Re: Some openldap 2.4 questions

2010-01-15 Thread Alex Samad
On Fri, Jan 15, 2010 at 08:44:47AM +0100, Radosław Antoniuk wrote: On Fri, Jan 15, 2010 at 2:01 AM, Howard Chu h...@symas.com wrote: Radosław Antoniuk wrote: Hi, Three quick issues about slapd 2.4. 1. I'm setting up a syncrepl replication. In the process of testing, I had

Re: Openldap installation problem

2010-01-15 Thread Radosław Antoniuk
2010/1/15 Murat Uğur Eminoğlu mu...@murat.ws On 01/15/2010 12:33 AM, Michael Ströder wrote: Murat Uğur Eminoğlu wrote: Thanks all replys. But i have problem now. debian 5, dpkg-buildpackage -b errors cp: cannot stat `./debian/tmp/etc/ldap/schema': No such file or directory

Re: Some openldap 2.4 questions

2010-01-15 Thread Radosław Antoniuk
The thing is, that I cannot delete any of them because cn=config does not support delete operation. I have been able to delete (I had the same problem as you). but i used the rootdn of the config db Hi Alex, Hmm, that's interesting. RooDN of the configdb? you mean

Re: Server-Side Sort Overlay ordering problems

2010-01-15 Thread Edward Capriolo
Diego, You and I have the same issue. UID and CN are not in the schema they are compiled into LDAP some how, so there is no way to apply an ordering rule. I can not find if this is possible, or what is involved in making it happen. As you can see uid is commented in the schema file as is cn

Re: how to use ipv6 addresses in olcaccess statements

2010-01-15 Thread Hallvard B Furuseth
Alex Samad writes: I am trying to build a olcaccess statement and I am wondering how to implement a ipv6 network I haven't tried, but a look at slapd.access(5) and aclparse.c suggests by peername.ipv6=address%mask where address and mask are hex IPv6 addresses. Default mask is

Re: Server-Side Sort Overlay ordering problems

2010-01-15 Thread Quanah Gibson-Mount
--On Friday, January 15, 2010 12:06 PM -0500 Edward Capriolo edlinuxg...@gmail.com wrote: Diego, You and I have the same issue. UID and CN are not in the schema they are compiled into LDAP some how, so there is no way to apply an ordering rule. I can not find if this is possible, or what is

Re: Some openldap 2.4 questions

2010-01-15 Thread Howard Chu
Radosław Antoniuk wrote: *Clearly* the provider SHOULD provide information, if it has pushed all the updates to the slaves. Ok, your excuse is that this is due to the fact, that the provider does not keep track of slaves. Ergo? The slaves are wrongly implemented. And *they* should provide the

Re: Some openldap 2.4 questions

2010-01-15 Thread Bill MacAllister
--On Saturday, January 16, 2010 01:40:30 AM +0100 Radosław Antoniuk radek.anton...@gmail.com wrote: Answers like those, make me think that open-source is a waste of time comparing to paid solutions (even though I am a strong evangelist of Debian and other open source solutions, which I think

Re: Auth access for search-based mappings?

2010-01-15 Thread Jaap Winius
Hi all, My OpenLDAP 2.4 test system uses Kerberos, SASL and GSSAPI. I've got person objects located in two different org. units and want to search both of them for a potential match, so I included these two statements in slapd.conf: authz-regexp

Re: Auth access for search-based mappings?

2010-01-15 Thread Howard Chu
Jaap Winius wrote: Hi all, My OpenLDAP 2.4 test system uses Kerberos, SASL and GSSAPI. I've got person objects located in two different org. units and want to search both of them for a potential match, so I included these two statements in slapd.conf: authz-regexp