Re: biometric authentication

2011-11-14 Thread Howard Chu
Chris Lee wrote: Dear all, I am a newbie to OpenLDAP. I would like to know whether OpenLDAP can interface with other authentication method. For example, finger print authentication. OpenLDAP relies on SASL for pluggable authentication mechanisms. Since SASL is extensible, new mechs should

Re: MDB name

2011-11-14 Thread Pierangelo Masarati
On 11/14/2011 09:20 AM, Howard Chu wrote: 4. If it is a small amount of work, you might as well do it. Yeah, sounds about right. At this point, for lack of a better idea, I think mmdb may be different enough to distinguish it and also lend some more meaning to the name. This thread was too

Re: MDB distribution

2011-11-14 Thread Howard Chu
Brett @Google wrote: On Mon, Nov 14, 2011 at 3:20 PM, Howard Chu h...@symas.com mailto:h...@symas.com wrote: Brett @Google wrote: Sorry for the fuzzy logic :P, but : My thoughts for no: 1. The name will affect only the name of the backend module, which is

Re: biometric authentication

2011-11-14 Thread Chris Lee
Dear Howard, If the fingerprint authentication provides API, can it be invoked from OpenLDAP and how? Thanks in advance for all your helps. Best regards, Chris. Howard Chu wrote, On 2011-11-14 16:15: Chris Lee wrote: Dear all, I am a newbie to OpenLDAP. I would like to know whether

Re: About set LDAP passwd expires

2011-11-14 Thread Simone Piccardi
On 11/11/2011 03:10, Gary Jsz wrote: Hi,All I want set my ldap user's password expires in linux server. how can to do? or the LDAP service read the linux system's /etc/login.defs file? If you use (as almost all distributions are doing) the traditional posixAccount account approach, you

Re: About set LDAP passwd expires

2011-11-14 Thread Simone Piccardi
On 11/11/2011 03:31, Chris Jacobs wrote: Password Policy. The OpenLDAP Admin Guide and Google are your friends. That's good for LDAP authentication, but when you want to put linux users in LDAP then you need to have also to configure NSS and PAM to use it. And for most distribution nssov

Overlays syncrepl and smbk5pwd

2011-11-14 Thread Francesco Storti
Hi, I am using both syncrepl (for replication) and smbk5pwd (for password synchronisation between samba and ldap account) overlays. I have configured replication in the simplest way: a read-only producer that forwards updates to the provider thought updateref. If I change my password thought

Re: Overlays syncrepl and smbk5pwd

2011-11-14 Thread Simone Piccardi
On 14/11/2011 15:22, Francesco Storti wrote: Hi, I am using both syncrepl (for replication) and smbk5pwd (for password synchronisation between samba and ldap account) overlays. I have configured replication in the simplest way: a read-only producer that forwards updates to the provider thought

Re: Overlays syncrepl and smbk5pwd

2011-11-14 Thread Dan White
On 14/11/11 15:22 +0100, Francesco Storti wrote: Hi, I am using both syncrepl (for replication) and smbk5pwd (for password synchronisation between samba and ldap account) overlays. I have configured replication in the simplest way: a read-only producer that forwards updates to the provider

Re: biometric authentication

2011-11-14 Thread Dan White
Howard Chu wrote, On 2011-11-14 16:15: Chris Lee wrote: Dear all, I am a newbie to OpenLDAP. I would like to know whether OpenLDAP can interface with other authentication method. For example, finger print authentication. OpenLDAP relies on SASL for pluggable authentication mechanisms. Since

Re: trigger script on change to db

2011-11-14 Thread Marc Patermann
Eli, E.S. Rosenberg schrieb (13.11.2011 17:13 Uhr): I was wondering is it possible to set a slapd syncprov consumer to trigger a script when it receives changes to the db (updates of specific attributes). I think you might be able to replicate to a server instance with back-perl or back-shell

Re: About set LDAP passwd expires

2011-11-14 Thread Howard Chu
Simone Piccardi wrote: On 11/11/2011 03:31, Chris Jacobs wrote: Password Policy. The OpenLDAP Admin Guide and Google are your friends. That's good for LDAP authentication, but when you want to put linux users in LDAP then you need to have also to configure NSS and PAM to use it. And for most

Re: trigger script on change to db

2011-11-14 Thread Michael Ströder
E.S. Rosenberg wrote: I was wondering is it possible to set a slapd syncprov consumer to trigger a script when it receives changes to the db (updates of specific attributes). You might want to try something with a synclrepl consumer served by back-sock. But I think getting this right is almost

Re: trigger script on change to db

2011-11-14 Thread Howard Chu
Michael Ströder wrote: E.S. Rosenberg wrote: I was wondering is it possible to set a slapd syncprov consumer to trigger a script when it receives changes to the db (updates of specific attributes). You might want to try something with a synclrepl consumer served by back-sock. But I think

Re: trigger script on change to db

2011-11-14 Thread Michael Ströder
Howard Chu wrote: Michael Ströder wrote: E.S. Rosenberg wrote: I was wondering is it possible to set a slapd syncprov consumer to trigger a script when it receives changes to the db (updates of specific attributes). You might want to try something with a synclrepl consumer served by

Search access does not return any result

2011-11-14 Thread sim123
Hi All, I am playing with access controls on openldap 2.4.26, I have a user with search access on everything access to * by anonymous auth by dn=uid=102,ou=system,dc=example,dc=com search And when I perform search I get nothing ldapsearch -H ldap://testldap:389; -D