Re: Want interesting restrictions to ldap auth on different servers to different users

2010-11-29 Thread c0re
2010/11/19 Phuong Marie VUONG mangocph...@gmail.com: Hello, First, im sorry about my English. I share here my experience which worked for limit acces host/group of host for user... In the configuration of ldap client /etc/ldap.conf , i have activate the host attribute and a filter in

Re: how to compile recent openldap on Centos 5.5

2010-11-29 Thread Götz Reinicke - IT-Koordinator
Am 23.11.10 15:05, schrieb Aaron Richton: On Tue, 23 Nov 2010, Götz Reinicke - IT-Koordinator wrote: I tried to compile the Release 2.4.23 of openldap on my centos 5.5 server. [...] configure: error: BerkeleyDB version incompatible with BDB/HDB backends [...] db4-4.3.29-10.el5_5.2 [...]

OpenLDAP runs OK, Mac Mail and Address book do not display entries.

2010-11-29 Thread Toomas Vendelin
Hi, I have set up an OpenLDAP server on a CentOS 5.5 machine and uploaded test data from ldif file. Apache directory studio connects to server nicely from my Mac and displays the records. Apple Mail and address book also seem to connect OK, but no search results returned in Address Book, and

Re: Content-Based Access Control?

2010-11-29 Thread Frank Rust
I did read, but slapd does it the wrong way. My slapd.conf does contain following: # forbid writing to userPassword for entries starting with {SASL} access to attrs=userPassword val.regex=SASL}.* by * auth stop # allow writing to ldapclient and self, otherwise only auth access to

Re: Want interesting restrictions to ldap auth on different servers to different users

2010-11-29 Thread Howard Chu
c0re wrote: 2010/11/19 Phuong Marie VUONGmangocph...@gmail.com: Hello, First, im sorry about my English. I share here my experience which worked for limit acces host/group of host for user... In the configuration of ldap client /etc/ldap.conf , i have activate the host attribute and a filter

Re: OpenLDAP runs OK, Mac Mail and Address book do not display entries.

2010-11-29 Thread Howard Chu
Ask on an Apple forum. Toomas Vendelin wrote: Hi, I have set up an OpenLDAP server on a CentOS 5.5 machine and uploaded test data from ldif file. Apache directory studio connects to server nicely from my Mac and displays the records. Apple Mail and address book also seem to connect OK, but no

Using shell database

2010-11-29 Thread krishan kumar
Hello, I have compiled openldap-2.4.23 from source. Recently I am learning to use shell database so I try running searchexample.sh script file provided with the openldap sources. But I am not successful in doing so. I think script is not getting executed and I am not getting any search results.

Let user's modify some LDAP entry ?

2010-11-29 Thread Frank Bonnet
Hello I'm searching for some web based software to let users modify some data in our LDAP database after having been authenticated. Typically I would like to let them the possiblity to modify their loginShell , password , phone number ... etc Does such software exists ? Thank you

Re: Let user's modify some LDAP entry ?

2010-11-29 Thread Frank Bonnet
On 11/29/2010 04:10 PM, Bill MacAllister wrote: --On Monday, November 29, 2010 03:49:36 PM +0100 Frank Bonnet f.bon...@esiee.fr wrote: Hello I'm searching for some web based software to let users modify some data in our LDAP database after having been authenticated. Typically I would

Re: Let user's modify some LDAP entry ?

2010-11-29 Thread Bill MacAllister
--On Monday, November 29, 2010 04:18:13 PM +0100 Frank Bonnet f.bon...@esiee.fr wrote: On 11/29/2010 04:10 PM, Bill MacAllister wrote: --On Monday, November 29, 2010 03:49:36 PM +0100 Frank Bonnet f.bon...@esiee.fr wrote: Hello I'm searching for some web based software to let users

syncrepl with accesslog not replicating

2010-11-29 Thread Dieter Klünter
Hi, I am facing a problem with OpenLDAP-2.4.23. That is I am trying to setup a delta replication based on accesslog. Although the accesslog database contains new entries and the log database is successfully read, no replication ever takes place, while a setup without accesslog replicates

Re: syncrepl with accesslog not replicating

2010-11-29 Thread Quanah Gibson-Mount
--On Monday, November 29, 2010 6:31 PM +0100 Dieter Klünter die...@dkluenter.de wrote: Hi, I am facing a problem with OpenLDAP-2.4.23. That is I am trying to setup a delta replication based on accesslog. Although the accesslog database contains new entries and the log database is successfully

Re: syncrepl with accesslog not replicating

2010-11-29 Thread Quanah Gibson-Mount
--On Monday, November 29, 2010 9:31 PM +0100 Dieter Klünter die...@dkluenter.de wrote: Hi Quanah, but I'm not sure, whether the consumer had read the accesslog database and replicated based on this information, because no access to cn=log has been logged. If the replica has no data when it

Re: syncrepl with accesslog not replicating

2010-11-29 Thread Dieter Kluenter
Hi Quanah, Quanah Gibson-Mount qua...@zimbra.com writes: --On Monday, November 29, 2010 6:31 PM +0100 Dieter Klünter die...@dkluenter.de wrote: Hi, I am facing a problem with OpenLDAP-2.4.23. That is I am trying to setup a delta replication based on accesslog. Although the accesslog

Re: syncrepl with accesslog not replicating

2010-11-29 Thread Quanah Gibson-Mount
--On Monday, November 29, 2010 10:05 PM +0100 Dieter Kluenter die...@dkluenter.de wrote: Hi Quanah, Are you sure, that only a logbase statement as part of syncrepl statements as reference to delta synchronization is sufficient? Egh, no, you're right. I have: syncrepl

Re: syncrepl with accesslog not replicating

2010-11-29 Thread Quanah Gibson-Mount
--On Monday, November 29, 2010 10:46 PM +0100 Dieter Kluenter die...@dkluenter.de wrote: Quanah Gibson-Mount qua...@zimbra.com writes: OK, this is what I had, so going back to original configuration. You had scope specified, and the missing new line between the syncrepl and updateref

RE: Problems Enabling Authentication using Cyrus SASL

2010-11-29 Thread Fernando Torrez
Hi all I finally got work cyrus-imapd with cyrus-sasl (and with openldap as backend to authenticate users) I did telnet tests to both pop and imap services from localhost and worked great. but when I tried to do the same tests from other machine authentication fails: mail:~ # telnet

slapcat segfaults when ppolicy overlay added

2010-11-29 Thread Ryan Steele
I've been trying, unsuccessfully, to set up ppolicy in my installation (2.4.21 on Ubuntu). As soon as I set up the overlay (before I even configure a user with a password policy or set up a default policy), slapcatting the database results in a segmentation fault. I tried it on 2.4.23 and

Re: Problems Enabling Authentication using Cyrus SASL

2010-11-29 Thread Dieter Kluenter
Fernando Torrez fernando_tor...@hotmail.com writes: Hi all I finally got work cyrus-imapd with cyrus-sasl (and with openldap as backend to authenticate users) I did telnet tests to both pop and imap services from localhost and worked great. but when I tried to do the same tests from