Re: Repeated messages : op=0 do_bind: invalid dn (uid=,ou=...

2010-07-09 Thread Frank Bonnet
I finally found the client in debug mode thanks to all for your help ! On 07/08/2010 02:51 PM, Aaron Richton wrote: On Thu, 8 Jul 2010, Frank Bonnet wrote: Hello I don't blame slapd ;-) is there any way to track down le IP address of the client if slapd is in debug mode ? Given the

getent passwd fails

2010-07-09 Thread Joakim Seeberg
Dear list, Yet another newbie having trouble setting up openldap! On Debian Lenny with ip 10.0.2.6 I have set up my openldap server listening on port 389 . From here I can do a ldapsearch and getent passw showing ldap is working. From the client I can do ldapsearch -W -D

Segmentation Fault

2010-07-09 Thread Paul Harvey
Hello all! I am currently trying to use syncrepl to maintain a set of databases around the world. I am currently doing some testing to see how things would cope over large distances, between Europe and Australia. The current set up is that there is a master provider in Europe which is

Adding replicant with ppolicy after the fact

2010-07-09 Thread G.Pitman
Hi, I have a openldap installation that we recently implemented ppolicy and we have come to the point of using it in production. I am in the process of putting in a dedicated ldap replicant(punching bag) and I am having trouble importing the directory due to the ppolicy extended attributes not

getent passwd fails

2010-07-09 Thread Joakim Seeberg
Dear list, Yet another newbie having trouble setting up openldap! On Debian Lenny with ip 10.0.2.6 I have set up my openldap server listening on port 389 . From here I can do a ldapsearch and getent passw showing ldap is working. From the client I can do: ldapsearch -x -W -b 'dc=pdc,dc=com'

Re: getent passwd fails

2010-07-09 Thread Joakim Seeberg
Sorry for double posting, but the first one was 24 hours on its way.

Re: getent passwd fails

2010-07-09 Thread Buchan Milne
On Friday, 9 July 2010 10:13:39 Joakim Seeberg wrote: From the client I can do: ldapsearch -x -W -b 'dc=pdc,dc=com' -D 'cn=admin,dc=pdc,dc=com' -H 'ldap://10.0.2.6:389/' 'objectclass=*' : Works! [...] Running nslcd in debug shows: nslcd: DEBUG: add_uri(ldap:///10.0.2.6) Compare the URI

Re: Subject: So I finally upgraded from slurpd...

2010-07-09 Thread Sotomayor, Vicente (ITD)
When I start slapd on the slave I get on the slave: === 18:37:50 server.foo.no slapd[7971]: @(#) $OpenLDAP: slapd 2.4.23 (Jul 5 2010 18:35:50) $ ^ir...@localhost:/home/kolla/openldap/openldap-2.4.23/debian/build/servers/slapd 18:37:50 server.foo.no slapd[7972]: slapd starting

RE: Expired password allowed in via pwdGraceAuthNLimit w/o warning to user

2010-07-09 Thread Licause, Al
Chris, Again thanks so much for the response. What I don't understand is which component is responsible for requesting the password expiration information ? It must all of pwdGraceAuthNLimit, pwdMaxAge and pwdChangedTime in order to calculate the information needed to determine which warning

Re: Subject: So I finally upgraded from slurpd...

2010-07-09 Thread Kolbjørn Barmen
On Fri, 9 Jul 2010, Sotomayor, Vicente (ITD) wrote: When I start slapd on the slave I get on the slave: === 18:37:50 server.foo.no slapd[7971]: @(#) $OpenLDAP: slapd 2.4.23 (Jul 5 2010 18:35:50) $

Re: Segmentation Fault

2010-07-09 Thread Quanah Gibson-Mount
--On Thursday, July 08, 2010 1:32 PM +0200 Paul Harvey phar...@cern.ch wrote: Does anyone have any suggestions, and what more information do i need to provide. Well, the version of OpenLDAP you are using would be useful. Given that without that, we can't even tell you of any fix(es) that

Re: LDAP Master hangs from time to time

2010-07-09 Thread Quanah Gibson-Mount
--On Friday, July 09, 2010 2:16 PM +0800 Cloud Strife tipidpc.ata...@gmail.com wrote: Hello, We have noticed that our Master LDAP hangs every month; i.e. it stopped processing requests. We're using openldap-2.3.43-3.el5 for LDAP master and slave machines. Does this version have a known bug?

Re: Expired password allowed in via pwdGraceAuthNLimit w/o warning to user

2010-07-09 Thread Chris Jacobs
Al, I don't /know/ but I've gathered the OpenLDAP slapd sends the info, and it's up to the pam_ldap module to understand and act on it. You asked in an email (direct, forgetting to hit reply-to-all I suspect - I've done it too) for my pam config. I'm leaving this morning for a camping trip on

Re: Expired password allowed in via pwdGraceAuthNLimit w/o warning to user

2010-07-09 Thread Buchan Milne
On Friday, 9 July 2010 15:00:27 Licause, Al wrote: Chris, Again thanks so much for the response. What I don't understand is which component is responsible for requesting the password expiration information ? In your specific case, pam_ldap. It must all of pwdGraceAuthNLimit,

Re: So I finally upgraded from slurpd...

2010-07-09 Thread Quanah Gibson-Mount
--On Thursday, July 08, 2010 7:04 PM +0200 Kolbjørn Barmen kolbjorn.bar...@uninett.no wrote: I have at last upgraded a system from using slurpd (debian etch, slapd 2.3.30) to using replsync, at least that was the intention. I believe you mean SyncRepl (Sync Replication). What version of

Segmentation Fault

2010-07-09 Thread Paul Harvey
On 07/09/2010 05:48 PM, Quanah Gibson-Mount wrote: --On Thursday, July 08, 2010 1:32 PM +0200 Paul Harvey phar...@cern.ch wrote: Does anyone have any suggestions, and what more information do i need to provide. Well, the version of OpenLDAP you are using would be useful. Given that

Re: Segmentation Fault

2010-07-09 Thread Quanah Gibson-Mount
--On Friday, July 09, 2010 7:12 PM +0200 Paul Harvey phar...@cern.ch wrote: Hi, You may have guessed that i am new to this... @(#) $OpenLDAP: slapd 2.4.21 (Apr 26 2010 11:07:14) $ bui...@rothera:/build/buildd/openldap-2.4.21/debian/build/servers/slapd Think that this says it all, simply

Re: Segmentation Fault

2010-07-09 Thread Buchan Milne
On Friday, 9 July 2010 18:12:34 Paul Harvey wrote: You may have guessed that i am new to this... @(#) $OpenLDAP: slapd 2.4.21 (Apr 26 2010 11:07:14) $ bui...@rothera:/build/buildd/openldap-2.4.21/debian/build/servers/slapd Think that this says it all, simply got it from the repo at

Access control for multiple admins

2010-07-09 Thread Luiz Marcelo
Hello everyone! Good, I have a scenario where two directors write on the same basis, eg cn=admin1,dc=domain,dc=com and cn=admin2,dc =domain,dc=com In a general scope, both have written permission from the base. However, assuming the user admin1 adds the entry:

Re: LDAP Master hangs from time to time

2010-07-09 Thread Cloud Strife
Hi Sir Edward, It does not have a pattern when it will hang, no specific time or day. The solution we always do is just restart the application and then its ok. We're still investigating the cause of this hanging. We'll look up at your suggestions. Thanks for your help On Fri, Jul 9, 2010 at