openldap-technical

openldap-technical@openldap.org

1 participants
9868 discussions

Unable to bind LDAP server via SSL
by Ashwin Kumar 10 Jun '13

10 Jun '13

Hello all, I have written a sample code to connect to LDAP server via SSL running on port 10389(ldap) & 10636(ldaps). But the sample application fails to set the options for the SSL connection. I do not want to verify the certificate correctness at this moment. Can someone help fix this sample code?? #include <stdio.h> #define LDAP_DEPRECATED 1 #include <ldap.h> #define BIND_DN "dc=example,dc=com" #define BIND_PW "secret" int main() { LDAP *ld; int rc; int reqcert = LDAP_OPT_X_TLS_NEVER; int version = LDAP_VERSION3; int ret(0); if (ldap_initialize (&ld, "ldap://192.168.1.51:10389")) { perror("ldap_init"); /* no error here */ return(1); } rc = ldap_set_option (ld, LDAP_OPT_PROTOCOL_VERSION, &version); if(rc != LDAP_OPT_SUCCESS){ printf("Setting LDAP_OPT_PROTOCOL_VERSION failed: %s\n",ldap_err2string(rc)); } rc = ldap_set_option (ld, LDAP_OPT_X_TLS_REQUIRE_CERT, &reqcert); if(rc != LDAP_OPT_SUCCESS){ printf("Setting LDAP_OPT_X_TLS_REQUIRE_CERT failed: %s\n",ldap_err2string(rc)); } rc = ldap_start_tls_s(ld, NULL, NULL); if (rc != LDAP_SUCCESS) { printf("ldap_start_tls failed: %s\n",ldap_err2string(rc)); } rc = ldap_bind_s(ld, BIND_DN, BIND_PW, LDAP_AUTH_SIMPLE); if( rc != LDAP_SUCCESS ) { fprintf(stderr, "ldap_simple_bind_s: %s\n", ldap_err2string(rc) ); return( 1 ); } ldap_unbind(ld); } The program always fails with: *Setting LDAP_OPT_X_TLS_REQUIRE_CERT failed: Can't contact LDAP server* *ldap_start_tls failed: Not Supported* The server does support ldaps and ldap+tls. Can some one please help?? -- Ashwin kumar (http://ashwinkumar.me)

3 6

Fwd: [lmdb] .NET-wrapper for LightningDB
by Howard Chu 10 Jun '13

10 Jun '13

For any C-Sharp fans out there. ---------- Forwarded message ---------- From: *Илья Лукьянов* <ilya.lukyanov(a)gmail.com <mailto:ilya.lukyanov@gmail.com>> Date: 2013/5/26 Subject: .NET-wrapper for LightningDB To: openldap-technical(a)openldap.org <mailto:openldap-technical@openldap.org> Hello, I'm glad to anounce a first version of .NET-wrapper for LightningDB. I've published it here - https://github.com/ilyalukyanov/Lightning.NET I've developed it to use in couple of projects. Hope it will be useful for someone else. Best regards, Ilya Lukyanov.

1 0

Samba + LDAP: Issue adding machine to domain.
by Luis H. Forchesatto 10 Jun '13

10 Jun '13

Greetings. I've run into a trouble when trying to add a new Win7 machine on a domain. The domain is controlled by a server running Samba + LDAP (samba compiled with ldap support), on a Debian 5 OS at the local network. I've added the machine name to the LDAP three through phpldapadmin using the option "Samba3 Machine" on the related submenu and via terminal on samba. Then I renamed the new machine to match the computer name and tried to add it to the domain. When prompted for credentials to add the new machine I've informed the admin login and password and hit <enter>. The windows then returned the following error (something like): "The junction operation was not well succeded. Maybe another existent machine account <machine_account_name> was created previously using anothet set of credentials. User another computer name or contact the admin to remove any obsolete conflicting account. Error: Access denied." Any ideas for the troubleshoot will be welcome. -- Att.* *** Luis H. Forchesatto

1 0

run test suite separately from the source code compilation?
by Meike Stone 10 Jun '13

10 Jun '13

Hello, is it possible and how, to run the complete test suite included in the source tarball later, after installing the openldap rpm/deb package independently and separated from the compilation? Thanks Meike

5 10

Open LDAP ACL and Group
by Dysan 67 10 Jun '13

10 Jun '13

Hello, I have a problem with acl and group. I configured a proxy slapd and add acl (see slapd.conf below) When I run a ldapsearch command with user 'Test User' the attributes are displayed. It's Ok But when I run the same ldapsearch command with user 'Synchro1 User' the message 'Insufficient access (50)' are displayed. It's not ok The user 'Synchro1 User' is member of CN=Grp_Users_UG,OU=Gina,OU=Applications,DC=activedir,DC=example,DC=ch Are you an idea ? Thank you for you help Dysan My environment --------------------- ldapproxy server is CentOS release 5.9 (Final) openldap version 2.3.43 dc1-test Windows Server 2008 R2 (Domain Controler) Ldapsearch command ------------------- $ ldapsearch -x -LLL -H ldaps://ldapproxy.example.ch:636 -D "CN=Test User,OU=TST,OU=USERS,DC=activedir,DC=example,DC=ch" -W -b "dc=activedir,dc=example,dc=ch" -s sub cn=* Enter LDAP Password: dn: ........ ... $ ldapsearch -x -LLL -H ldaps://ldapproxy.example.ch:636 -D "CN=Synchro1 User,OU=TST,OU=USERS,DC=activedir,DC=example,DC=ch" -W -b "dc=activedir,dc=example,dc=ch" -s sub cn=* Enter LDAP Password: Insufficient access (50) slapd.conf ---------- include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/nis.schema allow bind_v2 pidfile /var/run/openldap/slapd.pid argsfile /var/run/openldap/slapd.args TLSCipherSuite HIGH:-SSLv2 TLSCACertificateFile /etc/openldap/cacerts/cacerts.crt TLSCertificateFile /etc/openldap/cacerts/ldapproxy.example.ch.crt TLSCertificateKeyFile /etc/openldap/cacerts/ldapproxy.example.ch.key loglevel -1 disallow bind_anon # AD database ldap suffix "dc=activedir,dc=example,dc=ch" uri "ldaps://dc1-test.example.ch/" readonly on rebind-as-user lastmod off access to attrs=displayname,sn,givenname,mail,telephoneNumber by dn.exact="CN=Test User,OU=TST,OU=USERS,DC=activedir,DC=example,DC=ch" read by group.exact="CN=Grp_Users_UG,OU=Gina,OU=Applications,DC=activedir,DC=example,DC=ch" read by * none # The users must see the entry itself access to attrs=entry by dn.exact="CN=Test User,OU=TST,OU=USERS,DC=activedir,DC=example,DC=ch" read by group.exact="CN=Grp_Users_UG,OU=Gina,OU=Applications,DC=activedir,DC=example,DC=ch" read by * none # Other attributes, others users have no access access to * by * none #--------------------------------------------------------------------------------------------------------------- slapd.conf end

2 2

Question Sun Directory Server upgrades from version 6.3.1.1.1 to version 11.1.1.5.0
by Far a 09 Jun '13

09 Jun '13

I am new with LDAP. I am not sure if this is proper place to post this. I could use all the help I can get. Our LDAP server side team are upgrading soon. Sun Directory Server upgrades from version 6.3.1.1.1 to version 11.1.1.5.0 My application is just a client using Sun LDAP C SDK. I would like to know if there is any potential issue for me to watch out for. Regards Farhad

2 1

ldap_get_values(..) returns decoding error only during stress test.
by Mangesh Sawant 09 Jun '13

09 Jun '13

Stress test parameters are as follows. TPS : 1000 Users in LDAP DB : 50K LDAP operation performed during stress : ldapsearch. Problem is, user is fetched from LDAP server(verified this with tcpdump), but ldap_get_values returns 'DECODING ERROR'. This happens randomly during stress for 8 or 9 users out of 50K, during stress. If ldap search is performed for a single user, there is no issue. Is this a known issue in OpenLDAP client library ? Is any fix available for this issue. -- Thanks And Regards , Mangesh Sawant .

2 3

olcAuthzRegexp and SASL
by Brendan Kearney 08 Jun '13

08 Jun '13

all, i am working on getting SASL, Kerberos 5, and LDAP working together. i buggered an olcAuthzRegexp and need to correct it. i need to remove the one in place, and replace it with the corrected version. below is what i am trying: ldapmodify -QY EXTERNAL -H ldapi:/// dn: cn=config changetype: delete olcAuthzRegexp: uid=([^,]+),cn=bpk2.com,cn=gssapi,cn=auth uid= $1,ou=Users,dc=bpk2,dc=com - changetype: modify add: olcAuthzRegexp olcAuthzRegexp: {0}uid=([^,]*),cn=bpk2.com,cn=gssapi,cn=auth olcAuthzRegexp: {1}uid=$1,ou=Users,dc=bpk2,dc=com (note, the first olcAuthzRegexp that is to be deleted should be all on one line, and that is why it is wrong. formatting in this message may change the way it looks.) the error i get is:

2 4

[lmdb] mdb_stat with named databases
by JK 08 Jun '13

08 Jun '13

Hi, should using 'mdb_stat' in c work with named databases? In my test, when using 'mdb_dbi_open' with a string name and inserting some data, 'mdb_stat' sets all 'MDB_stat' values to zero. Using an unnamed database or the 'mdb_stat' command-line utility returns expected values. I'm using the gitorius mdb version, commit e7f6767, on linux 3.9.4. Thanks for any insights. relevant code (generated) ---- #include <stdio.h> #include <lmdb.h> #define s(arg) status=arg;if(!(MDB_SUCCESS==status)){puts(mdb_strerror(status));return(status);} int status; MDB_env* env; int main() { MDB_stat stat; int data; MDB_val val; MDB_txn* txn; MDB_dbi dbi; s(mdb_env_create(&env)); s(mdb_env_set_maxdbs(env,10u)); s(mdb_env_set_maxreaders(env,3u)); s(mdb_env_open(env,"/tmp/mdb",0u,384u)); s(mdb_txn_begin(env,0u,0u,&txn)); s(mdb_dbi_open(txn,"testdb",MDB_CREATE,&dbi)); val.mv_size=sizeof(int); val.mv_data=&data; data=123u; s(mdb_put(txn,dbi,&val,&val,0u)); data=124u; s(mdb_put(txn,dbi,&val,&val,0u)); data=125u; s(mdb_put(txn,dbi,&val,&val,0u)); s(mdb_txn_commit(txn)); s(mdb_txn_begin(env,0u,MDB_RDONLY,&txn)); s(mdb_stat(txn,dbi,&stat)); mdb_txn_abort(txn); printf("ms-entries: %lu\nms-depth: %lu\n",stat.ms_entries,stat.ms_depth); mdb_env_close(env); return(0); } ----

1 0

How to build OpenLDAP in Windows?
by Ashwin Kumar 08 Jun '13

08 Jun '13

Can someone point out how to build OpenLDAP windows library using Visual Studio compiler? Compiling in Cygwin or MinGW is not the option now. -- Ashwin kumar (http://ashwinkumar.me)

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical