replication issue

Hi there, I've got some problems with ldap replication. Ever since I've updated the master from Debian Etch to Lenny changes are no longer synced. I've got v2.4.11 running on both servers. The slave is still running Etch. SSL is active, so maybe there's a problem with the certificates...

smbk5pwd: ldappassword hangs

Hi list, I installed and configured the smbk5pwd overlay as described on http://student.physik.uni-mainz.de/~reiffert/smbk5pwd.html#smbk5pwd. This succeeded, the module is loaded etc. But an unwelcome side effect is that password changes don't function anymore. With the overlay/module disabled,

Re: Server certificate

2010/5/31 Daniel Gomes dgo...@ipfn.ist.utl.pt: Hey there, I've got a simple enough question: is it possible to use a certificate for TLS (through the TLSCertificateFile directive) on which the FQDN of the LDAP server is not on the CN but instead on the alternative name? I tried this, but I'm

multiple instances

Hello, I installed a server (RHEL5 x86_64) with three instances of OpenLDAP 2.3.43. ldap 6572 1 0 May24 ?00:49:12 /usr/sbin/slapd -u ldap -g ldap -h ldap://X.Y.Z.104:389 -f /etc/openldap/slapd.conf -l LOCAL4ldap 6612 1 0 May24 ?00:49:09 /usr/sbin/slapd -u

Re: Server certificate

Turned out to be a permissions error, quickly followed by the (apparently common) GnuTLS issues. Since having TLS on that server is not demanding (it's just a slave), I don't feel like trying to find a solution. I guess I'll just later compile it by hand with OpenSSL (which is what I did on

RE: Syncrepl - ldap_bind: Invalid credentials error

I increased the logging and found this upon starting up the provider: = bdb_search bdb_dn2entry(cn=accesslog) = access_allowed: search access to cn=accesslog entry requested = root access granted = access_allowed: search access granted by manage(=mwrscxd) search_candidates: base=cn=accesslog

LDAP C API

Hi there, I'm writing GTK application for managing LDAP directory, a kind of GTK variant of phpldapadmin. As for now I'm able to browse directory, objects' probepries and their values. What is not clear is how to figure out the RDN and Required property, and Structural value. How it is done?

Re: replication issue

--On Saturday, May 29, 2010 7:30 PM +0200 Lennart Job lennart@fuks.org wrote: Hi there, I've got some problems with ldap replication. Ever since I've updated the master from Debian Etch to Lenny changes are no longer synced. I've got v2.4.11 running on both servers. The slave is still

Re: Syncrepl - ldap_bind: Invalid credentials error

--On Tuesday, June 01, 2010 9:51 AM +0100 Gocher, Mark mark.goche...@city.ac.uk wrote: I'm receiving the following error on my consumer, using logging -d stats + args + trace + sync 2 /var/log/ldap @(#) $OpenLDAP: slapd 2.4.22 (May 21 2010 12:10:42) $    

RE: OpenLDAP configuration for ldap-group authentication on Apache2.x

Loren, You need to replace the nis.schema schema file with a rfc2307bis.schema file because both, posixGroup and groupOfnames are STRUCTURAL classes. Using rfc2307 schema, one object class becomes auxiliary and allows both to co-exist within the same object declaration. OTOH, see if you can

TLS certs needed for Provider and consumer

Hello Everyone: Does anyone a have a link the shows what steps are needed to for creating certs for a Provider and Consumer? I've been able to do it for Provider, but I'm stuck on what to do for the consumer. Thanks