openldap-technical

openldap-technical@openldap.org

5 participants
9991 discussions

Password Policy
by farhan ahmed 22 Apr '08

22 Apr '08

Hi Guys, I have implemented password policy on linux but Solaris clients are not giving any error message other than permision denied. For example, I have pwdInHostory 6, if i try to change password on linux and use old password I get straight away error message -bash-3.00$ passwdChanging password for user test.Enter login(LDAP) password: New UNIX password: Retype new UNIX password: LDAP password information update failed: Can't contact LDAP server Password is in history of old passwords But When I do same on Solaris I get following -bash-3.00$ passwd wbarreraEnter existing login password: New Password: Re-enter new Password: Permission denied But on server side debug I can see following send_ldap_result: err=19 matched="" text="Password is in history of old passwords" Why Solaris is not showing "Password is in history of old passwords" to user. Solaris is using its native client to connect openldap over TLS Any help would be appreciatedThanks, -- Regards, Farhan Ahmed _________________________________________________________________ Are you paid what you're worth? Find out: SEEK Salary Centre http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fninemsn%2Eseek%2Ecom%2Eau%2…

1 0

Re: Invalid syntax (21)
by Luke Lee 22 Apr '08

22 Apr '08

Hi Dieter, I tried several modifications but still couldn't get it working. Can you or anyone else help please? What's wrong with my syntax? Thanks. Luke ----- Original Message ---- From: Dieter Kluenter <dieter(a)dkluenter.de> To: openldap-technical(a)openldap.org Sent: Saturday, April 19, 2008 4:27:20 AM Subject: Re: Invalid syntax (21) Luke Lee <leeluke77(a)yahoo.com> writes: > Hi, > > I encounter a situation where I couldn't find any syntax errors in my ldif file but failed to use > ldapadd to add entries. I didn't find any trailing spaces at the end of each objectClass. The > following is the error message: > > adding new entry "cn=LocalSales,ou=Netgroup,dc=mydomain,dc=com" > ldapadd: Invalid syntax (21) > additional info: nisNetgroupTriple: value #0 invalid per syntax > > My ldif file is like the following: [....] > dn: cn=LocalSales,ou=Netgroup,dc=mydomain,dc=com > objectClass: nisNetgroup > objectClass: top > cn: LocalSales > nisNetgroupTriple: (,luke_l,mydomain.com) > nisNetgroupTriple: (,sam_c,mydomain.com) > nisNetgroupTriple: (,amy_s,mydomain.com) > nisNetgroupTriple: (,anita_c,mydomain.com) > nisNetgroupTriple: (,jim_f,mydomain.com) > description: Local Sales The nisnetgrouptriple syntax is described in RFC-2307 as follows: Values in this syntax are represented by the following: nisnetgrouptriple = "(" hostname "," username "," domainname ")" hostname = "" / "-" / keystring username = "" / "-" / keystring domainname = "" / "-" / keystring See RFC-2307 for examples. -Dieter -- Dieter Klünter | Systemberatung http://www.dkluenter.de GPG Key ID:8EF7B6C6 ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ

2 2

"to" rules
by uri_gr1＠tut.by 21 Apr '08

21 Apr '08

Hi, people! I have openldap-2.4.8 up and running. I have ou=People subtree with posixAccounts and I need to grant access to, let's say, ou=Clients,ou=AddressBook by all rdn's in ou=People, having gidNumber=10008. How can I do so?

2 1

ldapbind() timeout can't work .
by lijx 20 Apr '08

20 Apr '08

LDAP APIS confused me, anyone can tell my what's wrong with my code? I have call ldap_set_option() and set the LDAP_OPT_NETWORK_TIMEOUT or the LDAP_OPT_TIMEOUT opt, before call the ldap_bind_s() or the non synchronize APIS, but the authentication result still return after almost 70 seconds later, am I miss something (note: my server is windows active directory, simple authentication.)? struct timeval tv_select_timeout; tv_select_timeout.tv_sec = 10; tv_select_timeout.tv_usec = 0; int t; t=ldap_set_option(pLdapConnection, LDAP_OPT_NETWORK_TIMEOUT, &tv_select_timeout); #ifdef BIND_TIME_CONTROL { int msgid, err; LDAPMessage *result = NULL; char *error_msg; struct timeval tv; if ((msgid = ldap_simple_bind(pLdapConnection, pUserDN, pPassword)) == -1) { error_msg = NULL; ldap_get_option(pLdapConnection, LDAP_OPT_ERROR_STRING, &error_msg); if (error_msg != NULL) { ldap_memfree(error_msg); } ldap_unbind_s(pLdapConnection); return AUTH_AGENT_ERR_LDAPSIMPLEBIND_FAIL; } ret = ldap_result(pLdapConnection, msgid, LDAP_MSG_ALL, & tv_select_timeout, &result); if (ret == -1) { ldap_unbind_s(pLdapConnection); if (result != NULL) ldap_msgfree(result); return AUTH_AGENT_ERR_LDAPRESULT_FAIL; } else if (ret == 0) { /*timeout & result ==NULL */ ldap_unbind_s(pLdapConnection); if (result != NULL) ldap_msgfree(result); return AUTH_AGENT_ERR_LDAPRESULT_TIMEOUT; } ret = ldap_result2error(pLdapConnection, result, 1); } #else { ret = ldap_bind_s(pLdapConnection, pUserDN, pPassword, LDAP_AUTH_SIMPLE); } #endif

2 2

Invalid syntax (21)
by Luke Lee 19 Apr '08

19 Apr '08

Hi, I encounter a situation where I couldn't find any syntax errors in my ldif file but failed to use ldapadd to add entries. I didn't find any trailing spaces at the end of each objectClass. The following is the error message: adding new entry "cn=LocalSales,ou=Netgroup,dc=mydomain,dc=com" ldapadd: Invalid syntax (21) additional info: nisNetgroupTriple: value #0 invalid per syntax My ldif file is like the following: # # LocalSales # dn: cn=LocalSales,ou=Netgroup,dc=mydomain,dc=com objectClass: nisNetgroup objectClass: top cn: LocalSales nisNetgroupTriple: (,luke_l,mydomain.com) nisNetgroupTriple: (,sam_c,mydomain.com) nisNetgroupTriple: (,amy_s,mydomain.com) nisNetgroupTriple: (,anita_c,mydomain.com) nisNetgroupTriple: (,jim_f,mydomain.com) description: Local Sales # # Corporate Accountants # dn: cn=CorpAcct,ou=Netgroup,dc=mydomain,dc=com objectClass: nisNetgroup objectClass: top cn: CorpAcct nisNetgroupTriple: (,hannah_m,mydomain.com) nisNetgroupTriple: (,judy_j,mydomain.com) description: Corporate Accountants I have included the following schema files in my slapd.conf: include /usr/local/etc/openldap/schema/core.schema include /usr/local/etc/openldap/schema/cosine.schema include /usr/local/etc/openldap/schema/inetorgperson.schema include /usr/local/etc/openldap/schema/nis.schema Could anyone please help resolve the above problem? Thanks. Luke ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ

2 1

pwdExpirationWarned not present
by Paul Lee 18 Apr '08

18 Apr '08

Dear all, I am using openldap 2.4.8 and testing with the pwdExpireWarning and the pwdMaxAge I set the pwdExpireWarning = 100 and the pwdMaxAge = 120 Then, I preform a change in password operation. and wait for 20 seconds (120 - 100). I then preform a Authentificaiton to the LDAP several times, I see from the log indicate that it now falls in the warning period (i.e. about to expire but not yet expired) Apr 17 19:47:47 ldap0 slapd[7519]: ppolicy_bind: Setting warning for password expiry for cn=paul,ou=SCIG,ou=Govt-Dept,o=HKSARG = 96 seconds However, when I retrieve the operational attributes for that user, I can't see the pwdExpirationWarned attribute. How can I detect the user is in the "about to expire" state ? Thanks Confidential Communication - This e-mail (including any attachments) is confidential and may be legally privileged. If this e-mail has been sent to you by mistake please inform us by reply e-mail and then delete the e-mail, destroy any printed copy and do not disclose or use the information in it.

2 3

Loading Ldif files to ldap server
by divya shree 18 Apr '08

18 Apr '08

Hiii.. I would like to knw.. 1...wen the users register themsleves first..wherev will the user details (like username n password will b stored).... 2.... if it is stored in the mysql backend..how will i migrate this data to the ldif file n load this ldif file to the server... Thanks n Regards Divya --------------------------------- Unlimited freedom, unlimited storage. Get it now

2 1

Manipulation of Request data
by derwyn 18 Apr '08

18 Apr '08

Hi All, I'm a novice in LDAP. But wanted to know if it was possible to mangle request coming to ldap. Eg. I have my ldap data with uid=someuser but the request coming in is uid=someuser(a)somedomain.com Is it possible to add some rule in slapd.conf or ldap.conf to do this kind of manipulation. I'm not using sasal. Thank Derwyn =================================================================== sms START NETCORE to 575758 to get updates on Netcore's enterprise products and services sms START MYTODAY to 09845398453 for more information on our mobile consumer services or go to http://www.mytodaysms.com ===================================================================

3 2

Number of Downloads?
by Gavin Henry 18 Apr '08

18 Apr '08

Hi All, Do we have any stats on the amount of downloads per month/year at all? Thanks, Gavin.

1 0

Re: openLDAP & memberof
by Gene Kupfer 17 Apr '08

17 Apr '08

Thank you very much for the info Michael and Quanah. I will check it out. Best regards, Gene

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical