openldap-technical

openldap-technical@openldap.org

5 participants
9899 discussions

"to" rules
by uri_gr1＠tut.by 21 Apr '08

21 Apr '08

Hi, people! I have openldap-2.4.8 up and running. I have ou=People subtree with posixAccounts and I need to grant access to, let's say, ou=Clients,ou=AddressBook by all rdn's in ou=People, having gidNumber=10008. How can I do so?

2 1

ldapbind() timeout can't work .
by lijx 21 Apr '08

21 Apr '08

LDAP APIS confused me, anyone can tell my what's wrong with my code? I have call ldap_set_option() and set the LDAP_OPT_NETWORK_TIMEOUT or the LDAP_OPT_TIMEOUT opt, before call the ldap_bind_s() or the non synchronize APIS, but the authentication result still return after almost 70 seconds later, am I miss something (note: my server is windows active directory, simple authentication.)? struct timeval tv_select_timeout; tv_select_timeout.tv_sec = 10; tv_select_timeout.tv_usec = 0; int t; t=ldap_set_option(pLdapConnection, LDAP_OPT_NETWORK_TIMEOUT, &tv_select_timeout); #ifdef BIND_TIME_CONTROL { int msgid, err; LDAPMessage *result = NULL; char *error_msg; struct timeval tv; if ((msgid = ldap_simple_bind(pLdapConnection, pUserDN, pPassword)) == -1) { error_msg = NULL; ldap_get_option(pLdapConnection, LDAP_OPT_ERROR_STRING, &error_msg); if (error_msg != NULL) { ldap_memfree(error_msg); } ldap_unbind_s(pLdapConnection); return AUTH_AGENT_ERR_LDAPSIMPLEBIND_FAIL; } ret = ldap_result(pLdapConnection, msgid, LDAP_MSG_ALL, & tv_select_timeout, &result); if (ret == -1) { ldap_unbind_s(pLdapConnection); if (result != NULL) ldap_msgfree(result); return AUTH_AGENT_ERR_LDAPRESULT_FAIL; } else if (ret == 0) { /*timeout & result ==NULL */ ldap_unbind_s(pLdapConnection); if (result != NULL) ldap_msgfree(result); return AUTH_AGENT_ERR_LDAPRESULT_TIMEOUT; } ret = ldap_result2error(pLdapConnection, result, 1); } #else { ret = ldap_bind_s(pLdapConnection, pUserDN, pPassword, LDAP_AUTH_SIMPLE); } #endif

2 2

Invalid syntax (21)
by Luke Lee 19 Apr '08

19 Apr '08

Hi, I encounter a situation where I couldn't find any syntax errors in my ldif file but failed to use ldapadd to add entries. I didn't find any trailing spaces at the end of each objectClass. The following is the error message: adding new entry "cn=LocalSales,ou=Netgroup,dc=mydomain,dc=com" ldapadd: Invalid syntax (21) additional info: nisNetgroupTriple: value #0 invalid per syntax My ldif file is like the following: # # LocalSales # dn: cn=LocalSales,ou=Netgroup,dc=mydomain,dc=com objectClass: nisNetgroup objectClass: top cn: LocalSales nisNetgroupTriple: (,luke_l,mydomain.com) nisNetgroupTriple: (,sam_c,mydomain.com) nisNetgroupTriple: (,amy_s,mydomain.com) nisNetgroupTriple: (,anita_c,mydomain.com) nisNetgroupTriple: (,jim_f,mydomain.com) description: Local Sales # # Corporate Accountants # dn: cn=CorpAcct,ou=Netgroup,dc=mydomain,dc=com objectClass: nisNetgroup objectClass: top cn: CorpAcct nisNetgroupTriple: (,hannah_m,mydomain.com) nisNetgroupTriple: (,judy_j,mydomain.com) description: Corporate Accountants I have included the following schema files in my slapd.conf: include /usr/local/etc/openldap/schema/core.schema include /usr/local/etc/openldap/schema/cosine.schema include /usr/local/etc/openldap/schema/inetorgperson.schema include /usr/local/etc/openldap/schema/nis.schema Could anyone please help resolve the above problem? Thanks. Luke ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ

