openldap-technical

openldap-technical@openldap.org

9 participants
9873 discussions

slapo-rwm : concatenate rule
by Anthony Milan 21 Sep '10

21 Sep '10

Hi, I would like to create a rewrite rule with slapo-rwm using back-relay to concatenate two different attributes in an other one? Something like this with an approximate syntax: map attribute cn concat(givenName sn) or with Perl syntax: map attribute cn "$givenName $sn" Is it possible to do this with rewriteRules directives? Thanks for help, -- Anthony Milan

2 1

Recommended BerkeleyDB version?
by Marco Pizzoli 21 Sep '10

21 Sep '10

Hi all, I would like to know if is there a "recommended" version of BerkeleyDB to be used with OpenLDAP. Days ago, on this mailing list, I read comments about 4.8.30. On the Oracle site I see there are also: - 5.0.21 - 5.0.26 - 5.1.19 Thanks in advance Marco -- _________________________________________ Non è forte chi non cade, ma chi cadendo ha la forza di rialzarsi. Jim Morrison

3 3

Filter on higher rdn and read lower rdn attributes
by S.A. 21 Sep '10

21 Sep '10

Hello, I have a question regarding the construction of search filter (assuming that what I think is possible in LDAP). For a tree shown like below: o dc=com | o dc=xyz / | | \ ou=machines o . . . . . o ou=people / | \ uid=abby o . . o ou=xie <- OC1 / ou=options o <- OC2 / ou=theme1 o <- OC3 OC1 != OC2 != OC3 (objectclasses with different set of attributes) Assume that at uid=<name> rdn, the objectclass (OC1) has an attribute called accessFlag. Based on this accessFlag attribute value, is it possible to construct a search filter that will give us the attributes of the objectclass (OC3) with rdn ou=<theme name>? That is, I want to get the theme values of all users whose accessFlag is set to some value. Thank you!

2 3

Undefined attribute type (17)
by Michael Ostrowski 21 Sep '10

21 Sep '10

Hi, I am getting the following error when trying to modify an entry via the ldapmodify command Any help would be appreciated, Thanks, Mike c:\open-ldap\OpenLDAP>ldapmodify -f useradd1.ldif -v -D "cn=Manager,dc=loda,dc=l ocal" -w secret ldap_initialize( <DEFAULT> ) replace change-type: modify replace add: uid replace uid: larry modifying entry "cn=Larry Anderson, dc=loda, dc=local" modify complete ldap_modify: Undefined attribute type (17) additional info: change-type: attribute type undefined The LDIF file looks like dn: cn=Larry Anderson, dc=loda, dc=local change-type:modify add:uid uid:larry The current entry in the database dn: cn=Larry Anderson,dc=loda,dc=local cn: Larry Anderson objectClass: person sn:: QW5kZXJzb24gICAgICAgICAg structuralObjectClass: person entryUUID: 91801ba1-103b-4277-85fc-56dfa2ae0bd7 creatorsName: cn=Manager,dc=loda,dc=local modifiersName: cn=Manager,dc=loda,dc=local createTimestamp: 20100915201014Z modifyTimestamp: 20100915201014Z entryCSN: 20100915201014Z#000001#00#000000 <http://www.arraynetworks.net/entry.asp?PageID=395>

2 2

Re: Recommended BerkeleyDB version?
by Marco Pizzoli 21 Sep '10

21 Sep '10

Hi Quanah, thanks for the answer. If I would like to stay up-to-date with this information, where can I find it? I saw this url http://www.openldap.org/doc/admin24/appendix-recommended-versions.html but it still lists BDB versions 4.4 through 4.7. Thanks again Marco On Mon, Sep 20, 2010 at 5:35 PM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote: > --On Monday, September 20, 2010 9:35 AM +0200 Marco Pizzoli < > marco.pizzoli(a)gmail.com> wrote: > > Hi all, >> I would like to know if is there a "recommended" version of BerkeleyDB to >> be used with OpenLDAP. >> >> Days ago, on this mailing list, I read comments about 4.8.30. >> >> On the Oracle site I see there are also: >> - 5.0.21 >> - 5.0.26 >> - 5.1.19 >> > > 5.0.x has not yet been heavily tested with OpenLDAP. Recommended versions > remain 4.6.x through 4.8.x, as long as you have all patches applied for 4.6 > & 4.7. > > --Quanah > > > -- > > Quanah Gibson-Mount > Principal Software Engineer > Zimbra, Inc > -------------------- > Zimbra :: the leader in open source messaging and collaboration > -- _________________________________________ Non è forte chi non cade, ma chi cadendo ha la forza di rialzarsi. Jim Morrison

2 1

Policies!
by Alejandro Rodriguez Luna 21 Sep '10

21 Sep '10

Hi all!! is there a way that I can assign local policies and group policies to windows and linux machine through OpenLDAP, as I do with AD? ---------------------------------- Alejandro Rodriguez Luna Web: http://www.alexluna.org E-mail: el_alexluna(a)yahoo.com.mx MSN: el_alexluna(a)yahoo.com.mx GTalk: alexluna(a)gmail.com Movil: 044-311-112-86-41 ----------------------------------

2 1

How to slapadd cn=config
by Torsten Schlabach (Tascel eG) 21 Sep '10

21 Sep '10

Dear list! If I have an LDIF backup of a cn=config database, taken with slapcat, how would I use it to bootstrap a new server, for example, in a desaster recovery setting? I tried it and slapadd required a configuration, but cn=config *is* the configuration and I am trying to restore it. So this is a bit of a chicken and egg problem, isn't it? Is there an "official" way of doing that? Regards, Torsten

5 6

Re: How to slapadd cn=config
by Torsten Schlabach (Tascel eG) 21 Sep '10

21 Sep '10

Hi Ondrej! You're right, it's a classic RTFM: >From the slapadd man page: -n dbnum Add entries to the dbnum-th database listed in the configuration file. The -n cannot be used in conjunction with the -b option. To populate the config database slapd-config(5), use -n 0 as it is always the first database. It must physically exist on the filesystem prior to this, however. I tried -b 'cn=config' instead of -n 0, which is semantically the same, but not technially. Problem solved, I think. Regards, Torsten On Tue, 21 Sep 2010 14:45:33 +0200, Ondrej Kuznik <ondrej.kuznik(a)acision.com> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 09/21/2010 02:23 PM, Torsten Schlabach (Tascel eG) wrote: >> Hi Robert! >> >>> Slapd, etc. needs an /etc/openldap/slapd.conf file >> >> Well, either an /etc/openldap/slapd.conf file *or* a cn=config database, >> I >> guess. >> >> Ok, maybe a possible trick is to have a minimal slapd.conf file which >> just >> declares a cn=config database to be able to load it that way. >> >> In that case, a cut & paste example somewhere would come in handy. >> >> But I understand that in OpenLDAP 2.5 they think about doing away with >> slapd.conf entirely. This would then break your approach again. >> >> Maybe Howard will explain a bit better what he meand by "slapadd the same >> way you slapcat". > > I asked a similar question on the #openldap irc channel some time ago, > the advice was to use: > slapadd -n0 -l slapdconfig.ldif -F /path/to/new/slapd.d > > (the directory /path/to/new/slapd.d must already exist and should be > an empty directory) > > That way you need no prior configuration in the form of slapd.conf. > > Ondra > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.10 (GNU/Linux) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ > > iEYEARECAAYFAkyYqO0ACgkQ9GWxeeH+cXv1QACdHgrI5G/W760M2QCJ1PKiHbNM > lIIAn0wiPptdEEcCftO5gBDPk01dQcMi > =h2Z3 > -----END PGP SIGNATURE----- > > This e-mail and any attachment is for authorised use by the intended > recipient(s) only. It may contain proprietary material, confidential > information and/or be subject to legal privilege. It should not be copied, > disclosed to, retained or used by, any other party. If you are not an > intended recipient then please promptly delete this e-mail and any > attachment and all copies and inform the sender. Thank you.

1 0

Automate Create Home Directory
by Alejandro Rodriguez Luna 21 Sep '10

21 Sep '10

Hi, i'm testing a new openldap server, and i have everything set, i can add users, groups, and log on in differents machines with the same user. Everything works fine. but i have a problem, i have to create the home directory for each new user on each new machine that I log on. is there a way that this process can be automatic?. Ideas?

4 3

Forcing UID attribute
by Marco Pizzoli 20 Sep '10

20 Sep '10

Hi list, I need to populate an entry in OL having DN uid=pippo,ou=people,dc=mycorp. I need to force this entry to have a uid attribute *different* from uid appearing in the name. Example: I need "uid: pluto". ldapadd-ing the entry I have the entry with 2 uid attributes populated: - uid: pippo - uid: pluto Is there a way to NOT have "uid: pippo" populated even if the entry is called in that way? Thanks in advance Marco -- _________________________________________ Non è forte chi non cade, ma chi cadendo ha la forza di rialzarsi. Jim Morrison

2 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical