Re: Is there any directory server in public use?

2019-04-23 Thread Emmanuel Lecharny
Le mar. 23 avr. 2019 à 17:40, Derek Zhou a écrit : > > > On April 20, 2019 2:56:15 AM GMT+08:00, Howard Chu wrote: > >This appears to be a > >combination of colleges only teaching SQL (if they teach anything about > >databases at all) and again, HR-oriented software only interacting with > >SQL

Re: Attribute pwdPolicySubentry

2015-12-19 Thread Emmanuel Lecharny
That makes sense. An even smarter system would use the administrative model to handle password policies. Le samedi 19 décembre 2015, a écrit : > In my opinion, the pwdPolicySubentry attribute should be read-only > generated by the server. > > We had made the error in

Re: Attribute pwdPolicySubentry

2015-12-19 Thread Emmanuel Lecharny
Otoh, making it user modifiable was a mistake and broke the rfc specification, which says it's a NO-USER-MODIFIABLE attribute. Le samedi 19 décembre 2015, a écrit : > In my opinion, the pwdPolicySubentry attribute should be read-only > generated by the server. > > We

Re: top object class contains all possible attributes?

2015-04-28 Thread Emmanuel Lecharny
This is certainly not the right place. This maling list is for suestion related to OpneLDAP. Le mardi 28 avril 2015, dE de.tec...@gmail.com a écrit : On 04/28/15 11:18, Dario Zanzico wrote: On Tue, Apr 28, 2015, at 07:21 AM, dE wrote: From https://tools.ietf.org/html/rfc4512 it

Re: openldap 2.2.x

2012-11-01 Thread Emmanuel Lecharny
Le 1 nov. 2012 13:52, Pörschke, Gunnar gunnar.poersc...@bvl.bund.de a écrit : Hi all, we have an very old openldap running and we need to migrate data to latest openldap version. I create an ldif but the data in that file are encoded base64. Is there a trick to disable that? My plan is to

Re: DEL don't get synced

2012-02-02 Thread Emmanuel Lecharny
On 2/1/12 7:16 PM, Quanah Gibson-Mount wrote: --On Wednesday, February 01, 2012 1:40 PM +0100 Michael Ströder mich...@stroeder.com wrote: Nick Milas wrote: On 1/2/2012 12:19 μμ, Emmanuel Lecharny wrote: Any direction on how to test the build and to check out the branch in order to run

Re: DEL don't get synced

2012-02-01 Thread Emmanuel Lecharny
On 1/31/12 9:16 PM, Quanah Gibson-Mount wrote: --On Tuesday, January 31, 2012 9:58 PM +0200 Nick Milas n...@eurobjects.com wrote: On 31/1/2012 6:35 μμ, Marc Patermann wrote: an additional fix will be in 2.4.29 Is there an anticipated (even approximate) release date for 2.4.29? We never

Re: Adding new Indexes while the directory is running

2011-10-16 Thread Emmanuel Lecharny
On 10/16/11 9:44 AM, Howard Chu wrote: fuzzy_4711 wrote: Original - Text Next time read the slapd-bdb(5) manpage first before wasting your time and ours. Since I read this list you have answered a lot more stupid questions, which solutions also could have been found in

Re: V 2.4.x schema extensions

2011-10-05 Thread Emmanuel Lecharny
On 10/5/11 8:21 AM, Brett @Google wrote: In the objectclass schema definition you must have one of MAY or MUST, otherwise there are no attributes considered legal by adding your supplimentary objectclass to an object, it wont affect what attributes are considered valid (valid attributes in

Re: Status of persistent search in OpenLDAP

2011-08-31 Thread Emmanuel Lecharny
On 8/31/11 7:41 PM, Michael Ströder wrote: Clément OUDOT wrote: I tried to know if the persistent search control (OID 2.16.840.1.113730.3.4.3) was supported in OpenLDAP. The latests messages I read were saying no, as we can see in this discussion:

Issue when injecting a new AttributeTypes in OpenLdap

2011-04-11 Thread Emmanuel Lecharny
Hi fellows, OpenLDAP 2.4.24, built from sources. Ubuntu 10.10 debug : -1 config : ldif format, no slapd.conf I'm facing some weird issue while trying to inject an new AttributeType using a modify operation : #!ERROR [LDAP:

Re: entry format

2011-03-30 Thread Emmanuel Lecharny
On 3/30/11 10:51 AM, Omer Faruk SEN wrote: Hi, I have a dump of Sun LDAP Directory server (6.3.1) I see dn: cn=me,ou=groups,dc=me,dc=com nsUniqueId: 1255060a-46e511dd-803ce5f5-385faa0b objectClass;vucsn-4869456e0009002d: top objectClass;vucsn-4869456e0009002d: groupOfUniqueNames

Re: deleting values from multivalued attribute

2011-03-25 Thread Emmanuel Lecharny
On 3/25/11 3:51 PM, Hugo Monteiro wrote: Hello list, is it possible to perform the deletion of only a certain number of values, from a multivalued attribute, without having to perform full deletion and then adding the ones we'd like to keep? Of course.

Re: deleting values from multivalued attribute

2011-03-25 Thread Emmanuel Lecharny
On 3/25/11 4:44 PM, Hugo Monteiro wrote: On 03/25/2011 03:00 PM, Emmanuel Lecharny wrote: On 3/25/11 3:51 PM, Hugo Monteiro wrote: Hello list, is it possible to perform the deletion of only a certain number of values, from a multivalued attribute, without having to perform full deletion

Re: deleting values from multivalued attribute

2011-03-25 Thread Emmanuel Lecharny
On 3/25/11 5:27 PM, Hugo Monteiro wrote: I wonder if it's also possible to use the same approach but for value modification. In brief evaluation, my guess is no, since the ldif syntax doesn't provide any way to distinct between the value to be replaced and the one to replace with. I don't

Re: How to obtain Operations Attributes

2011-03-19 Thread Emmanuel Lecharny
On 3/19/11 6:23 AM, Suneet Shah wrote: Hello, I am using the Java JDK 1.6.x to query ldap. I am using the query below. However, I need to be able to pull out the operational attributes as well. Any thoughts on how I can obtain the list of operational attributes without having to specify them?

Re: Which backend should I use?

2011-02-03 Thread Emmanuel Lecharny
On 2/3/11 5:45 PM, Quanah Gibson-Mount wrote: On Feb 3, 2011, at 1:11 AM, Clément OUDOTclem.ou...@gmail.com wrote: Le 3 février 2011 09:39, Olivier PAVILLA olivier.pavi...@univ-orleans.fr a écrit : Hi. I need your advice again :) I have LDAP server with ldbm database on a fedora core 5

Re: Emergency recovery strategy needed by novice

2011-01-07 Thread Emmanuel Lecharny
On 1/7/11 8:17 PM, Richard Troy wrote: On Fri, 7 Jan 2011, Chris Jacobs wrote: Dump: slapcat -l [ldif file] Add from dump, with slapd off: slapadd -l [ldif file] If you're using BDB (typical backend), you can move the contents of the dbdir specified by your config first. - chris THANK

Re: Issues migrating from openLDAP 2.0.27-11 to 2.3.43-12.el5_5.2

2010-11-19 Thread Emmanuel Lecharny
The Account OC directly inherits from Top, the InetOrgPerson OC has an inheriting hierarchy which is : InetOrgPerson - OragnizationalPerson - Person - Top When defining an entry, you can't have two Structural OCs (Account and InetOrgPerson are Structural) defined at the same time. It's a bit

Re: Possible bug in ldap_get_values_len?

2010-10-18 Thread Emmanuel Lecharny
On 10/18/10 12:48 PM, Howard Chu wrote: But it's certainly stupid for the server to attach the attribute to the response with no values, since this is obviously NOT an attrsOnly search response. What about an AttributeType with an OctetString syntax ? It may have an empty value... --

Re: invalid syntax on pwdPolicy object add

2010-09-16 Thread Emmanuel Lecharny
On 9/16/10 12:12 PM, Buchan Milne wrote: On Monday, 13 September 2010 09:30:14 Julien Vehent wrote: I have created the OU 'policies' just fine, but when I try to add a pwdPolicy object, i get the following error: (theEOF isn't necessary, if you don't specify an input file, ldapadd etc. will

Re: invalid syntax on pwdPolicy object add

2010-09-14 Thread Emmanuel Lecharny
On 9/14/10 8:40 AM, mailing lists wrote: Hello, I think that the pwdAttribute needs an OID value (specified by the syntax) so you would must use the OID of the userPassword attribute which is 2.5.4.35 I thought that would be a possibility for the failure Kiran and Julien are facing,

Re: invalid syntax on pwdPolicy object add

2010-09-13 Thread Emmanuel Lecharny
On Mon, 13 Sep 2010 10:52:03 +0200, Christian Manalmoen...@informatik.uni-bremen.de wrote: Hi, pwdPolicy is an auxiliary objectClass. You have to use it in conjunction with a structural objectClass. Look at the example from the admin guide:

Re: cn=Config GUI was: Re: ldap on Ubuntu 10.0.4

2010-08-06 Thread Emmanuel Lecharny
On 8/5/10 10:49 AM, Carl Johnstone wrote: I would definitely use Apache Directory Studio if I wanted a GUI now. Note when it comes to some updates in cn=config that ADS doesn't work. These are the attributes where you have to drop all the values and re-add them in. I don't think ADS is to

Re: cn=Config GUI was: Re: ldap on Ubuntu 10.0.4

2010-08-04 Thread Emmanuel Lecharny
On 8/4/10 1:36 PM, Marcio Merlone wrote: Em 03-08-2010 17:12, Howard Chu escreveu: Chris Jacobs wrote: This has been asked before - and the response has always been any gui ldap browser - like apache directory studio. I used to use jxplorer but that seems not to be actively maintained

Re: Question about password storage.

2010-07-06 Thread Emmanuel Lecharny
On 7/6/10 11:44 PM, Bryan Boone wrote: Hi everyone. I just read this information. 14.4. Password Storage LDAP passwords are normally stored in the userPassword attribute. RFC4519 specifies that passwords are not stored in encrypted (or hashed) form. *encrypted*. Not encrypted *or*

Re: How to modify a single attribute from multiple list of attributes

2010-07-03 Thread Emmanuel Lecharny
On 7/3/10 1:24 AM, Tom Leach wrote: So, what ldapmodify/ldif syntax is needed to specify which of multiple attributes should be modified? Thanks! Tom Leach dn: cn=config,o=dhcp changetype: modify delete: dhcpStatements dhcpStatements: log-facility local7 - add: dhcpStatements dhcpStatements:

Re: OpenLDAP DB_CONFIG values for a big Server

2010-03-12 Thread Emmanuel Lecharny
On 3/12/10 3:33 PM, Echedey Lorenzo wrote: Nice tricks, I have specified an index for my filter search. Populating entries again to take care of it. No need to inject the entries again. You can re-index the base using the CL Regarding shm_key, I have a couple of silly questions: - I

Re: ApacheDS + openLDAP

2009-12-14 Thread Emmanuel Lecharny
bren norris a écrit : Anyone using Eclipse based ApacheDS for works with openLDAP? I get a socket closed everytime I try and add a custom objectclass to the DIT... but it works fine with Softerra LDAP administrator. Server is a aptitude installed Ubuntu Karmic release and I thought I'd tap