openldap-technical

openldap-technical@openldap.org

1 participants
9989 discussions

modules directory
by Christ Schlacta 16 Jan '11

16 Jan '11

I've found something odd in regard to the modules directory. I ended up needing to use checkval module for ldap authentication to work properly for me. the documentation I found said to place the following in config files: checkval { item-name = Calling-Station-Id check-name = Calling-Station-Id data-type = string notfound-reject = no } at the location I wanted the check to occur, but instead I ended up needing to use just: checkval because the above code was located in modules/checkval . The question is at this point, how could I, for example, have two different checkval checks? suppose I want to check an additional attribute? I recon I need a new file, but I'm not sure if it matters what I call the new file, or, for that matter, I'm not sure what to put inside the new file, except that I'm sure it must look very similar to that above. if someone could explain the specifics of this, or tell me where to find them explained, I would much appreciate the help. one more question: can there be multiples of ANY module specified? for example, can I use two different ldap or sql modules if I were to need to (just as a bad example, I propose: 1 radius server, 2 wlans with different user bases that can't be merged into one directory for whatever reasons).

2 2

cleaning house on ldap server?
by Christ Schlacta 16 Jan '11

16 Jan '11

I've got a radius server up and running, and I want to clean up my configuration as much as possible. is it a safe assumption that if I remove a file (actually move it out of the way) and attempt to authenticate a client that if the client can successfully authenticate that everything is working? is it also safe to assume that any file with no uncommented lines is also safe to remove? I'm most interrested in removing the SQL directories and all the unused modules in the modules directory.

2 2

Re: [sipx-users] joomla ldap; joomla users not created
by mike＠grounded.net 16 Jan '11

16 Jan '11

One more thing I've wondered about is that the domain that the joomla server connecting to ldap server is different than ldap. I'm not sure if that would somehow prevent the user from being created.

1 3

joomla ldap; joomla users not created
by mike＠grounded.net 16 Jan '11

16 Jan '11

Guessing there are no joomla users on this whole list?

2 3

One root and two domain?
by gael therond 16 Jan '11

16 Jan '11

Is it possible to add a domain on an already existing root? I got the following root for now: dc=lab,dc=corp and I want to create a second Top entry on my root which will be named like this: dc=prod,dc=corp Is that possible? I've try the following syntaxe without succes. Racine.ldif: #Racine dn: dc=prod, dc=corp ObjectClass: Top ObjectClass: dcObject ObjectClass: organization o: prod.corp dc: prod #OU Groups dn: ou=groups, dc=prod, dc=geka ObjectClass: organizationalUnit ObjectClass: top ou: groups #OU Users dn: ou=users, dc=prod, dc=geka ObjectClass: organizationalUnit ObjectClass: top ou: users And then I've done the usual LdapADD command, but with the following error returned: ldap_add: Server is unwilling to perform (53) Additional info: No global Superior Knowledge. Well, my guest is that I didn't set correctly Slapd because my default root is lab.corp instead of being TLD .corp Is that theory right? Many thanks

2 2

joining several directories into a single one, then replicating it
by LALOT Dominique 16 Jan '11

16 Jan '11

Hello, We are in the process of merging several universities into a single one. As we are working on the authentication part, we already test some solutions. We put a server as a replica of our three directories, then two other replicas from this one. It works but I am not sure this is the best solution. Is it better to put a back-meta ou back-relay server for relaying data, then replication from this one? Also, if we put all data into a single one as we did, what happens if we have the same entry-uuid? Thanks in advance Dom -- Dominique LALOT Ingénieur Systèmes et Réseaux http://annuaire.univmed.fr/showuser.php?uid=lalot

1 0

error while loading shared libraries
by jptienshan 15 Jan '11

15 Jan '11

Here is a question from a newbie. I use red hat 5.5. I didn't want to use the openldap that is bundled with and installed by red hat, so I downloaded and installed BerkeleyDB-4.8.30 and openldap-2.4.23. configure, make as a non-root make install as a root user. I specified --prefix=/usr/local in both cases. For openldap, I had to export CPPFLAGS, LDFLAGS and LD_LIBRARY_PATH as follows: export CPPFLAGS="-I/usr/local/include" export LDFLAGS="-L/usr/local/lib" export LD_LIBRARY_PATH="-I/usr/local/lib" I created a slapd file and put it in /etc/init.d, chmod and chkconfig successfully. In .bashrc file, I put /usr/local/sbin and /usr/local/lib in the path. I also added this line: export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/local/lib I was able to run slappasswd and set/create a password for root. But that was the end of my successes :( As a root user, when I type "service slapd start", I get this error: //---- Starting slapd /usr/local/libexec/slapd: error while loading shared libraries: libdb-4.8.so cannot open shared object file no such file or dir. //----- Is it because my BerkeleyDB installation isn't working properly? (I don't recall any errors while installing BDB though) or something more is amiss? I can see that the file libdb-4.8.so is in /usr/local/lib How do I solve this problem? Thank you all for taking time to read. Cheers, -------------------------------------- Get the new Internet Explorer 8 optimized for Yahoo! JAPAN http://pr.mail.yahoo.co.jp/ie8/

2 2

Re: Problems importing ppolicy LDIF: LDAP_INVALID_SYNTAX
by Alexey Shalin 15 Jan '11

15 Jan '11

Could not add object cn=default,ou=Policies,dc=itelsib,dc=com Message: Invalid syntax Error code: 0x15 (LDAP_INVALID_SYNTAX) Error description: An invalid attribute value was specified. You can not use cn=default,ou=Policies,dc=itelsib,dc=com please try cn=ppolicy,ou=Policies,dc=itelsib,dc=com -----Original Message----- From: openldap-technical-bounces(a)OpenLDAP.org [mailto:openldap-technical-bounces@OpenLDAP.org] On Behalf Of openldap-technical-request(a)OpenLDAP.org Sent: Thursday, January 13, 2011 6:00 PM To: openldap-technical(a)openldap.org Subject: openldap-technical Digest, Vol 38, Issue 12 Send openldap-technical mailing list submissions to openldap-technical(a)openldap.org To subscribe or unsubscribe via the World Wide Web, visit http://www.openldap.org/lists/mm/listinfo/openldap-technical or, via email, send a message with subject or body 'help' to openldap-technical-request(a)openldap.org You can reach the person managing the list at openldap-technical-owner(a)openldap.org When replying, please edit your Subject line so it is more specific than "Re: Contents of openldap-technical digest..." Send openldap-technical mailing list submissions to openldap-technical(a)openldap.org When replying, please edit your Subject: header so it is more specific than "Re: openldap-technical digest..." Today's Topics: 1. One root and two domain? (gael therond) 2. Re: One root and two domain? (Pierangelo Masarati) 3. Re: Evolution Contacts Schema (Peter L. Berghold) 4. Problems importing ppolicy LDIF: LDAP_INVALID_SYNTAX (Konstantin Boyandin) 5. Re: Problems importing ppolicy LDIF: LDAP_INVALID_SYNTAX (Quanah Gibson-Mount) 6. Re: Problems importing ppolicy LDIF: LDAP_INVALID_SYNTAX (Konstantin Boyandin) 7. Re: Problems importing ppolicy LDIF: LDAP_INVALID_SYNTAX (Chris Jacobs) 8. Re: Problems importing ppolicy LDIF: LDAP_INVALID_SYNTAX (Konstantin Boyandin) 9. LDAP and PAM: account is expired, but pam_ldap allows authentification (Konstantin Boyandin) 10. Re: Problems importing ppolicy LDIF: LDAP_INVALID_SYNTAX (Chris Jacobs) 11. Re: LDAP and PAM: account is expired, but pam_ldap allows authentification (Indexer) 12. Re: Problems importing ppolicy LDIF: LDAP_INVALID_SYNTAX (Howard Chu) 13. Re: LDAP and PAM: account is expired, but pam_ldap allows authentification (Howard Chu) 14. Re: LDAP and PAM: account is expired, but pam_ldap allows authentification (Chris Jacobs) 15. Re: Problems importing ppolicy LDIF: LDAP_INVALID_SYNTAX (Howard Chu) 16. Re: LDAP and PAM: account is expired, but pam_ldap allows authentification (Howard Chu) 17. Re: LDAP and PAM: account is expired, but pam_ldap allows authentification (Indexer) 18. Re: Problems importing ppolicy LDIF: LDAP_INVALID_SYNTAX (Dieter Kluenter) 19. Re: LDAP and PAM: account is expired, but pam_ldap allows authentification (Howard Chu) 20. Re: Problems importing ppolicy LDIF: LDAP_INVALID_SYNTAX (Konstantin Boyandin) 21. Re: LDAP and PAM: account is expired, but pam_ldap allows authentification (Indexer) 22. Re: Problems importing ppolicy LDIF: LDAP_INVALID_SYNTAX (Pierangelo Masarati) 23. Re: Problems importing ppolicy LDIF: LDAP_INVALID_SYNTAX (Konstantin Boyandin) 24. Re: Problems importing ppolicy LDIF: LDAP_INVALID_SYNTAX (Howard Chu) 25. Re: Problems importing ppolicy LDIF: LDAP_INVALID_SYNTAX (Howard Chu) 26. Re: Problems importing ppolicy LDIF: LDAP_INVALID_SYNTAX (Pierangelo Masarati) 27. Re: Problems importing ppolicy LDIF: LDAP_INVALID_SYNTAX (Howard Chu) 28. Re: Evolution Contacts Schema (Bj?rn Ruberg) 29. Re: Evolution Contacts Schema (Stefan Palme) 30. Hello, how (Alexey Shalin) ---------------------------------------------------------------------- Message: 1 Date: Wed, 12 Jan 2011 15:58:28 +0100 From: gael therond <gael.therond(a)gmail.com> To: openldap-technical <openldap-technical(a)openldap.org> Subject: One root and two domain? Message-ID: <AANLkTinxG_W4QQA5-vA587CN1FtYLf7TTUUchNP1DfTh(a)mail.gmail.com> Content-Type: text/plain; charset="utf-8" Is it possible to add a domain on an already existing root? I got the following root for now: dc=lab,dc=corp and I want to create a second Top entry on my root which will be named like this: dc=prod,dc=corp Is that possible? I've try the following syntaxe without succes. Racine.ldif: #Racine dn: dc=prod, dc=corp ObjectClass: Top ObjectClass: dcObject ObjectClass: organization o: prod.corp dc: prod #OU Groups dn: ou=groups, dc=prod, dc=geka ObjectClass: organizationalUnit ObjectClass: top ou: groups #OU Users dn: ou=users, dc=prod, dc=geka ObjectClass: organizationalUnit ObjectClass: top ou: users And then I've done the usual LdapADD command, but with the following error returned: ldap_add: Server is unwilling to perform (53) Additional info: No global Superior Knowledge. Well, my guest is that I didn't set correctly Slapd because my default root is lab.corp instead of being TLD .corp Is that theory right? Many thanks

2 1

OpenLDAP delegates authentication to PAM
by Manuel Rodríguez Hernández 15 Jan '11

15 Jan '11

Hello I want to configure an application that only supports LDAP authentication, the challenge I face is that this application should not use the LDAP database to compare user and password, what I need, is to authenticate against a private solution which use its own auth schema, besides the only way to pass credentials to this private solution is using PAM, that is for example: an http proxy use a PAM helper to authenticate, and the PAM config use a PAM module to pass user/password to the private solution. So due to the restrictions, I'm looking to deploy an OpenLDAP server that redirects auth or executes an external program in order to authenticate against the private solution, and finally returns the response to the application that needs the authentication. So I was looking to the back-perl module to deploy something like that, but I'm not sure it will work. Does anybody know anything to solve this deployment? I will appreciate any clue. Thanks in advance RODRIGUEZ Manuel Tel: +52 (55) 5322-5290 Soporte: +52(55) 5322-5240 Fax: +52 (55) 5322-5252 www.insys-corp.com.mx "Ce message est confidentiel. Si vous n'êtes pas le destinataire de ce message, nous vous prions de le notifier au destinataire voie un courrier électronique et de l'effacer avec toutes ces pièces jointes de son ordinateur, sans sauvegarder un copie. Vous ne devez pas le copier, l'utiliser, le répliquer, par aucun propos et même plus diffuser son contenu à personne. Merci d'avance." "Este mensaje es confidencial. Si usted no es el destinatario de este mensaje, le suplicamos se lo notifique al remitente mediante un correo electrónico y que borre el presente mensaje y sus anexos de su computadora sin retener copia de los mismos. Por lo que no debe copiar este mensaje, usarlo, transmitir para cualquier propósito ni tampoco divulgar su contenido. Muchas gracias." "This e-mail is confidential and may also be privileged. If you are not the intended recipient please immediately advise the sender by reply e-mail and delete this message and its attachments from your computer without retaining a copy. You should not copy it, use it, transfer it, for any purpose, nor disclose its contents to any other person. Thank you."

2 1

dbd to hdb migration
by dan picon 15 Jan '11

15 Jan '11

Hi, I would like to use hdb as the back-end for my openldap server in order to support subtree-renaming. Untill today i'm using dbd and i have some questions before i change it to hdb: will existing entries be deleted? If yes, what is the best way to restore it? Thank you,

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical