Re: OpenLDAP Proxy using PKCS#11/SmartCard client authentication

2013-06-24 Thread Stefan Scheidewig
After I managed to connect to the LDAP server with gnutls-cli (with a PKCS#11 URI containing a pinfile attribute) I tried to set those PKCS#11 URIs to the ldaprc settings TLS_KEY and TLS_CERT. But these settings are handled as PEM encoded file (see function tlsg_ctx_init in tls_g.c) and a

Re: OpenLDAP export in Oracle DB (10g) - not as backend

2013-06-24 Thread Dan White
On 06/24/13 07:47 +0200, Lukas Lehner wrote: Hi I want an interface to OpenLDAP (with sudoers) to Oracle DB. I have no access to OpenLDAP server, but an LDAP admin user. What do you mean with sudoers? You want sudo to authenticate against OpenLDAP, or against Oracle DB? Or OpenLDAP with an

Re: OpenLDAP export in Oracle DB (10g) - not as backend

2013-06-24 Thread Lukas Lehner
No. I wish to export all OpenLDAP data (including sudoers) to a RDBMS (Oracle 10g) for doing SQL statements. Only export for doing reports. No change at OpenLDAP. On Mon, Jun 24, 2013 at 3:29 PM, Dan White dwh...@olp.net wrote: On 06/24/13 07:47 +0200, Lukas Lehner wrote: Hi I want an

Re: OpenLDAP Proxy using PKCS#11/SmartCard client authentication

2013-06-24 Thread Michael Ströder
Stefan Scheidewig wrote: After I managed to connect to the LDAP server with gnutls-cli (with a PKCS#11 URI containing a pinfile attribute) I tried to set those PKCS#11 URIs to the ldaprc settings TLS_KEY and TLS_CERT. But these settings are handled as PEM encoded file (see function

Re: OpenLDAP Proxy using PKCS#11/SmartCard client authentication

2013-06-24 Thread Howard Chu
Michael Ströder wrote: Stefan Scheidewig wrote: After I managed to connect to the LDAP server with gnutls-cli (with a PKCS#11 URI containing a pinfile attribute) I tried to set those PKCS#11 URIs to the ldaprc settings TLS_KEY and TLS_CERT. But these settings are handled as PEM encoded file

understanding ldap

2013-06-24 Thread Rodney Simioni
Please correct me if I am wrong. These questions are stemming from a Red Hat Linux Server. /etc/openldap/ldap.conf # this config file is openldap server's ldap config file? /etc/ldap.conf # This config file is for ldap's clients? If I want to test test if LDAP is configured with

Re: understanding ldap

2013-06-24 Thread Dan White
On 06/24/13 13:48 -0400, Rodney Simioni wrote: These questions are stemming from a Red Hat Linux Server. /etc/openldap/ldap.conf # this config file is openldap server's ldap config file? That file would be utilized by the OpenLDAP clients and client libraries. Do 'man ldap.conf' and

Re: understanding ldap

2013-06-24 Thread Michael Ströder
Rodney Simioni wrote: /etc/openldap/ldap.conf # this config file is openldap server's ldap config file? No, it's a LDAP client config. Mostly likely for OpenLDAP ldap* command-line tools but sometimes also for other components. /etc/ldap.conf # This config file is for ldap's clients?

Re: understanding ldap

2013-06-24 Thread Howard Chu
Michael Ströder wrote: Rodney Simioni wrote: /etc/openldap/ldap.conf # this config file is openldap server's ldap config file? No, it's a LDAP client config. Mostly likely for OpenLDAP ldap* command-line tools but sometimes also for other components. /etc/ldap.conf # This config file is

etiquette when asking questions

2013-06-24 Thread Brendan Kearney
i have several questions that i am looking for information on, but they are not all related to each other. is it proper etiquette to send a separate thread for each topic, or can one post a series of questions in one thread? my questions run the gambit from access, groups and ACLs to

openldap and MozNSS

2013-06-24 Thread Rodney Simioni
Greetings, I have heard through the grapevine that it is best not to use openldap with MozNSS support for SSL/TLS and to use openssl. I'm using a Red Hat pkg of openldap with version 2.4.23. How do I know if this version has openssl compiled? If it is compiled for openssl, how do I

Re: openldap and MozNSS

2013-06-24 Thread Quanah Gibson-Mount
--On Monday, June 24, 2013 6:01 PM -0400 Rodney Simioni rodney.simi...@verio.net wrote: Greetings, I have heard through the grapevine that it is best not to use openldap with MozNSS support for SSL/TLS and to use openssl. I'm using a Red Hat pkg of openldap with version 2.4.23. How do

Re: etiquette when asking questions

2013-06-24 Thread Quanah Gibson-Mount
--On Monday, June 24, 2013 5:19 PM -0400 Brendan Kearney bpk...@gmail.com wrote: i have several questions that i am looking for information on, but they are not all related to each other. is it proper etiquette to send a separate thread for each topic, or can one post a series of questions

Re: OpenLDAP Proxy using PKCS#11/SmartCard client authentication

2013-06-24 Thread Stefan Scheidewig
Looks promising. For instance the function PK11_FindKeyByDERCert in tls_m.c . I will try it with this one. Am 24.06.2013 18:26, schrieb Michael Ströder: Stefan Scheidewig wrote: After I managed to connect to the LDAP server with gnutls-cli (with a PKCS#11 URI containing a pinfile attribute) I