Re: Syncrepl SSL fail

2011-10-18 Thread Michael Ströder
Philip Guenther wrote: Using 'SSL' as a shorthand for negotiate on connect and 'TLS' for upgrade from clear is poor naming, as the choice of method is orthogonal to the protocol version. Glad someone else is also trying to avoid the use of such fuzzy terms in this context.

Re: syncrepl provider not working after upgrade to 2.4.26

2011-10-18 Thread Nick Milas
On 17/10/2011 9:52 μμ, Nick Milas wrote: I upgraded with the same configuration to v2.4.26 and provider is not working Hmm, actually I changed a couple of things: 1. I am now using a different openldap RPM package (with different paths etc.); This should not be important, because I have

Re: syncrepl provider not working after upgrade to 2.4.26

2011-10-18 Thread Marc Patermann
Nick, Nick Milas schrieb (18.10.2011 08:07 Uhr): # Load dynamic backend modules: modulepath /usr/local/openldap/lib64 could it be that you have to load some modules here? Look at the directory for what is in there. Marc

Overlays : Cache - Entry - AttributeDescription

2011-10-18 Thread Johan Jakus
Hi everyone, I’m still working on my overlay for an OpenLDAP server, and I’ve a few questions, I hope you could help me with: 1. In my overlay, I search for the attribute of a parent (recursively) and then, I return it in the response using the “attr_merge” function as used in the

Re: Syncrepl SSL fail

2011-10-18 Thread Howard Chu
Philip Guenther wrote: Next: the fact that you need tls_reqcert=never for TLS negotiation to succeed strongly suggests the problem is either a) the subject and subjectAltName of the cert don't match the hostname in the URL, OR b) the client doesn't have the self-signed CA cert at the root of

What's the java equivalent of ldap_set_option( NULL, LDAP_OPT_X_TLS_CACERTDIR, cert_path)?

2011-10-18 Thread daisy.wu
Hi, OpenLDAP developers, I have been able to successfully write a simple C program using the OpenLDAP C-SDK to establish connection to Microsoft Active Directory Server over SSL. In my test program, I call ldap_set_option( NULL, LDAP_OPT_X_TLS_CACERTDIR, cert_path) to set the path to a

SLAPI plugins do not load

2011-10-18 Thread Dimitri
Hi, Seems like loading SLAPI plugins is broken. I tried to play with addrdnvalues.c from the distribution, compiled it like it was recommended in the README: gcc -shared -I../../../include -Wall -g -o libaddrdnvalues-plugin.so addrdnvalues.c and tried to load from slapd.conf: plugin

Re: SLAPI plugins do not load

2011-10-18 Thread Aaron Richton
On Wed, 19 Oct 2011, Dimitri wrote: potentially unresolved symbols) does not help. libslapi.so is in the library path. Statically linked slapd (with slapi_, ldap_ and ber_ functions) works the same way. Any suggestions? Set your dynamic linker to debugging mode(s), and see if you can get a

Re: SLAPI plugins do not load

2011-10-18 Thread Dimitri
Set your dynamic linker to debugging mode(s), and see if you can get a clue as to what precisely is going wrong with the dlopen()? Matter is, OpenLDAP loads SLAPI plugins (as well as backend modules) with the help of libtools' ltdl library, a cross-platform wrapper over platform specific

Re: What's the java equivalent of ldap_set_option( NULL, LDAP_OPT_X_TLS_CACERTDIR, cert_path)?

2011-10-18 Thread Brian Reichert
On Tue, Oct 18, 2011 at 07:28:17PM -0400, daisy...@emc.com wrote: I am trying to write a Java LDAP client program using Novell's JLDAP to connect to Microsoft Active Directory server, over SSL. I would like to use my current cert_path (listed above) to establish LDAP SSL connection, in Java.