meta directory backend and rewriting option '|'

2011-01-27 Thread Lehnert, Hartmut
Hello! I have a question concerning the pipe option '|' when using the meta directory backend and rewriting. In the manual pages the '|' option is marked as not implemented. Does this reflect the actual state of the software or has somebody just forgotten to update the man page? Regards, Hartmut

openldap memberof attribute

2011-01-27 Thread Vincent Li
Hi, I am doing remote authentication using OpenLDAP to login BIGIP, BIGIP has a feature called remoterole to search attribute 'memberof' from LDAP server and once found the attribute, assign the remote user a role defined in various groups like admin, operator... the feature works for Active

deleting schema elements from cn=config

2011-01-27 Thread Tim Gustafson
Hi, I'm trying to understand how to delete a schema element. I'm running slapd 2.4.23 on FreeBSD 8.1. When I try to run ldapdelete: ldapdelete -H ldap://localhost -D uid=tjg,cn=config -W -x 'cn={7}java,cn=schema,cn=config' I get the following in the log file: -- daemon: read

Re: openldap memberof attribute

2011-01-27 Thread Michael Ströder
Vincent Li wrote: I couldn't find 'memberof' attribute in OpenLDAP schema, so I created the 'memberof' attribute in core.schema as below: The overlay memberof is what you're looking for. man 5 slapo-memberof Ciao, Michael.

MemberOf attribute not being returned

2011-01-27 Thread Mark Cairney
Hi, I'm sure this was working in the past on this server but Im now not getting anything returned when I request the memberOf attribute. I compiled OpenLDAP 2.4.23 with the following flags: ./configure --prefix=/usr/local/authz --enable-meta --enable-ldap --enable-bdb --enable-monitor

RE: MemberOf attribute not being returned

2011-01-27 Thread Mark Cairney
Nevermind, I think I know what's happening. My user account was updated on our current live server running OpenLDAP 2.3 which doesn't have the MemberOf overlay. When this change was applied using syncrepl the memberOf field must have been removed. I'll take the old server out of the syncrepl

Re: MemberOf attribute not being returned

2011-01-27 Thread Howard Chu
Mark Cairney wrote: Hi, I'm sure this was working in the past on this server but Im now not getting anything returned when I request the memberOf attribute. I compiled OpenLDAP 2.4.23 with the following flags: ./configure --prefix=/usr/local/authz --enable-meta --enable-ldap --enable-bdb

Re: MemberOf attribute not being returned

2011-01-27 Thread Mark Cairney
Warning duly noted. Lessing the files in question seemed like the best way of providing a concise description of what configuration I had and where in the config it lay. As it stands I answered my question anyway. Kind regards, Mark On 27 Jan 2011, at 12:16, Howard Chu wrote: Mark Cairney

slapo-cache and searches by dynlist (with !)

2011-01-27 Thread Angel L. Mateo
Hello, I'm trying to use pcache overlay to cache queries done by dynlist overlay. This is the configuration I have: database hdb suffix userSuffix ... overylay dynlist dynlist-attrset labeledURIObject labeledURI # This is because, data obtained by dynlist is in another ldap directory