inline

On 06/06/11 05:01 AM, Aurélien Lafranchise wrote:

Hi,

Inline

Aurélien Lafranchise | Consultant Tél. : +33 (0)1 75 43 55 12 | Fax : +33 (0)1 75 43 55 11 www.snype-consulting.com http://www.snype-consulting.com/

2011/6/4 Christopher Wood <christopher_wood@pobox.com mailto:christopher_wood@pobox.com>

Inline.


On 01/06/11 05:46 AM, Aurélien Lafranchise wrote:

    Hi all,

    I am a very novice (less than a week) with OpenLDAP and I have some
    basics problems.

    First, I have the 2.4.25 version and I downloaded the Admin
    Guide as a
    documentation.

    I understood that the way to configure the server change from
    slapd.conf
    to cn=config and this change is not clear by reading the
    documention.

    My question is simple, how to create my own DIT without
    interfering with
    the default configuration ?


I took the (quick, lazy) path of making a slapd.conf and using
slaptest to convert to the cn=config format. The slapd.conf was
basic enough to have database locations and indexing, and I added
replication later via ldapmodifies to cn=config.

It also helped that I could look at the entries under cn=config and
compare them to my slapd.conf.

Ok, thanks it is not the best but very efficient !

I'm still learning myself, so I figured that the provided tools will be better than me at making cn=config setups.

    The end goal of this server is to have a radius server
    interrogating the
    LDAP one to deliver IP address to a GGSN (GPRS équipement).


So far I've found that the configuration with the fewest points of
failure is when the ldap directory is on the same host as the radius
daemon. Also, perhaps look into the FreeRADIUS schema for OpenLDAP
as a convenient way to get started storing your radius information
in the directory.

Why do you have a problem by having freeradius and openldap on the same server ?

I meant that the configuration with the least problems was when they were on the same server. I've tried the (radius -> firewall -> load balancer -> ldap) configuration before and at times it wasn't the best it could be.

I found the freeradius schema and I have to modify it so it take more time.

Do you have an idea about what is a collective attribute ?

I have no idea, but the IETF has all the RFCs:

http://www.ietf.org/rfc/rfc3671.txt

    Thanks for the help provided.

            Aurélien Lafranchise | Consultant
    Tél. : +33 (0)1 75 43 55 12 | Fax : +33 (0)1 75 43 55 11
    www.snype-consulting.com <http://www.snype-consulting.com>
    <http://www.snype-consulting.com/>