openldap-technical

openldap-technical@openldap.org

11 participants
9877 discussions

Invalid DN Syntax in Shell Script
by Inácio Alves 02 May '11

02 May '11

Hi to all, I'm trying write a script shell to simplifies the change of pass of users. Then I write function verificaSenha(){ whoAmI=`whoami` param=`echo "ldapsearch -x -W -D \"uid=$whoAmI,ou=People,dc=ifce,dc=edu,dc=br\" -b \"dc=ifce,dc=edu,dc=br\" \"(uid=$whoAmI)\""` exec `echo "$param"` } the line param=... produces a command line that when I write directly in the term it works, however in the line exec "$param" I am solicitated my LDAP pass (like in directly term) but when I type I get ldapsearch -x -W -D "uid=inacio,ou=People,dc=ifce,dc=edu,dc=br" -b "dc=ifce,dc=edu,dc=br" "(uid=inacio)" Enter LDAP Password: ldap_bind: Invalid DN syntax (34) additional info: invalid DN what is wrong? Best regards!! -- Atenciosamente, prof. Inácio Alves IFCE/Campus Maracanaú Bacharel em Matemática (UFC)/ Técnico em Conectividade(IFCE) http://www.polluxweb.com/inacioalves/site/

4 3

overlay questions
by Maarten Vanraes 02 May '11

02 May '11

Hey, I'm trying to write an overlay (that triggers an external command after modifications), and it seems the overlay is initialized correctly, but the handler callbacks are not being executed. Do i need to set some kind of flags for it to work properly? (not even _config is being called back). so the extra configuration settings aren't being picked up either...

1 0

tree design
by E.S. Rosenberg 02 May '11

02 May '11

Hello all, I am considering redoing our LDAP tree since it's current design is fairly unfortunate. I have read several articles that said that groups should be a general (and broad) as possible, and as a result of that the LDAP tree should be as free of hierarchy as possible. (An ou for people an ou for machines etc, but no ou for Departments). The reasoning seems to be that since the design of LDAP is optimized for reads and not for writes and managing moves between branches is/was a pain. A lot of said articles seem to be from several years ago and the management tools I have seen seem to make managing more hierarchical trees possible/easy. So I was wondering what the opinions of other users are, do you maybe have suggestions of good articles that are more up to date on this subject? Thanks and best regards, Eli

2 1

Alternate target for slapd-meta ?
by michel.gruau 02 May '11

02 May '11

Hello, I implemented a slapd-meta configuration with several backend directories. I would like to know whether slapd-meta is capable to switch requests to an « alternate target » when a given target is unavailable. Reading all the documentation, I have the feeling this is not possible but I would like to be sure. Thanks in advance, Michel Une messagerie gratuite, garantie à vie et des services en plus, ça vous tente ? Je crée ma boîte mail www.laposte.net

2 2

Red Hat Enterprise 6 client issues
by Sotomayor, Vicente (ITD) 02 May '11

02 May '11

Hello, I'm testing RH 6 Openldap clients and I getting a lot of errors and poor performance while trying to login and also takes serveral minutes for a su - command to work. We are using SSL. I'm seeing plenty of "errors ldap_result() timed out" in the messages file and it also states that it can not contact either ldap server. I enabled root to temporarily ssh and that even takes up 2 minutes. Our RH 5 clients are having no issues. Does anyone know the fix? Thanks pam_ldap.conf : base dc=x,dc=x,dc=x,dc=x uri ldaps://x ldaps://x tls_cacertdir /etc/openldap/cacerts pam_password md5 sudoers_base ou=SUDOers,dc=x,dc=x,dc=x,dc=x nslcd.conf: uid nslcd gid ldap uri ldaps://x ldaps://x base dc=x,dc=x,dc=x,dc=x tls_cacertdir /etc/openldap/cacerts

3 2

EnableXPS
by Leonardo 02 May '11

02 May '11

Dear Friends, I configured XPS in slapd.conf, but when i start my OpenLDAP, it stop and show the following msg "unknown directive <EnableXPS> outside backend info and database definitions.", anybody could help me? Thanks.

3 3

[OpenLDAP 2.4.23-7 ] Trouble using rwm to delete ObjectClass & attribute
by Cédric COPY 02 May '11

02 May '11

Hi there, I have some trouble using rwm overlay. In fact, i am not sure it fits my need, but the documentation isn't explicit about that point. I am trying to make some replication from a master OpenLDAP server to some other server in my DMZ, through a proxy. The proxy retrieve what i need from the master, then push it to DMZ server. There is some attribute on my master server that I don't want on the DMZ server, for instance sambaGroupMapping & sambaSamAccount. The idea was using rwm to delete those objectClass, and attribute. But it doesn't work, i can change objectClass name, but i can't delete them, and i can delete attribute, not rename them (doesn't matter in my case). Here is my configuration, i tried something with the relay backend, but it doesn't matter, focus on rwm configuration. ######################################################## include /etc/ldap/schema/core.schema include /etc/ldap/schema/cosine.schema include /etc/ldap/schema/nis.schema include /etc/ldap/schema/inetorgperson.schema include /etc/ldap/schema/samba.schema include /etc/ldap/schema/authldap.schema pidfile /var/run/slapd/slapd.pid argsfile /var/run/slapd/slapd.args loglevel -1 modulepath /usr/lib/ldap moduleload back_ldap moduleload back_relay moduleload syncprov moduleload rwm database ldap suffix "ou=proxy,o=ca,c=net" uri ldap://ldap-dmz acl-bind bindmethod=simple idassert-bind bindmethod=simple binddn="cn=admin,ou=real,o=ca,c=net" credentials="secret" database relay suffix "ou=real,o=ca,c=net" relay "ou=proxy,o=ca,c=net" rootdn "cn=admin,ou=real,o=ca,c=net" lastmod on restrict all overlay rwm rwm-rewriteEngine on #Don't work rwm-map objectclass sambaGroupMapping #Work rwm-map objectclass sambaSamAccount sa #Don't work rwm-map objectclass * syncrepl rid=001 provider=ldap://ldap attrs="@inetOrgPerson,@posixAccount,@shadowAccount,@organizationalPerson,@person" bindmethod=simple searchbase="ou=people,ou=real,o=ca,c=net" type=refreshAndPersist retry="60 +" interval=00:00:01:00 schemachecking=off overlay syncprov ######################################################## Documentation about rwm overlay does not indicate that objectClass can't be renamed. I also tried to filter those attribute thanks to exattrs / attrs of my syncrepl overlay, but don't work either, it doesn't delete the objectClass (seen with wireshark). Maybe it's not the right way to delete those things. If you have any idea about how to do it. Thanks you for help. Regards, Cédric.

1 1

Replicating a translucent proxy
by Jonathan Hanks 29 Apr '11

29 Apr '11

Is it possible to replicate a translucent proxy? In our project we have a central LDAP repository that is populated with generic information about our collaboration and its users. This is replicated out to various sites in a master -> slave setup via syncrepl. At the sites we may need site local information. We have been addressing this via a translucent overlay. However it would be nice to have some redundancy on the translucent overlay. What is the best way to approach this? My ldap servers (including the translucent proxy) are on CentOS 5 running OpenLDAP 2.4.18 (built from source). The master is running on a Debian system on 2.4.x. -- Jonathan Hanks General Computing Sys Admin LIGO Hanford Observatory

1 0

Recover User Password?
by Alberto Moreno 29 Apr '11

29 Apr '11

Hi. I had been using samba with openldap as a backend. But I had never need to recover a user password from LDAP. Exist a way to recover user passwords? Ldap running on Centos 5.5 2.3.43.x Samba 3.3.x DB: dbd. Thanks!!! -- LIving the dream...

2 2

RE: Problem Compiling openldap-2.4.23
by Darouichi, Aziz 29 Apr '11

29 Apr '11

Thanks I got it to work after I re-checked my env. -----Original Message----- From: Michael Ströder [mailto:michael@stroeder.com] Sent: Friday, April 29, 2011 11:30 AM To: Darouichi, Aziz Subject: Re: Problem Compiling openldap-2.4.23 Please keep responses on the mailing list. Darouichi, Aziz wrote: > But I am using BDB 5.1.23 It seems this is not used. Maybe a typo in this path: /usr/local/Berkely-5.1 ^^ missing "e"? Ciao, Michael. > -----Original Message----- > From: Michael Ströder [mailto:michael@stroeder.com] > Sent: Friday, April 29, 2011 11:20 AM > To: Darouichi, Aziz > Cc: openldap-technical(a)openldap.org > Subject: Re: Problem Compiling openldap-2.4.23 > > Darouichi, Aziz wrote: >> I installed Berkeley 5.1.25.NC in RHEL 32 when I try to compile >> openldap-2.4.23 using the followings. >> >> CPPFLAGS="-I/usr/local/Berkely-5.1/include" >> LDFLAGS="-L/usr/local/Berkley-5.1/lib" ./configure --prefix=/opt/local >> >> LD_LIBRARY_PATH=/usr/local/Berkley-5.1/lib , export LD_LIBRARY_PATH. >> >> I get the error message. >> >> checking for Berkeley DB major version in db.h... 4 >> checking for Berkeley DB minor version in db.h... 3 >> checking if Berkeley DB version supported by BDB/HDB backends... no >> configure: error: BerkeleyDB version incompatible with BDB/HDB backends > > BDB 4.3.x should not be used because of severe issues with this version: > > http://www.openldap.org/faq/data/cache/44.html > > Ciao, Michael.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical