Re: Enable/Disable user account in openLDAP

2011-11-22 Thread Christian Manal
Am 21.11.2011 18:52, schrieb Michael Ströder: Christian Manal wrote: As for custom code, I already need that to change the other attributes I mentioned, plus some from a homebrew schema. So, at least for my environment, it doesn't really matter. You can make the other attributes invisible

Using a bitwise filter

2011-11-22 Thread W.Siebert
Hello, I'v implemented a OpenLDAP Metadirectory that proxying 2 Microsft AD targets. Some attributes on Active Directory objects are composed of bitwise flags. Using a bitwise operator is necessary to return only objects that match a particular bit being set. To query Active Directory for user

proxy authentication

2011-11-22 Thread LALOT Dominique
I am coming back on a thread as there was no answer master or replica (managed by a central team) /\ | (proxied

Limiting host access

2011-11-22 Thread Juergen.Sprenger
Hi, You might want to check out nisNetgroup functionality. 1. add rfc2307bis to Your nis.schema: #attributetype ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple' # DESC 'Netgroup triple' # SYNTAX 1.3.6.1.1.1.0.0 ) # rfc2307bis attributetype ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple'

Re: proxy authentication

2011-11-22 Thread Howard Chu
LALOT Dominique wrote: I am coming back on a thread as there was no answer master or replica (managed by a central team) /\

Re: Using a bitwise filter

2011-11-22 Thread Michael Ströder
w.sieb...@t-systems.com wrote: ((objectclass=user)(!(objectclass=Computer))(!(*UserAccountControl:1.2.840.113556.1.4.803:=2*))) If I connect AD server directly, all is OK, I get a search result. But sending this search to Meta, does not work. *Log:* slapd[22461]: conn=1004 op=3 SRCH

Re: Enable/Disable user account in openLDAP

2011-11-22 Thread Buchan Milne
On Monday, 21 November 2011 16:17:33 Christian Manal wrote: Am 21.11.2011 14:25, schrieb Jayavant Patil: Hi, I am using openldap-2.4.19-4 on fedora 12 machine. Does anybody know how to enable/disable a user account in openLDAP? I know ppolicy overlay but I don't require

Rewrite inside a database backend ?

2011-11-22 Thread Mathieu MILLET
Hello, I was trying to enable rewrite of partial DN inside a database backend context, but I would like to not add a specific context for this rewrite. Slapo-rwm's man says that this overlay is intended for back-ldap and back-meta, but doesn't say it is restricted to these backends. Is this

Re: Enable/Disable user account in openLDAP

2011-11-22 Thread Christian Manal
Am 22.11.2011 11:25, schrieb Buchan Milne: On Monday, 21 November 2011 16:17:33 Christian Manal wrote: Am 21.11.2011 14:25, schrieb Jayavant Patil: Hi, I am using openldap-2.4.19-4 on fedora 12 machine. Does anybody know how to enable/disable a user account in openLDAP? I know

Re: Limiting host access

2011-11-22 Thread Jayavant Patil
On Mon, Nov 21, 2011 at 3:39 PM, Jayavant Patil jayavant.pati...@gmail.comwrote: Mon, Nov 21, 2011 at 1:34 PM Buchan Milne bgmi...@staff.telkomsa.net wrote: One method would be to add the hostObject objectclass, from ldapns.schema (shipped with pam_ldap source), and add a host attribute

W.: Newbie: can't connect and enable logging

2011-11-22 Thread cfisi
Hi list, I installed OpenLdap on Debian Squeeze. When trying to connect to Openldap jxplorer just says: Opening connection to ldap://192.168.1.102:389;. Nothing more happens. How can I enable logging (in Openldap or jxplorer) and above all how can I connect? Thank you in advance. - Chris

Re: Using a bitwise filter

2011-11-22 Thread Pierangelo Masarati
On 11/22/2011 10:47 AM, Michael Ströder wrote: w.sieb...@t-systems.com wrote: ((objectclass=user)(!(objectclass=Computer))(!(*UserAccountControl:1.2.840.113556.1.4.803:=2*))) If I connect AD server directly, all is OK, I get a search result. But sending this search to Meta, does not work.

Re: W.: Newbie: can't connect and enable logging

2011-11-22 Thread John Tobin
Logging is a few choices: I run suse 12.1 milestone 5 [there are some dependencies here...] * Either start the slapd deamon with debugging on [-d] and a reasonable value [-1 : is everything I think] : slapd startup is discussed in the admin manual. In /etc/init.d I just have a file

Re: W.: Newbie: can't connect and enable logging

2011-11-22 Thread John Tobin
Ah, And hang in there, I still don't have all the options I want working. But the main part of the code works. tob On 11/22/11 12:56 PM, John Tobin jto...@po-box.esu.edu wrote: Logging is a few choices: I run suse 12.1 milestone 5 [there are some dependencies here...] * Either start the

Re: Enable/Disable user account in openLDAP

2011-11-22 Thread Nick Milas
In many cases, I guess we could also just save a backup of the account (e.g. in ldif form) and just delete it. The downside is that, if there are entries referencing that account, they would remain orphaned and we would have to make sure that such entries - if there are any - are also handled

Re: OpenLDAP syncrepl woes

2011-11-22 Thread Jeffrey Crawford
On Thu, Nov 17, 2011 at 11:47 PM, Howard Chu h...@symas.com wrote: Jeffrey Crawford wrote: On Thu, Nov 17, 2011 at 9:21 PM, Howard Chuh...@symas.com  wrote: Jeffrey Crawford wrote: On Thu, Nov 17, 2011 at 5:50 PM, Howard Chuh...@symas.com    wrote: There ought to be other error messages

Re: OpenLDAP syncrepl woes

2011-11-22 Thread Quanah Gibson-Mount
--On Tuesday, November 22, 2011 5:50 PM -0800 Jeffrey Crawford jeffr...@ucsc.edu wrote: Starting slapd with the -c option isn't working or I'm using the wrong combination. man slapadd. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc.