Could you merge the module into contrib/ directory? Thank you. -- Open Source Solution Technology Corporation HAMANO Tsukasa <hamano(a)osstech.co.jp> fingerprint = 2285 2111 6D34 3816 3C2E A5B9 16BE D101 6069 BE55

2 2

different hdbs for ou
by Denny Fuchs 08 Nov '13

08 Nov '13

hi, I have one main HDB Database for: dc=example,dc=net -> /var/lib/ldap/ with one subtree: ou=department,dc=example,dc=net Now I want to let other departments use our N-Way LDAP server too. My idea was to put the new departments into different hdb databases: ou=department-1,dc=example,dc=net -> /var/lib/ldap/department-1/ ou=department-2,dc=example,dc=net -> /var/lib/ldap/department-2/ ou=department-n,dc=example,dc=net -> /var/lib/ldap/department-n/ all with own admin access to there root dn. How should I do that? cu denny

2 6

Reseting content/database/schema
by Merve Temizer 07 Nov '13

07 Nov '13

I need to remove every configuration/schema/database. Is it possible and if so how? So far Code: sudo apt-get purge slapd ldap-utils remove Code: /etc/ldap /etc/openldap /var/lib/ldap and Code: sudo apt-get install slapd ldap-utils tried to Code: sudo ldapadd -Y EXTERNAL -H ldapi:/// -f backend2.example.com.ldif still getting 80 error, which means, according to my restricted knowledge, ldap already has modules and cn s in ldif file.

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical