openldap-technical

openldap-technical@openldap.org

21 participants
9802 discussions

Re: "authtimestamp" attribute replication
by Clément OUDOT 13 Nov '12

13 Nov '12

2012/11/13 Quanah Gibson-Mount <quanah(a)zimbra.com> > --On Tuesday, November 13, 2012 7:29 PM +0000 jeevan kc < > jeev_biz(a)hotmail.com> wrote: > > >> Hello >> So I have initiated the lastbind overlay and have retrived the >> 'authtimestamp' attribute on openldap 2.4.30. What I found is that the >> timestamps on the attribute have different values on the master server >> and slave servers. Is there any way to fix this issue? An application >> developer wants to retreive this value to create a report on 90 days of >> inactivity for users and since the attribute has different vlaues on >> different servers the testing on the accuracy of the report is failing. >> Thank you. >> > > Read the slapo-ppolicy(5) man page. > I'm sorry but I think RTFM is not the good answer this time ;) authtimestamp is not managed by ppolicy but by the lastbind overlay. To answer the question, I think the only thing to do is check all directories to create the report. It should be not be difficult for your application developer. Clément. > > --Quanah > > -- > > Quanah Gibson-Mount > Sr. Member of Technical Staff > Zimbra, Inc > A Division of VMware, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration > >

2 1

"authtimestamp" attribute replication
by jeevan kc 13 Nov '12

13 Nov '12

Hello So I have initiated the lastbind overlay and have retrived the 'authtimestamp' attribute on openldap 2.4.30. What I found is that the timestamps on the attribute have different values on the master server and slave servers. Is there any way to fix this issue? An application developer wants to retreive this value to create a report on 90 days of inactivity for users and since the attribute has different vlaues on different servers the testing on the accuracy of the report is failing. Thank you.

2 1

OpenLDAP on SMP/multicore environment
by Friedrich Locke 12 Nov '12

12 Nov '12

Hi folks, i would like to set up a new openldap server in my workplace. If possible, i would like to install openldap in a multicore server running OpenBSD/amd64 5.1. May OpenLDAP benefit from a SMP system? If yes, any tip on where to go to learn how to set up OpenLDAP to take full advantage of a SMP system ? Thanks in advance.

2 1

Re: Index Add Failures
by Kyle Smith 12 Nov '12

12 Nov '12

a) Slapadd does a slapindex. Why would you slapadd and then slapindex? > Because I forgot that slapadd also does slapindex. > > b) What version of OpenLDAP? slapindex still shouldn't cause a failure. 2.4.33 > > > --Quanah > > -- > > Quanah Gibson-Mount > Sr. Member of Technical Staff > Zimbra, Inc > A Division of VMware, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration >

1 0

Nssov overlay in Ubuntu 12.04
by Simone Scremin 11 Nov '12

11 Nov '12

Hi all, I'm trying to setup the nssov overlay in Ubuntu 12.04. I setup the server as the official doc suggested here: https://help.ubuntu.com/12.04/serverguide/openldap-server.html Now I'm stuck because I didn't find anywhere a working ldif example to enable the addon. I tried with the following ldif: dn: olcOverlay={0}nssov,olcDatabase={1}hdb,cn=config objectClass: olcOverlayConfig objectClass: olcNssOvConfig olcOverlay: {0}nssov olcNssSsd: test ldap:///ou=People,dc=example,dc=com but I get: ldap_add: Invalid syntax (21) additional info: objectClass: value #1 invalid per syntax Can someone please give some advice? Thank you! Simone Scremin

2 3

Lastlogon attribute
by jeevan kc 09 Nov '12

09 Nov '12

Hello there Does any versions of openldap schema support the last logon attribute? I am asked to add that attribute to run a report through a application? I don't know if simply addding that attribute on the local schema configuration(openldap 2.4.30) would do it.Is it possible? Thanks John

2 13

TLS issue with self-signed certificate
by Luc MAIGNAN 09 Nov '12

09 Nov '12

Hi, I want to setup a LDAPS connection with a self signed certificate. Unfortunaly, I have the following error : Peer's certificate issuer has been marked as not trusted by the user I tried to trust is by a : certutil -d ... -A -n 'CA' -t CT,,, -a -i ca.crt But it doen't change anything. Has someone an idea for me ? Best regards

2 5

Replication account kept being deleted
by sgao＠frontier.com 08 Nov '12

08 Nov '12

Hi, I am running into a problem with replication accounts being deleted from directory from time to time. Here is my setup: 1. Master-master replication configuration: On ldap1 Syncrepl rid=002 provider=ldaps://ldap2.example.com interval=00:00:02:00 retry="60 5 300 5" type=refreshAndPersist searchbase="dc=example,dc=com" schemachecking=off bindmethod=simple binddn="cn=repl1,dc=example,dc=com" credentials=password On ldap2 Syncrepl rid=001 provider=ldaps://ldap1.example.com interval=00:00:01:00 retry="60 5 300 5" type=refreshAndPersist searchbase="dc=example,dc=com" schemachecking=off bindmethod=simple binddn="cn=repl2,dc=example,dc=com" credentials=password The DNs "cn=repl1,dc=example,dc=com" and "cn=repl2,dc=example,dc=com" are kept being removed from directory on ldap1 or ldap2. When the DNs exist, replication worked fine. However, once the DNs got removed, replication would stop working upon restarting slapd. The version of OpenLDAP is 2.4.23. Any help would be very much appreciated. Simon

1 0

TLS issue
by Luc MAIGNAN 07 Nov '12

07 Nov '12

Hi, I try to setup a LDAPS server. The chain of my certificate seems to be right (openssl s_client showcerts id ok) but I have the following error : unable to get TLS client DN : error -49 Can anyone help me ? Thanks for any help BR

2 1

SASL issue
by Luc MAIGNAN 06 Nov '12

06 Nov '12

Hi, I want to configure SASL in my OpenLDAP server. I saw in documentation that I have to set 'sasl-host' and 'sasl-realm' in slapd.conf In fact I don't use slapd.conf but the cn=config architecture. So where put the parameters ? Thanks for any help

3 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical