RE: Can password-hash be database specific? also, storing and verifying cleartext passwords

2010-06-26 Thread masarati
-Original Message- Is the 'password-hash' configuration function a server-wide setting only or can it be set to different values for separate databases? I'm trying to add MAC-auth RADIUS functionality to my LDAP server (openldap-2.4.21) and I need to store the password for the MAC

Slow Email Devliery, Was: ldaprc with ldaps:// and ldap:// fallback

2010-06-26 Thread Dan White
Apologies for the list clutter, but I couldn't find a more appropriate place to send this. I originally sent this question to mail...@www.openldap.org, which is listed on: http://www.openldap.org/mailman/listinfo as the contact for list problems, but that address was rejected with:

limits based on the base being searched (rather than doing the searching)

2010-06-26 Thread Francis Swasey
I have been requested to open up a specific branch of our DIT to allow more than the default number of entries to be returned for searches by anyone that get results from that branch. My reading of the slapd.conf manual page indicates the requested limits adjustment is not possible in the

Re: ldaprc with ldaps:// and ldap:// fallback

2010-06-26 Thread Michael Ströder
Dan White wrote: On 24/06/10 22:13 +0200, Emmanuel Dreyfus wrote: Dan White dwh...@olp.net wrote: You could do SASL EXTERNAL over both, with ldapi:/// using Unix peercred, i.e.: authz-regexp .*uidNumber=([^,]+),cn=peercred,cn=external,cn=auth

Re: Migration from Novell eDirectory to OpenLDAP

2010-06-26 Thread Michael Ströder
Stefan-Michael Guenther wrote: has anyone on this list migrated the data of a Novell eDirectory into an OpenLDAP Server? Yes. I did this for a migration pilot project. The server contained user, personal and organizational data. Our first problem is that the schemas files of the eDirectoy

Re: ldapsearch using entryCSN

2010-06-26 Thread Michael Ströder
Pierre Laporte wrote: Spaces are not allowed in ldap queries. This is not true. Which assertion value is allowed depends on the LDAP syntax and matching rules used for an attribute type. Ciao, Michael.

Re: How to change openldap database directory

2010-06-26 Thread Mail Admin
Thanks Quanah/Mauricio/Chris for the reply. In fact, that is the first thing I did, I get the following error when I start ldap service. Checking configuration files for slapd: bdb_db_open: Cannot access database directory /var/vamail/ldap/mydomain.com (13) Backend_startup_one: bi_db_open

Re: Textual LDIF backup strategies for busy LDAP clusters

2010-06-26 Thread Quanah Gibson-Mount
--On Friday, June 25, 2010 9:58 AM +1000 Nick Urbanik nick.urba...@optusnet.com.au wrote: Dear Quanah, On 23/06/10 21:46 -0700, Quanah Gibson-Mount wrote: --On Thursday, June 24, 2010 12:19 PM +1000 Nick Urbanik nick.urba...@optusnet.com.au wrote: Dear Folks, our old backup system for our

Re: Slow Email Devliery, Was: ldaprc with ldaps:// and ldap:// fallback

2010-06-26 Thread Zdenek Styblik
On 06/25/10 16:25, Dan White wrote: Apologies for the list clutter, but I couldn't find a more appropriate place to send this. I originally sent this question to mail...@www.openldap.org, which is listed on: http://www.openldap.org/mailman/listinfo as the contact for list problems, but

OpenLDAP to replace Oracle Internet Directory

2010-06-26 Thread Matheus Morais
Hi there, I would like to share with this list my experiences with OpenLDAP implementation at one financial company, which is currently my job, and they use Oracle Internet Directory as their solution for LDAP service. This is my third year at the company and in my early days I was responsible to

openldap mysqlcluster and FreeRadius Schema

2010-06-26 Thread Levent ILDENIZ
Hi, i have a problem about openldap with mysqlcluster and with free radius schema i inserted freeradius schema statement in my slapd.conf when i create any user with radiusprofile, i see below failure messages * /ndb_oc_create: CREATE TABLE radiusprofile failed, Row size too large. The

Re: Can password-hash be database specific? also, storing and verifying cleartext passwords

2010-06-26 Thread Howard Chu
masar...@aero.polimi.it wrote: -Original Message- Is the 'password-hash' configuration function a server-wide setting only or can it be set to different values for separate databases? I'm trying to add MAC-auth RADIUS functionality to my LDAP server (openldap-2.4.21) and I need to store

Re: Can password-hash be database specific? also, storing and verifying cleartext passwords

2010-06-26 Thread masarati
The manpage is correct. It clearly states This setting is only allowed in the frontend entry. Right; I was mistaken by the fact that olcPasswordHash is allowed by class olcGlobal. p.

Re: Can password-hash be database specific? also, storing and verifying cleartext passwords

2010-06-26 Thread Howard Chu
masar...@aero.polimi.it wrote: The manpage is correct. It clearly states This setting is only allowed in the frontend entry. Right; I was mistaken by the fact that olcPasswordHash is allowed by class olcGlobal. Yes, it's allowed in olcGlobal for backward compatibility with slapd.conf,

Re: How to change openldap database directory

2010-06-26 Thread Chris Jacobs
It's normally a good idea to leave the thread intact, btw. Moving on... You're probably dealing with either a typo in your config, (locating the database dir), or there's a permission issue on that dir, it's parent tree. Is the new location a remote mounted location (ie: NFS - which is a no-no

Re: openldap mysqlcluster and FreeRadius Schema

2010-06-26 Thread Howard Chu
Levent ILDENIZ wrote: Hi, i have a problem about openldap with mysqlcluster and with free radius schema i inserted freeradius schema statement in my slapd.conf when i create any user with radiusprofile, i see below failure messages * /ndb_oc_create: CREATE TABLE radiusprofile failed, Row