I have read the documentation and cannot figure out how to create a new dit so I can add the module I need. If you can be more specific on what I should be looking for that would be great. But no where have I found that points how to create the cn=module{0} dit so it can be populated. I don't know maybe I'm asking the wrong questions.
from the docs
5.2.2. cn=module
If support for dynamically loaded modules was enabled when configuring slapd, cn=module entries may be used to specify sets of modules to load. Module entries must have the olcModuleList objectClass.
I don't have a cn=module dit, how do I create it?
On Wed, Jul 9, 2014 at 6:26 PM, Quanah Gibson-Mount quanah@zimbra.com wrote:
--On Wednesday, July 09, 2014 6:59 PM -0400 Greg Treantos < gtreanto@gmail.com> wrote:
From the man pages ldapadd is just a hardlink to ldapmodify, but I tried and got the same error
ldapadd -Y EXTERNAL -H ldapi:/// -v -f ldapMdynalist.ldif ldap_initialize( ldapi:///??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 add olcModuleLoad: {0}/usr/lib64/openldap/memberof.la
The above is invalid. I strongly advise you to read the documentation.
Also, you should not be touching or creating any files inside the cn=config database.
--Quanah
--
Quanah Gibson-Mount Server Architect Zimbra, Inc.
Zimbra :: the leader in open source messaging and collaboration
you were right and I'm an idiot.. The docs had the correct syntax
dn: cn=module{0},cn=config objectClass: olcModuleList cn: module{0} olcModuleLoad: /<pathToModule>/<module>
On Wed, Jul 9, 2014 at 6:35 PM, Greg Treantos gtreanto@gmail.com wrote:
I have read the documentation and cannot figure out how to create a new dit so I can add the module I need. If you can be more specific on what I should be looking for that would be great. But no where have I found that points how to create the cn=module{0} dit so it can be populated. I don't know maybe I'm asking the wrong questions.
from the docs
5.2.2. cn=module
If support for dynamically loaded modules was enabled when configuring slapd, cn=module entries may be used to specify sets of modules to load. Module entries must have the olcModuleList objectClass.
I don't have a cn=module dit, how do I create it?
On Wed, Jul 9, 2014 at 6:26 PM, Quanah Gibson-Mount quanah@zimbra.com wrote:
--On Wednesday, July 09, 2014 6:59 PM -0400 Greg Treantos < gtreanto@gmail.com> wrote:
From the man pages ldapadd is just a hardlink to ldapmodify, but I tried and got the same error
ldapadd -Y EXTERNAL -H ldapi:/// -v -f ldapMdynalist.ldif ldap_initialize( ldapi:///??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 add olcModuleLoad: {0}/usr/lib64/openldap/memberof.la
The above is invalid. I strongly advise you to read the documentation.
Also, you should not be touching or creating any files inside the cn=config database.
--Quanah
--
Quanah Gibson-Mount Server Architect Zimbra, Inc.
Zimbra :: the leader in open source messaging and collaboration
-- Greg
--On Wednesday, July 09, 2014 7:35 PM -0400 Greg Treantos gtreanto@gmail.com wrote:
I have read the documentation and cannot figure out how to create a new dit so I can add the module I need. If you can be more specific on what I should be looking for that would be great. But no where have I found that points how to create the cn=module{0} dit so it can be populated. I don't know maybe I'm asking the wrong questions.
cn=config is the dit. cn=module{0} is an object within cn=config.
ldapadd <options> dn: cn=module{0}, cn=config objectClass: olcModuleList olcModulePath: /usr/lib64/openldap/ cn: module{0} olcModuleLoad: {0}accesslog.la ...
Sounds like you're using Debian or Ubuntu. I'd note their current builds of OpenLDAP are utterly broken and should be avoided. You may want to grab the LTB project builds or builds from Symas.
--Quanah
--
Quanah Gibson-Mount Server Architect Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration
Greg Treantos wrote:
I have read the documentation and cannot figure out how to create a new dit so I can add the module I need. If you can be more specific on what I should be looking for that would be great. But no where have I found that points how to create the cn=module{0} dit so it can be populated. I don't know maybe I'm asking the wrong questions.
As you correctly noted, ldapadd and ldapmodify are the same command. However, the syntax of an LDAP Add request is different from an LDAP Modify request. As Quanah already pointed out to you, you are trying to use some corrupted form of LDAP Modify syntax, but since the entry you want doesn't exist, you actually need to use LDAP Add.
The differences between these two are spelled out in the LDIF documentation.
from the docs
5.2.2. cn=moduleIf support for dynamically loaded modules was enabled when configuring slapd, cn=module entries may be used to specify sets of modules to load. Module entries must have the olcModuleList objectClass.
I don't have a cn=module dit, how do I create it?
On Wed, Jul 9, 2014 at 6:26 PM, Quanah Gibson-Mount <quanah@zimbra.com mailto:quanah@zimbra.com> wrote:
--On Wednesday, July 09, 2014 6:59 PM -0400 Greg Treantos <gtreanto@gmail.com <mailto:gtreanto@gmail.com>> wrote: >From the man pages ldapadd is just a hardlink to ldapmodify, but I tried and got the same error ldapadd -Y EXTERNAL -H ldapi:/// -v -f ldapMdynalist.ldif ldap_initialize( ldapi:///??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=__peercred,cn=external,cn=auth SASL SSF: 0 add olcModuleLoad: {0}/usr/lib64/openldap/membero__f.la <http://memberof.la> The above is invalid. I strongly advise you to read the documentation. Also, you should not be touching or creating any files inside the cn=config database.
I did use ldapadd and the ldap server is RHEL 7.
On Wed, Jul 9, 2014 at 7:02 PM, Howard Chu hyc@symas.com wrote:
Greg Treantos wrote:
I have read the documentation and cannot figure out how to create a new dit so I can add the module I need. If you can be more specific on what I should be looking for that would be great. But no where have I found that points how to create the cn=module{0} dit so it can be populated. I don't know maybe I'm asking the wrong questions.
As you correctly noted, ldapadd and ldapmodify are the same command. However, the syntax of an LDAP Add request is different from an LDAP Modify request. As Quanah already pointed out to you, you are trying to use some corrupted form of LDAP Modify syntax, but since the entry you want doesn't exist, you actually need to use LDAP Add.
The differences between these two are spelled out in the LDIF documentation.
from the docs
5.2.2. cn=moduleIf support for dynamically loaded modules was enabled when configuring slapd, cn=module entries may be used to specify sets of modules to load. Module entries must have the olcModuleList objectClass.
I don't have a cn=module dit, how do I create it?
On Wed, Jul 9, 2014 at 6:26 PM, Quanah Gibson-Mount <quanah@zimbra.com mailto:quanah@zimbra.com> wrote:
--On Wednesday, July 09, 2014 6:59 PM -0400 Greg Treantos <gtreanto@gmail.com <mailto:gtreanto@gmail.com>> wrote: >From the man pages ldapadd is just a hardlink to ldapmodify,but I tried and got the same error
ldapadd -Y EXTERNAL -H ldapi:/// -v -f ldapMdynalist.ldif ldap_initialize( ldapi:///??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=__peercred,cn=external,cn=auth
SASL SSF: 0 add olcModuleLoad: {0}/usr/lib64/openldap/membero__f.la <http://memberof.laThe above is invalid. I strongly advise you to read thedocumentation.
Also, you should not be touching or creating any files inside the cn=config database.-- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/
Greg Treantos gtreanto@gmail.com schrieb am 10.07.2014 um 00:35 in Nachricht
CAGuknmjROhn5ePOppcjdVaOEJC02iZJ+Ek+JcKq6ut78-H4OzA@mail.gmail.com:
I have read the documentation and cannot figure out how to create a new dit so I can add the module I need. If you can be more specific on what I should be looking for that would be great. But no where have I found that points how to create the cn=module{0} dit so it can be populated. I don't know maybe I'm asking the wrong questions.
from the docs
5.2.2. cn=module
If support for dynamically loaded modules was enabled when configuring slapd, cn=module entries may be used to specify sets of modules to load. Module entries must have the olcModuleList objectClass.
I don't have a cn=module dit, how do I create it?
Maybe use this sample: --- 5.2.2.3. Sample Entries
dn: cn=module{0},cn=config objectClass: olcModuleList cn: module{0} olcModuleLoad: /usr/local/lib/smbk5pwd.la
dn: cn=module{1},cn=config objectClass: olcModuleList cn: module{1} olcModulePath: /usr/local/lib:/usr/local/lib/slapd olcModuleLoad: accesslog.la olcModuleLoad: pcache.la ---
On Wed, Jul 9, 2014 at 6:26 PM, Quanah Gibson-Mount quanah@zimbra.com wrote:
--On Wednesday, July 09, 2014 6:59 PM -0400 Greg Treantos < gtreanto@gmail.com> wrote:
From the man pages ldapadd is just a hardlink to ldapmodify, but I tried and got the same error
ldapadd -Y EXTERNAL -H ldapi:/// -v -f ldapMdynalist.ldif ldap_initialize( ldapi:///??base ) SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 add olcModuleLoad: {0}/usr/lib64/openldap/memberof.la
The above is invalid. I strongly advise you to read the documentation.
Also, you should not be touching or creating any files inside the cn=config database.
--Quanah
--
Quanah Gibson-Mount Server Architect Zimbra, Inc.
Zimbra :: the leader in open source messaging and collaboration
-- Greg
openldap-technical@openldap.org
-
Greg Treantos -
Howard Chu -
Quanah Gibson-Mount -
Ulrich Windl