openldap-technical

openldap-technical@openldap.org

3 participants
9898 discussions

proxycache examples
by Andy Cobaugh 15 Mar '08

15 Mar '08

I'm working in an environment where the server I wish to use for user and group lookups (through nss_ldap on RHEL) limits the number of queries per IP per day to 200. I want to cache as much as I can locally, for as long as I can. This data hardly ever changes, so the longer I can cache, the better. I'm thinking of caching everything for at least a day, if not longer. Does the pcache overlay currently support such long ttl's? Does anyone have any working pcache configs that can be used to cache the kind of searches performed by nss_ldap ? -- Andy Cobaugh

2 1

Changing attribute values on the consumer
by Kyriakos Stefanidis 14 Mar '08

14 Mar '08

Hello all, Is it possible to change the attribute values on the consumer (of the replication scheme) or add new attributes and preserve them during replication? Im using external scripts that refresh the values/attributes regulary but I was wondering if there is another more "elegant" way Best Regards Kyriakos

3 4

ldap + xsd
by Yan Falken 14 Mar '08

14 Mar '08

Hi, I have one (maybe stupid - so sorry for it :) ) question - is it possible to employ somehow xsd schemas with ldap? My problem is that I need here to document all the possible directory configurations and I'm familiar with xsd and newbie in ldap - so I'm just reasoning if it may be possible to use it for documentation and future schema generation in the next phase. Thanks YF

3 2

Solaris 10 Native LDAP Client TLS
by farhan ahmed 14 Mar '08

14 Mar '08

Hello Guys, I am having some issues to configure LDAP Native client with TLS. Please help me to sort out this issueLDAP Server: Linux (OpenLdap), LDAP Client: Solaris 10 (Native Client)When I run following command to test, it works fine, ldapsearch -v -h test -p 636 -Z -P /var/ldap/cert8.db -b "dc=test,dc=com" -s base "objectclass=*"ldapsearch: started Fri Mar 14 18:11:57 2008ldap_init( test, 636 )filter pattern: objectclass=*returning: ALLfilter is: (objectclass=*)version: 1dn: dc=test,dc=comobjectClass: dcObjectobjectClass: organizationo: test.com web sitedc: test1 matches But When I run ldapclient command to initialize ldapclient, it doesn't work, please guide me where I am doing wrongldapclient -v manual -a defaultServerList=10.10.10.10-a defaultSearchBase=dc=test,dc=com -a authenticationMethod=tls:simple -a serviceAuthenticationMethod=pam_ldap:tls:simple -a serviceAuthenticationMethod=keyserv:tls:simple -a serviceAuthenticationMethod=passwd-cmd:tls:simple-a credentialLevel=proxy -a proxyDN=cn=Manager,ou=People,dc=test,dc=com -a proxyPassword=passwdAfter that when I run ldaplist command, I get following in /var/adm/messagesMar 14 18:15:16 subx05-t1 nfs4cbd[1638]: [ID 293258 daemon.warning] libsldap: Status: 91 Mesg: openConnection: failed to initializeTLS security (security library: bad database.)Please help me guys :) I know I am very near to get it workingThanks,Farhan _________________________________________________________________ New music from the Rogue Traders - listen now! http://ninemsn.com.au/share/redir/adTrack.asp?mode=click&clientID=832&refer…

1 0

Exception while modifying for Open LDAP 2.3 via TLS
by Narayana Murthy Pedapudi 14 Mar '08

14 Mar '08

Please note that I have not used TLSVerifyClient property at all.... # moduleload back_shell.la TLSCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM :+LOW:+SSLv2:+SSLv3:+EXP TLSCACertificateFile /usr/local/var/openldap-data/cacert.pem TLSCertificateFile /usr/local/var/openldap-data/servercrt.pem TLSCertificateKeyFile /usr/local/var/openldap-data/serverkey.pem # Client verification not required #TLSVerifyClient never But I get a different error if I use TLSVerifyclient demand # Client verification not required TLSVerifyClient demand Please find below exception for this java.net.SocketException: Software caused connection abort: recv failed at java.net.SocketInputStream.socketRead0(Native Method) at java.net.SocketInputStream.read(SocketInputStream.java:129) at com.sun.net.ssl.internal.ssl.InputRecord.readFully( InputRecord.java:293) at com.sun.net.ssl.internal.ssl.InputRecord.read(InputRecord.java :331) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord( SSLSocketImpl.java:723) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.waitForClose( SSLSocketImpl.java:1366) at com.sun.net.ssl.internal.ssl.HandshakeOutStream.flush( HandshakeOutStream.java:103) at com.sun.net.ssl.internal.ssl.Handshaker.sendChangeCipherSpec( Handshaker.java:590) at com.sun.net.ssl.internal.ssl.ClientHandshaker.sendChangeCipherAndFinish (ClientHandshak java:698) at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverHelloDone( ClientHandshaker.java:62 at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage( ClientHandshaker.java:160 at com.sun.net.ssl.internal.ssl.Handshaker.processLoop( Handshaker.java:495) at com.sun.net.ssl.internal.ssl.Handshaker.process_record( Handshaker.java:433) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord( SSLSocketImpl.java:818) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake( SSLSocketImpl.java: 0) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake( SSLSocketImpl.java:1057) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake( SSLSocketImpl.java:1041) at com.sun.jndi.ldap.ext.StartTlsResponseImpl.startHandshake( StartTlsResponseImpl.java:34 at com.sun.jndi.ldap.ext.StartTlsResponseImpl.negotiate( StartTlsResponseImpl.java:208) at com.sun.jndi.ldap.ext.StartTlsResponseImpl.negotiate( StartTlsResponseImpl.java:161) at ModifyAttr.main(ModifyAttr.java:38) Thanks in advance.. -- Narayana Murthy http://narayana-leo.blogspot.com/ http://blogs.sun.com/narayana

1 1

OpenLDAP custom binding operation.
by Sérgio Afonso 13 Mar '08

13 Mar '08

Hello all, We are developing an authentication system based on OpenLDAP. We have created a specific schema, with some password fields intended to be used in different kinds of applications. This attributes (password1, password2, ... passwordx) inherit the userPassword attribute. One of our applications use the ldap_bind method to authenticate its users, and we want it to bind against the attribute password1. However the ldap_bind seems to be hardcoded to just check the userPassword attribute. We have tried using the rwm overlay, and even though we could see the password1 translated to userPassword with an ldapsearch we are unable to bind against it. Is there any overlay besides rwm that could be used to fulfill this authentication scenario? Thanks for any help someone might give us. Best regards, Sérgio Afonso

1 0

LDAP Writes are not propagated to mirror nodes.
by K C, Sachin (Sachin) 13 Mar '08

13 Mar '08

Hello All, I am trying to setup Mirror Mode of replication. Using the configuration files listed below for 2 node setup. The database comes up and after every 2 or 3 writes, the data is not pushed onto the other mirror node. This is happening on both the mirror nodes. I am getting the following error: slap_client_connect: URI=ldap://135.254.229.102:389 DN="uid=<UID>,o=csosso_arc" ldap_sasl_bind_s failed (-1) slap_client_connect: URI=ldap://135.254.229.102:389 DN="uid=<UID>,o=csosso" ldap_sasl_bind_s failed (-1) This is happening after 2 or 3 write operations to the database. The slapd.conf on node 1 is: ================================= database bdb suffix "o=CSOSSO" directory /opt/cso/ldap/db rootdn "uid=<UID>,o=CSOSSO" rootpw <PWD> # cleartext passwords, especially for the rootdn, should # be avoid. See slapd.conf(5) for details. cachesize 10000 index cn pres,eq,sub index sn pres,eq,sub index givenName pres,eq,sub index uid eq index objectclass,entryCSN,entryUUID eq include /opt/cso/ldap/replica/135.254.229.102-390 database bdb suffix "o=CSOSSO_ARC" directory /opt/cso/ldap/db_arc rootdn "uid=<UID>,o=CSOSSO_ARC" rootpw <PWD> # cleartext passwords, especially for the rootdn, should # be avoid. See slapd.conf(5) for details. cachesize 10000 index cn pres,eq,sub index sn pres,eq,sub index givenName pres,eq,sub index uid eq index objectclass,entryCSN,entryUUID eq include /opt/cso/ldap/replica/135.254.229.102-390-arc ========================================= The syncrepl configuration on node 1 is: ========================================= syncrepl rid=1 provider=ldap://135.254.229.102:389 type=refreshAndPersist interval=00:00:01:00 retry="30 +" searchbase="ou=people,o=csosso" filter="(objectclass=*)" scope=sub attrs="*,+" sizelimit="unlimited" timelimit="unlimited" schemachecking=off bindmethod=simple binddn="uid=<UID>,o=CSOSSO" credentials=<PWD> mirrormode on overlay syncprov syncprov-checkpoint 100 1 syncprov-sessionlog 100 ======================================= Same configuration files are used on node 2 except the port numbers and the serverID. Thanks Sachin

5 28

samba + openldap ->connexion to PDC impossible !
by franck dufau 12 Mar '08

12 Mar '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hye Gurus ! i'am newbie on this maillist - and my english is not very good -> sorry! i'am verry interrested in samba using ldap authentifiaction i have see many howto on internet about this subject. However my win XP sp2 do not want connect to my Samba pdc server perhaps something wrong... OS debian etch i add user like this : # smbldap-useradd -a -P -c "toto DUPONT" toto # smbldap-useradd -a -P toto on windows : i see my domaine and i can use authentification to acces on folder on the pdc ! but when i want add my win xp into the domaine ! impossible ! can someone help me ? ###################### smb.conf ###########################" [global] workgroup = minou netbios name = debian server string = Samba-LDAP PDC Server domain master = Yes local master = Yes domain logons = Yes os level = 40 #passwd program = /usr/sbin/smbldap-passwd ?u %u ldap passwd sync = Yes passdb backend = ldapsam:ldap://127.0.0.1/ ldap admin dn = cn=Manager,dc=mondomaine,dc=net ldap suffix = dc=mondomaine,dc=net ldap group suffix = ou=Group ldap user suffix = ou=users ldap machine suffix = ou=machines add user script = /usr/sbin/smbldap-useradd -m "%u" ldap delete dn = Yes delete user script = /usr/sbin/smbldap-userdel "%u" add machine script = /usr/sbin/smbldap-useradd -w "%u" add group script = /usr/sbin/smbldap-groupadd -p "%g" #delete group script = /usr/sbin/smbldap-groupdel "%g" add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g" delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g" set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u" logon path = \\%L\profile\%U logon drive = P: logon home = \\%L\%U socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 case sensitive = No default case = lower preserve case = yes short preserve case = Yes #character set = iso8859-1 #domain admin group = @admin dns proxy = No wins support = Yes hosts allow = 192.168.0. 127. winbind use default domain = Yes nt acl support = Yes msdfs root = Yes hide files = /desktop.ini/ntuser.ini/NTUSER.*/ [netlogon] path = /home/netlogon writable = No browseable = No write list = Administrateur # [profile] path = /home/export/profile browseable = No writeable = Yes profile acls = yes create mask = 0700 directory mask = 0700 # [homes] comment = Repertoire Personnel browseable = yes writeable = Yes # [partage] comment = Repertoire commun browseable = Yes writeable = Yes public = No path = /data ############################ slapd.conf ################################ SID="S-1-5-21-862544283-2880828001-3584954034" slaveLDAP="127.0.0.1" slavePort="389" masterLDAP="127.0.0.1" masterPort="389" ldapTLS="0" verify="none" suffix="dc=mondomaine,dc=net" usersdn="ou=People,${suffix}" computersdn="ou=People,${suffix}" groupsdn="ou=Group,${suffix}" idmapdn="ou=People,${suffix}" e sambaUnixIdPooldn="cn=debian,${suffix}" scope="sub" hash_encrypt="SSHA" crypt_salt_format="$1$%.8s" userLoginShell="/bin/bash" userHome="/home/%U" userGecos="System User" defaultUserGid="513" defaultComputerGid="515" skeletonDir="/etc/skel" defaultMaxPasswordAge="90" userSmbHome="\\debian\homes\%U" userProfile="\\debian\profiles\%U" userHomeDrive="U:" userScript="logon.bat" mailDomain="mondomaine.net" with_smbpasswd="0" smbpasswd="/usr/bin/smbpasswd" #################### nssswitch.conf################ passwd: compat ldap group: compat ldap shadow: compat ldap hosts: files dns networks: files protocols: db files services: db files ethers: db files rpc: db files netgroup: nis ################ export ldif ###################### # LDIF Export for: dc=mondomaine,dc=net # Generated by phpLDAPadmin ( http://phpldapadmin.sourceforge.net/ ) on March 12, 2008 4:20 pm # Server: My LDAP Server (localhost) # Search Scope: sub # Search Filter: (objectClass=*) # Total Entries: 30 dn: dc=mondomaine,dc=net objectClass: dcObject objectClass: organization o: Example Company dc: mondomaine dn: cn=debian,dc=mondomaine,dc=net gidNumber: 1000 objectClass: inetOrgPerson objectClass: sambaUnixIdPool cn: debian sn: debian uidNumber: 1007 dn: cn=Manager,dc=mondomaine,dc=net cn: Manager telephoneNumber: 0663057489 description: Manager du domaine postalAddress: 15 rue du mauconduit postalCode: 76540 postalCode: Criquetot le mauconduit objectClass: organizationalRole dn: ou=Group,dc=mondomaine,dc=net objectClass: top objectClass: organizationalUnit ou: Group dn: cn=Account Operators,ou=Group,dc=mondomaine,dc=net objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 548 cn: Account Operators description: Netbios Domain Users to manipulate users accounts sambaSID: S-1-5-32-548 sambaGroupType: 5 displayName: Account Operators dn: cn=Administrators,ou=Group,dc=mondomaine,dc=net objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 544 cn: Administrators description: Netbios Domain Members can fully administer the computer/sambaD omainName sambaSID: S-1-5-32-544 sambaGroupType: 5 displayName: Administrators dn: cn=Backup Operators,ou=Group,dc=mondomaine,dc=net objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 551 cn: Backup Operators description: Netbios Domain Members can bypass file security to back up file s sambaSID: S-1-5-32-551 sambaGroupType: 5 displayName: Backup Operators dn: cn=Domain Admins,ou=Group,dc=mondomaine,dc=net objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 512 cn: Domain Admins memberUid: root description: Netbios Domain Administrators sambaSID: S-1-5-21-862544283-2880828001-3584954034-512 sambaGroupType: 2 displayName: Domain Admins dn: cn=Domain Computers,ou=Group,dc=mondomaine,dc=net objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 515 cn: Domain Computers description: Netbios Domain Computers accounts sambaSID: S-1-5-21-862544283-2880828001-3584954034-515 sambaGroupType: 2 displayName: Domain Computers dn: cn=Domain Guests,ou=Group,dc=mondomaine,dc=net objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 514 cn: Domain Guests description: Netbios Domain Guests Users sambaSID: S-1-5-21-862544283-2880828001-3584954034-514 sambaGroupType: 2 displayName: Domain Guests dn: cn=Domain Users,ou=Group,dc=mondomaine,dc=net objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 513 cn: Domain Users description: Netbios Domain Users sambaSID: S-1-5-21-862544283-2880828001-3584954034-513 sambaGroupType: 2 displayName: Domain Users dn: cn=Print Operators,ou=Group,dc=mondomaine,dc=net objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 550 cn: Print Operators description: Netbios Domain Print Operators sambaSID: S-1-5-32-550 sambaGroupType: 5 displayName: Print Operators dn: cn=Replicators,ou=Group,dc=mondomaine,dc=net objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 552 cn: Replicators description: Netbios Domain Supports file replication in a sambaDomainName sambaSID: S-1-5-32-552 sambaGroupType: 5 displayName: Replicators dn: ou=Idmap,dc=mondomaine,dc=net objectClass: top objectClass: organizationalUnit ou: Idmap dn: ou=machines,dc=mondomaine,dc=net ou: machines objectClass: organizationalUnit objectClass: top dn: uid=serve$,ou=Machines,dc=mondomaine,dc=net uid: serve$ sambaSID: S-1-5-21-1244034782-2093432471-748532972-3010 sambaPwdCanChange: 1205279569 sambaPwdMustChange: 2147483647 sambaLMPassword: 587574A5B695D85AAAD3B435B51404EE sambaNTPassword: 072321F3EEF2DDA2DB88A5C7BB3628FD sambaPwdLastSet: 1205279569 sambaAcctFlags: [W ] objectClass: sambaSamAccount objectClass: account dn: ou=People,dc=mondomaine,dc=net objectClass: top objectClass: organizationalUnit ou: People dn: uid=franck,ou=People,dc=mondomaine,dc=net objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount objectClass: sambaSamAccount cn: franck sn: franck givenName: franck uid: franck uidNumber: 1005 gidNumber: 513 homeDirectory: /home/franck loginShell: /bin/bash gecos: System User sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 displayName: System User sambaSID: S-1-5-21-862544283-2880828001-3584954034-3010 sambaPrimaryGroupSID: S-1-5-21-862544283-2880828001-3584954034-513 sambaLogonScript: logon.bat sambaProfilePath: \\debian\profiles\franck sambaHomePath: \\debian\homes\franck sambaHomeDrive: U: sambaLMPassword: 5ABB8B7D728DAD9FAAD3B435B51404EE sambaNTPassword: 30FE997E5B1952EADD217C9F8D01375F sambaPwdMustChange: 2147483647 sambaPasswordHistory: 000000000000000000000000000000000000000000000000000000 0000000000 sambaAcctFlags: [U ] sambaPwdCanChange: 1205279981 sambaPwdLastSet: 1205279981 userPassword: {SSHA}lMkPUMvpX7SLDjXnUsXX1UHUM7AYQ23v dn: uid=garfield,ou=People,dc=mondomaine,dc=net objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount objectClass: sambaSamAccount cn: garfield sn: garfield givenName: garfield uid: garfield uidNumber: 1003 gidNumber: 513 homeDirectory: /home/garfield loginShell: /bin/bash gecos: garfield minou sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 displayName: garfield minou sambaSID: S-1-5-21-862544283-2880828001-3584954034-3006 sambaPrimaryGroupSID: S-1-5-21-862544283-2880828001-3584954034-513 sambaLogonScript: logon.bat sambaProfilePath: \\debian\profiles\garfield sambaHomePath: \\debian\homes\garfield sambaHomeDrive: U: sambaPwdCanChange: 1205279649 sambaPwdMustChange: 2147483647 sambaLMPassword: 5ABB8B7D728DAD9FAAD3B435B51404EE sambaNTPassword: 30FE997E5B1952EADD217C9F8D01375F sambaPasswordHistory: 000000000000000000000000000000000000000000000000000000 0000000000 sambaPwdLastSet: 1205279649 sambaAcctFlags: [U ] userPassword: {SSHA}FKQbeCHIYn4y+jANJrUKzcXD5ZryJFjE dn: uid=nobody,ou=People,dc=mondomaine,dc=net cn: nobody sn: nobody objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: sambaSamAccount objectClass: posixAccount objectClass: shadowAccount gidNumber: 514 uid: nobody uidNumber: 999 homeDirectory: /dev/null sambaPwdLastSet: 0 sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 sambaPwdMustChange: 2147483647 sambaHomePath: \\debian\homes\nobody sambaHomeDrive: U: sambaProfilePath: \\debian\profiles\nobody sambaPrimaryGroupSID: S-1-5-21-862544283-2880828001-3584954034-514 sambaLMPassword: NO PASSWORDXXXXXXXXXXXXXXXXXXXXX sambaNTPassword: NO PASSWORDXXXXXXXXXXXXXXXXXXXXX sambaAcctFlags: [NUD ] sambaSID: S-1-5-21-862544283-2880828001-3584954034-2998 loginShell: /bin/false dn: uid=nouille,ou=People,dc=mondomaine,dc=net objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount objectClass: sambaSamAccount cn: nouille sn: nouille givenName: nouille uid: nouille uidNumber: 1004 gidNumber: 513 homeDirectory: /home/nouille loginShell: /bin/bash gecos: nouille nouille sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 displayName: nouille nouille sambaSID: S-1-5-21-862544283-2880828001-3584954034-3008 sambaPrimaryGroupSID: S-1-5-21-862544283-2880828001-3584954034-513 sambaLogonScript: logon.bat sambaProfilePath: \\debian\profiles\nouille sambaHomePath: \\debian\homes\nouille sambaHomeDrive: U: sambaLMPassword: 5ABB8B7D728DAD9FAAD3B435B51404EE sambaAcctFlags: [U] sambaNTPassword: 30FE997E5B1952EADD217C9F8D01375F sambaPwdLastSet: 1205278395 sambaPwdMustChange: 1213054395 userPassword: {SSHA}jmgi/WJRb4LWGubiY0ESLi0fhex3ajdM dn: uid=oops,ou=People,dc=mondomaine,dc=net objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount objectClass: sambaSamAccount cn: oops sn: oops givenName: oops uid: oops uidNumber: 1006 gidNumber: 513 homeDirectory: /home/oops loginShell: /bin/bash gecos: System User userPassword: {crypt}x sambaPwdLastSet: 0 sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 sambaPwdMustChange: 2147483647 displayName: System User sambaAcctFlags: [UX] sambaSID: S-1-5-21-862544283-2880828001-3584954034-3012 sambaPrimaryGroupSID: S-1-5-21-862544283-2880828001-3584954034-513 sambaLogonScript: logon.bat sambaProfilePath: \\debian\profiles\oops sambaHomePath: \\debian\homes\oops sambaHomeDrive: U: dn: uid=root,ou=People,dc=mondomaine,dc=net cn: root sn: root objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: sambaSamAccount objectClass: posixAccount objectClass: shadowAccount gidNumber: 0 uid: root uidNumber: 0 homeDirectory: /home/root sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 sambaHomePath: \\debian\homes\root sambaHomeDrive: U: sambaProfilePath: \\debian\profiles\root sambaPrimaryGroupSID: S-1-5-21-862544283-2880828001-3584954034-512 sambaSID: S-1-5-21-862544283-2880828001-3584954034-500 loginShell: /bin/false gecos: Netbios Domain Administrator sambaLMPassword: 5ABB8B7D728DAD9FAAD3B435B51404EE sambaAcctFlags: [U] sambaNTPassword: 30FE997E5B1952EADD217C9F8D01375F sambaPwdLastSet: 1205275706 sambaPwdMustChange: 1213051706 userPassword: {SSHA}fkTC1ohX/oH6mYphnQa6Z+aEJ+lvcHVQ dn: uid=sabrina,ou=People,dc=mondomaine,dc=net objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount objectClass: sambaSamAccount cn: sabrina sn: sabrina givenName: sabrina uid: sabrina uidNumber: 1001 gidNumber: 513 homeDirectory: /home/sabrina loginShell: /bin/bash gecos: sabrina FONTAINE sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 displayName: sabrina FONTAINE sambaSID: S-1-5-21-862544283-2880828001-3584954034-3002 sambaPrimaryGroupSID: S-1-5-21-862544283-2880828001-3584954034-513 sambaLogonScript: logon.bat sambaProfilePath: \\debian\profiles\sabrina sambaHomePath: \\debian\homes\sabrina sambaHomeDrive: U: sambaLMPassword: 5ABB8B7D728DAD9FAAD3B435B51404EE sambaAcctFlags: [U] sambaNTPassword: 30FE997E5B1952EADD217C9F8D01375F sambaPwdLastSet: 1205270017 sambaPwdMustChange: 1213046017 userPassword: {SSHA}5CAQIwSoOKfNSYhgu+TLbMA/RAtQNlhE dn: uid=test,ou=People,dc=mondomaine,dc=net objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount objectClass: sambaSamAccount cn: test sn: test givenName: test uid: test uidNumber: 1002 gidNumber: 513 homeDirectory: /home/test loginShell: /bin/bash gecos: test sa sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 displayName: test sa sambaSID: S-1-5-21-862544283-2880828001-3584954034-3004 sambaPrimaryGroupSID: S-1-5-21-862544283-2880828001-3584954034-513 sambaLogonScript: logon.bat sambaProfilePath: \\debian\profiles\test sambaHomePath: \\debian\homes\test sambaHomeDrive: U: sambaLMPassword: 5ABB8B7D728DAD9FAAD3B435B51404EE sambaAcctFlags: [U] sambaNTPassword: 30FE997E5B1952EADD217C9F8D01375F sambaPwdLastSet: 1205275224 sambaPwdMustChange: 1213051224 userPassword: {SSHA}RHUCgviMgeeMWQnqzaAummLi//FSdi45 dn: ou=users,dc=mondomaine,dc=net ou: users objectClass: organizationalUnit objectClass: top dn: uid=nobody,ou=Users,dc=mondomaine,dc=net cn: nobody sn: nobody objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: sambaSamAccount objectClass: posixAccount objectClass: shadowAccount gidNumber: 514 uid: nobody uidNumber: 999 homeDirectory: /dev/null sambaPwdLastSet: 0 sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 sambaPwdMustChange: 2147483647 sambaPrimaryGroupSID: S-1-5-21-862544283-2880828001-3584954034-514 sambaLMPassword: NO PASSWORDXXXXXXXXXXXXXXXXXXXXX sambaNTPassword: NO PASSWORDXXXXXXXXXXXXXXXXXXXXX sambaAcctFlags: [NUD ] sambaSID: S-1-5-21-862544283-2880828001-3584954034-2998 loginShell: /bin/false dn: uid=root,ou=Users,dc=mondomaine,dc=net cn: root sn: root objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: sambaSamAccount objectClass: posixAccount objectClass: shadowAccount gidNumber: 0 uid: root uidNumber: 0 homeDirectory: /home/root sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 sambaPrimaryGroupSID: S-1-5-21-862544283-2880828001-3584954034-512 sambaSID: S-1-5-21-862544283-2880828001-3584954034-500 loginShell: /bin/false gecos: Netbios Domain Administrator sambaLMPassword: 5ABB8B7D728DAD9FAAD3B435B51404EE sambaAcctFlags: [U] sambaNTPassword: 30FE997E5B1952EADD217C9F8D01375F sambaPwdLastSet: 1205269850 sambaPwdMustChange: 1209157850 userPassword: {SSHA}ERELK5S1k93p0lJuU/SHzuoy2q10RGww dn: sambaDomainName=DEBIAN,dc=mondomaine,dc=net sambaDomainName: DEBIAN sambaSID: S-1-5-21-862544283-2880828001-3584954034 sambaAlgorithmicRidBase: 1000 objectClass: sambaDomain sambaNextUserRid: 1000 sambaMinPwdLength: 5 sambaPwdHistoryLength: 0 sambaLogonToChgPwd: 0 sambaMaxPwdAge: -1 sambaMinPwdAge: 0 sambaLockoutDuration: 30 sambaLockoutObservationWindow: 30 sambaLockoutThreshold: 0 sambaForceLogoff: -1 sambaRefuseMachinePwdChange: 0 dn: sambaDomainName=MINOU,dc=mondomaine,dc=net sambaDomainName: MINOU sambaSID: S-1-5-21-1244034782-2093432471-748532972 sambaAlgorithmicRidBase: 1000 objectClass: sambaDomain sambaNextUserRid: 1000 sambaMinPwdLength: 5 sambaPwdHistoryLength: 0 sambaLogonToChgPwd: 0 sambaMaxPwdAge: -1 sambaMinPwdAge: 0 sambaLockoutDuration: 30 sambaLockoutObservationWindow: 30 sambaLockoutThreshold: 0 sambaForceLogoff: -1 sambaRefuseMachinePwdChange: 0 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQIVAwUBR9f3XBrEXSEgvy0YAQIHjw/8CaBcOclb7ElvduMaTOPDD2w/yP9Mcbx/ W53GpCIeW9LfHALhdWq7sQ4x4dcNA5lJpjidyeH88rnfzizi923Y529NdiBTGX22 xA5AC4e7Kr75IzBR2Q4jMlniUOZT24ZWoUyGobMdWjcPqnmgiSoPlt48xATl9Wzx tAxR3Yql++A2fHKH7kPZRtw2xU8SMLD6QwYZwhibmVcySs7+dUHuQ3LgLtw8k9my BLoEhhigy/eZTUjvsYg8VptT0ijvoFkxJs3K6hm33dlux7vvAgrz7L7wqontCCzD b+Ceg/YzvKLLa2+vs+9nzL3eykdaxSVQjqh8lDerOnzQ/hKLQ2QW24eZVrhP60YE zT+XN7BeN9stiFZyP0nLl779Fnmll4jM1/0SHfgcanfX611gTqoAPJij3shyo695 fQs7rxr9VV18MHJH1BrnpPeMCdJjKsZI2igbRycYNmZSURvVw7xsdGRBvMNPmSpD rP8F9IzF9otwDqrIxyoeN9CqKZYjz4T6+yjOX9GvvmXEApsCljaffflzYdk0pVJT bSQ5x6SmhT6gjgFs6otuSAEgspMIGiirfgk5Rz7Gss0kxTOT+CNqi8VzvWC+zdks bG5OL0UBkTLrlLp7vrMzXUwLX5fv4jhzsQmPSM80H4f1U3qWXSVQD6sSQxy3a+tV JYAzN15WBMw= =L+aM -----END PGP SIGNATURE-----

2 4

Password encryption for changing passwords
by Kick, Claus 12 Mar '08

12 Mar '08

Hello everyone, I have a quick question about changing passwords and having them encrypted. We are running OpenLDAP VERSION: 2.3.39,REV=2008.01.01 This is in slapd.conf: password-hash {CRYPT} password-crypt-salt-format "$1$%.8s" The passwords are changed via ldapmodify of the Net::LDAP perl module. The changes work, however, the new passwords are unencrypted, at least the infamous ldap browser tells me that. Honestly, I have no idea where else to look. Could someone provide a pointer into the right direction? Regards, Claus

3 5

Re: alias problem - report status code 80 - internal error?]
by Yan Falken 11 Mar '08

11 Mar '08

Hi - thanks for your response. Please see comments. On Mon, Mar 10, 2008 at 10:10:54AM -0700, Quanah Gibson-Mount wrote: > --On Monday, March 10, 2008 3:33 PM +0100 Yan Falken <seahawk(a)volny.cz> > wrote: > > >Hi, > > > >I'm trying to use alias somehow but facing some internal problem and > >don't know how to fix them. Situation: > > > ldap_add: Internal (implementation specific) error (80) > > additional info: no structuralObjectClass operational > > attribute > > This error is clearly reporting the problem. > > >So - any advice where may be the problem? > > All entries must have a structural objectClass. Pick one. Ok - thanks - I used extensibleObject and commented out the organizationalUnit. Then the schema is imported. > > >I'm using bdb backend as a recommended one - have no ldbm modules here - > >in debian there is no ldbm support. > > ldbm being present or not being present has absolutely nothing to do with > your issue. I mentioned that because of this post (and several others I found on the forums): http://www.openldap.org/lists/openldap-software/200211/msg00457.html where's explicitly stated that aliases are supported just under LDBM backend - so sorry for confusion - I'm newbie in this area. So it works in case I use: dn: ou=Staff,o=JNDITutorial objectclass: top objectclass: alias # objectclass: organizationalUnit objectclass: extensibleObject aliasedObjectName: ou=People,o=JNDITutorial ou: Staff > > --Quanah > > Regards YF

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical