openldap-technical

openldap-technical@openldap.org

9 participants
9875 discussions

Search queries with greater-than or smaller-than
by Tobias Prinz 08 Sep '11

08 Sep '11

Hello there, I am just starting with LDAP, but there is some basic thing that I do not understand and that does not make sense at all: I have got an OpenLDAP server and it does contain data. This search returns a bunch of results: ldapsearch -x -v -H ldap://localhost -b ou=something,dc=domainname,dc=com -LLL '(gidNumber=500)' Yet this returns no results: ldapsearch -x -v -H ldap://localhost -b ou=something,dc=domainname,dc=com -LLL '(gidNumber>=500)' So I invert it and this returns no results either: ldapsearch -x -v -H ldap://localhost -b ou=something,dc=domainname,dc=com -LLL '(!(gidNumber>=500))' This simply fails (okay, I knew that, but at least I know the ones above are not syntax errors, because the greater-sign alone is not defined as a filter in RFC 1960 nor RFC 4515): ldapsearch -x -v -H ldap://localhost -b ou=something,dc=domainname,dc=com -LLL '(gidNumber>499)' Can someone point me in the right direction, please? Thanks in advance, Tobias

3 3

Re: Open LDAP Installation/Configuration Failed.
by vijay s sheelavantar 07 Sep '11

07 Sep '11

I have removed the "-I/usr/include" and added "-I/opt/montavista/pro/devkit/mips/fp_be/include" in the configuration command. The command and options used for configuration is as follows. ./configure --host=mips CC=/opt/montavista/pro/devkit/mips/fp_be/bin/mips_fp_be-gcc LD=/opt/montavista/pro/devkit/mips/fp_be/bin/mips_fp_be-ld CFLAGS="-g -O2 -I/opt/montavista/pro/devkit/mips/fp_be/include" LDFLAGS=-Bsharable --prefix=/mips/ldap --with-yielding_select=no The error which i got is  configure: error: BerkeleyDB version incompatible with BDB/HDB backends The erros observed in the config.log files are as follows. conftest.c:29:36: __FOO__/generate_error.h: No such file or directoryconfigure:12289: $? = 1configure: failed program was:| /* confdefs.h */| #define PACKAGE_NAME "" conftest.c:30:38: __ASCII__/generate_error.h: No such file or directory configure:14968: result: noconfigure:14992: checking to see if -lrpcrt4 is needed for win32 UUID supportconfigure:15013: /opt/montavista/pro/devkit/mips/fp_be/bin/mips_fp_be-gcc -o conftest -g -O2 -I/opt/montavista/pro/devkit/mips/fp_be/include  -Bsharable conftest.c  -lrpcrt4 >&5conftest.c:88: error: parse error before "UuidCreate"conftest.c:88: warning: data definition has no type or storage classconftest.c:89: error: parse error before "UuidToStringA"conftest.c:89: warning: data definition has no type or storage classconfigure:15013: $? = 1configure: failed program was:| /* confdefs.h */ configure:19126: checking for pthread_rwlock_destroy with <pthread.h>configure:19146: /opt/montavista/pro/devkit/mips/fp_be/bin/mips_fp_be-gcc -o conftest -g -O2 -I/opt/montavista/pro/devkit/mips/fp_be/include  -Bsharable conftest.c  -pthread -lresolv  >&5conftest.c:106: error: parse error before "rwlock"conftest.c:106: warning: data definition has no type or storage class conftest.c:125: error: too many arguments to function `ctime_r'conftest.c:133: error: too few arguments to function `gethostbyname_r'conftest.c:136: error: too few arguments to function `gethostbyaddr_r' configure:20250: checking for db.hconfigure:20250: result: yesconfigure:20261: checking for Berkeley DB major version in db.hconfigure:20281: result: 3configure:20287: checking for Berkeley DB minor version in db.hconfigure:20307: result: 2configure:20313: checking if Berkeley DB version supported by BDB/HDB backendsconfigure:20349: result: noconfigure:20354: error: BerkeleyDB version incompatible with BDB/HDB backends I am not getting what is the exact problem. :(

1 0

Disable Anonymous Access
by Srini Avula 07 Sep '11

07 Sep '11

Hi I am using OpenLDAP 2.4 version. Is there any way to disable Anonymous access? Advise me please. Srini http://www.e-computingltd.com

5 4

manage vs write
by Christopher Wood 07 Sep '11

07 Sep '11

What access privileges over a particular suffix are granted to somebody with the "manage" level that somebody with the "write" level does not get? As background, using 2.4.26: This document specifies that somebody with the level "manage" gets everything else: http://www.openldap.org/doc/admin24/access-control.html#The%20access%20to%2… On the other hand, slapd.access(5) specifies that "manage grants all access including administrative access. The write access is actually the combination of add and delete, which respectively restrict the write privilege to add or delete the specified <what>." (I am very puzzled. It strikes me that once I can write (add/delete) any entry in a subtree I effectively manage it.)

2 1

Authenticate Mac OS X users against OpenLDAP on Debian
by Mi 07 Sep '11

07 Sep '11

We added a Mac to our network, and I would like the network users to be able to login with their existing credentials on our Debian openLDAP server. I configured the LDAP access on the Mac, and it can indeed see the users and groups from the openldap server. But when I try to login after clicking "Other...", the login window shakes around, and nothing happens. The server logs show the connection from the Mac and it's searches ( http://pastebin.com/MB2JswAa). (Logging is configured with Parse, Stats, Stats2, Sync. Is there something else I should add to logging that may be useful?) On the Mac, I didn't find anything looking helpful in the logs (http://pastebin.com/yRreFQrJ), but maybe I don't know what to look for. I found many instructions on the Internet which concentrate on mounting user homes from the server over NFS. This is NOT what we want. Users would be authenticated with openldap, but have their homes locally on the Mac, like normal users. I also saw many mentions of adding the apple schema, and I have done that. But maybe I now need to actually use parts of that schema in the user records? Thanks for any help...

3 3

Open LDAP Installation/Configuration Failed.
by vijay s sheelavantar 07 Sep '11

07 Sep '11

Hi,I am trying to configure and compile the pam_ldap and nss_ldap for MIPS architecture. for this they need ldap library. so I am trying to compile openldap code for MIPS first, but the configuration is failing. The command and options used for configuration is as follows. ./configure --host=mips CC=/opt/montavista/pro/devkit/mips/fp_be/bin/mips_fp_be-gcc LD=/opt/montavista/pro/devkit/mips/fp_be/bin/mips_fp_be-ld CFLAGS="-g -O2 -I/usr/include -I/usr/include/openssl" LDFLAGS="-L/usr/lib" --prefix=/mips/ldap --with-yielding_select=no and the errors got are as follows. hecking for sys/un.h... yes checking openssl/ssl.h usability... no checking openssl/ssl.h presence... yes configure: WARNING: openssl/ssl.h: present but cannot be compiled configure: WARNING: openssl/ssl.h: check for missing prerequisite headers? configure: WARNING: openssl/ssl.h: see the Autoconf documentation configure: WARNING: openssl/ssl.h: section "Present But Cannot Be Compiled" configure: WARNING: openssl/ssl.h: proceeding with the compiler's result configure: WARNING: ## --------------------------------------------- ## configure: WARNING: ## Report this to <http://www.openldap.org/its/> ## configure: WARNING: ## --------------------------------------------- ## checking for openssl/ssl.h... no checking gnutls/gnutls.h usability... no checking gnutls/gnutls.h presence... no checking for gnutls/gnutls.h... no checking nssutil.h usability... no checking nssutil.h presence... no checking for nssutil.h... no configure: error: MozNSS not found - please specify the location to the NSPR and NSS header files in CPPFLAGS and the location to the NSPR and NSS libraries in LDFLAGS (if not in the system location) Kindly help me to fix this error. Thank you. Regards,Vijay S.

2 1

About the information acquisition from slapd.d
by nozawat 06 Sep '11

06 Sep '11

Hi It is a question about the setting when I use slapd.d. 1.I acquire PID information in the following scripts, but will not have any problem? $config_file appoints slapd.d directory. ---- pid_file=`sed -ne \ 's/^olcPidFile:[[:space:]]\+$.\+$[[:space:]]*/\1/p' \ "$config_file"/'cn=config.ldif' 2>/dev/null` ---- 2.I am going to acquire information to use in the following scripts in ldapsearch -b. ---- for suffix in `find "$config_file"/'cn=config' -type f -name olcDatabase* -exec \ sed -ne 's/^[[:space:]]*olcSuffix:[[:space:]]\+$.\+$/\1/p' {} \;` ---- The script mentioned above is a part of a script for slapd monitoring to use it in pacemaker. Because ldap is not an expert, I want to hear the opinion of the person of the expert. Regards, Tomo

2 2

memberOf question
by Chris Jackson 06 Sep '11

06 Sep '11

Running OpenLDAP: slapd 2.4.23. My server currently returns memberOf info only when directly queried using memberOf. Is there a way to allow a base uid=me ldapsearch to return group memberships without specifying the memberOf? ldapsearch -x -h someserver.test.net -W -D cn=someuser,dc=test,dc=net -b dc=test,dc=net uid=me versus ldapsearch -x -h someserver.test.net -W -D cn=someuser,dc=test,dc=net -b dc=test,dc=net uid=me memberOf Here is the result of memberOf query: # extended LDIF # # LDAPv3 # base <dc=test,dc=net> with scope subtree # filter: uid=me # requesting: memberOf # # me, test.net dn: uid=me,dc=test,dc=net memberOf: cn=agroup,dc=test,dc=net

2 1

Re-binding to a different LDAP tree from an overlay
by Abu Marcose 06 Sep '11

06 Sep '11

I have a unique situation where we have developed a custom overlay that intercepts & processes bind requests. As part of the processing I need to bind to a different LDAP tree as a different user (with write access) and delete an object. How can I accomplish this ? Would anyone be able to point me to some sample code that would accomplish this ? Thanks in advance

1 0

Cross compilation of LDAP clients.
by vijay s sheelavantar 06 Sep '11

06 Sep '11

Hello,I want to compile pam_ldap and nss_ldap for MIPS architecture. I am getting lot of errors while doing this. it is asking for lldap and other libraries, and  ldap.h, ber.h, sasl.h header files. Kindly tell me the exact steps to follow for compiling these libraries for a particular architecture(MIPS,PPC etc). Thanks and Regards, VIJAY S.

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical