Hello,
I have installed openldap in Fedora. First I deleted the openldap installation. (var/lib/ldap and etc/openldap)
Then I wrote:
yum reinstall openldap-client openldap-server openldap
I configured slapd.conf with my domain, the root password with slappasswd, ldap.conf with my BASE and HOST. I copied the DB_CONFIG.example to /var/lib/ldap. I did my base.ldif of the structure of my LDAP and "ldapadd" everything succesfully. I use jXplore and Apache Directory Studio to manage my LDAP from Windows, because it´s installed in one server. The problem is that when I try to add users it says I have no schema. Apache Directory Studio creates its own schema, and I can add data. But after that schema disapears and I can't work with jXplorer.
Thank you very much * *
Daniel Peinado López
*IANT - APPLIED NGN-TECHNOLOGIES
**Turn-Key VoIP/UC Solutions and More...
*Fon: +49 (5331) 6794 400 Fax: +49 (5331) 6794 499 Mail: daniel.peinado@iant.de jan.schumacher@iant.de Web: www.iant.de http://www.iant.de/en/startseite
IANT is eZuce http://www.ezuce.com/ Elite Partner for EMEA
IANT is Member of GROUPLINK http://www.grouplink.de/
Daniel Peinado Lopez wrote:
I use jXplore and Apache Directory Studio to manage my LDAP from Windows, because it´s installed in one server. The problem is that when I try to add users it says I have no schema. Apache Directory Studio creates its own schema, and I can add data. But after that schema disapears and I can't work with jXplorer.
A wild guess: The access control configured on the LDAP server forbids to retrieve the subschema subentry.
Try these ACLs which give full access to rootDSE and subschema subentry:
access to dn.base="" by * read access to dn.base="cn=Subschema" by * read
Tweak it to satisfy your local security policy.
BTW:
1. AFAIK jxplorer is unmaintained and has some bugs when handling NAME aliases of attribute types (e.g. 'uid' vs. 'userid'). I'd rather recommend not to use it.
2. Last time I checked Apache Directory Studio did not have support for DIT content rules. If you don't use them it doesn't matter. But I use DIT content rules.
Ciao, Michael.
openldap-technical@openldap.org
-
Daniel Peinado Lopez -
Michael Ströder