Re: Changing schema OID values in cn=config

2011-11-29 Thread Nick Milas
On 29/11/2011 12:44 πμ, Quanah Gibson-Mount wrote: I would suggest you file an ITS with this backtrace and the steps on how to reproduce it (the ldapmodify of the OIDs). I have filed ITS #7098 (http://www.openldap.org/its/index.cgi/Incoming?id=7098). Nick

CUCM search

2011-11-29 Thread W.Siebert
Hello, I'v implemented a OpenLDAP Metadirectory that proxying 2 Microsft AD targets. Cisco Unified Call Manager (CUCM) sends a rather simpy query: ((objectclass=user)(!(objectclass=Computer))) If CUCM connects AD server directly, all is OK, gets a search result. But sending this search to

Re: Possible ACL Issue while try to read Root DSE

2011-11-29 Thread Ondrej Kuznik
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/29/2011 09:13 AM, Axel Birndt wrote: ldapsearch -x -D -s base -b -h localhost You should expect a response exactly like this (unless your database suffix is set to ): ldapsearch -x -D -s base -b -h localhost # extended LDIF # # LDAPv3 #

Re: Possible ACL Issue while try to read Root DSE

2011-11-29 Thread Axel Birndt
Am 29.11.2011 10:10, schrieb Ondrej Kuznik: On 11/29/2011 09:13 AM, Axel Birndt wrote: You should expect a response exactly like this (unless your database suffix is set to ): ldapsearch -x -D -s base -b -h localhost ldapsearch -x -D -s base -b -h localhost # extended LDIF # # LDAPv3 #

Trust between two server

2011-11-29 Thread Raffael Sahli
Hi I have a huge openldap server and a small one with maybe 10 users. The small one contains it admistrator objects (or most of them are admins) and is complitly different from the huge one. So what I want is to include some userobjects or a specific basedn from the small one in the huge

Re: multi-byte utf8 characters in DNs

2011-11-29 Thread Michael Ströder
Chris Card wrote: So an example: slapdn -v -F */slapd.d 'mail=\c3\98U,dc=x,dc=y'DN: mail=\c3\98U,dc=x,dc=y check failed 21 (Invalid syntax) are there any changes that might affect this? I guess this fails because attribute type 'mail' has LDAP syntax IA5String which does not allow

RE: multi-byte utf8 characters in DNs

2011-11-29 Thread Chris Card
Chris Card wrote: So an example: slapdn -v -F */slapd.d 'mail=\c3\98U,dc=x,dc=y'DN: mail=\c3\98U,dc=x,dc=y check failed 21 (Invalid syntax) are there any changes that might affect this? I guess this fails because attribute type 'mail' has LDAP syntax IA5String which does not

Re: Security between server and client nodes.

2011-11-29 Thread Jayavant Patil
Mon, 28 Nov 2011 11:25:16 +0100 Raffael Sahli pub...@raffaelsahli.com wrote: Hi I think you mean SSL connection or the STARTTLS Layer...? Please read the manual http://www.openldap.org/doc/admin24/tls.html Ok. And tree security: On my server, a client user can only see his own object: Are you

Re: Security between server and client nodes.

2011-11-29 Thread Raffael Sahli
On 11/29/2011 01:56 PM, Jayavant Patil wrote: Mon, 28 Nov 2011 11:25:16 +0100 Raffael Sahli pub...@raffaelsahli.com mailto:pub...@raffaelsahli.com wrote: Hi I think you mean SSL connection or the STARTTLS Layer...? Please read the manual http://www.openldap.org/doc/admin24/tls.html Ok. And

Re: Read/Write Replication setup

2011-11-29 Thread benoit
2011/11/17 Jeffrey Crawford jeffr...@ucsc.edu I think you may actually want is slapo-translucent, Basically it's aproxy overlay with added local data on top of a bdb or hdb backend On Wed, Nov 16, 2011 at 8:27 AM, benoit ldap.ben...@gmail.com wrote: Hello Matheus, i don't want to propagate

CUCM search

2011-11-29 Thread W.Siebert
Hello, now I extended the schema and filter appears without of ?, but my problem still not solved: slapd[20876]: ber_get_next on fd 8 failed errno=0 (Success) slapd[20876]: connection_read(8): input error=-2 id=1001, closing. Nov 28 20:27:39 walrhel5 If I send the same search with various

Ldap+Nfsv4+kerberos *nix / *bsd puzzle.

2011-11-29 Thread Harry Coin
Hello group! Looking for guidance on an ldap+NFS4+Kerberos puzzle in a mixed OS local environment. Simple demo case, four computers on a little net. box 1: Running openlap server, kerberos KDC, kadmin, lets say it's running freebsd, doesn't matter. nfs server client. box 2: Linux box.

Re: Ldap+Nfsv4+kerberos *nix / *bsd puzzle.

2011-11-29 Thread Howard Chu
Harry Coin wrote: Hello group! Looking for guidance on an ldap+NFS4+Kerberos puzzle in a mixed OS local environment. Simple demo case, four computers on a little net. box 1: Running openlap server, kerberos KDC, kadmin, lets say it's running freebsd, doesn't matter. nfs server client. box