Re: set syntax possible in search filter?

2014-03-08 Thread Pierangelo Masarati
On 03/08/2014 04:12 AM, Stephan Fabel wrote: Hi, reading this: http://www.openldap.org/faq/data/cache/1133.html - do I read this correctly that the set syntax can also be employed in search filters? The reason I ask is because Mark is listing LDAP URIs and this sentence: The LDAP search

Re: User-Managed Groups

2014-03-08 Thread Dieter Klünter
Am Fri, 7 Mar 2014 11:11:23 -0800 schrieb Tim Gustafson t...@ucsc.edu: Hi, I've had OpenLDAP set up for a while now such that users can create groups and manage the groups that they've created. I've achieved this by creating a new objectClass (called managedGroup) which adds the manager

Re: set syntax possible in search filter?

2014-03-08 Thread Stephan Fabel
On Mar 7, 2014 10:03 PM, Pierangelo Masarati pierangelo.masar...@polimi.it wrote: In any case, sets are only used in the context of ACL evaluation. Thanks! Are there any plans to add this functionality in the future? Stephan

Re: set syntax possible in search filter?

2014-03-08 Thread Michael Ströder
Pierangelo Masarati wrote: In any case, sets are only used in the context of ACL evaluation. Additionally sets can be used with slapo-constraint. Ciao, Michael. smime.p7s Description: S/MIME Cryptographic Signature

Re: Client doesn't send certificate for LDAPS

2014-03-08 Thread btb
On Mar 8, 2014, at 08.50, Joshua Schaeffer jschaeffer0...@gmail.com wrote: I'm in the process of setting up my slapd server to operate over LDAPS and having trouble when using a CA certificate (being my own certificate authority). I've been able to setup LDAPS when using a self-signed

Re: Client doesn't send certificate for LDAPS

2014-03-08 Thread Joshua Schaeffer
did you read the description of this setting in man 5 slapd-config? Well, yes and no. I read about TLS_REQCERT under man ldap.conf and incorrectly assumed that what was set here (allow, demand, etc) also needed to be set on cn=config. I've read over both man pages more carefully now and I

ldapdelete failing

2014-03-08 Thread Tim Dunphy
Hello, I'm trying to delete an entry in my ldap database. But when issuing this command I am getting an error: [root@ldap01:~/ldap] #ldapdelete -v -x 'dn: uid=spencer,ou=People,dc=example,dc=com' -D cn=admin,dc=example,dc=com -W ldap_initialize( DEFAULT ) Enter LDAP Password: deleting entry

RE: ldapdelete failing

2014-03-08 Thread Chris Card
Hi I'm trying to delete an entry in my ldap database. But when issuing this command I am getting an error: [root@ldap01:~/ldap] #ldapdelete -v -x  'dn: uid=spencer,ou=People,dc=example,dc=com' -D cn=admin,dc=example,dc=com -W ldap_initialize( DEFAULT ) Enter LDAP Password:  deleting entry

Re: ldapdelete failing

2014-03-08 Thread Tim Dunphy
Hey, thanks! Well I had to add my admin login to get it to work, but the info you gave me got it solved! [root@ldap01:~/ldap] #ldapdelete -v -x 'uid=spencer,ou=People,dc=jokefire,dc=com' -D cn=admin,dc=jokefire,dc=com -W ldap_initialize( DEFAULT ) Enter LDAP Password: deleting entry

How get more detailed error information than the provided by ldap_err2string?

2014-03-08 Thread Werner - Google
Hi, I've the sample code bellow, and when i intentionally put the wrong credentials, i get from ldap_err2string( rc ) the error message: Invalid credentials. But monitoring network traffic with wireshark, i can see that on the bindResponse packet that returns from the server, i also get a more

Re: How get more detailed error information than the provided by ldap_err2string?

2014-03-08 Thread Pierangelo Masarati
On 03/08/2014 09:27 PM, Werner - Google wrote: Hi, I've the sample code bellow, and when i intentionally put the wrong credentials, i get from ldap_err2string( rc ) the error message: Invalid credentials. But monitoring network traffic with wireshark, i can see that on the bindResponse packet

Re: How get more detailed error information than the provided by ldap_err2string?

2014-03-08 Thread Howard Chu
Werner - Google wrote: Hi, I've the sample code bellow, and when i intentionally put the wrong credentials, i get from ldap_err2string( rc ) the error message: Invalid credentials. Read the ldap_get_option(3), ldap_bind(3), and ldap_result(3) manpages. But monitoring network traffic with

Re: Fwd: Works with ldapsearch, but can't get it to work with ldap_search_ext_s()

2014-03-08 Thread Howard Chu
Werner - Google wrote: Hi, After doing some more research and lot's of tcpdumping, i got some more info, but still don't know how to solve my problem. As i mentioned, i'm doing the search agains an Active Directory service. I do the serch with the code showed above, and with the

Re: How get more detailed error information than the provided by ldap_err2string?

2014-03-08 Thread Werner M
On 08/03/2014, at 18:15, Howard Chu h...@symas.com wrote: Werner - Google wrote: Hi, I've the sample code bellow, and when i intentionally put the wrong credentials, i get from ldap_err2string( rc ) the error message: Invalid credentials. Read the ldap_get_option(3), ldap_bind(3), and

Re: How get more detailed error information than the provided by ldap_err2string?

2014-03-08 Thread Werner M
On 08/03/2014, at 18:01, Pierangelo Masarati pierangelo.masar...@polimi.it wrote: On 03/08/2014 09:27 PM, Werner - Google wrote: Hi, I've the sample code bellow, and when i intentionally put the wrong credentials, i get from ldap_err2string( rc ) the error message: Invalid credentials.

Re: Works with ldapsearch, but can't get it to work with ldap_search_ext_s()

2014-03-08 Thread Werner M
On 08/03/2014, at 18:31, Howard Chu h...@symas.com wrote: Werner - Google wrote: Hi, After doing some more research and lot's of tcpdumping, i got some more info, but still don't know how to solve my problem. As i mentioned, i'm doing the search agains an Active Directory service. I