Re: ACL problem

2016-03-29 Thread Cole
On 29 March 2016 at 18:41, Cole <c...@opteqint.net> wrote: > Hi, > > I am using OLC and ACL's to limit response from LDAP based on IP > address, and this is working fine if I have a single ACL. When I add a > second ACL, with a different IP address, the new ACL works, but th

ACL problem

2016-03-29 Thread Cole
Hi, I am using OLC and ACL's to limit response from LDAP based on IP address, and this is working fine if I have a single ACL. When I add a second ACL, with a different IP address, the new ACL works, but the previous one does not. Example: Entries in LDAP: # 10.0.0.92, servers, test.com dn:

Re: LDAP authentication with uid

2016-03-22 Thread Cole
Hi Mary, If this is similar to ssh auth against LDAP using uid, the dn would look like the following dn: uid=christine,ou=ELOGAccounts,ou=RavenApps,dc=my-domain,dc=com Now I am not sure how Apache does the lookup, but if I am wrong, maybe someone else can reply. Regards /Cole On 22 March 2016

Re: olcAccess/olcLimits modifications

2016-03-15 Thread Cole
type: modify > add: olcAccess > olcAccess: {11} So in order to modify olcAccess: {11}, you first have to delete it and then re-add it? There is no way to modify it in place and change its contents? Thanks /Cole > > --Quanah > > -- > > Quanah Gibson-Mount > Platform

Re: olcAccess/olcLimits modifications

2016-03-14 Thread Cole
Then I expect you will have to do a delete index, add at index. /Cole On 14 March 2016 at 19:26, PenguinWhispererThe . < th3penguinwhispe...@gmail.com> wrote: > I tried exactly that notation however that replaced the whole entry (so > only one index left). I only wanted to repl

Re: olcAccess/olcLimits modifications

2016-03-11 Thread Cole
-security describes the {} functionality. Regards /Cole On 10 March 2016 at 22:56, PenguinWhispererThe . < th3penguinwhispe...@gmail.com> wrote: > > That's completely missing the point of these ordering prefixes. > I honestly don't see a lot of mentioning about this except for replac

Re: Users with multiple passwords?

2016-03-03 Thread Cole
Hi, You could use a filter to restrict the responses returned to the VPN server based on the IP address of the server performing the query? Regards /Cole On 3 March 2016 at 17:01, dev <devua...@gmail.com> wrote: > Hello All, > I have OpenLDAP (2.4.31-1+nmu2ubuntu8.2) setup to authen

Re: Invalid credentials

2016-02-20 Thread Cole
I did exactly the same until I had my head wrapped around all the details of openldap. I then converted everything to the cn=config method quite easily after that. Anyway, if you provide the details mentioned before, we should be able to figure out where the problem is coming in. Thanks /Cole

Re: Invalid credentials

2016-02-20 Thread Cole
Hi Dave, Please can you include your slapd.conf, the command line you are using when trying to bind. Thanks /Cole On 20 February 2016 at 06:07, Dave Beach <drbea...@gmail.com> wrote: > I’m trying to debug a new openldap install on Debian Jessie. > > > > Password has bee

ACL and set problem

2016-02-18 Thread Cole
it doesn't seem to match the 'user' used for the bind. Can anyone see anything wrong with my setup? Thanks /Cole

Need filter that allows members of specific group to authenticate, not sure how to build it

2011-10-28 Thread Josh Cole
((objectClass=mailUser)(accountStatus=active)(enabledService=vpn)) # Require Group Membership RequireGroupfalse /Authorization Josh Cole Network and Systems Engineer Fresno Pacific University (559) 453-3414

id: No such userr...@garion:~# ldapsearch -x uid=connor # extended LDIF # # LDAPv3 # base dc=muncc, dc=loc (default) with scope subtree # filter: uid=connor # requesting: ALL # # connor, People, mun

2010-09-27 Thread Cole
Now, I'm pretty sure that this must be an NSS or PAM problem, but the files on the clients and the server seem to be configured the same. I can't seem to pinpoint exactly what is wrong. Any suggestions? Thanks in advance. -- Cole Gleason -- Student, Marmion Academy Email: c

Re: id: No such userr...@garion:~# ldapsearch -x uid=connor # extended LDIF # # LDAPv3 # base dc=muncc, dc=loc (default) with scope subtree # filter: uid=connor # requesting: ALL # # connor, People,

2010-09-27 Thread Cole
Sorry about the subject. I think I hit paste by accident. On Mon, Sep 27, 2010 at 5:30 PM, Cole colewash...@gmail.com wrote: Hello all, I have an LDAP server that I can use for authentication. On this server I can authenticate as these users locally and ldapsearch them, whatever. On any

ldap_add: Invalid syntax (21)

2010-08-18 Thread Cole
Hello. I'm trying to set up a computer cluster for a school project, and I am following a guide at debianclusters.org http://www.debianclusters.org. I'm trying to set up LDAP and I've followed the tutorial, but I keep getting this error. I saw this error in the FAQ, but I'm not sure how to fix