2 1

pwdExpirationWarned not present
by Paul Lee 18 Apr '08

18 Apr '08

Dear all, I am using openldap 2.4.8 and testing with the pwdExpireWarning and the pwdMaxAge I set the pwdExpireWarning = 100 and the pwdMaxAge = 120 Then, I preform a change in password operation. and wait for 20 seconds (120 - 100). I then preform a Authentificaiton to the LDAP several times, I see from the log indicate that it now falls in the warning period (i.e. about to expire but not yet expired) Apr 17 19:47:47 ldap0 slapd[7519]: ppolicy_bind: Setting warning for password expiry for cn=paul,ou=SCIG,ou=Govt-Dept,o=HKSARG = 96 seconds However, when I retrieve the operational attributes for that user, I can't see the pwdExpirationWarned attribute. How can I detect the user is in the "about to expire" state ? Thanks Confidential Communication - This e-mail (including any attachments) is confidential and may be legally privileged. If this e-mail has been sent to you by mistake please inform us by reply e-mail and then delete the e-mail, destroy any printed copy and do not disclose or use the information in it.

2 3

Loading Ldif files to ldap server
by divya shree 18 Apr '08

18 Apr '08

Hiii.. I would like to knw.. 1...wen the users register themsleves first..wherev will the user details (like username n password will b stored).... 2.... if it is stored in the mysql backend..how will i migrate this data to the ldif file n load this ldif file to the server... Thanks n Regards Divya --------------------------------- Unlimited freedom, unlimited storage. Get it now

2 1

Manipulation of Request data
by derwyn 18 Apr '08

18 Apr '08

Hi All, I'm a novice in LDAP. But wanted to know if it was possible to mangle request coming to ldap. Eg. I have my ldap data with uid=someuser but the request coming in is uid=someuser(a)somedomain.com Is it possible to add some rule in slapd.conf or ldap.conf to do this kind of manipulation. I'm not using sasal. Thank Derwyn =================================================================== sms START NETCORE to 575758 to get updates on Netcore's enterprise products and services sms START MYTODAY to 09845398453 for more information on our mobile consumer services or go to http://www.mytodaysms.com ===================================================================

3 2

Number of Downloads?
by Gavin Henry 18 Apr '08

18 Apr '08

Hi All, Do we have any stats on the amount of downloads per month/year at all? Thanks, Gavin.

1 0

Re: openLDAP & memberof
by Gene Kupfer 17 Apr '08

17 Apr '08

Thank you very much for the info Michael and Quanah. I will check it out. Best regards, Gene

1 0

openLDAP & memberof
by Gene Kupfer 17 Apr '08

17 Apr '08

Hi all, I've been doing some research and I'm finding that there is no support for a "memberof" type attribute for user objects. When I query groups that have "memberuid" attributes, I get the group name but not the members. Is there any way around this? Maybe some other attribute I can add to the user object that will create a link between it and the group object and allow me to enumerate group members? Thank you, Gene

3 2

Server and client setup for connecting Solaris to an openldap server.
by Chavez, James R. 17 Apr '08

17 Apr '08

Hello all, I have set up a Red Hat Linux box with the Openldap server. I am looking to replace our existing NIS infrastructure with Openldap. The majority of the clients are Solaris 8 with a third of them being Solaris 10. I have been able to connect Red Hat clients to authenticate through LDAP but I am having issues with the Solaris client configuration. I see some stuff on the net but nothing concrete on how to get this working. I see some sites mention a solaris schema but I not found been able to locate that anywhere. Is this something that is possible? I am sure it is but i am relatively new to LDAP. Should I be looking at the Solaris native LDAP server? I have openldap-servers-2.3.27-8 installed on RHEL4. The schemas listed in my slapd.conf are.. include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/nis.schema Thank you James CONFIDENTIALITY This e-mail message and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail message, you are hereby notified that any dissemination, distribution or copying of this e-mail message, and any attachments thereto, is strictly prohibited. If you have received this e-mail message in error, please immediately notify the sender and permanently delete the original and any copies of this email and any prints thereof. ABSENT AN EXPRESS STATEMENT TO THE CONTRARY HEREINABOVE, THIS E-MAIL IS NOT INTENDED AS A SUBSTITUTE FOR A WRITING. Notwithstanding the Uniform Electronic Transactions Act or the applicability of any other law of similar substance and effect, absent an express statement to the contrary hereinabove, this e-mail message its contents, and any attachments hereto are not intended to represent an offer or acceptance to enter into a contract and are not otherwise intended to bind the sender, Sanmina-SCI Corporation (or any of its subsidiaries), or any other person or entity.

3 3

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical