openldap-technical

openldap-technical@openldap.org

21 participants
9802 discussions

EnableXPS
by Leonardo 02 May '11

02 May '11

Dear Friends, I configured XPS in slapd.conf, but when i start my OpenLDAP, it stop and show the following msg "unknown directive <EnableXPS> outside backend info and database definitions.", anybody could help me? Thanks.

3 3

[OpenLDAP 2.4.23-7 ] Trouble using rwm to delete ObjectClass & attribute
by Cédric COPY 02 May '11

02 May '11

Hi there, I have some trouble using rwm overlay. In fact, i am not sure it fits my need, but the documentation isn't explicit about that point. I am trying to make some replication from a master OpenLDAP server to some other server in my DMZ, through a proxy. The proxy retrieve what i need from the master, then push it to DMZ server. There is some attribute on my master server that I don't want on the DMZ server, for instance sambaGroupMapping & sambaSamAccount. The idea was using rwm to delete those objectClass, and attribute. But it doesn't work, i can change objectClass name, but i can't delete them, and i can delete attribute, not rename them (doesn't matter in my case). Here is my configuration, i tried something with the relay backend, but it doesn't matter, focus on rwm configuration. ######################################################## include /etc/ldap/schema/core.schema include /etc/ldap/schema/cosine.schema include /etc/ldap/schema/nis.schema include /etc/ldap/schema/inetorgperson.schema include /etc/ldap/schema/samba.schema include /etc/ldap/schema/authldap.schema pidfile /var/run/slapd/slapd.pid argsfile /var/run/slapd/slapd.args loglevel -1 modulepath /usr/lib/ldap moduleload back_ldap moduleload back_relay moduleload syncprov moduleload rwm database ldap suffix "ou=proxy,o=ca,c=net" uri ldap://ldap-dmz acl-bind bindmethod=simple idassert-bind bindmethod=simple binddn="cn=admin,ou=real,o=ca,c=net" credentials="secret" database relay suffix "ou=real,o=ca,c=net" relay "ou=proxy,o=ca,c=net" rootdn "cn=admin,ou=real,o=ca,c=net" lastmod on restrict all overlay rwm rwm-rewriteEngine on #Don't work rwm-map objectclass sambaGroupMapping #Work rwm-map objectclass sambaSamAccount sa #Don't work rwm-map objectclass * syncrepl rid=001 provider=ldap://ldap attrs="@inetOrgPerson,@posixAccount,@shadowAccount,@organizationalPerson,@person" bindmethod=simple searchbase="ou=people,ou=real,o=ca,c=net" type=refreshAndPersist retry="60 +" interval=00:00:01:00 schemachecking=off overlay syncprov ######################################################## Documentation about rwm overlay does not indicate that objectClass can't be renamed. I also tried to filter those attribute thanks to exattrs / attrs of my syncrepl overlay, but don't work either, it doesn't delete the objectClass (seen with wireshark). Maybe it's not the right way to delete those things. If you have any idea about how to do it. Thanks you for help. Regards, Cédric.

1 1

Replicating a translucent proxy
by Jonathan Hanks 29 Apr '11

29 Apr '11

Is it possible to replicate a translucent proxy? In our project we have a central LDAP repository that is populated with generic information about our collaboration and its users. This is replicated out to various sites in a master -> slave setup via syncrepl. At the sites we may need site local information. We have been addressing this via a translucent overlay. However it would be nice to have some redundancy on the translucent overlay. What is the best way to approach this? My ldap servers (including the translucent proxy) are on CentOS 5 running OpenLDAP 2.4.18 (built from source). The master is running on a Debian system on 2.4.x. -- Jonathan Hanks General Computing Sys Admin LIGO Hanford Observatory

1 0

Recover User Password?
by Alberto Moreno 29 Apr '11

29 Apr '11

Hi. I had been using samba with openldap as a backend. But I had never need to recover a user password from LDAP. Exist a way to recover user passwords? Ldap running on Centos 5.5 2.3.43.x Samba 3.3.x DB: dbd. Thanks!!! -- LIving the dream...

2 2

RE: Problem Compiling openldap-2.4.23
by Darouichi, Aziz 29 Apr '11

29 Apr '11

Thanks I got it to work after I re-checked my env. -----Original Message----- From: Michael Ströder [mailto:michael@stroeder.com] Sent: Friday, April 29, 2011 11:30 AM To: Darouichi, Aziz Subject: Re: Problem Compiling openldap-2.4.23 Please keep responses on the mailing list. Darouichi, Aziz wrote: > But I am using BDB 5.1.23 It seems this is not used. Maybe a typo in this path: /usr/local/Berkely-5.1 ^^ missing "e"? Ciao, Michael. > -----Original Message----- > From: Michael Ströder [mailto:michael@stroeder.com] > Sent: Friday, April 29, 2011 11:20 AM > To: Darouichi, Aziz > Cc: openldap-technical(a)openldap.org > Subject: Re: Problem Compiling openldap-2.4.23 > > Darouichi, Aziz wrote: >> I installed Berkeley 5.1.25.NC in RHEL 32 when I try to compile >> openldap-2.4.23 using the followings. >> >> CPPFLAGS="-I/usr/local/Berkely-5.1/include" >> LDFLAGS="-L/usr/local/Berkley-5.1/lib" ./configure --prefix=/opt/local >> >> LD_LIBRARY_PATH=/usr/local/Berkley-5.1/lib , export LD_LIBRARY_PATH. >> >> I get the error message. >> >> checking for Berkeley DB major version in db.h... 4 >> checking for Berkeley DB minor version in db.h... 3 >> checking if Berkeley DB version supported by BDB/HDB backends... no >> configure: error: BerkeleyDB version incompatible with BDB/HDB backends > > BDB 4.3.x should not be used because of severe issues with this version: > > http://www.openldap.org/faq/data/cache/44.html > > Ciao, Michael.

1 0

RE: Problem Compiling openldap-2.4.23
by Darouichi, Aziz 29 Apr '11

29 Apr '11

Sorry about that. The path to BDB is correct. I made typo when I created the prefix. When I grep for BDB _VERSION. grep DB_VERSION_STRING /usr/local/Berkley-5.1/include/db.h #define DB_VERSION_STRING "Berkeley DB 5.1.25: (January 28, 2011) -----Original Message----- From: Michael Ströder [mailto:michael@stroeder.com] Sent: Friday, April 29, 2011 11:30 AM To: Darouichi, Aziz Subject: Re: Problem Compiling openldap-2.4.23 Please keep responses on the mailing list. Darouichi, Aziz wrote: > But I am using BDB 5.1.23 It seems this is not used. Maybe a typo in this path: /usr/local/Berkely-5.1 ^^ missing "e"? Ciao, Michael. > -----Original Message----- > From: Michael Ströder [mailto:michael@stroeder.com] > Sent: Friday, April 29, 2011 11:20 AM > To: Darouichi, Aziz > Cc: openldap-technical(a)openldap.org > Subject: Re: Problem Compiling openldap-2.4.23 > > Darouichi, Aziz wrote: >> I installed Berkeley 5.1.25.NC in RHEL 32 when I try to compile >> openldap-2.4.23 using the followings. >> >> CPPFLAGS="-I/usr/local/Berkely-5.1/include" >> LDFLAGS="-L/usr/local/Berkley-5.1/lib" ./configure --prefix=/opt/local >> >> LD_LIBRARY_PATH=/usr/local/Berkley-5.1/lib , export LD_LIBRARY_PATH. >> >> I get the error message. >> >> checking for Berkeley DB major version in db.h... 4 >> checking for Berkeley DB minor version in db.h... 3 >> checking if Berkeley DB version supported by BDB/HDB backends... no >> configure: error: BerkeleyDB version incompatible with BDB/HDB backends > > BDB 4.3.x should not be used because of severe issues with this version: > > http://www.openldap.org/faq/data/cache/44.html > > Ciao, Michael.

1 0

Problem Compiling openldap-2.4.23
by Darouichi, Aziz 29 Apr '11

29 Apr '11

Hi, I installed Berkeley 5.1.25.NC in RHEL 32 when I try to compile openldap-2.4.23 using the followings. CPPFLAGS="-I/usr/local/Berkely-5.1/include" LDFLAGS="-L/usr/local/Berkley-5.1/lib" ./configure --prefix=/opt/local LD_LIBRARY_PATH=/usr/local/Berkley-5.1/lib , export LD_LIBRARY_PATH. I get the error message. checking for Berkeley DB major version in db.h... 4 checking for Berkeley DB minor version in db.h... 3 checking if Berkeley DB version supported by BDB/HDB backends... no configure: error: BerkeleyDB version incompatible with BDB/HDB backends Thanks, Aziz

2 1

Re: Installation openLDAP in Debian
by Hallvard B Furuseth 29 Apr '11

29 Apr '11

Olivier Guillard writes: > How to survive in operational environnement without comments > in files ( nor a way to track change logs btw ) ? I suppose you could put slapd.d/ under version control. After making a change or a set of changes, commit your modified slapd.d/ with your comments in the commit message. Or put comments in other files under slapd.d/. If these filenames do not resemble DNs, e.g. have filetype .txt and no '=' in them, they won't clash with cn=config's filenames. I haven't tried how cumbersome this is/isn't in practice though. -- Hallvard

4 5

"DIT content rule" usage patterns?
by Marco Pizzoli 29 Apr '11

29 Apr '11

Hi list, could someone point me to some resources, in particular usage examples, about DIT content rules? Thanks in advance Marco -- _________________________________________ Non è forte chi non cade, ma chi cadendo ha la forza di rialzarsi. Jim Morrison

4 6

slapi_get_client_ip in openldap?
by Jani Salonen 28 Apr '11

28 Apr '11

Hi, I've written a prebind plugin for slapd, and I was wondering if there is a way to resolve connected client's IP address somehow, like IBM Tivoli has slapi_get_client_ip()/slapi_get_source_ip() functions? If there is no suitable functions already in openldap, does anyone know a feasible way to do it? -- /} @###{]::::::Jani Salonen::::::> \}

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical