Re: GnuTLS / OpenSSL certificates compatibilty

2012-02-10 Thread Howard Chu
Daniel Savard wrote: Le jeudi 09 février 2012 à 23:21 +0100, rey sebastien a écrit : Hi, One or two question about certificate compatibility, I have self signed certificate generated by openSSL, and the official package of openldap in Ubuntu is compilated with gnutls library. Do you think this

Re: GnuTLS / OpenSSL certificates compatibilty

2012-02-10 Thread rey sebastien
Le jeu. 09 févr. 2012 23:53:25 CET, Daniel Savard a écrit : Le jeudi 09 février 2012 à 23:21 +0100, rey sebastien a écrit : Hi, One or two question about certificate compatibility, I have self signed certificate generated by openSSL, and the official package of openldap in Ubuntu is compilated

Re: Syncreplication configuration - olcSyncProvConfig no such objectClass

2012-02-10 Thread Nick Milas
On 10/2/2012 1:52 μμ, Valentin Bud wrote: Hello Community, I am trying to setup LDAP replication using the syncrepl overlay. I am using Debian Squeeze up to date as of today. ... I have searched in the schemas for olcSyncProvConfig objectClass but it is no where to be found. What do you

Re: Is putting slapd into read-only mode sufficient for backups?

2012-02-10 Thread Buchan Milne
On Friday, 10 February 2012 01:04:09 Hallvard B Furuseth wrote: Getting back to how to speed up restore: If you do move to slapcat/slapadd, note that tuning slapd as described in the Guide speeds up slapadd a lot, if you have not already done that. So does the -q flag to slapadd.

Simple bind error in CAS-Openldap authentication.

2012-02-10 Thread Darouichi, Aziz
Hi, I am trying to use CAS-Openldap authentication for a local application. At this point I am not sure if this error is a CAS problem or Openldap: This is the error in catalina.out: WHAT: simple bind failed: ldap1.curry.edu:389; nested exception is javax.naming.CommunicationException:

Migration of old LDAP / old schema to new release of openLDAP and new GOSA schema!

2012-02-10 Thread rey sebastien
Hi, here the step i begin to make a clean migration between ldap(s) with different version of gosa schema : a ) I export all my users from old ldap + old gosa 2.6.2 into a backup ldif file backup.ldif, b) I create a new openLdap (last release version) on a server wich run with all the new

Re: Is putting slapd into read-only mode sufficient for backups?

2012-02-10 Thread Quanah Gibson-Mount
--On Friday, February 10, 2012 5:05 PM +0200 Buchan Milne bgmi...@staff.telkomsa.net wrote: If you checkpoint, and you backup all the database files (including transaction log files) in the correct order, you should not need to db_recover (as database recovery can occur at a later time, if it

Re: GnuTLS / OpenSSL certificates compatibilty

2012-02-10 Thread Quanah Gibson-Mount
--On Friday, February 10, 2012 10:18 AM +0100 rey sebastien reyma...@gmail.com wrote: Ok, thanks for answer, It's really silly to have an official version with GnuTLS if isn't functionnal :( GnuTLS is fairly buggy, and also has serious known security issues. GnuTLS support was added at

Re: Help with Solaris LDAP client (how to make client read shadow information)

2012-02-10 Thread NetNinja
Can you show the output of ldapclient list command and the ldif files you used to add the solaris client to the LDAP server. On Thu, Feb 9, 2012 at 8:32 PM, curious penguin pepe.the.b...@gmail.com wrote: Hi, I have ldap clients on two different OS platforms, Solaris and Linux. When

Re: Is putting slapd into read-only mode sufficient for backups?

2012-02-10 Thread Brian Reichert
On Fri, Feb 10, 2012 at 09:35:12AM +0200, Buchan Milne wrote: On Wed, Feb 08, 2012 at 12:55:34PM +0200, Buchan Milne wrote: On Thursday, 9 February 2012 21:00:36 Brian Reichert wrote: FWIW: these scripts call out a bunch of reference URLs, that Oracle has now broken:

Re: Is putting slapd into read-only mode sufficient for backups?

2012-02-10 Thread Philip Guenther
On Fri, 10 Feb 2012, Buchan Milne wrote: On Friday, 10 February 2012 01:48:45 Quanah Gibson-Mount wrote: ... I thought I was very clear on that in my last email. It is not sufficient. You need to stop slapd and run *db_recover*, which is more exhaustive than db_checkpoint, if you want to

Linux Authentication

2012-02-10 Thread Andy Carlson
I am getting the following error when I attempt to add the account objectclass to an existing LDAP account: invalid structural object class chain (inetOrgPerson/account) I read an explanation of which the cliffnote version was an person is a person, not an account, so the two objectclasses

Re: Linux Authentication

2012-02-10 Thread Quanah Gibson-Mount
--On Friday, February 10, 2012 3:18 PM -0600 Andy Carlson andy.carl...@moody.edu wrote: While that logic makes sense, I have many accounts on a Sun Directory instance that have both objectclasses. I am trying to migrate entries from Sun to an existing OpenLDAP instance, but because of this

Re: Linux Authentication

2012-02-10 Thread ldap
On Fri, Feb 10, 2012, at 03:18 PM, Andy Carlson wrote: I am getting the following error when I attempt to add the account objectclass to an existing LDAP account: invalid structural object class chain (inetOrgPerson/account) I read an explanation of which the cliffnote version was “an person

Re: Is putting slapd into read-only mode sufficient for backups?

2012-02-10 Thread Brian Reichert
On Fri, Feb 10, 2012 at 12:00:29PM -0800, Philip Guenther wrote: ** Note that the ordering of this is almost completely inflexible. ** In particular: ** (0) must preceed (5) ** (1) must preceed (2) and (3) ** (2) and (3) must preceed (4) **

Re: Is putting slapd into read-only mode sufficient for backups?

2012-02-10 Thread Philip Guenther
On Fri, 10 Feb 2012, Brian Reichert wrote: On Fri, Feb 10, 2012 at 12:00:29PM -0800, Philip Guenther wrote: ** Note that the ordering of this is almost completely inflexible. ** In particular: ** (0) must preceed (5) ** (1) must preceed (2) and (3) **

Re: Is putting slapd into read-only mode sufficient for backups?

2012-02-10 Thread Quanah Gibson-Mount
--On Friday, February 10, 2012 3:32 PM -0500 Brian Reichert reich...@numachi.com wrote: Is management of a HDB backend's directory any easier? back-hdb and back-bdb both use BDB as their data store. There is no difference in how to handle backups between them. --Quanah -- Quanah

Re: Is putting slapd into read-only mode sufficient for backups?

2012-02-10 Thread Brian Reichert
On Fri, Feb 10, 2012 at 03:02:51PM -0800, Quanah Gibson-Mount wrote: back-hdb and back-bdb both use BDB as their data store. There is no difference in how to handle backups between them. OK, thanks for the clarification... --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff

Re: GSSAPI (SASL) + LDAP

2012-02-10 Thread Daniel Savard
For the records, I did upgrade to OpenLDAP 2.4.28, latest stuff. It doesn't solve anything. How can I debug this problem? Anything else I can do? THX Daniel Le vendredi 10 février 2012 à 12:59 -0500, Daniel Savard a écrit : Le jeudi 09 février 2012 à 17:21 -0600, Dan White a écrit : On

Re: GSSAPI (SASL) + LDAP

2012-02-10 Thread Quanah Gibson-Mount
--On Friday, February 10, 2012 6:21 PM -0500 Daniel Savard dsav...@cids.ca wrote: For the records, I did upgrade to OpenLDAP 2.4.28, latest stuff. It doesn't solve anything. If the issue is what version of Kerberos sasl is linked against, upgrading OpenLDAP isn't going to help you at all.