openldap-technical

openldap-technical@openldap.org

9 participants
9902 discussions

additional info: homePhone: value #0 normalization failed
by Jay Jesus Amorin 12 Jun '08

12 Jun '08

ldapadd -x -D "cn=Administrator,dc=house,dc=org" -w 12345678 -f /home/ja9/data.ldif adding new entry "cn=labacan,ou=house_backup,dc=house,dc=org" ldap_add: Invalid syntax (21) additional info: homePhone: value #0 normalization failed Please help, Jay

2 1

Re: help with ldapsearch on uid
by joshua＠itsecureadmin.com 12 Jun '08

12 Jun '08

> Hi Joshua > > And without -ZZ, mean ldaps research in local server ? > Without -ZZ would be without TLS, which is working fine. Thanks, Josh Miller, RHCE

1 0

Re: help with ldapsearch on uid
by karim.bourenane＠orange-ftgroup.com 12 Jun '08

12 Jun '08

Hi Joshua And without -ZZ, mean ldaps research in local server ? Reagrds Karim Bourenane Orange Business Services / Equant RO&SI / IBNF / ENO / GNS 112 Avenue Charles de Gaules 92200 Neuilly S/Seine Phone: +33156 76 35 52 Fax: +33156 76 35 04 http://www.equant.com joshua(a)itsecureadmin.com Sent by: openldap-technical-bounces+karim.bourenane=orange-ftgroup.com(a)OpenLDAP.org 12/06/2008 17:01 To: openldap-technical(a)openldap.org cc: bcc: Subject: help with ldapsearch on uid Hello, I am using OpenLDAP 2.4.9 on CentOS 5.1 (32 bit) with a custom schema and I have added ~7500 objects and I am not able to search successfully for these objects by uid. What must I do to be able to search for these objects by uid? Sample object: # 496user, People, example.com dn: uid=496user,ou=People,dc=example,dc=com objectClass: mailAccount maildrop: 496user(a)nest.tld mailid: 496user(a)nest.tld maildir: 496user/ userPassword:: secret mailquota: 35969216S If I search for this user by uid, I will get no results back: # ldapsearch -xZZ -b "ou=people,dc=example,dc=com" uid=496user # extended LDIF # # LDAPv3 # base <ou=people,dc=example,dc=com> with scope subtree # filter: uid=496user # requesting: ALL # # search result search: 3 result: 0 Success # numResponses: 1 Searching by mailid does work: # ldapsearch -xZZ -b "ou=people,dc=example,dc=com" mailid=496user(a)nest.tld ...<snip>... dn: uid=496user,ou=People,dc=example,dc=com objectClass: mailAccount maildrop: 496user(a)nest.tld mailid: 496user(a)nest.tld maildir: 496user/ userPassword:: secret mailquota: 35969216S # search result search: 3 result: 0 Success # numResponses: 2 # numEntries: 1 The schema is as follows (downloaded from riseuplabs.org): objectIdentifier OID 1.1 objectIdentifier ldapOID OID:2 objectIdentifier attributetypeOID ldapOID:1 objectIdentifier objectclassOID ldapOID:2 attributeType ( attributetypeOID:1 NAME 'mailAddress' DESC 'email address(es)' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ) attributeType ( attributetypeOID:2 NAME 'maildrop' DESC 'Mail addresses where mail is delivered -- ie forwards' SUP mailAddress ) attributeType ( attributetypeOID:3 NAME 'mailid' DESC 'Mail addresses accepted by this account -- ie aliases' SUP mailAddress ) attributeType ( attributetypeOID:4 NAME 'mailquota' DESC 'Bytes of mail quota' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} SINGLE-VALUE ) attributetype ( attributetypeOID:5 NAME 'maildir' DESC 'where mail is stored' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} SINGLE-VALUE ) objectclass ( objectclassOID:1 NAME 'mailAccount' DESC 'users who receive mail' AUXILIARY MAY (maildrop $ mailid $ mailquota $ maildir) ) TIA, Josh Miller, RHCE

1 0

Re: [BSD7.0] Openldap Server - Client 2.3.41 / Unknow user UID
by karim.bourenane＠orange-ftgroup.com 12 Jun '08

12 Jun '08

Hi Karic Thanks you for your reply. I started nscd with nscd.conf : enable-cache passwd yes enable-cache group yes enable-cache hosts yes enable-cache services yes enable-cache protocols yes enable-cache rpc yes enable-cache networks yes I can put also some value about positive cache ? as : positive-time-to-live passwd 600 negative-time-to-live passwd 20 suggested-size passwd 211 Regards Karim Bourenane Orange Business Services / Equant RO&SI / IBNF / ENO / GNS 112 Avenue Charles de Gaules 92200 Neuilly S/Seine Phone: +33156 76 35 52 Fax: +33156 76 35 04 http://www.equant.com "Almir Karic" <redduck666(a)gmail.com> Sent by: openldap-technical-bounces+karim.bourenane=orange-ftgroup.com(a)OpenLDAP.org 12/06/2008 15:22 To: karim.bourenane(a)orange-ftgroup.com cc: openldap-technical(a)openldap.org bcc: Subject: Re: [BSD7.0] Openldap Server - Client 2.3.41 / Unknow user UID i solved the same error by running nscd. On Thu, Jun 12, 2008 at 2:56 PM, <karim.bourenane(a)orange-ftgroup.com> wrote: > > Hi All > > I send you my actual problem, because i cannot resolve from 1 week :/. > I've installed openldap 2.3.41 server and client on server. Ssh running fine > with sudo. But if i do SCP command from another server i have this error : > > server-without-ldap# scp kbourena@ldap-rain:/home/kbourena/toto.txt . > Password: > unknown user 1206 > > If anyone have idea. > > Best Regards > > Karim Bourenane > Orange Business Services / Equant > RO&SI / IBNF / ENO / GNS > 112 Avenue Charles de Gaules > 92200 Neuilly S/Seine > Phone: +33156 76 35 52 > Fax: +33156 76 35 04 > http://www.equant.com > > -- For far too long, power has been concentrated in the hands of "root" and his "wheel" oligarchy. We have instituted a dictatorship of the users. All system administration functions will be handled by the People's Committee for Democratically Organizing the System (PC-DOS).

1 0

[BSD7.0] Openldap Server - Client 2.3.41 / Unknow user UID
by karim.bourenane＠orange-ftgroup.com 12 Jun '08

12 Jun '08

Hi All I send you my actual problem, because i cannot resolve from 1 week :/. I've installed openldap 2.3.41 server and client on server. Ssh running fine with sudo. But if i do SCP command from another server i have this error : server-without-ldap# scp kbourena@ldap-rain:/home/kbourena/toto.txt . Password: unknown user 1206 If anyone have idea. Best Regards Karim Bourenane Orange Business Services / Equant RO&SI / IBNF / ENO / GNS 112 Avenue Charles de Gaules 92200 Neuilly S/Seine Phone: +33156 76 35 52 Fax: +33156 76 35 04 http://www.equant.com

2 1

Solutions for creating a Samba4 OpenLDAP backend
by Andrew Bartlett 11 Jun '08

11 Jun '08

I've had a very useful discussion with Howard on IRC this morning, and wanted to summarise it for the lists. It follows on from http://www.openldap.org/its/index.cgi?findid=5534 We looked at a few things that were getting in the way of the consistency I need for Samba4. My primary gripe at the moment is the need to have invalid links detected at the time of creation, and to ensure that if this happens, nothing changes in the database. This is the main test that currently fails against the OpenLDAP backend. (In short, everything else seems to work!). The trivial solution to this is a pre-check of the consequences of the operation before attempting it. This will be racy (delete concurrent with adding a DN as a member), but can be backed by a transaction when that functionality is exposed. The problem with doing a pre-check is database loads and replication. In the replicated case, we can simply not check consistency except on the original server, as we will catch up to consistency pretty soon (catastrophic replication failures aside). For database loads (from a dump), we can simply permit inconsistent links by means of a configuration option, and hope that the admin knows what they are doing, and that the DB will be consistent at the conclusion. If we get this much done, then I think Samba4 and OpenLDAP can continue the forward march. I look forward to having Samba4 'powered by OpenLDAP', because without it (or a Fedora DS backend, with whom I'm having a similar discussion) Samba4 does not have a replicated deployment modal. Thanks, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Red Hat Inc.

1 0

slapd[26189]: warning: cannot open /etc/hosts.allow: Too many open files
by Andreas Moroder 11 Jun '08

11 Jun '08

Hello, today a client to connect via ftp to our server ( SLES 9 ) and I got this error: slapd[26189]: warning: cannot open /etc/hosts.allow: Too many open files according to lsof | grep REG | wc -l i have only 3267 regular files open and 4684 counting the IP connections too. cat /proc/sys/fs/file-nr returns 3573 1185 131072 and file-max 131072 ( as above ) According to this numbers there sould not be a system wide problem. Is there a limit of open files in slapd ? I restarted slapd and now it seems to work. Probably you need to know the version. Can anyone tell me how I get the running version ? There are no entries in /var/log/messages Thanks Andreas

5 5

[ Ldap Native client Solaris 10 conncet to openldap serveur RHEL ]
by Phuong VUONG 11 Jun '08

11 Jun '08

Hello, First, i m sorry about my English. I have an Openldap 2.3.39 Server RHEL 4.6 which work perfectly. All the authentification from Linux client are fine (with the ACL on and the option of host_chech_attr). However, I have some problem to connect a ldap client native Solaris 10. I use ldapclient manual to configure the Solaris client. The option is : #ldapclient -v manual -a "defaultServerList=IP_SERVER_OPENLDAP_RHEL" -a "credentialLevel=proxy" -a "proxyDN=cn=account,dc=example,dc=fr" -a "proxyPassword=Pass" -a "defaultSearchBase=dc=exemple,dc=fr" -a "defaultSearchScope=sub" -a "serviceSearchDescriptor=passwd:ou=People,dc=exemple,dc=fr?one" -a "serviceSearchDescriptor=shadow:ou=People,dc=exempl,dc=fr?one" -a "serviceSearchDescriptor=groupe:ou=Group,dc=exempl,dc=fr?one" When my ACL are activated, this command turne over timeout and the result are : When i put this below ACL on Openldap Server : access to * by * read. ldapclient is ok and the configuration are fine. But disable the ACL is not possible. In the Openldap server log, i can see : conn=6 op=0 BIND dn="" method=128 ... I dont know why the option -a "proxyDN=cn=account,dc=example,dc=fr" didn't send correctly.. Do anyone have this kind of problem ? Do you get any information about solaris ldap native client connect to an openldap server rhel ? I also follow some guide from : http://docs.lucidinteractive.ca/index.php/Solaris_LDAP_client_with_OpenLDAP… but it don't work neither. Any advice ? Thanks by advance for your answer and pardon me about my poor English.

2 1

Vote OpenLDAP for the 2008 Community Choice Awards!
by Gavin Henry 10 Jun '08

10 Jun '08

http://blog.suretecsystems.com/archives/121-Vote-OpenLDAP-for-the-2008-Comm… -- Kind Regards, Gavin Henry. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/ Suretec Systems is a limited company registered in Scotland. Registered number: SC258005. Registered office: 13 Whiteley Well Place, Inverurie, Aberdeenshire, AB51 4FP.

1 0

Syncrepl : Monitor Replication issues
by smainklh＠free.fr 10 Jun '08

10 Jun '08

Hi everybody! I would like to know how to monitor syncrepl. Actually i would like to be warned when data have been rejected (failure on the provider, network issues ...). Thank you in advance, Smaïn

3 5

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical