openldap-technical

openldap-technical@openldap.org

7 participants
9864 discussions

LDAP in Master-Slave
by Aravind Arjunan 20 Feb '08

20 Feb '08

am trying to configuring openldap2.2 in syncrepl method in master-slave. I have two linux machines,i configured for master and slave. I think i had done the configurations correct,bcos after restarting the consumer, my database from provider were copied to consumer automatically. But when i check the consumer by using ldapsearch command,it is returning no such object. in replogfile also there was no content.Tell me how to check that my slave ldap was working and how to check that wheather it has been replicated. After configuring my slave i had added some more in entries in master to check wheather it has been replicated to slave.But i cant able to found through ldapsearch command. The command which i had issued is [root@slave ~]# ldapsearch -x -b 'dc=example,dc=com' \ > '(objectclass=*)' # extended LDIF # # LDAPv3 # base <dc=example,dc=com> with scope sub # filter: (objectclass=*) # requesting: ALL # # search result search: 2 result: 32 No such object # numResponses: 1

2 1

Fwd: LDAP
by Aravind Arjunan 19 Feb '08

19 Feb '08

---------- Forwarded message ---------- From: Aravind Arjunan <aravind.arjunan(a)gmail.com> Date: 19 Feb 2008 18:31 Subject: Re: LDAP To: Buchan Milne <bgmilne(a)staff.telkomsa.net> When i try to add root.ldif file am getting this error Already exixts(68) If suppose i had edited the root.file or any other ldif file which are already added to the database,at that time also will i get the same error. Just say me how to add the edited ldif file in the database. [root@server openldap]# ldapadd -x -D "cn=Manager,dc=example,dc=com" -W -f /etc/openldap/root.ldif Enter LDAP Password: adding new entry "ou=People,cn=Manager,dc=example,dc=com" ldap_add: Already exists (68) [root@server openldap]#

1 0

Re: LDAP
by Aravind Arjunan 19 Feb '08

19 Feb '08

I had already added the domain dc=example,dc=com But when i try to add the ldapuser.ldif am getting no such object error. Here when i try to add example.com.ldif it shows Already exists(68) if suppose if i make some changes in the example.com.ldif is it possible for me to add agian or at that time also it will display Already exists(68) error. tell me how to add the edited ldif file. [root@server ~]# ldapadd -x -D "cn=Manager,dc=example,dc=com" \ > -W -f /etc/openldap/example.com.ldif Enter LDAP Password: adding new entry "dc=example,dc=com" ldap_add: Already exists (68) [root@server ~]# ldapadd -x -D "cn=Manager,dc=example,dc=com" -W -f /etc/openldap/ldapusers.ldif Enter LDAP Password: adding new entry "uid=ldapuser,ou=People,cn=Manager,dc=example,dc=com" ldap_add: No such object (32) matched DN: cn=Manager,dc=example,dc=com [root@server ~]# ldapadd -x -D "cn=Manager,dc=example,dc=com" -W -f /etc/openldap/root.ldif Enter LDAP Password: adding new entry "uid=root,ou=People,dc=example,dc=com" ldap_add: No such object (32) matched DN: dc=example,dc=com [root@server ~]#

2 1

Ldap group with apache and proftpd
by jonathan.houze＠inetprocess.com 18 Feb '08

18 Feb '08

Hello every body, I am trying to manage rights with phpLdapAdmin and I don't succeed in configuring Apache and Proftpd I have created a branch : Peoples with user, each user is on the group "ldap" (groupid=1000) and some user are in a group "ftp" (groupid=1001) I'd like Proftpd and Apache to check user on the group "ftp" (1001) but I don't succeed, same for Apache ============== My VHOST on httpd.conf ================ LDAPTrustedCA /etc/ssl/cacert.pem LDAPTrustedCAType BASE64_FILE <Location /ldap-status> Order deny,allow Deny from All AuthName "Company.com Intranet" AuthType Basic AuthLDAPUrl ldaps://ldap.enterprise.com/ou=Peoples,dc=ldap,dc=enterprise,dc=com?uid #AuthLDAPGroupAttribute memberUid #AuthLDAPGroupAttributeIsDN off #Require ldap-group cn=ftp,ou=Groups,dc=ldap,dc=enterprise,dc=com #Require ldap-attribute gidNumber=1001 #Satisfy any ======================================================= Thank you, for your support

2 1

LDAP
by Aravind Arjunan 18 Feb '08

18 Feb '08

when am trying to add ldapuser.ldif am getting this error. [root@server ~]# ldapadd -x -D "cn=Manager,dc=example,dc=com" -W -f /etc/openldap/ldapusers.ldif Enter LDAP Password: adding new entry "uid=ldapuser,ou=People,cn=Manager,dc=example,dc=com" ldap_add: No such object (32) matched DN: cn=Manager,dc=example,dc=com This is my ldapuser.ldif dn: uid=ldapuser,ou=People,cn=Manager,dc=example,dc=com uid: ldapuser cn: Manager ou: People objectClass: account objectClass: posixAccount objectClass: top objectClass: shadowAccount userPassword: {crypt}c3ZWmT7fM2thY shadowLastChange: 13927 shadowMax: 99999 shadowWarning: 7 loginShell: /bin/bash uidNumber: 507 gidNumber: 100 homeDirectory: /home/ldapuser And is it necessary to extract the information of ldapuser from /etc/passwd file and for linux root account and extracted the /etc/passwd data into an ldif file and imported to that database.

3 2

LDAP inquiry
by Houaichine, Fathi (Fathi) 18 Feb '08

18 Feb '08

Dear team, I have a need to query two different LDAP servers in different domains, all the tools I have today I can query only one server a time, so I am looking if Openldap can do this requirement ? I'll appreciate if any body could advise. Best regards Fathi

2 3

syncrepl, database is not complete...
by Alain Siani 18 Feb '08

18 Feb '08

Hello, _My problem :_ I would like to have a replication server and i don't understand why all data are not copied to the replication server, i use rootdn to do sync...i should be able to copy all data...it start to copy but don't copy all data... _LDAP version :_ Source and copy are the same server : openldap-2.3.27-8 see below for configuration files, thks for your help ! Alain _Source server :_ include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/nis.schema include /etc/openldap/schema/rfc822-MailMember.schema include /etc/openldap/schema/gosa/gofon.schema include /etc/openldap/schema/gosa/samba3.schema include /etc/openldap/schema/gosa/pureftpd.schema include /etc/openldap/schema/gosa/gohard.schema include /etc/openldap/schema/gosa/goto.schema include /etc/openldap/schema/gosa/gosa+samba3.schema include /etc/openldap/schema/gosa/gofax.schema include /etc/openldap/schema/gosa/goserver.schema include /etc/openldap/schema/sfe.schema loglevel 256 password-hash {CRYPT} allow bind_v2 pidfile /var/run/openldap/slapd.pid argsfile /var/run/openldap/slapd.args access to * by * read database bdb suffix dc=domain,dc=com rootdn cn=Manager,dc=domain,dc=com rootpw {SSHA}Lcrkf43J0AU3rXGtMRk5iHAMXHuweL4R directory /var/lib/ldap/domain.com # Indices to maintain for this database index objectClass eq,pres index ou,cn,mail,surname,givenname eq,pres,sub index uidNumber,gidNumber,loginShell eq,pres index uid,memberUid eq,pres,sub index nisMapName,nisMapEntry eq,pres,sub *# Pour la replication avec syncrepl overlay syncprov syncprov-checkpoint 100 10 syncprov-sessionlog 100 sessionlog 123 500* ==================================================================== _Destination server :_ include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/nis.schema loglevel 256 schemacheck off allow bind_v2 pidfile /var/run/openldap/slapd.pid argsfile /var/run/openldap/slapd.args ####################################################################### # ldbm and/or bdb database definitions ####################################################################### database bdb suffix "dc=domain,dc=com" rootdn "cn=Manager,dc=domain,dc=com" rootpw {SSHA}Lcrkf43J0AU3rXGtMRk5iHAMXHuweL4R directory /var/lib/ldap/domain.com index objectClass eq,pres index ou,cn,mail,surname,givenname eq,pres,sub index uidNumber,gidNumber,loginShell eq,pres index uid,memberUid eq,pres,sub index nisMapName,nisMapEntry eq,pres,sub access to * by * read * syncrepl rid=123 provider=ldap://10.0.0.242:389 type=refreshOnly interval=00:00:05:00 searchbase="dc=domain,dc=com" filter="(objectclass=*)" attrs="*" scope=sub schemachecking=off updatedn="cn=Manager,dc=domain,dc=com" bindmethod=simple binddn="cn=Manager,dc=domain,dc=com" credentials=xxxx* --- Antivirus avast! : message Sortant sain. Base de donnees virale (VPS) : 080216-0, 16/02/2008 Analyse le : 17/02/2008 13:54:14 avast! - copyright (c) 1988-2008 ALWIL Software. http://www.avast.com

6 13

basic database design
by VaraPrasad Yalla 18 Feb '08

18 Feb '08

I built a basic ldap server which is now working fine . It presently has very few attributes for each of the entries in the database . one of the records now looks like this : --------------------------------------------- dn: uid=test,ou=People,dc=example,dc=com uid: test cn: test objectClass: account objectClass: posixAccount objectClass: top objectClass: shadowAccount userPassword: {crypt}$1$XViJ4WIc$KIn0R0tQnYaKglIOI5Koj. shadowLastChange: 13925 shadowMax: 99999 shadowWarning: 7 loginShell: /bin/bash uidNumber: 506 gidNumber: 506 homeDirectory: /home/test ---------------------------------------------- How do I add further attributes like surname , email , street name etc to it ? Where should I make the modifications for these things to be added to the database ?

2 1

Re: Question concerning the dynlist overlay and single valued attributes
by Pierangelo Masarati 16 Feb '08

16 Feb '08

Gerd Schering wrote: > Pierangelo Masarati wrote: >> Dynlist does not >> allow massaging, so an option would be to stack a rwm before dynlist, so >> that rwm can massage the attribute names from persID to memberID before >> gathering. Looks ugly. > > Even if I will look for another solution (as promised in my previous > posting), I am somewhat curious: where can I find an example dealing > with overlay stacking? Please keep replies on the list. Overlay stacking is trivial: just configure more than one. From slapd.conf(5): overlay <overlay-name> Add the specified overlay to this database. An overlay is a piece of code that intercepts database operations in order to extend or change them. Overlays are pushed onto a stack over the database, and so they will execute in the reverse of the order in which they were configured and the database itself will receive control last of all. See the slapd.overlays(5) manual page for an overview of the available overlays. Note that all of the database’s regular settings should be configured before any overlay settings. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati(a)sys-net.it ---------------------------------------

1 0

ldap_initialize failure
by Ron Rogers 15 Feb '08

15 Feb '08

Hi All, I am receiving an LDAP_NO_MEMORY return from ldap_initialize on my Linux box. This error only occurs when the my application is executed from another process. If I start the app from the command line, everything works fine. I've spent some time looking at the source code and manual pages . The error seems to be coming from the call to LDAP_INT_GLOBAL_OPT. After that I'm getting lost in the macros and #defines . Does anyone have any ideas about this problem? Thanks Ron Rogers ____________________________________________________________________________________ Looking for last minute shopping deals? Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical