openldap-technical

openldap-technical@openldap.org

5 participants
9899 discussions

Re: Recommended BerkeleyDB version?
by Marco Pizzoli 21 Sep '10

21 Sep '10

Hi Quanah, thanks for the answer. If I would like to stay up-to-date with this information, where can I find it? I saw this url http://www.openldap.org/doc/admin24/appendix-recommended-versions.html but it still lists BDB versions 4.4 through 4.7. Thanks again Marco On Mon, Sep 20, 2010 at 5:35 PM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote: > --On Monday, September 20, 2010 9:35 AM +0200 Marco Pizzoli < > marco.pizzoli(a)gmail.com> wrote: > > Hi all, >> I would like to know if is there a "recommended" version of BerkeleyDB to >> be used with OpenLDAP. >> >> Days ago, on this mailing list, I read comments about 4.8.30. >> >> On the Oracle site I see there are also: >> - 5.0.21 >> - 5.0.26 >> - 5.1.19 >> > > 5.0.x has not yet been heavily tested with OpenLDAP. Recommended versions > remain 4.6.x through 4.8.x, as long as you have all patches applied for 4.6 > & 4.7. > > --Quanah > > > -- > > Quanah Gibson-Mount > Principal Software Engineer > Zimbra, Inc > -------------------- > Zimbra :: the leader in open source messaging and collaboration > -- _________________________________________ Non è forte chi non cade, ma chi cadendo ha la forza di rialzarsi. Jim Morrison

2 1

Policies!
by Alejandro Rodriguez Luna 21 Sep '10

21 Sep '10

Hi all!! is there a way that I can assign local policies and group policies to windows and linux machine through OpenLDAP, as I do with AD? ---------------------------------- Alejandro Rodriguez Luna Web: http://www.alexluna.org E-mail: el_alexluna(a)yahoo.com.mx MSN: el_alexluna(a)yahoo.com.mx GTalk: alexluna(a)gmail.com Movil: 044-311-112-86-41 ----------------------------------

2 1

How to slapadd cn=config
by Torsten Schlabach (Tascel eG) 21 Sep '10

21 Sep '10

Dear list! If I have an LDIF backup of a cn=config database, taken with slapcat, how would I use it to bootstrap a new server, for example, in a desaster recovery setting? I tried it and slapadd required a configuration, but cn=config *is* the configuration and I am trying to restore it. So this is a bit of a chicken and egg problem, isn't it? Is there an "official" way of doing that? Regards, Torsten

5 6

Re: How to slapadd cn=config
by Torsten Schlabach (Tascel eG) 21 Sep '10

21 Sep '10

Hi Ondrej! You're right, it's a classic RTFM: >From the slapadd man page: -n dbnum Add entries to the dbnum-th database listed in the configuration file. The -n cannot be used in conjunction with the -b option. To populate the config database slapd-config(5), use -n 0 as it is always the first database. It must physically exist on the filesystem prior to this, however. I tried -b 'cn=config' instead of -n 0, which is semantically the same, but not technially. Problem solved, I think. Regards, Torsten On Tue, 21 Sep 2010 14:45:33 +0200, Ondrej Kuznik <ondrej.kuznik(a)acision.com> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 09/21/2010 02:23 PM, Torsten Schlabach (Tascel eG) wrote: >> Hi Robert! >> >>> Slapd, etc. needs an /etc/openldap/slapd.conf file >> >> Well, either an /etc/openldap/slapd.conf file *or* a cn=config database, >> I >> guess. >> >> Ok, maybe a possible trick is to have a minimal slapd.conf file which >> just >> declares a cn=config database to be able to load it that way. >> >> In that case, a cut & paste example somewhere would come in handy. >> >> But I understand that in OpenLDAP 2.5 they think about doing away with >> slapd.conf entirely. This would then break your approach again. >> >> Maybe Howard will explain a bit better what he meand by "slapadd the same >> way you slapcat". > > I asked a similar question on the #openldap irc channel some time ago, > the advice was to use: > slapadd -n0 -l slapdconfig.ldif -F /path/to/new/slapd.d > > (the directory /path/to/new/slapd.d must already exist and should be > an empty directory) > > That way you need no prior configuration in the form of slapd.conf. > > Ondra > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.10 (GNU/Linux) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ > > iEYEARECAAYFAkyYqO0ACgkQ9GWxeeH+cXv1QACdHgrI5G/W760M2QCJ1PKiHbNM > lIIAn0wiPptdEEcCftO5gBDPk01dQcMi > =h2Z3 > -----END PGP SIGNATURE----- > > This e-mail and any attachment is for authorised use by the intended > recipient(s) only. It may contain proprietary material, confidential > information and/or be subject to legal privilege. It should not be copied, > disclosed to, retained or used by, any other party. If you are not an > intended recipient then please promptly delete this e-mail and any > attachment and all copies and inform the sender. Thank you.

1 0

Automate Create Home Directory
by Alejandro Rodriguez Luna 21 Sep '10

21 Sep '10

Hi, i'm testing a new openldap server, and i have everything set, i can add users, groups, and log on in differents machines with the same user. Everything works fine. but i have a problem, i have to create the home directory for each new user on each new machine that I log on. is there a way that this process can be automatic?. Ideas?

4 3

Forcing UID attribute
by Marco Pizzoli 20 Sep '10

20 Sep '10

Hi list, I need to populate an entry in OL having DN uid=pippo,ou=people,dc=mycorp. I need to force this entry to have a uid attribute *different* from uid appearing in the name. Example: I need "uid: pluto". ldapadd-ing the entry I have the entry with 2 uid attributes populated: - uid: pippo - uid: pluto Is there a way to NOT have "uid: pippo" populated even if the entry is called in that way? Thanks in advance Marco -- _________________________________________ Non è forte chi non cade, ma chi cadendo ha la forza di rialzarsi. Jim Morrison

2 2

Configuring AD using OpenLDAP
by Vinay Kalkoti 20 Sep '10

20 Sep '10

Hi, Is it possible to use OpenLDAP client to authenticate against Active Directory without using Samba or SUF ? Thanks, Vinay

4 4

No connection! Some Ideas
by Márcio Luciano Donada 17 Sep '10

17 Sep '10

That night, I had a problem with stopping the LDAP, the only thing I have in the log is this: connection_read(42): no connection! my version OpenLDAP is: @(#) $OpenLDAP: slapd 2.4.11 (Jul 24 2010 08:14:20) $#012#011@murphy:/build/buildd-openldap_2.4.11-1+lenny2-i386-H5BDjb/open ldap-2.4.11/debian/build/servers/slapd Debian Lenny 5. after the restart ldap I have the following message: connection_input: conn=32 deferring operation: pending operations I honestly do not know what happens, I have this problem and sometimes for my system for some reason not yet know what it is, and debugging of slapd.conf is 256 and as I passed the e-mail that is the only information I have. Can anyone help me? Thanks -- Márcio Luciano Donada <mdonada -at- auroraalimentos -dot- com -dot- br> Aurora Alimentos - Cooperativa Central Oeste Catarinense Departamento de T.I.

2 3

Loglevel for authentication problem
by Darouichi, Aziz 17 Sep '10

17 Sep '10

Hi, We are working with a vendor of a hosted application, and we are using openldap-2.2.13-12.el4 for authentication. We are not able to login to the hosted application. This is what the vendor is getting for error message: message] [09-14-2010T10:27:30] Attempting to bind to xx.xxx.xxx.xxxx:389 [message] [09-14-2010T10:27:30] Binding as 'uid=pperson,ou=People,dc=college,dc=edu' [message] [09-14-2010T10:27:31] Bind successful [system ] [09-14-2010T10:27:31] Checking R25 WS user [message] [09-14-2010T10:27:31] Executing query (&(objectClass=user)(sAMAccountName=test)) [message] [09-14-2010T10:27:31] Building field mappings for query (&(objectClass=user)(sAMAccountName=test)) [message] [09-14-2010T10:27:31] Search path: OU=Group,DC=college,DC=edu [error ] [09-14-2010T10:27:32] Search error: [10061] Connection refused [message] [09-14-2010T10:27:32] Search path: OU=People,DC=college,DC=edu [error ] [09-14-2010T10:27:33] Search error: [10061] Connection refused [message] [09-14-2010T10:27:33] Search path: OU=Users,DC=college,DC=edu [error ] [09-14-2010T10:27:34] Search error: [10061] Connection refused [error ] [09-14-2010T10:27:34] Query (&(objectClass=user)(sAMAccountName=test)) returned no results We have log level 64 enabled, if we increase log level it slows the machine. This what We are getting in the log: Sep 16 09:31:01 ldap1 last message repeated 8 times Sep 16 09:32:06 ldap1 last message repeated 2 times Sep 16 09:33:07 ldap1 slapd[3288]: <= bdb_equality_candidates: (uniqueMember) index_param failed (18) Sep 16 09:34:26 ldap1 last message repeated 4 times Sep 16 09:35:36 ldap1 last message repeated 4 times Sep 16 09:36:39 ldap1 last message repeated 4 times Sep 16 09:37:14 ldap1 last message repeated 4 times Sep 16 09:37:23 ldap1 slapd[3288]: connection_read(26): no connection! Sep 16 09:37:26 ldap1 slapd[3288]: <= bdb_equality_candidates: (uniqueMember) index_param failed (18) Sep 16 09:38:15 ldap1 last message repeated 2 times Sep 16 09:39:16 ldap1 last message repeated 5 times Sep 16 09:40:28 ldap1 last message repeated 3 times Sep 16 09:40:56 ldap1 last message repeated 5 times Sep 16 09:41:10 ldap1 slapd[3288]: connection_read(34): no connection! Sep 16 09:41:17 ldap1 slapd[3288]: <= bdb_equality_candidates: (uniqueMember) index_param failed (18) I have a test server I can use to troubleshoot this problem if I know what log level should I use? Thanks, Aziz

2 2

Stitching two LDAP databases together using chaining?
by Michael Smith 17 Sep '10

17 Sep '10

Hi, Let's say I have a database with base DN dc=parent. On a particular server, dc=parent is a read-only syncrepl slave. On the same server, I have a separate read-write database, dc=child,dc=parent. Is there a way to make it so searches of dc=parent also search the database in dc=child,dc=parent? I'm thinking a referral plus the chain overlay might do the trick, but I can't create a referral object with name "dc=child,dc=parent" within the dc=parent database because the server knows dc=child,dc=parent already exists (as the other database). I get "Already exists (68)" from the server. I figure I'm missing something simple, or doing something stupid. Thanks, Mike

2 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical