Re: OpenLDAP Proxy using PKCS#11/SmartCard client authentication

2013-06-26 Thread Stefan Scheidewig
After I recompiled OpenLDAP to use the Mozilla NSS framework (quite complicated process - see http://www.openldap.org/faq/data/cache/196.html) I created a new certificate database directory structure and added the PKCS#11 module of my smartcard with modutil (but without specifying any

Re: unsupported extended operation

2013-06-26 Thread Michael Ströder
Quanah Gibson-Mount wrote: --On Tuesday, June 25, 2013 8:34 PM -0400 Rodney Simioni rodney.simi...@verio.net wrote: This is my slapd.ldif This is my /usr/local/openldap/etc/openldap/slapd.conf Are you using slapd.conf or cn=config? If you are using cn=config, then you have not

Re: Question on assigning a new user with admin role

2013-06-26 Thread Michael Ströder
Kumar, Amit wrote: I have little experience with managing LDAP servers. Previously with just one file slapd.conf it was lot easier to assign a user a role of an admin, just by giving access to attrs=...by With newer version of openldap-servers-2.4.23-26 on RHEL 6.x this is not the same,

Re: Question on assigning a new user with admin role

2013-06-26 Thread Michael Ströder
Kumar, Amit wrote: I have little experience with managing LDAP servers. Previously with just one file slapd.conf it was lot easier to assign a user a role of an admin, just by giving access to attrs=...by With newer version of openldap-servers-2.4.23-26 on RHEL 6.x this is not the same,

Re: High load times with mdb

2013-06-26 Thread Howard Chu
Bill MacAllister wrote: --On Tuesday, June 25, 2013 03:10:17 PM -0700 Howard Chu h...@symas.com wrote: Probably bad default FS settings, and changed from your previous OS revision. Also, you should watch vmstat while it runs to get a better idea of how much time the system is spending in I/O

rootdn password change

2013-06-26 Thread Darouichi, Aziz
Hi all, I compiled Openldap-2.4.35 with TLS/SSL support and have not configured certs yet. But I am trying to change/encrypt rootdn password using the following /opt/local/bin/ldappasswd -h {SSHA}and I am getting ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1). I checked host

Unable to edit cn=config

2013-06-26 Thread Michael Roth
Hello openldap masters, I have a big issue and I'm praying someone can help me Am I able to change the ACL so I can edit cn=config to load a module in? If so how do I do that? How I setup my working LDAP with the script here: