Re: help SSL on Openldap and java

2010-06-10 Thread s g
Thanks for replying. I was a bit occupied, so I could not back soon. Going by your mail, I went through the certificate generation process again. What I found is that for some reason, the cacert.pem file(which is the certificate for the CA) shows the following - X509v3 extensions:

Communicate from php/apache to openLDAP over LDAPS

2010-06-10 Thread Jérémy ESCOLANO
Hi I'm writing from france cuz i'm having a big problem with apache and ldap. let me explain : I would like to make an Apache server communicate in php with en openLDAP server (both servers are under win srv 2003), using LDAPS protocol. In order to activate LDAPS on my openLDAP srv (srvLDAP), I

Re: help SSL on Openldap and java

2010-06-10 Thread Dieter Kluenter
s g sirisha@gmail.com writes: Thanks for replying. I was a bit occupied, so I could not back soon. Going by your mail, I went through the certificate generation process again. What I found is that for some reason, the cacert.pem file (which is the certificate for the CA) shows the

Re: smbk5pwd: ldappassword hangs

2010-06-10 Thread Frank Van Damme
2010/6/7 Marco Göbel marco.goe...@zurk.org: Same problem as i figured out: in the last two weeks i am testing the combination Heimdal+OpenLdap+Samba and the smbk5pwd overlay. I compiled the stable OpenLdap and Heimdal release successfully and combined it with Samba. The error is nearly the

Re: smbk5pwd: ldappassword hangs

2010-06-10 Thread Frank Van Damme
2010/6/7 Quanah Gibson-Mount qua...@zimbra.com: --On Monday, June 07, 2010 11:56 AM +0200 Frank Van Damme What version of OpenLDAP are you using?  You've failed to mention that anywhere. 2.4.11 (Debian 5.0). -- Frank Van Damme A: Because it destroys the flow of the conversation. Q: Why is

Re: Multi master replication

2010-06-10 Thread Aravind Divakaran
Hi, Now i have changed the rid of one of my server, now both servers have unique rid and sid. After changing the rid i have deleted and db and replicated from the other. Now when i change the password of the user it says successfully changed. But when i try to login with that password i was not

Re: Communicate from php/apache to openLDAP over LDAPS

2010-06-10 Thread Howard Chu
Jérémy ESCOLANO wrote: I tried to put host=srvLDAP but it still doesn't work Actually the problem is configuring my APACHE server to make it considerate theses certificate. I know there is a ldap.conf in the openLDAP directory (on openLDAP server) where to have to put : TLS_CACERT

Re: Multi master replication

2010-06-10 Thread Benjamin Griese
Hi, I have no clue what the problem is in your configuration. Did you really started with a blank backend database (bdb/hdb)? Did you read about the differences of replication type RefreshOnly or RefreshAndPersist? Try to avoid changing replication settings while both hosts are replicating,

Re: smbk5pwd: ldappassword hangs

2010-06-10 Thread Quanah Gibson-Mount
--On Thursday, June 10, 2010 1:36 PM +0200 Frank Van Damme frank.vanda...@gmail.com wrote: 2010/6/7 Quanah Gibson-Mount qua...@zimbra.com: --On Monday, June 07, 2010 11:56 AM +0200 Frank Van Damme What version of OpenLDAP are you using?  You've failed to mention that anywhere. 2.4.11

RE: User restriction

2010-06-10 Thread Aaron Richton
On Mon, 7 Jun 2010, Stuart Cherrington wrote: [given] dn: cn=access,ou=auth,dc=ldn,dc=sw,dc=com objectClass: groupOfNames objectClass: top cn: access member: uid=stuart,ou=people,dc=ldn,dc=sw,dc=com member: cn=proxyagent,ou=profile,dc=ldn,dc=sw,dc=com member:

Re: User restriction

2010-06-10 Thread Dieter Kluenter
Adam Hough a...@gradientzero.com writes: On Mon, Jun 7, 2010 at 4:44 AM, Stuart Cherrington stuart_cherring...@hotmail.co.uk wrote: [...] ldapsearch -x -b 'ou=auth,dc=ldn,dc=sw,dc=com' -h 10.2.250.15 -D cn= proxyagent,ou=profile,dc=ldn,dc=sw,dc=com -w xx [...] This search is