openldap-technical

openldap-technical@openldap.org

18 participants
9785 discussions

Re: OpenLDAP 2.3 Configure Error
by Luke Lee 11 Apr '08

11 Apr '08

Hi Tommy, Thank you for the indepth information. I think that I'd better to stick with the stable OpenLDAP release. Luke ----- Original Message ---- From: Tommy Ho <tho(a)stillsecure.com> To: openldap-technical <openldap-technical(a)openldap.org> Sent: Friday, April 11, 2008 12:39:30 PM Subject: Re: OpenLDAP 2.3 Configure Error On Fri, 2008-04-11 at 11:56 -0700, Quanah Gibson-Mount wrote: > --On Friday, April 11, 2008 11:53 AM -0700 Luke Lee <leeluke77(a)yahoo.com> > wrote: > > > > > > > > > Hi Tommy, > > > > Thank you very much for the help. I also want to give thanks to whoever > > spent time reading my previous and this emails. It appears to me that I > > just couldn't find my mistake. > > > > I corrected it per your instrcution. However, I am encountering another > > error message now. The error message says: > > > OpenLDAP 2.3 does not support building with BDB 4.6. > > --Quanah > Yes, as Quanah had pointed out, the corrective action is to either 1) use BDB 4.5.20 (supported by openLDAP 2.3) or 2) use openLDAP 2.4.8 in order to use BDB 4.6.x. In either case, if your bdb libraries are not installed into /libs or /usr/libs, you'll need to set LD_LIBRARY_PATH to where BDB libraries are installed (e.g. export LD_LIBRARY_PATH= $LD_LIBRARY_PATH:/usr/local/lib) before starting configure to avoid getting the version mismatch error. Good luck, \Tommy > > -- > > Quanah Gibson-Mount > Principal Software Engineer > Zimbra, Inc > -------------------- > Zimbra :: the leader in open source messaging and collaboration __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

Re: OpenLDAP 2.3 Configure Error
by Luke Lee 11 Apr '08

11 Apr '08

Hi Tommy, Thank you very much for the help. I also want to give thanks to whoever spent time reading my previous and this emails. It appears to me that I just couldn't find my mistake. I corrected it per your instrcution. However, I am encountering another error message now. The error message says: checking for db.h... yes checking for Berkeley DB major version... 4 checking for Berkeley DB minor version... 6 checking for Berkeley DB link (-ldb-4)... yes checking for Berkeley DB version match... no configure: error: Berkeley DB version mismatch A few lines in the log are: configure:31831: checking db.h presence configure:31841: cc -E -I/usr/local/include -I/usr/local/BerkeleyDB.4.6/include -I/usr/local/krb5-1.6.3/include -I/usr/local/ssl/include conftest.c configure:31847: $? = 0 configure:31867: result: yes configure:31902: checking for db.h configure:31909: result: yes configure:31925: checking for Berkeley DB major version configure:32044: result: 4 configure:32047: checking for Berkeley DB minor version configure:32290: result: 6 configure:34481: checking for Berkeley DB link (-ldb-4) configure:34547: cc -o conftest -g -O2 -I/usr/local/include -I/usr/local/BerkeleyDB.4.6/include -I/usr/local/krb5-1.6.3/include -I/usr/local/ssl/include -L/usr/local/lib -L/usr/local/BerkeleyDB.4.6/lib -L/usr/local/krb5-1.6.3/lib -L/usr/local/ssl/lib conftest.c -ldb-4 -pthread -lresolv >&5 configure:34553: $? = 0 configure:34557: test -z || test ! -s conftest.err configure:34560: $? = 0 configure:34563: test -s conftest configure:34566: $? = 0 configure:34581: result: yes configure:35580: checking for Berkeley DB version match configure:35636: cc -o conftest -g -O2 -I/usr/local/include -I/usr/local/BerkeleyDB.4.6/include -I/usr/local/krb5-1.6.3/include -I/usr/local/ssl/include -L/usr/local/lib -L/usr/local/BerkeleyDB.4.6/lib -L/usr/local/krb5-1.6.3/lib -L/usr/local/ssl/lib conftest.c -ldb-4 -pthread -lresolv >&5 configure:35639: $? = 0 configure:35641: ./conftest ../conftest: error while loading shared libraries: libdb-4.6.so: cannot open shared object file: No such file or directory configure:35644: $? = 127 configure: program exited with status 127 configure: failed program was: | /* confdefs.h. */ I know that I have an older version of DB. However, I have added the 4.6 path for the build. How can I resolve the problem? Please help. Thank you! Luke Lee ----- Original Message ---- From: Tommy Ho <tho(a)stillsecure.com> To: Luke Lee <leeluke77(a)yahoo.com> Cc: openldap-technical(a)openldap.org Sent: Friday, April 11, 2008 10:15:51 AM Subject: Re: OpenLDAP 2.3 Configure Error On Thu, 2008-04-10 at 17:50 -0700, Luke Lee wrote: > Hi, > > I'm building a custom OpenLDAP 2.3 but failed at the configure stage > with the following error messages: > checking openssl/ssl.h usability... no > checking openssl/ssl.h presence... no > checking for openssl/ssl.h... no > configure: error: Could not locate TLS/SSL package > > I've installed OpenSSL at the default /usr/local/ssl localtion with > threads, shared, and zlib support. > > In the configure log, the ssl.h was not found. A few lines of the log > are attached below: > > configure:18067: cc -E -I/usr/local/include > -I/usr/local/BerkeleyDB.4.6/include -I/usr/local/krb5-1.6.3/include > -I/usr/local/ssl/include/openssl conftest.c > configure:18073: $? = 0 > configure:18093: result: yes > configure:18128: checking for sys/un.h > configure:18135: result: yes > configure:19451: checking openssl/ssl.h usability > configure:19463: cc -c -g -O2 -I/usr/local/include > -I/usr/local/BerkeleyDB.4.6/include -I/usr/local/krb5-1.6.3/include > -I/usr/local/ssl/include/openssl conftest.c >&5 > conftest.c:127:25: openssl/ssl.h: No such file or directory > configure:19469: $? = 1 > configure: failed program was: > | /* confdefs.h. */ > | > | #define PACKAGE_NAME "" > | #define PACKAGE_TARNAME "" > | #define PACKAGE_VERSION "" > | #define PACKAGE_STRING "" > | #define PACKAGE_BUGREPORT "" > | #define OPENLDAP_PACKAGE "OpenLDAP" > > I have the required include and libs found in the env: > LDFLAGS=-L/usr/local/lib -L/usr/local/BerkeleyDB.4.6/lib > -L/usr/local/krb5-1.6.3/lib -L/usr/local/ssl/lib > CPPFLAGS=-I/usr/local/include -I/usr/local/BerkeleyDB.4.6/include > -I/usr/local/krb5-1.6.3/include -I/usr/local/ssl/include/openssl Your last include is the problem, it should be: -I/usr/local/ssl/include \Tommy > > Can anyone please help resolve this problem? Thanks! > > Luke Lee > > > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam protection around > http://mail.yahoo.com __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

3 2

back-sql question: iodbc or unixodbc
by Tommy Ho 11 Apr '08

11 Apr '08

Hi, I'm trying to get openLDAP 2.4.8 to work with postgreSQL 8.1.8. Does it matter which odbc driver manager I use? In http://www.openldap.org/faq/data/cache/978.html, under "How To Use It", it specifies to setup unixODBC while in http://www.samse.fr/GPL/ldap_pg/HOWTO/index.html, it says to use iodbc. I actually installed iodbc 3.52.6 and psqlodbc 8.03.0100 but am getting into a pthread mutex lock when backsql_load_schema_map() is trying to send the query "SELECT id, name, keytbl, keycol, create_proc, delete_proc, expect_return FROM ldap_oc_mappings" to postgres. From attaching gdb, the lock is happening SQLAllocStmt where is it is recursively being called from SQLAllocStmt_internal(). If others have found success getting openLDAP working with postgres, could you please share your expertise? Let me know if I can provide additional data, like the configure options and other setup/version info. Thanks, \Tommy

2 4

Re: OpenLDAP 2.3 Configure Error
by Luke Lee 11 Apr '08

11 Apr '08

Thank you! ----- Original Message ---- From: Quanah Gibson-Mount <quanah(a)zimbra.com> To: Luke Lee <leeluke77(a)yahoo.com> Cc: openldap-technical(a)openldap.org Sent: Friday, April 11, 2008 12:13:16 PM Subject: Re: OpenLDAP 2.3 Configure Error --On Friday, April 11, 2008 12:06 PM -0700 Luke Lee <leeluke77(a)yahoo.com> wrote: > > > Hi Quanah, > > What version of BDB is recommended? Thanks! Personally, I use BDB 4.2.52 + 6 patches when using OpenLDAP 2.3. It's been quite stable for me over the last several years. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

Re: OpenLDAP 2.3 Configure Error
by Luke Lee 11 Apr '08

11 Apr '08

Hi Quanah, What version of BDB is recommended? Thanks! Luke ----- Original Message ---- From: Quanah Gibson-Mount <quanah(a)zimbra.com> To: Luke Lee <leeluke77(a)yahoo.com>; tho(a)stillsecure.com Cc: openldap-technical(a)openldap.org Sent: Friday, April 11, 2008 11:56:17 AM Subject: Re: OpenLDAP 2.3 Configure Error --On Friday, April 11, 2008 11:53 AM -0700 Luke Lee <leeluke77(a)yahoo.com> wrote: > > > > Hi Tommy, > > Thank you very much for the help. I also want to give thanks to whoever > spent time reading my previous and this emails. It appears to me that I > just couldn't find my mistake. > > I corrected it per your instrcution. However, I am encountering another > error message now. The error message says: OpenLDAP 2.3 does not support building with BDB 4.6. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

OpenLDAP 2.3 Configure Error
by Luke Lee 11 Apr '08

11 Apr '08

Hi, I'm building a custom OpenLDAP 2.3 but failed at the configure stage with the following error messages: checking openssl/ssl.h usability... no checking openssl/ssl.h presence... no checking for openssl/ssl.h... no configure: error: Could not locate TLS/SSL package I've installed OpenSSL at the default /usr/local/ssl localtion with threads, shared, and zlib support. In the configure log, the ssl.h was not found. A few lines of the log are attached below: configure:18067: cc -E -I/usr/local/include -I/usr/local/BerkeleyDB.4.6/include -I/usr/local/krb5-1.6.3/include -I/usr/local/ssl/include/openssl conftest.c configure:18073: $? = 0 configure:18093: result: yes configure:18128: checking for sys/un.h configure:18135: result: yes configure:19451: checking openssl/ssl.h usability configure:19463: cc -c -g -O2 -I/usr/local/include -I/usr/local/BerkeleyDB.4.6/include -I/usr/local/krb5-1.6.3/include -I/usr/local/ssl/include/openssl conftest.c >&5 conftest.c:127:25: openssl/ssl.h: No such file or directory configure:19469: $? = 1 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #define OPENLDAP_PACKAGE "OpenLDAP" I have the required include and libs found in the env: LDFLAGS=-L/usr/local/lib -L/usr/local/BerkeleyDB.4.6/lib -L/usr/local/krb5-1.6.3/lib -L/usr/local/ssl/lib CPPFLAGS=-I/usr/local/include -I/usr/local/BerkeleyDB.4.6/include -I/usr/local/krb5-1.6.3/include -I/usr/local/ssl/include/openssl Can anyone please help resolve this problem? Thanks! Luke Lee __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

group of groups
by Andreas Moroder 11 Apr '08

11 Apr '08

Hello, I would like to have groups as members of other groups and use this with nss_ldap. Example: dn: cn=apotheke, ou=groups, dc=sb-brixen,dc=it gidNumber: 1019 memberUid: jack memberUid: joe sambaGroupType: 2 objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping description: apotheke cn: apotheke dn: cn=magazin, ou=groups, dc=sb-brixen,dc=it gidNumber: 1020 memberUid: paul memberUid: frank sambaGroupType: 2 objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping description: magazin cn: magazin dn: cn=common, ou=groups, dc=sb-brixen,dc=it gidNumber: 1021 member???: apotheke member???: magazin sambaGroupType: 2 objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping description: common cn: common what attribute do I have to use for the group in the group ? ( in the example i used member??? ) Thnaks for your reply Andreas

2 1

RE: error while accessing through Java "javax.naming.AuthenticationNotSupportedException: simple"
by Sai 10 Apr '08

10 Apr '08

Hi I did not figure-out the cause of why I am getting this and I did not fix this. But I figured out a work-around for this. Thought might help the community. I did not provide the SECURITY_AUTHENTICATION attribute. So it took the default of the server configured and it succeeded in authenticating the user Entry. What I will do next is to figure out what the default authentication is, for my server and try and pass it. Hope this helps some one out there. Thanks, -Bangaru. _____ From: Sai [mailto:bangaru.adabala@gmail.com] Sent: Monday, April 07, 2008 11:32 AM To: 'openldap-technical(a)openldap.org' Subject: error while accessing through Java "javax.naming.AuthenticationNotSupportedException: simple" Hi I am new to openLDAP. I am configuring it (version: OpenLDAP: slapd 2.3.27) on a Linux machine to use with our Web Application (java). When I try and make a connection I am getting the following error. =============== javax.naming.AuthenticationNotSupportedException: simple [4/7/08 10:42:01:887 EDT] 00000026 SystemErr R at com.sun.jndi.ldap.sasl.LdapSasl.saslBind(LdapSasl.java:115) =============== These are the code / attributes I used. ================= Hashtable env = new Hashtable(); env.put( Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory" ); env.put( Context.PROVIDER_URL, "ldap://<machine name>:<port>" ); env.put( Context.SECURITY_PRINCIPAL, "cn=uimadmin,ou=UIM,o=nhes,dc=nh,dc=gov" ); env.put( Context.SECURITY_AUTHENTICATION, "simple" ); env.put( Context.SECURITY_CREDENTIALS, "<password in plaintext>" ); try { context = new InitialDirContext(env); System.out.println("CONTEXT OPENED WITH ADMIN ACCOUNT"); } catch (NamingException ne) { ne.printStackTrace(); LogManager.logMessage("LDAPManager.getAdminJndiContext()", ne); } return context; ================= When I try and do an ldapsearch with a -x option (simple authentication) on the command line, it is returning results successfully. I am also able to connect using ldapbrowser v2.8.2 and see the results. Any help regarding this is greatly appreciated. Thanks in advance. -Bangaru.

1 0

ldap mail distribution list
by Aniruddha Karanjkar 10 Apr '08

10 Apr '08

Dear LDAP users, I want to use LDAP as shared abook. but I am not finding any information for creating mail distribution list in this. Why ?

1 0

Xen with OpenLDAP
by Quanah Gibson-Mount 09 Apr '08

09 Apr '08

In the past, using slapd under Xen has been problematic due to the issue here: <https://bugzilla.redhat.com/show_bug.cgi?id=91933> as reported here as well: <http://www.openldap.org/lists/openldap-software/200603/msg00214.html> I know that at least as recently as Xen 3.0.4, this was a problem. This was brought up on the Xen devel list, and their answer is found here: <http://lists.xensource.com/archives/html/xen-devel/2008-04/msg00167.html> Does their explanation seem to make sense? It sounded to me like they weren't 100% sure of their understanding of the issue. But it would be nice to be able to have something we could put in the FAQ to address this if this does address the problem. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

2 2

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical