Re: Integration OpenLDAP - MS Active Directory

2010-05-25 Thread Michael Ströder
Veloso Varas, Sebastián (TECH-IT) wrote: I would like to know if any of you. has had experience of integration of AD with LDAP. My idea is to have a core LDAP and AD users consume. Not sure what you really want. If you want simple replication from OpenLDAP to AD this is not possible

Re: More on dynamic group searches

2010-05-25 Thread Ian Collins
On 05/24/10 03:34 PM, Ian Collins wrote: On 05/24/10 01:11 PM, Howard Chu wrote: What have you done to test it? As the README says, it operates when a write operation occurs that may affect the membership of a given group. Yes it does, I was was using the wrong search (searching on

Re: use of server-side sorting and virtual list view controls blocks slapd

2010-05-25 Thread Lehnert, Hartmut
Hi Dieter! We tried Sizelimit unlimited In slapd.conf, but the effect is the same, slapd answers size limit exceeded. The search request command is /home/openldap/openldap-2.4.21-install/bin/ldapsearch -h localhost -p 9389 -D cn=openldapadmin -w welcome -b o=CustomerCA,c=de -s

Re: Q: status of component matching?

2010-05-25 Thread Dieter Kluenter
Am Tue, 25 May 2010 15:51:40 +0200 schrieb Lehnert, Hartmut hartmut.lehn...@secunet.com: Hi Dieter! Thank you very much! I used CFLAGS=-DLDAP_COMP_MATCH when configuring the slapd and now it's able to load our component match module. But some problems are still left: When running the

RE: ppolicy master/slave issue (currently forward ppolicy updates OR authenticate)

2010-05-25 Thread Chris Jacobs
Haven't heard anything on this yet... If someone could point me to some documentation, or better, graphic illustration, of how OpenLDAP 'works', perhaps I can figure this out on my own. Thanks, - chris -Original Message- From:

Re: use of server-side sorting and virtual list view controls blocks slapd

2010-05-25 Thread Dieter Kluenter
Am Tue, 25 May 2010 16:16:52 +0200 hi Hartmut, schrieb Lehnert, Hartmut hartmut.lehn...@secunet.com: Hi Dieter! We tried Sizelimit unlimited Limits have to be defined on both sides server side and client side. In slapd.conf, but the effect is the same, slapd answers size limit

Re: How to obtain a 'version number' of an attributes

2010-05-25 Thread Michael Ströder
Quanah Gibson-Mount wrote: --On Tuesday, May 25, 2010 5:11 AM +0200 masar...@aero.polimi.it wrote: This way, the modification is atomic. As usual, this could be accomplished by stacking an overlay that intercepts modifications to specified attributes, like unicodePwd. Can you formalize

Re: How to obtain a 'version number' of an attributes

2010-05-25 Thread masarati
Quanah Gibson-Mount wrote: --On Tuesday, May 25, 2010 5:11 AM +0200 masar...@aero.polimi.it wrote: This way, the modification is atomic. As usual, this could be accomplished by stacking an overlay that intercepts modifications to specified attributes, like unicodePwd. Can you formalize

Summary of dynamic groups

2010-05-25 Thread Ian Collins
Hello again, My earlier thread appears to have been hijacked, so I'm starting a new one for the summary of my investigations. My current understanding is as follows: There are three overlays that can use yes to manage groups dynamically: dynlist, autogroup and memberof. - dynlist works

Re: Summary of dynamic groups

2010-05-25 Thread Howard Chu
Ian Collins wrote: Hello again, My earlier thread appears to have been hijacked, so I'm starting a new one for the summary of my investigations. My current understanding is as follows: There are three overlays that can use yes to manage groups dynamically: dynlist, autogroup and memberof.

Re: Summary of dynamic groups

2010-05-25 Thread Ian Collins
On 05/26/10 02:40 PM, Howard Chu wrote: Ian Collins wrote: Hello again, My earlier thread appears to have been hijacked, so I'm starting a new one for the summary of my investigations. My current understanding is as follows: There are three overlays that can use yes to manage groups

Re: Summary of dynamic groups

2010-05-25 Thread Howard Chu
Ian Collins wrote: On 05/26/10 02:40 PM, Howard Chu wrote: Ian Collins wrote: Hello again, My earlier thread appears to have been hijacked, so I'm starting a new one for the summary of my investigations. My current understanding is as follows: There are three overlays that can use yes to