eDirectory - openLDAP password synchronization with jdap

2012-01-16 Thread Martin Anastasov
Hi, I'm trying to synchronize passwords from eDirectory to openLDAP using jdap. The passwords in eDirectory are not stored in plain text i.e. Secure Login SSO is used (protocom-SSO-Entries in ldiff flie). In ldiff are also present: nDSPKIUserCertificateInfo, userCertificate. Is it possible to do

Re: Heavy load problems

2012-01-16 Thread Angel L. Mateo
El 13/01/12 22:43, Philip Guenther escribió: On Fri, 13 Jan 2012, Angel L. Mateo wrote: ... The only difference between the old and the new farm is that the old farm was replicating information with slurpd. The new one is a multimaster configuration. The configuration of the replica is:

Re: Heavy load problems

2012-01-16 Thread Angel L. Mateo
El 13/01/12 21:34, Quanah Gibson-Mount escribió: --On Friday, January 13, 2012 10:55 AM +0100 Angel L. Mateo ama...@um.es wrote: Now we have migrated to two openldap (2.4.21, ubuntu lucid 64btis) farms. One with 4 nodes (xen vm with two cpu cores, Xeon E5450 3GHz, 2 GB of RAM) for the

syncprov_db_open: invalid config, lastmod must be enabled

2012-01-16 Thread Angel L. Mateo
Hi, I'm trying to configure chain overlay in a ldap replica consumer. My final purpose is that if this node receives an update, it directly tries to make it in the provider node, instead of returning the referrral. Is that possible? I think so... But I have a problem with the

Re: syncprov_db_open: invalid config, lastmod must be enabled

2012-01-16 Thread Dieter Klünter
Am Mon, 16 Jan 2012 11:03:25 +0100 schrieb Angel L. Mateo ama...@um.es: Hi, I'm trying to configure chain overlay in a ldap replica consumer. My final purpose is that if this node receives an update, it directly tries to make it in the provider node, instead of returning the

Re: syncprov_db_open: invalid config, lastmod must be enabled

2012-01-16 Thread Angel L. Mateo
I have found the problem. It is that chain configuration has to be put before any backend configuration. -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica

Extending smbk5pwd overlay

2012-01-16 Thread Clément OUDOT
Hello, I am interested in extending the features of smbk5pwd overlay to manage more password mechanisms: * Digest MD5 for authentication (see http://en.wikipedia.org/wiki/Digest_access_authentication): we will have MD5(user:domain:password), with configuration for user attribute to use and the

Re: Extending smbk5pwd overlay

2012-01-16 Thread Simone Piccardi
On 01/16/2012 02:43 PM, Clément OUDOT wrote: Hello, I am interested in extending the features of smbk5pwd overlay to manage more password mechanisms: * Digest MD5 for authentication (see http://en.wikipedia.org/wiki/Digest_access_authentication): we will have MD5(user:domain:password), with

Re: Extending smbk5pwd overlay

2012-01-16 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 16-01-2012 12:27, Simone Piccardi wrote: On 01/16/2012 02:43 PM, Clément OUDOT wrote: I am interested in extending the features of smbk5pwd overlay to manage more password mechanisms: * Digest MD5 for authentication (see

Re: syncprov_db_open: invalid config, lastmod must be enabled

2012-01-16 Thread Howard Chu
Dieter Klünter wrote: Am Mon, 16 Jan 2012 11:03:25 +0100 schrieb Angel L. Mateoama...@um.es: Hi, I'm trying to configure chain overlay in a ldap replica consumer. My final purpose is that if this node receives an update, it directly tries to make it in the provider node, instead of

memberOf and glued databases

2012-01-16 Thread Marc Patermann
Hi, short question first: Is overlay memberOf supposed to work with glued databases in any direction? I tried with 2.4.28 and get the following results: slapd.conf with two databases 1. step --- This is simple. MemberOf overlay only in one database ou=groups,ou=foo,ou=bar

Re: syncprov_db_open: invalid config, lastmod must be enabled

2012-01-16 Thread Angel L. Mateo
El 16/01/12 17:04, Howard Chu escribió: The chain overlay has to be configured in the global part, prior to any database declaration. That might be true, but the actual error here is that the syncprov overlay has been included even though there is no need for it. If it is not necessary, how

Re: How to enable monitoring in OpenLdap with cn=config Backend

2012-01-16 Thread Axel Birndt
Am 15.01.2012 09:13, schrieb Dieter Klünter: i tried now to import the config from above with an ldif-file. abirndt@ubuntunb:~/tmp/openldap_2axels-company$ 0_ldapadd_sample.bash cn_Monitor.ldif Importing the following ldif-File(s): cn_Monitor.ldif Enter LDAP Password: adding new

Re: How to enable monitoring in OpenLdap with cn=config Backend

2012-01-16 Thread Mauricio Tavares
On Mon, Jan 16, 2012 at 2:31 PM, Axel Birndt towerl...@gmx.de wrote: Am 15.01.2012 09:13, schrieb Dieter Klünter: i tried now to import the config from above with an ldif-file.  abirndt@ubuntunb:~/tmp/openldap_2axels-company$ 0_ldapadd_sample.bash  cn_Monitor.ldif  Importing the

Re: How to enable monitoring in OpenLdap with cn=config Backend

2012-01-16 Thread Axel Birndt
Hi @All, Am 16.01.2012 21:06, schrieb Mauricio Tavares: abirndt@ubuntunb:/etc/init.d$ sudo ./slapd restart Stopping OpenLDAP: slapd. Starting OpenLDAP: slapd - failed: @(#) $OpenLDAP: slapd 2.4.21 (Nov 14 2011 20:35:32) $

The problem of BINDDN/BINDPW in ldap.conf

2012-01-16 Thread Tianyin Xu
Hi, all, I'm using Ubuntu 10.04 and LDAP 2.4.23. I'm having difficulty with the basic binding. I don't want to allow anonymous ldapsearch on the LDAP server so I specify a dn and password for the bind. If I use the following parameters for ldapsearch like ldapsearch -b dc=ucsd,dc=edu

Re: The problem of BINDDN/BINDPW in ldap.conf

2012-01-16 Thread Howard Chu
Tianyin Xu wrote: Hi, all, I'm using Ubuntu 10.04 and LDAP 2.4.23. I'm having difficulty with the basic binding. I don't want to allow anonymous ldapsearch on the LDAP server so I specify a dn and password for the bind. If I use the following parameters for ldapsearch like

Re: The problem of BINDDN/BINDPW in ldap.conf

2012-01-16 Thread Tianyin Xu
thx, Howard! that makes sense! but if bindpw is not an OpenLDAP directive, why OpenLDAP is so quite to accept it? It should tell the configuration errors in the conf file, right? :P btw, do you know what are those configuration files using BINDPW for? actually I'm trying to reply the

Re: syncprov_db_open: invalid config, lastmod must be enabled

2012-01-16 Thread Dieter Klünter
Am Mon, 16 Jan 2012 20:11:02 +0100 schrieb Angel L. Mateo ama...@um.es: El 16/01/12 17:04, Howard Chu escribió: The chain overlay has to be configured in the global part, prior to any database declaration. That might be true, but the actual error here is that the syncprov overlay has

Re: The problem of BINDDN/BINDPW in ldap.conf

2012-01-16 Thread Dieter Klünter
Am Mon, 16 Jan 2012 17:59:52 -0800 schrieb Tianyin Xu t...@cs.ucsd.edu: thx, Howard! that makes sense! but if bindpw is not an OpenLDAP directive, why OpenLDAP is so quite to accept it? It should tell the configuration errors in the conf file, right? :P btw, do you know what are those