openldap user login

2011-12-05 Thread Jayavant Patil
Hi, I am using openldap-2.4.19-4 on fedora 12 machine. In order to protect roobindpw, I removed that from /etc/ldap.conf and written it in /etc/ldap.secret with root access only. Now, /etc/ldap.conf file (with permissions 644) contents w.r.t. bind are as follows: # The distinguished name to

Re: openldap user login

2011-12-05 Thread Raffael Sahli
Hi This means that pam_ldap is working but nss_ldap isn't (Restart the nscd damon, if installed..). Check your auth log on your fedora. You should see some lib_nss log messages. On 12/05/2011 11:48 AM, Jayavant Patil wrote: Hi, I am using openldap-2.4.19-4 on fedora 12 machine. In

Re: LDAP query to Active Directory backend

2011-12-05 Thread Khaled Blah
I finally found the solution to the problem. After I set the LDAP_OPT_PROTOCOL_VERSION to v3 using ldap_set_option the resulting characters were encoded in UTF-8. D'Oh! It seems that AD makes a difference here when other servers assume v3 to be the standard. I hope to be helping someone with a

ldap_add_s - mods.mod_values empty

2011-12-05 Thread Sean Ryan
Hello, Firstly, I hope this is the correct list Relevant versions: O/S: Debian Etch (server) - Debian Lenny (client) Slapd : OpenLDAP: slapd 2.3.30 Client libs : libldap2 (debian) I'm seeing some problems using the ldap_add_s function call - For some reason the mods.mod_values array *appears*

slapd hanging - meta backend - Solaris 10

2011-12-05 Thread Lincoln Souzek
Hello, I've seen a couple of instances where slapd becomes unresponsive, apparently because the threads are waiting on a backend meta DB. We're running slapd 2.4.23 on Solaris 10 (update 11/06). We have 128 threads configured and when I attach with truss, I see 130 allocated, most of which look

Re: memberof overlay deployment

2011-12-05 Thread Asplund Marko
Masarati wrote: slapo-memberof(5) does not support tool mode; in order to populate the memberOf attribute of an existing database you need to use ldapadd(1). You could, for example, dump your group entries, remove them, and re-add them via ldapadd(1). Thanks for clearing that out. Could

Re: memberof overlay deployment

2011-12-05 Thread Howard Chu
Asplund Marko wrote: Masarati wrote: slapo-memberof(5) does not support tool mode; *No* overlays support tool mode. That's fundamental to the design. in order to populate the memberOf attribute of an existing database you need to use ldapadd(1). You could, for example, dump your group

Re: slapd hanging - meta backend - Solaris 10

2011-12-05 Thread Quanah Gibson-Mount
--On Monday, December 05, 2011 6:09 PM +0100 Lincoln Souzek lsou...@gmail.com wrote: Hello, I've seen a couple of instances where slapd becomes unresponsive, apparently because the threads are waiting on a backend meta DB.  We're running slapd 2.4.23 on Solaris 10 (update 11/06).  We have 128