openldap-technical

openldap-technical@openldap.org

7 participants
9864 discussions

Password policy
by jeevan kc 15 Nov '12

15 Nov '12

Hello thereI want to enable password policy on Openldap 2.4.30(to all users) running on Linux machine. I see that the ppolicy.ldif and ppolicy.schema are listed under /usr/local/etc/openldap/schema but are not present on /usr/local/etc/openldap/slapd.d/cn=config folder. So do I need to add the policy.ldif to the cn=config folder ? Is there like specific procedure to do that or can I add manually with ldapadd ? Also how do I enable that schema to all users ? Please help.

1 0

Re: last login time
by Clément OUDOT 15 Nov '12

15 Nov '12

2012/11/15 Quanah Gibson-Mount <quanah(a)zimbra.com> > > > d) I would note that RedHat's 2.4 build is linked to NSS, which is fairly > problematic. See <http://www.openldap.org/**lists/openldap-devel/201204/* > *msg00019.html<http://www.openldap.org/lists/openldap-devel/201204/msg00019.html>> > and <http://www.openldap.org/its/**index.cgi/?findid=7367<http://www.openldap.org/its/index.cgi/?findid=7367>>. > I do not know if the LTB project makes this same mistake or not. > > LTB packages use OpenSSL. Clément.

1 0

Re: "authtimestamp" attribute replication
by Clément OUDOT 13 Nov '12

13 Nov '12

2012/11/13 Quanah Gibson-Mount <quanah(a)zimbra.com> > --On Tuesday, November 13, 2012 7:29 PM +0000 jeevan kc < > jeev_biz(a)hotmail.com> wrote: > > >> Hello >> So I have initiated the lastbind overlay and have retrived the >> 'authtimestamp' attribute on openldap 2.4.30. What I found is that the >> timestamps on the attribute have different values on the master server >> and slave servers. Is there any way to fix this issue? An application >> developer wants to retreive this value to create a report on 90 days of >> inactivity for users and since the attribute has different vlaues on >> different servers the testing on the accuracy of the report is failing. >> Thank you. >> > > Read the slapo-ppolicy(5) man page. > I'm sorry but I think RTFM is not the good answer this time ;) authtimestamp is not managed by ppolicy but by the lastbind overlay. To answer the question, I think the only thing to do is check all directories to create the report. It should be not be difficult for your application developer. Clément. > > --Quanah > > -- > > Quanah Gibson-Mount > Sr. Member of Technical Staff > Zimbra, Inc > A Division of VMware, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration > >

2 1

"authtimestamp" attribute replication
by jeevan kc 13 Nov '12

13 Nov '12

Hello So I have initiated the lastbind overlay and have retrived the 'authtimestamp' attribute on openldap 2.4.30. What I found is that the timestamps on the attribute have different values on the master server and slave servers. Is there any way to fix this issue? An application developer wants to retreive this value to create a report on 90 days of inactivity for users and since the attribute has different vlaues on different servers the testing on the accuracy of the report is failing. Thank you.

2 1

OpenLDAP on SMP/multicore environment
by Friedrich Locke 13 Nov '12

13 Nov '12

Hi folks, i would like to set up a new openldap server in my workplace. If possible, i would like to install openldap in a multicore server running OpenBSD/amd64 5.1. May OpenLDAP benefit from a SMP system? If yes, any tip on where to go to learn how to set up OpenLDAP to take full advantage of a SMP system ? Thanks in advance.

2 1

Re: Index Add Failures
by Kyle Smith 12 Nov '12

12 Nov '12

a) Slapadd does a slapindex. Why would you slapadd and then slapindex? > Because I forgot that slapadd also does slapindex. > > b) What version of OpenLDAP? slapindex still shouldn't cause a failure. 2.4.33 > > > --Quanah > > -- > > Quanah Gibson-Mount > Sr. Member of Technical Staff > Zimbra, Inc > A Division of VMware, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration >

1 0

Nssov overlay in Ubuntu 12.04
by Simone Scremin 12 Nov '12

12 Nov '12

Hi all, I'm trying to setup the nssov overlay in Ubuntu 12.04. I setup the server as the official doc suggested here: https://help.ubuntu.com/12.04/serverguide/openldap-server.html Now I'm stuck because I didn't find anywhere a working ldif example to enable the addon. I tried with the following ldif: dn: olcOverlay={0}nssov,olcDatabase={1}hdb,cn=config objectClass: olcOverlayConfig objectClass: olcNssOvConfig olcOverlay: {0}nssov olcNssSsd: test ldap:///ou=People,dc=example,dc=com but I get: ldap_add: Invalid syntax (21) additional info: objectClass: value #1 invalid per syntax Can someone please give some advice? Thank you! Simone Scremin

2 3

Lastlogon attribute
by jeevan kc 09 Nov '12

09 Nov '12

Hello there Does any versions of openldap schema support the last logon attribute? I am asked to add that attribute to run a report through a application? I don't know if simply addding that attribute on the local schema configuration(openldap 2.4.30) would do it.Is it possible? Thanks John

2 13

TLS issue with self-signed certificate
by Luc MAIGNAN 09 Nov '12

09 Nov '12

Hi, I want to setup a LDAPS connection with a self signed certificate. Unfortunaly, I have the following error : Peer's certificate issuer has been marked as not trusted by the user I tried to trust is by a : certutil -d ... -A -n 'CA' -t CT,,, -a -i ca.crt But it doen't change anything. Has someone an idea for me ? Best regards

2 5

Replication account kept being deleted
by sgao＠frontier.com 09 Nov '12

09 Nov '12

Hi, I am running into a problem with replication accounts being deleted from directory from time to time. Here is my setup: 1. Master-master replication configuration: On ldap1 Syncrepl rid=002 provider=ldaps://ldap2.example.com interval=00:00:02:00 retry="60 5 300 5" type=refreshAndPersist searchbase="dc=example,dc=com" schemachecking=off bindmethod=simple binddn="cn=repl1,dc=example,dc=com" credentials=password On ldap2 Syncrepl rid=001 provider=ldaps://ldap1.example.com interval=00:00:01:00 retry="60 5 300 5" type=refreshAndPersist searchbase="dc=example,dc=com" schemachecking=off bindmethod=simple binddn="cn=repl2,dc=example,dc=com" credentials=password The DNs "cn=repl1,dc=example,dc=com" and "cn=repl2,dc=example,dc=com" are kept being removed from directory on ldap1 or ldap2. When the DNs exist, replication worked fine. However, once the DNs got removed, replication would stop working upon restarting slapd. The version of OpenLDAP is 2.4.23. Any help would be very much appreciated. Simon

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical