Re: Chinese characters in mail search causes failed assertion in slapd

2012-02-07 Thread Pierangelo Masarati
On 02/07/2012 08:56 AM, Dieter Klünter wrote: Am Tue, 07 Feb 2012 13:10:36 +1100 schrieb Alfie Johnalf...@opera.com: Hi guys, When searching for Chinese names in the to: field under Thunderbird, I get an assertion failing in slapd. I see that this is because the mail attribute in the default

dynlist and DSA IT Control

2012-02-07 Thread Angel L. Mateo
Hello, I have an openldap using dynlist to get some attributes of the entries. When I manually performs search, I can get these attributes (obtained through the dynlist overlay) without any problem, but when an application (a CAS server to be precise) tries to do the same search,

Re: Got error while enabling SASL

2012-02-07 Thread Gaurav Gugnani
Hello All, i was working on this problem and figured out that ldapdb plugin auxprop is missing. /u01/app/openldap/product/2.4.26/etc/openldappluginviewer Installed SASL (server side) mechanisms are: CRAM-MD5 ANONYMOUS DIGEST-MD5 PLAIN LOGIN EXTERNAL ... Installed auxprop mechanisms are:

Re: Got error while enabling SASL

2012-02-07 Thread Gaurav Gugnani
Hi All, I hope now i'm only 1 step far: I've enabled the ldapdb auxprop plugin. /u01/app/openldap/product/2.4.26/etc/openldappluginviewer -a Installed auxprop mechanisms are: ldapdb sasldb List of auxprop plugins follows Plugin ldapdb , API version: 4 supports store: yes Plugin

Re: Chinese characters in mail search causes failed assertion in slapd

2012-02-07 Thread Pierangelo Masarati
On 02/07/2012 12:57 PM, Alfie John wrote: On Tue, Feb 7, 2012, at 09:14 AM, Pierangelo Masarati wrote: In addition, I suggest you check whether the problem persists with the latest release; in case, please file an ITS following instructions here http://www.openldap.org/faq/data/cache/56.html.

Re: Non-personal mail accounts

2012-02-07 Thread anax
You may add the objectClass mailrecipient to accounts or posixaccounts. otherwise, we use objectclass qmail (to define mailboxes) qmailControl (to define acceptable domains) to define our mail environment. you may find the corresponding schemas in the Internet. suomi On 02/07/2012 09:39 AM,

Re: Chinese characters in mail search causes failed assertion in slapd

2012-02-07 Thread Dieter Klünter
Am Tue, 07 Feb 2012 22:57:31 +1100 schrieb Alfie John alf...@opera.com: On Tue, Feb 7, 2012, at 09:14 AM, Pierangelo Masarati wrote: In addition, I suggest you check whether the problem persists with the latest release; in case, please file an ITS following instructions here

ldapmodify is crashing the slapd process

2012-02-07 Thread Daniel Savard
Hi everyone, I am trying to do a number of changes into the configuration database using the following ldif entries: dn: cn=config changetype: modify add: olcTLSCACertificatePath olcTLSCACertificatePath: /etc/ssl/certs - add: olcTLSCertificateFile olcTLSCertificateFile:

Is putting slapd into read-only mode sufficient for backups?

2012-02-07 Thread Brian Reichert
I'm curious if the tactics described in this thread are currently sufficient: http://www.openldap.org/lists/openldap-software/200608/msg00152.html The thread overall suggests the tried-and-true tactic of using slapcat to extract and LDIF file, to be imported later. But, our application's DB

Re: ldapmodify is crashing the slapd process

2012-02-07 Thread Daniel Savard
Le mardi 07 février 2012 à 16:09 -0500, Daniel Savard a écrit : (...) add: olcTLSCipherSuite olcTLSCipherSuite: AES256 (...) Seems the cipher list is the offending value which cause the crash. I did start the slapd process with the debug flag and got the following message (I did try with HIGH

Re: ldapmodify is crashing the slapd process

2012-02-07 Thread Quanah Gibson-Mount
--On Tuesday, February 07, 2012 5:05 PM -0500 Daniel Savard dsav...@cids.ca wrote: Le mardi 07 février 2012 à 16:09 -0500, Daniel Savard a écrit : (...) add: olcTLSCipherSuite olcTLSCipherSuite: AES256 (...) Seems the cipher list is the offending value which cause the crash. I did start the

Re: Chinese characters in mail search causes failed assertion in slapd

2012-02-07 Thread Howard Chu
Alfie John wrote: On Tue, Feb 7, 2012, at 11:34 AM, Charles T. Brooks wrote: Non-english character sets are going to become part of hostnames and DNS. That's inevitable. Mail addresses are based on DNS hostnames. Ergo, mail attributes will one day need to support all possible characters.

Re: Password-less operation

2012-02-07 Thread Quanah Gibson-Mount
--On Tuesday, February 07, 2012 6:22 PM -0500 Jean-Luc Wasmer openl...@2012.jl.wasmer.ca wrote: Hi, The user db on my system is stored in LDAP and integrated with PAM and NSS. The LDAP db also contain address book data for each user. I would like to be able to call ldap utilities (e.g.

Re: ldapmodify is crashing the slapd process

2012-02-07 Thread Daniel Savard
Le mardi 07 février 2012 à 15:23 -0800, Quanah Gibson-Mount a écrit : --On Tuesday, February 07, 2012 5:05 PM -0500 Daniel Savard dsav...@cids.ca wrote: (...) I would first upgrade to a more recent release. I would also generally advise using something more secure than GnuTLS, such as