openldap-technical

openldap-technical@openldap.org

1 participants
9898 discussions

Another question concerning the dynlist overlay
by Gerd Schering 20 Feb '08

20 Feb '08

Hi, I my slapd.conf i added th following line: dynlist-attrset myAccount myAccountOwnerURL myAccount is a propriatary, auxliliary objectclass. SlapD says: AttributeDescription "myAccountOwnerURL" must be a subtype of "labeledURI". I really don't now how to arrange this. Trying attributetype ( labeledURI:1 NAME 'myAccountOwnerURL' ... ) gives: OID could not be expanded: "labeledURI:1" even the dyngroup.schema wsa loaded prior to the schema containing the "myAccountOwnerURL" Attribute. Any hint how to proceed? Gerd -- ------------------------------------------------------ -- Gerd Schering, Email: Schering(a)tubit.TU-Berlin.DE -- -- TU Berlin, Zentraleinrichtung Rechenzentrum -- -- Sekr. E-N 50, Einsteinufer 17, 10587 Berlin -- -- phone: +49 30 314 24383, fax: +49 30 314 21060 -- ------------------------------------------------------

2 2

ldapsearch for accont object class
by Hamidreza Hamedtoolloei 20 Feb '08

20 Feb '08

Dear all, Below is the "partial" content of my openldap db. when I do: ldapsearch -D "cn=fratbrother,ou=People,dc=ibm,dc=com" -w password -x everything is fine. However, when I do ldapsearch -D "uid=sriram,ou=People,dc=ibm,dc=com" -w password -x I get the ldap_bind: Invalid credentials (49) error. is this related to the "account" object class? it seems that none of the openLdap tools such as ldapsearch,ldappasswd works for "account" object class.. is the syntax different for this type of class? p.s. in my slapd.config for ACL I have access to * by * read # sriram, People, ibm.com dn: uid=sriram,ou=People,dc=ibm,dc=com uid: sriram cn: Sriram Krishnan objectClass: account objectClass: posixAccount objectClass: top objectClass: shadowAccount userPassword:: e2NyeXB0fSQxJC82bGVIazhGJEY3bHpuS1d2bi5UWmQuZ2o1TUhqLy4= shadowLastChange: 13923 shadowMax: 99999 shadowWarning: 7 loginShell: /bin/bash uidNumber: 503 gidNumber: 503 homeDirectory: /export/home/sriram gecos: Sriram Krishnan,SDSC,8585555555,8586666666 # fratbrother, People, ibm.com dn: cn=fratbrother,ou=People,dc=ibm,dc=com cn: fratbrother sn: fratbrother objectClass: top objectClass: person userPassword:: e1NTSEF9aXVxUkw1MlAvaS9XUkRkNHhuN0lEbUl3VnhhekRzV2s= ____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs

3 2

Ppolicy issues
by Bryan Payne 19 Feb '08

19 Feb '08

I have some issues with ppolicy. It seems it recognizes expiration dates (I know this from looking in the logs, but it does not warn the user their password is expiring soon), properly locks out accounts with too many failed logins but it cannot seem to force a password change when pwdReset is set to TRUE, nor does it prevent logins when the password has expired. Any help would be greatly appreciated. I'll post the things of importance below. Please let me know if anything else would help. [root@ldapserver ~]# ldapsearch -x -LLL cn=default dn: cn=default,ou=policies,dc=example,dc=com objectClass: top objectClass: device objectClass: pwdPolicy cn: default pwdAttribute: 2.5.4.35 pwdInHistory: 6 pwdCheckQuality: 1 pwdMinLength: 8 pwdMaxFailure: 4 pwdLockout: TRUE pwdFailureCountInterval: 0 pwdMustChange: TRUE pwdSafeModify: FALSE pwdLockoutDuration: 900 pwdExpireWarning: 432000 pwdGraceAuthNLimit: 1 pwdAllowUserChange: TRUE pwdMaxAge: 7776000 From slapd.conf overlay ppolicy ppolicy_default "cn=default,ou=policies,dc=example,dc=com" ppolicy_use_lockout

2 1

Password change synchronization
by punith punith 19 Feb '08

19 Feb '08

Hi everybody.. Warm greetings to you all. I am doing authentication using OpenLDAP and I think it is best place to ask my problem. What I require is, I have to run a shell script when the user changes password. ie Suppose that a user is changed his OpenLDAP pasword, I want to trigger a shell script which updates oracle login password. Is it possible with Openldap? If so, how and where to keep the shell script? All queris and reply are welcome.

3 3

LDAP in Master-Slave
by Aravind Arjunan 19 Feb '08

19 Feb '08

am trying to configuring openldap2.2 in syncrepl method in master-slave. I have two linux machines,i configured for master and slave. I think i had done the configurations correct,bcos after restarting the consumer, my database from provider were copied to consumer automatically. But when i check the consumer by using ldapsearch command,it is returning no such object. in replogfile also there was no content.Tell me how to check that my slave ldap was working and how to check that wheather it has been replicated. After configuring my slave i had added some more in entries in master to check wheather it has been replicated to slave.But i cant able to found through ldapsearch command. The command which i had issued is [root@slave ~]# ldapsearch -x -b 'dc=example,dc=com' \ > '(objectclass=*)' # extended LDIF # # LDAPv3 # base <dc=example,dc=com> with scope sub # filter: (objectclass=*) # requesting: ALL # # search result search: 2 result: 32 No such object # numResponses: 1

2 1

Fwd: LDAP
by Aravind Arjunan 19 Feb '08

19 Feb '08

---------- Forwarded message ---------- From: Aravind Arjunan <aravind.arjunan(a)gmail.com> Date: 19 Feb 2008 18:31 Subject: Re: LDAP To: Buchan Milne <bgmilne(a)staff.telkomsa.net> When i try to add root.ldif file am getting this error Already exixts(68) If suppose i had edited the root.file or any other ldif file which are already added to the database,at that time also will i get the same error. Just say me how to add the edited ldif file in the database. [root@server openldap]# ldapadd -x -D "cn=Manager,dc=example,dc=com" -W -f /etc/openldap/root.ldif Enter LDAP Password: adding new entry "ou=People,cn=Manager,dc=example,dc=com" ldap_add: Already exists (68) [root@server openldap]#

1 0

Re: LDAP
by Aravind Arjunan 18 Feb '08

18 Feb '08

I had already added the domain dc=example,dc=com But when i try to add the ldapuser.ldif am getting no such object error. Here when i try to add example.com.ldif it shows Already exists(68) if suppose if i make some changes in the example.com.ldif is it possible for me to add agian or at that time also it will display Already exists(68) error. tell me how to add the edited ldif file. [root@server ~]# ldapadd -x -D "cn=Manager,dc=example,dc=com" \ > -W -f /etc/openldap/example.com.ldif Enter LDAP Password: adding new entry "dc=example,dc=com" ldap_add: Already exists (68) [root@server ~]# ldapadd -x -D "cn=Manager,dc=example,dc=com" -W -f /etc/openldap/ldapusers.ldif Enter LDAP Password: adding new entry "uid=ldapuser,ou=People,cn=Manager,dc=example,dc=com" ldap_add: No such object (32) matched DN: cn=Manager,dc=example,dc=com [root@server ~]# ldapadd -x -D "cn=Manager,dc=example,dc=com" -W -f /etc/openldap/root.ldif Enter LDAP Password: adding new entry "uid=root,ou=People,dc=example,dc=com" ldap_add: No such object (32) matched DN: dc=example,dc=com [root@server ~]#

2 1

Ldap group with apache and proftpd
by jonathan.houze＠inetprocess.com 18 Feb '08

18 Feb '08

Hello every body, I am trying to manage rights with phpLdapAdmin and I don't succeed in configuring Apache and Proftpd I have created a branch : Peoples with user, each user is on the group "ldap" (groupid=1000) and some user are in a group "ftp" (groupid=1001) I'd like Proftpd and Apache to check user on the group "ftp" (1001) but I don't succeed, same for Apache ============== My VHOST on httpd.conf ================ LDAPTrustedCA /etc/ssl/cacert.pem LDAPTrustedCAType BASE64_FILE <Location /ldap-status> Order deny,allow Deny from All AuthName "Company.com Intranet" AuthType Basic AuthLDAPUrl ldaps://ldap.enterprise.com/ou=Peoples,dc=ldap,dc=enterprise,dc=com?uid #AuthLDAPGroupAttribute memberUid #AuthLDAPGroupAttributeIsDN off #Require ldap-group cn=ftp,ou=Groups,dc=ldap,dc=enterprise,dc=com #Require ldap-attribute gidNumber=1001 #Satisfy any ======================================================= Thank you, for your support

2 1

LDAP
by Aravind Arjunan 18 Feb '08

18 Feb '08

when am trying to add ldapuser.ldif am getting this error. [root@server ~]# ldapadd -x -D "cn=Manager,dc=example,dc=com" -W -f /etc/openldap/ldapusers.ldif Enter LDAP Password: adding new entry "uid=ldapuser,ou=People,cn=Manager,dc=example,dc=com" ldap_add: No such object (32) matched DN: cn=Manager,dc=example,dc=com This is my ldapuser.ldif dn: uid=ldapuser,ou=People,cn=Manager,dc=example,dc=com uid: ldapuser cn: Manager ou: People objectClass: account objectClass: posixAccount objectClass: top objectClass: shadowAccount userPassword: {crypt}c3ZWmT7fM2thY shadowLastChange: 13927 shadowMax: 99999 shadowWarning: 7 loginShell: /bin/bash uidNumber: 507 gidNumber: 100 homeDirectory: /home/ldapuser And is it necessary to extract the information of ldapuser from /etc/passwd file and for linux root account and extracted the /etc/passwd data into an ldif file and imported to that database.

3 2

LDAP inquiry
by Houaichine, Fathi (Fathi) 18 Feb '08

18 Feb '08

Dear team, I have a need to query two different LDAP servers in different domains, all the tools I have today I can query only one server a time, so I am looking if Openldap can do this requirement ? I'll appreciate if any body could advise. Best regards Fathi

2 3

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical