openldap-technical

openldap-technical@openldap.org

9 participants
9866 discussions

pwdExpirationWarned not present
by Paul Lee 18 Apr '08

18 Apr '08

Dear all, I am using openldap 2.4.8 and testing with the pwdExpireWarning and the pwdMaxAge I set the pwdExpireWarning = 100 and the pwdMaxAge = 120 Then, I preform a change in password operation. and wait for 20 seconds (120 - 100). I then preform a Authentificaiton to the LDAP several times, I see from the log indicate that it now falls in the warning period (i.e. about to expire but not yet expired) Apr 17 19:47:47 ldap0 slapd[7519]: ppolicy_bind: Setting warning for password expiry for cn=paul,ou=SCIG,ou=Govt-Dept,o=HKSARG = 96 seconds However, when I retrieve the operational attributes for that user, I can't see the pwdExpirationWarned attribute. How can I detect the user is in the "about to expire" state ? Thanks Confidential Communication - This e-mail (including any attachments) is confidential and may be legally privileged. If this e-mail has been sent to you by mistake please inform us by reply e-mail and then delete the e-mail, destroy any printed copy and do not disclose or use the information in it.

2 3

Loading Ldif files to ldap server
by divya shree 18 Apr '08

18 Apr '08

Hiii.. I would like to knw.. 1...wen the users register themsleves first..wherev will the user details (like username n password will b stored).... 2.... if it is stored in the mysql backend..how will i migrate this data to the ldif file n load this ldif file to the server... Thanks n Regards Divya --------------------------------- Unlimited freedom, unlimited storage. Get it now

2 1

Manipulation of Request data
by derwyn 18 Apr '08

18 Apr '08

Hi All, I'm a novice in LDAP. But wanted to know if it was possible to mangle request coming to ldap. Eg. I have my ldap data with uid=someuser but the request coming in is uid=someuser(a)somedomain.com Is it possible to add some rule in slapd.conf or ldap.conf to do this kind of manipulation. I'm not using sasal. Thank Derwyn =================================================================== sms START NETCORE to 575758 to get updates on Netcore's enterprise products and services sms START MYTODAY to 09845398453 for more information on our mobile consumer services or go to http://www.mytodaysms.com ===================================================================

3 2

Number of Downloads?
by Gavin Henry 18 Apr '08

18 Apr '08

Hi All, Do we have any stats on the amount of downloads per month/year at all? Thanks, Gavin.

1 0

Re: openLDAP & memberof
by Gene Kupfer 17 Apr '08

17 Apr '08

Thank you very much for the info Michael and Quanah. I will check it out. Best regards, Gene

1 0

openLDAP & memberof
by Gene Kupfer 17 Apr '08

17 Apr '08

Hi all, I've been doing some research and I'm finding that there is no support for a "memberof" type attribute for user objects. When I query groups that have "memberuid" attributes, I get the group name but not the members. Is there any way around this? Maybe some other attribute I can add to the user object that will create a link between it and the group object and allow me to enumerate group members? Thank you, Gene

3 2

Server and client setup for connecting Solaris to an openldap server.
by Chavez, James R. 17 Apr '08

17 Apr '08

Hello all, I have set up a Red Hat Linux box with the Openldap server. I am looking to replace our existing NIS infrastructure with Openldap. The majority of the clients are Solaris 8 with a third of them being Solaris 10. I have been able to connect Red Hat clients to authenticate through LDAP but I am having issues with the Solaris client configuration. I see some stuff on the net but nothing concrete on how to get this working. I see some sites mention a solaris schema but I not found been able to locate that anywhere. Is this something that is possible? I am sure it is but i am relatively new to LDAP. Should I be looking at the Solaris native LDAP server? I have openldap-servers-2.3.27-8 installed on RHEL4. The schemas listed in my slapd.conf are.. include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/nis.schema Thank you James CONFIDENTIALITY This e-mail message and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail message, you are hereby notified that any dissemination, distribution or copying of this e-mail message, and any attachments thereto, is strictly prohibited. If you have received this e-mail message in error, please immediately notify the sender and permanently delete the original and any copies of this email and any prints thereof. ABSENT AN EXPRESS STATEMENT TO THE CONTRARY HEREINABOVE, THIS E-MAIL IS NOT INTENDED AS A SUBSTITUTE FOR A WRITING. Notwithstanding the Uniform Electronic Transactions Act or the applicability of any other law of similar substance and effect, absent an express statement to the contrary hereinabove, this e-mail message its contents, and any attachments hereto are not intended to represent an offer or acceptance to enter into a contract and are not otherwise intended to bind the sender, Sanmina-SCI Corporation (or any of its subsidiaries), or any other person or entity.

3 3

LDAP Connection
by Manjunath Warad 17 Apr '08

17 Apr '08

Hi All, I have few queries on LDAP connection. I searched in the archieve but failed to get clarified. 1. Why LDAP server should terminate session if it fails to parse message. It can either send failure response or drop that particular message expecting a proper message from the client next time. Quote from RFC 4511 "If the server receives an LDAPMessage from the client in which the LDAPMessage SEQUENCE tag cannot be recognized, the messageID cannot be parsed, the tag of the protocolOp is not recognized as a request, or the encoding structures or lengths of data fields are found to be incorrect, then the server SHOULD return the Notice of Disconnection described in Section 4.4.1, with the resultCode set to protocolError, and MUST immediately terminate the LDAP session as described in Section 5.3." "and MUST immediately terminate the LDAP session as described in" 2. How it should be dealt with requests received by server while processing BIND request? Is it dropped or cached and processed later? RFC Quote "Similarly, servers SHOULD NOT process or respond to requests received while processing a BindRequest." regards, Manjunath **************************************************************************** *********** This e-mail and attachments contain confidential information from HUAWEI, which is intended only for the person or entity whose address is listed above. Any use of the information contained herein in any way (including, but not limited to, total or partial disclosure, reproduction, or dissemination) by persons other than the intended recipient's) is prohibited. If you receive this e-mail in error, please notify the sender by phone or email immediately and delete it!

1 0

Nothing logged in the log file...
by Paul Lee 17 Apr '08

17 Apr '08

Dear sir, I am using openldap 2.4.8 and my compile option is : ./configure --enable-modules=yes --enable-ppolicy=yes --enable-overlays=yes --enable-syncprov=yes --with-cyrus-sasl --enable-wrappers My slapd.conf : loglevel any logfile /var/lib/ldap/ldap.log I start the openldap by following command : /usr/local/libexec/slapd -f /usr/local/etc/openldap/slapd.conf And then, I add some entries using java and check the log ldap.log, but the size is 0 bytes, nothing logged !!! Can anyone tell me what's wrong ? Thanks Confidential Communication - This e-mail (including any attachments) is confidential and may be legally privileged. If this e-mail has been sent to you by mistake please inform us by reply e-mail and then delete the e-mail, destroy any printed copy and do not disclose or use the information in it.

3 5

Replication failed using slapadd
by Paul Lee 17 Apr '08

17 Apr '08

Dear sir, I am using openldap 2.4.8 and config as 3 way masters, the slapd.connf is shown below : syncrepl rid=001 provider=ldap://202.245.193.128:389/ bindmethod=simple binddn="cn=Manager" credentials=secret searchbase="o=HKSARG" schemachecking=off type=refreshAndPersist attrs="*,+" retry="1 +" interval=00:00:01:00 syncrepl rid=002 provider=ldap://10.166.23.218:389/ bindmethod=simple binddn="cn=Manager" credentials=secret searchbase="o=HKSARG" schemachecking=off type=refreshAndPersist attrs="*,+" retry="1 +" interval=00:00:01:00 syncrepl rid=003 provider=ldap://10.0.1.34:389/ bindmethod=simple binddn="cn=Manager" credentials=secret searchbase="o=HKSARG" schemachecking=off type=refreshAndPersist attrs="*,+" retry="1 +" interval=00:00:01:00 Then, I startup 2 servers (rid= 002 and rid=003), I execute the command in sever 1 (i.e. rid=001) : slapadd -l import.ldif to import 3 entries to the ldap servers. Then, I startup server 1 (rid = 001) and use the command ldapsearch to retrieve the entries, find that all 3 entries are added in server 1, however, when I retrieve the records in server 2 and server 3, only the 1st record is added. Any idea of what's wrong ? Thanks Confidential Communication - This e-mail (including any attachments) is confidential and may be legally privileged. If this e-mail has been sent to you by mistake please inform us by reply e-mail and then delete the e-mail, destroy any printed copy and do not disclose or use the information in it.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical