openldap-technical

openldap-technical@openldap.org

18 participants
9785 discussions

Re: Delete events not propogating with syncrepl
by Srinidhi Sharma 02 May '08

02 May '08

Hi Gavin, Here are the details . Following logs were available at -d255 level. user.ldif file ======== dn: cn=user19,ou=people,dc=example,dc=com objectclass: inetOrgPerson cn: user19 sn: user19-lastname1 uid: user19-user1-lastname1 userpassword: welcome1 carlicense: HISCAR 123 homephone: 555-111-2222 mail: user19(a)example.com description: cool guy ou: Human Resources Master node log file snippet: ==================== >>> dnPrettyNormal: <cn=user19,ou=people,dc=example,dc=com> => ldap_bv2dn(cn=user19,ou=people,dc=example,dc=com,0) <= ldap_bv2dn(cn=user19,ou=people,dc=example,dc=com)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=user19,ou=people,dc=example,dc=com)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=user19,ou=people,dc=example,dc=com)=0 <<< dnPrettyNormal: <cn=user19,ou=people,dc=example,dc=com>, <cn=user19,ou=people,dc=example,dc=com> bdb_dn2entry("cn=user19,ou=people,dc=example,dc=com") => bdb_entry_get: ndn: "cn=user19,ou=people,dc=example,dc=com" => bdb_entry_get: oc: "(null)", at: "(null)" bdb_dn2entry("cn=user19,ou=people,dc=example,dc=com") => bdb_entry_get: found entry: "cn=user19,ou=people,dc=example,dc=com" bdb_entry_get: rc=0 ==> bdb_delete: cn=user19,ou=people,dc=example,dc=com bdb_dn2entry("cn=user19,ou=people,dc=example,dc=com") => access_allowed: delete access to "ou=people,dc=example,dc=com" "children" requested <= root access granted => access_allowed: delete access granted by manage(=mwrscxd) => access_allowed: delete access to "cn=user19,ou=people,dc=example,dc=com" "entry" requested <= root access granted => access_allowed: delete access granted by manage(=mwrscxd) => bdb_dn2id_delete 0x11: "cn=user19,ou=people,dc=example,dc=com" bdb_idl_delete_key: 11 @cn=user19,ou=people,dc=example,dc=com bdb_idl_delete_key: 11 %ou=people,dc=example,dc=com bdb_idl_delete_key: 11 @ou=people,dc=example,dc=com <= bdb_dn2id_delete 0x11: 0 => index_entry_del( 17, "cn=user19,ou=people,dc=example,dc=com" ) => key_change(DELETE,11) bdb_idl_delete_key: 11 [860433ad] <= key_change 0 => key_change(DELETE,11) bdb_idl_delete_key: 11 [0250ebcb] <= key_change 0 => key_change(DELETE,11) bdb_idl_delete_key: 11 [8c70ccf9] bdb_idl_delete_key: 11 [860433ad] <= key_change 0 => key_change(DELETE,11) bdb_idl_delete_key: 11 [0250ebcb] <= key_change 0 => key_change(DELETE,11) bdb_idl_delete_key: 11 [8c70ccf9] <= key_change 0 => key_change(DELETE,11) bdb_idl_delete_key: 11 [0096defd] <= key_change 0 => key_change(DELETE,11) bdb_idl_delete_key: 11 [e8d6b696] <= key_change 0 => key_change(DELETE,11) bdb_idl_delete_key: 11 <= key_change 0 <= index_entry_del( 17, "cn=user19,ou=people,dc=example,dc=com" ) success ====> bdb_cache_delete( 17 ) bdb_delete: deleted id=00000011 dn="cn=user19,ou=people,dc=example,dc=com" send_ldap_result: conn=1 op=15 p=3 send_ldap_result: err=0 matched="" text="" send_ldap_response: msgid=16 tag=107 err=0 ber_flush2: 14 bytes to sd 12 0000: 30 0c 02 01 10 6b 07 0a 01 00 04 00 04 00 0....k........ ldap_write: want=14, written=14 0000: 30 0c 02 01 10 6b 07 0a 01 00 04 00 04 00 0....k........ daemon: activity on 1 descriptor daemon: activity on: 12r daemon: read activity on 12 daemon: select: listen=7 active_threads=0 tvp=NULL connection_get(12) connection_get(12): got connid=1 connection_read(12): checking for input on id=1 Slave log snippet: ( I didnt see any log msg for delete entry in the slave, so wasnt sure what to cut/paste, so just cut/pasting the user addition log msg) ============= ber_scanf fmt ({mW}) ber: ber_dump: buf=5c5780 ptr=5c5892 end=5c58ca len=56 0000: 30 36 04 08 65 6e 74 72 79 43 53 4e 31 2a 04 28 06..entryCSN1*.( 0010: 32 30 30 38 30 35 30 32 30 39 34 33 34 36 2e 38 20080502094346.8 0020: 38 39 39 34 36 5a 23 30 30 30 30 30 30 23 30 30 89946Z#000000#00 0030: 30 23 30 30 30 30 30 30 0#000000 => bdb_search bdb_dn2entry("dc=example,dc=com") => access_allowed: search access to "dc=example,dc=com" "entry" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) search_candidates: base="dc=example,dc=com" (0x00000001) scope=2 => bdb_dn2idl("dc=example,dc=com") => bdb_filter_candidates AND => bdb_list_candidates 0xa0 => bdb_filter_candidates EQUALITY => bdb_equality_candidates (entryUUID) => key_read bdb_idl_fetch_key: [e8d6b696] <= bdb_index_read: failed (-30989) <= bdb_equality_candidates: id=0, first=0, last=0 <= bdb_filter_candidates: id=0 first=0 last=0 <= bdb_list_candidates: id=0 first=1 last=0 <= bdb_filter_candidates: id=0 first=1 last=0 bdb_search_candidates: id=0 first=1 last=0 bdb_search: no candidates send_ldap_result: conn=-1 op=0 p=3 send_ldap_result: err=0 matched="" text="" ==> bdb_add: cn=user19,ou=people,dc=example,dc=com bdb_dn2entry("cn=user19,ou=people,dc=example,dc=com") => bdb_dn2id("cn=user19,ou=people,dc=example,dc=com") <= bdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair found (-30989) => access_allowed: add access to "ou=people,dc=example,dc=com" "children" requested <= root access granted => access_allowed: add access granted by manage(=mwrscxd) => access_allowed: add access to "cn=user19,ou=people,dc=example,dc=com" "entry" requested <= root access granted => access_allowed: add access granted by manage(=mwrscxd) => bdb_dn2id_add 0x11: "cn=user19,ou=people,dc=example,dc=com" bdb_idl_insert_key: 11 %ou=people,dc=example,dc=com bdb_idl_insert_key: 11 @ou=people,dc=example,dc=com <= bdb_dn2id_add 0x11: 0 => index_entry_add( 17, "cn=user19,ou=people,dc=example,dc=com" ) => key_change(ADD,11) bdb_idl_insert_key: 11 [860433ad] <= key_change 0 => key_change(ADD,11) bdb_idl_insert_key: 11 [0250ebcb] <= key_change 0 => key_change(ADD,11) bdb_idl_insert_key: 11 [8c70ccf9] <= key_change 0 => key_change(ADD,11) bdb_idl_insert_key: 11 [0096defd] <= key_change 0 => key_change(ADD,11) bdb_idl_insert_key: 11 [e8d6b696] <= key_change 0 => key_change(ADD,11) bdb_idl_insert_key: 11 <= key_change 0 <= index_entry_add( 17, "cn=user19,ou=people,dc=example,dc=com" ) success => entry_encode(0x00000011): cn=user19,ou=people,dc=example,dc=com bdb_add: added id=00000011 dn="cn=user19,ou=people,dc=example,dc=com" send_ldap_result: conn=-1 op=0 p=3 send_ldap_result: err=0 matched="" text="" ldap_msgfree ldap_result ld 5b9630 msgid 2 wait4msg ld 5b9630 msgid 2 (infinite timeout) wait4msg continue ld 5b9630 msgid 2 all 0 ** ld 5b9630 Connections: - Srinidhi On Wed, Apr 30, 2008 at 7:53 PM, Gavin Henry <ghenry(a)openldap.org> wrote: > Srinidhi Sharma wrote: > > > Hi, > > I am using open ldap 2.4.8 with Berkeley DB 4.6.21 ( I haven't applied > > any patch to either open ldap or to Berkeley DB). > > > > When I configure a slave process, the addition and modification of users > > get propogated from master to slave. But the deletion of users from the > > master do not get propogated. the slapd logs in the master show that user > > is getting deleted. > > > > Logs needed and an example user please ;-) > > > > I saw a old note " > > http://www.openldap.org/lists/openldap-bugs/200409/msg00001.html" which > > listed similar issue. > > > > > Not relevant as that's for 2.2. > > -- > Kind Regards, > > Gavin Henry. > OpenLDAP Engineering Team. > > E ghenry(a)OpenLDAP.org > > Community developed LDAP software. > > http://www.openldap.org/project/ > > Suretec Systems is a limited company registered in Scotland. Registered > number: SC258005. Registered office: 13 Whiteley Well Place, Inverurie, > Aberdeenshire, AB51 4FP. > -- Thanks, Srinidhi

1 0

Recommendation for Web Interface for OpenLDAP
by Wes Modes 02 May '08

02 May '08

Howdy, I'm looking for a web interface for OpenLDAP. I want something pretty simple since I won't need to reorganize the entire DIT through the web, only add, delete, and modify users and groups. I'm using smbldap-tools which has it's own set of scripts that I can tap into. I will need to extend the web interface to modify the samba schema extensions to LDAP or run the smbldap-scripts. With that in mind, I am interested in something written in PHP or Perl that can be easily modified or extended. I'd love it if you can recommend a simple web interface for LDAP. If you can recommend something, please tell me what features appeal to you or work well for you. And how does it meet my criteria: * Simple - minimal bells and whistles * add, delete, and modify users * add, delete, and modify groups * secure - using SSL/TLS * linux and apache friendly * written in perl, php, or python Thanks for your help.

4 5

Re: syncrel seems ignore some of the LDAP update request
by Paul Lee 02 May '08

02 May '08

I setup 2-way master as shown in the config file previously. I think the openldap will sync the data once I update one of the openldap servers. I use a java program to update the data every 100ms. Thanks Gavin Henry wrote: > How did you bring the data over to the second MirrorMode node? > Confidential Communication - This e-mail (including any attachments) is confidential and may be legally privileged. If this e-mail has been sent to you by mistake please inform us by reply e-mail and then delete the e-mail, destroy any printed copy and do not disclose or use the information in it.

1 0

Passwd can not able to updated Centerlize LDAP Server
by Vipul Ramani 01 May '08

01 May '08

Hi all , I have openldap running on solaris 10 x86 server with all system users are migrated on LDAP TREE.!. I configure client on other solaris 10 x86 server. I can login( SSH and dtlogin) to other solaris 10 server using LDAP user . but while i am try to change password i m getting this problem do i missing anything . I am suspecting about pam.conf configuration. I tried couple of combinations but not able to get rid of this. Same configuration is working Linux ( as standard changes in system-auth config file...) I am using Solaris 10 ( intel) NATIVE LDAP Client as LDAP client. ==Solaris console=== bash-3.00$ passwd passwd: Changing password for vipul3 Enter existing login password: New Password: Re-enter new Password: passwd: vipul3 does not exist. Permission denied bash-3.00$ ======================== Var/adm/message Apr 30 02:27:30 xxxx passwd[6954]: [ID 574280 user.error] passwdutil: no legal LDAP authentication method configured Apr 30 02:27:30 xxxx passwd[6954]: [ID 574280 user.error] passwdutil: no legal LDAP authentication method configured ============================= -- Regards Vipul Ramani

1 0

Password policy definitions
by Gustavo Mendes de Carvalho 30 Apr '08

30 Apr '08

Hi there, I noted that ppolicy is yet in development and because of that I would like to check how can I do some password history check. I mean, how can I apply same password policy defined in /etc/pam.d/system-auth, like history, size, new chars when changing password, and so on ? I running OpenLDAP 2.2.13, because is the RHAS4 current version. Is there any way to force LDAP Seerver to use /etc/pam.d/system-auth definitions ? Thanks --- Gustavo Mendes de Carvalho email: gmcarvalho(a)gmail.com

5 19

php script for LDAP_BIND
by divya shree 29 Apr '08

29 Apr '08

hii we r trying to write a php script to bind to the ldap server.. the php script is <?php // basic sequence with LDAP is connect, bind, search, interpret search // result, close connection echo "LDAP query test"; echo "Connecting ..."; $ds=ldap_connect("localhost"); // must be a valid LDAP server! echo "connect result is " . $ds ; if ($ds) { echo "Binding ..."; $r=ldap_bind($ds); // this is an "anonymous" bind, typically // read-only access echo "Bind result is " . $r ; } ?> we also tried doin $ldapset=ldap_set_option($ldapconn,LDAP_OPT_PROTOCOL_VERSION,3); and $ldapbind = ldap_bind($ldapconn, $ldaprdn, $ldappass); where Ldaprdn= rootdn in the slapd.conf file and ldappass is the password we r getting the following error in all the above cases LDAP query test Connecting ... connect result is Resource id #4 Binding ...PHP Warning: ldap_bind(): Unable to bind to server: Protocol error in /var/www/html/forms/ex1.php on line 12 plz help ASAP Thanks and Regards Divya --------------------------------- Unlimited freedom, unlimited storage. Get it now

2 1

autofs and ldap
by Luciana Romeiro Rodrigues 29 Apr '08

29 Apr '08

Hi! I run SLES 10.0 with openldap-stable-20071118. Could anyone offer me some advice, or point me in the right direction? Thanks, Luciana Follows the settings: 1- /etc/nsswitch.conf: automount: ldap 2- ldif: dn: ou=automount,dc=cp,dc=br ou: automount objectClass: top objectClass: organizationalUnit dn: ou=auto.master,ou=automount,dc=cp,dc=br ou: auto.master objectClass: top objectClass: automountMap dn: cn=/home, ou=auto.master,ou=automount,dc=cp,dc=br objectClass: top objectClass: automount automountInformation: ldap: server-ldap.cp.br:ou=auto.home,ou=automount,dc= cp,dc=br cn: /home dn: ou=auto.home, ou=automount,dc=cp,dc=br ou: auto.home objectClass: top objectClass: automountMap Users: dn: uid=lu,ou=auto.home,ou=automount,dc=cp,dc=br uid: lu cn: teste objectClass: automount automountInformation: -rw,soft,retrans=10,intr nfsserver.cp.br:/extra/home/lu 3- /etc/ldap.conf host 127.0.0.1 base dc=cp,dc=br 4- tembiru:/home # service autofs status Checking for service autofs: unused Configured Mount Points: ------------------------ /usr/sbin/automount /home ldap: "server-ldap.cp.br:ou=auto.home,ou=automount,dc=cp,dc=br" Active Mount Points: 5- su - lu warning: cannot change directory to /home/lu: No such file or directory -- ======================================================== Luciana F.Romeiro Rodrigues Analista de Suporte Fone: 3186-8513 - Novo Email: luciana.romeiro(a)cptec.inpe.br ========================================================

1 0

Ldap_SASL_Bind (simple): error
by divya shree 29 Apr '08

29 Apr '08

Hii I am uisng Openldap-2.4.7 on fedora core 7... i hav configured my slapd.conf file n ldap.conf file... n started the server using the comand /usr/local/libexec/slapd n wen i try to perform any client operation for ex... ldapsearch -x -b ' ' -s base '(objectclass=*)' namingContexts i get the following error.. Ldap_sasl_bind (simple) :can't connect to the server (-1)... Plz help ASAP Thanks and Regards Divya --------------------------------- Meet people who discuss and share your passions. Join them now.

2 1

Features supported
by Molenda, Mark P 29 Apr '08

29 Apr '08

Previous to my last Linux build, I've always built OpenLdap from source. My latest build has pre-compiled OpenLdap and rather than rebuild everything, is there a way to easily figure out what options were used to create this build? Thank you for your time in looking at this issue. Mark Molenda EDS Consulting Services Integration Soa Services <http://www.consultingservices.us.eds.com/nlapps/docs/default.asp?fid=41 7>

4 5

Delete events not propogating with syncrepl
by Srinidhi Sharma 29 Apr '08

29 Apr '08

Hi, I am using open ldap 2.4.8 with Berkeley DB 4.6.21 ( I haven't applied any patch to either open ldap or to Berkeley DB). When I configure a slave process, the addition and modification of users get propogated from master to slave. But the deletion of users from the master do not get propogated. the slapd logs in the master show that user is getting deleted. I saw a old note " http://www.openldap.org/lists/openldap-bugs/200409/msg00001.html" which listed similar issue. Master slapd.conf details ================== ####################################################################### # BDB database definitions ####################################################################### database bdb suffix "dc=example,dc=com" rootdn "cn=Manager,dc=example,dc=com" # Cleartext passwords, especially for the rootdn, should # be avoid. See slappasswd(8) and slapd.conf(5) for details. # Use of strong authentication encouraged. rootpw secret # The database directory MUST exist prior to running slapd AND # should only be accessible by the slapd and slap tools. # Mode 700 recommended. directory <my_host>/openldap-2.4.8/var/openldap-data # Indices to maintain index objectClass eq index entryCSN eq index entryUUID eq overlay syncprov syncprov-checkpoint 100 10 syncprov-sessionlog 100 Slave slapd.conf ============ database bdb suffix "dc=example,dc=com" rootdn "cn=Manager,dc=example,dc=com" # Cleartext passwords, especially for the rootdn, should # be avoid. See slappasswd(8) and slapd.conf(5) for details. # Use of strong authentication encouraged. rootpw secret # The database directory MUST exist prior to running slapd AND # should only be accessible by the slapd and slap tools. # Mode 700 recommended. directory <myhost>/openldap-2.4.8/var/openldap-data_repl # Indices to maintain index objectClass eq index entryCSN eq index entryUUID eq syncrepl rid=1234 provider=ldap://masterldap.com:9011 type=refreshOnly interval=00:00:00:15 searchbase="dc=example,dc=com" filter="(objectClass=*)" scope=sub attrs="cn,sn,ou,telephoneNumber,title,l,givenname,mail,entryUUID,entryCSN" schemachecking=off bindmethod=simple binddn="cn=Manager,dc=example,dc=com" credentials=secret Is there a issue with my configuration files ? or is this is a known issue in 2.4.8? Thanks, Srinidhi

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical