openldap-technical

openldap-technical@openldap.org

3 participants
9937 discussions

Password Modify Extended Operation Tool
by Shelley Waltz 09 May '11

09 May '11

I searched and did not find a suitable answer, so I am posting. Somehow I feel there is an answer, but it has eluded me. I have RHEL5 with openldap with the ppolicy module. I wish to have a script or web cgi which I can have the users access to change their password and have them obey the ppolicy restrictions. I have not been able to find a suitable tool which will provide feedback regarding their selection requirements and errors. If there is one, please point me in the right direction. regards Shelley

4 3

Openldap cannot start.
by lfs lfs 09 May '11

09 May '11

Hi, Openldap server cannot start after sudden power failure. Any idea? How can I troubleshoot? thanks,Mark

2 1

Adding new BDB databases to servers with N-Way multimaster replication
by paolo penzo 09 May '11

09 May '11

Hi, I set up some servers with N-Way Multimaster replication which work fine (cn config is correctly replicated) but I'm not able to add add new bdb databases if the database directories do not exist on all the servers. Is this correct or I made something wrong? Regards, Paolo. ________________________________ Prima di stampare questa e-mail, assicurarsi che sia davvero necessario. Questo documento e' formato esclusivamente per il destinatario. Tutte le informazioni ivi contenute, compresi eventuali allegati, sono soggette a riservatezza a termini del vigente D.Lgs. 196/2003 in materia di privacy e quindi ne e' proibita l'utilizzazione. Se avete ricevuto per errore questo messaggio, Vi preghiamo cortesemente di contattare immediatamente il mittente e cancellare la e-mail. Grazie. Please don't print this e-mail unless you really need to. Confidentiality Notice - This e-mail message including any attachments is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.

1 0

masking LDAP search responses
by paul.osborne＠canterbury.ac.uk 09 May '11

09 May '11

Hi, I have an OpenLDAP to AD proxy up and running, and want to restrict the data being returned when a search has completed. For example if I search for cn=abc1 I get a full response of all data held in our AD for that CN, ie: filter: (cn=abc1) dn: cn=abc1...... displayName: Andrew Bertram Carlisle objectClass: person mail: abc1(a)mydomain.com MEMBEROF: OU=....... homeDirectory: \\fileserver1.myad.mydomain.com\abc1 . . . Naturally I want to be able to limit the data that is returned to the barest minimum required for the querying service. I looked at the rwm overlay (slapo-rwm) and think I should be able to do: overlay rwm rwm-rewriteEngine on rwm-map attribute displayName displayName rwm-map attribute * So that ONLY the displayName gets shown on the output and the rest of the data is filtered out. This does not seem to be working though and I am at the point where I have no idea why. Does anyone have any suggestions that may help? Thanks Paul

2 2

functions using postfix +ldap
by deconya 06 May '11

06 May '11

Hi Im using a mail server using postfix + ldap and Im lost with how to config openldap to made aliases inside postfix. I don't know where can be information about this option. Any idea? Thanks

3 2

Fw: openldap-technical Digest, Vol 42, Issue 4
by Brijesh 06 May '11

06 May '11

On Wednesday, 4 May 2011 09:28:15 Brijesh wrote: > On Tue, 3 May 2011 08:23:27 +0200 (SAST) > i have just submitted a bug to mandriva > > https://qa.mandriva.com/show_bug.cgi?id=63191 > As you said it looks like its a mandriva specific problem so i am > thinking of either downgrading the package or upgrading to the package > available in 2011( not sure whether upgraded package will work or not > though) Cooker has an openldap-smbk5pwd-2.4.24, and that actually needs to be updated to match the openldap-servers which is at 2.4.25. However, a 2.4.22 should soon (within an hour or two) be available in contrib/testing for 2010.1/2 (as noted in the bug report). Please test and report back in bugzilla. Regards, Buchan Its working after the installing version 2.4.22 Thanks Brijesh

1 0

help with smbk5pwd-enable
by Brijesh 05 May '11

05 May '11

Hi, I have recently upgraded the openldap and now it doen't start it stops saying that unknown directive <smbk5pwd-enable> inside backend database definition It has been working fine untill the upgrade. I am using heimdal and openldap on mandriva. Following are the details of those packages. openldap-smbk5pwd- 2.4.21-3mdv2010.1 openldap-servers- 2.4.22-2.2mdv2010.2 Any help would be arrciated. Thanks Brijesh

4 7

conditional bind authentication against external ldap server
by Patrick H. 04 May '11

04 May '11

I'm trying to setup a way to have bind requests authenticated by logging into an external ldap server. But to make things more complicated, I only want to do it if a certain attribute is defined on the user's entry. The details: When a user binds, check to see if the 'seeAlso' attribute is defined for the user. If 'seeAlso' is not defined, try to authenticate as normal using the 'userPassword' stored in the local database. If it is defined, 'seeAlso' will contain the DN of the user in another ldap database (Active Directory in this case). Use the seeAlso DN to determine the URI of the ldap db to connect to (right now there is only one Active Directory server, but it would be nice to be able to use different URIs for different suffixes down the road). Attempt to bind to the remote database using the seeAlso DN. If the remote bind succeeds, the local bind also succeeds. The goal here is to allow users to opt into using their Active Directory password for authentication. No data will be pulled from the remote ldap and overlayed on the local account, it is strictly bind authentication only. From searching around, I'm not sure what to use to do this. It seems like slapd-ldap and slapo-chain might both do the remote ldap thing, and then I might use slapo-rwn to somehow do a conditional test for the seeAlso attribute and rewrite the bind DN, but I'm not sure. If anyone could tell me if my idea is even possible, and some starting points if so, it would be much appreciated.

2 2

Re:Alternate target for slapd-meta ?
by michel.gruau 04 May '11

04 May '11

Could anyone confirm my understanding below regarding URI lists ? After the first URI has become unreachable, for how long time is the second URI used. ? Does it switch back immediatly to the first URI when it become aivailable again. Thanks, Michel > Did you read slapd-meta about the uri directive: > "the directive > suffix "dc=foo,dc=com" > uri "ldap://l1.foo.com/dc=foo,dc=com"; "ldap://l2.foo.com/"; > causes l2.foo.com to be contacted whenever l1.foo.com does not > respond. In that case, the URI list is internally rearranged, > by moving unavailable URIs to the end, so that further connec- > tion attempts occur with respect to the last URI that succeeded." > > Or is this not, what you mean? Thank you very much for your reply, I read it but too quickliy, and I missed this possibility. However, my need is that the first URI remains the prefered one. As soon as it become available again, I'd like to switch back to l1.foo.com. Unfortunately, I guess that the current behaviour is to keep using l2.foo.com until it become unavailable too ? Do you confirm this behaviour ? Michel Une messagerie gratuite, garantie à vie et des services en plus, ça vous tente ? Je crée ma boîte mail www.laposte.net

1 0

Re: openldap-technical Digest, Vol 42, Issue 2
by Brijesh 04 May '11

04 May '11

On Mon, 02 May 2011 12:00:01 +0000 openldap-technical-request(a)OpenLDAP.org wrote: > Are you loading the required module? > > moduleload smbk5pwd yes i do load the module > > > Are you defining the overlay prior to trying to enable the different > drivers? > > overlay smbk5pwd > the overlay is defined the overlay before enabling the module and i am using the same config which use to work with previous package. Thanks Brijesh > > Regards, > > Hugo Monteiro.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical