Re: How to check LDAP replication status?

again! If anyone wants to contribute some? -- Kind Regards, Gavin Henry. OpenLDAP Engineering Team. E ghe...@openldap.org Community developed LDAP software. http://www.openldap.org/project/

Re: acls help

tryed -1 without success (looking for denying information)) Sorry my low know how in this issue, but I realy need to finish this job. Thanks. man slapacl will help -- Kind Regards, Gavin Henry. OpenLDAP Engineering Team. E ghe...@openldap.org Community developed LDAP software. http

Re: OpenLDAP with MySQL Cluster - No free node Error

the following error: Configuration error: Error : Could not alloc node id at 192.168.7.40 port 1186: No free node id found for mysqld(API). Did you resolve this? Thanks. -- Kind Regards, Gavin Henry. OpenLDAP Engineering Team. E ghe...@openldap.org Community developed LDAP software. http

Re: tnsnames in openldap

already running OpenLDAP 2.4 is makes sense to just roll it from there. I found a VERY useful article at http://oracle-cookies.blogspot.com/2007/01/get-tnsnamesora-from-openldap.html which I think will help enormously. How did you get on with this? -- Kind Regards, Gavin Henry

Re: OpenLDAP to replace Oracle Internet Directory

- Matheus Morais matheus.mor...@gmail.com wrote: Hi Gavin, Sorry for the late reply, I need to organize my mail box, I just not seen this email! On Mon, Jul 26, 2010 at 2:24 PM, Gavin Henry ghe...@openldap.org wrote: I want thank every one responsible to keep OpenLDAP

Re: Problem of getpeereid.c:38: error: storage size of ‘peercred’ isn’t known

with CPPFLAGS=-D_GNU_SOURCE. what is the Presumably ? can you pls give me the full command that should i follow ??? Thx !! -- Kind Regards, Gavin Henry. OpenLDAP Engineering Team. E ghe...@openldap.org Community developed LDAP software. http://www.openldap.org/project/

Re: Loading LDAP schema files into cn=config

, Mark. -- Mark Cave-Ayland - Senior Technical Architect PostgreSQL - PostGIS Sirius Corporation plc - control through freedom http://www.siriusit.co.uk t: +44 870 608 0063 Sirius Labs: http://www.siriusit.co.uk/labs -- Kind Regards, Gavin Henry. OpenLDAP Engineering Team. E ghe

Re: SASL passthrough - multiple domains

Leicestershire LE1 7RH, United Kingdom -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/ Suretec Systems is a limited company registered

Re: SASL passthrough - multiple domains

, how's the Symas book going? That's been on the backburner for a while. We've spent more time writing the code, which of course meant it was always changing so everything we wrote about it was already out of date. Has SoC passed? Maybe we could get some funding for it? -- Kind Regards, Gavin

Re: Docs To Do list and other ideas. Please contribute

On 5 July 2012 16:44, Gavin Henry gavin.he...@gmail.com wrote: On 5 July 2012 08:23, Michael Ströder mich...@stroeder.com wrote: xsun wrote: I don't remember if we talked about a wiki in the past but it's definitely a good idea. I mean, if available, we could start to migrate/review

Re: SASL passthrough - multiple domains

For anyone reading french, I published some times ago such kind of cookbook, in Linux magazine (the french one): https://www.zarb.org/~guillomovitch/articles/openldap.pdf Looks good. All the overlay stuff and replication we have covered I think, maybe not as much ACLs and no Posix things,

Anyone using ejabberd with OpenLDAP?

HI all, Taking advantage of the technical list for once and the OpenLDAP related questions :-) Anyone messed with ejabberd and OpenLDAP? I'm looking for an XMPP server with the best LDAP support. ejabberd does auth, rosters and vcards but the ability to load a list of hosts/domains from LDAP

Re: Docs To Do list and other ideas. Please contribute

So where are we? Wiki - no then? Or Wiki like dokuwiki which does plain text files, stick them in the back of a git repo, add some hooks to do commits so we can all work offline and use the Dokuwiki PDF exports? We just need something to look new :-) --

Re: Docs To Do list and other ideas. Please contribute

There's me getting reminded with have one at http://www.openldap.org/wiki My bad. Forgot my password, reset a few times now and it won't let me in. Kurt? -- http://www.suretecsystems.com/services/openldap/ http://www.surevoip.co.uk

Fwd: [Foswiki-discuss] Mass import advice from OpenLDAP project Faq-O-Matic to foswiki?

. Best of luck Lars 2011/5/2 Olivier 'Babar' Raginel w...@babar.us On Mon, May 02, 2011 at 09:46:07PM +0100, Gavin Henry wrote: I'm the doc dev for the OpenLDAP project (ghe...@openldap.org) and I'm moving our Faq content from Faq-O-Matic to our new wiki: That's great news! Any tips

Re: Anyone using ejabberd with OpenLDAP?

HI all, Taking advantage of the technical list for once and the OpenLDAP related questions :-) Anyone messed with ejabberd and OpenLDAP? I'm looking for an XMPP server with the best LDAP support. ejabberd does auth, rosters and vcards but the ability to load a list of hosts/domains from

Re: Anyone using ejabberd with OpenLDAP?

HI all, Taking advantage of the technical list for once and the OpenLDAP related questions :-) Anyone messed with ejabberd and OpenLDAP? I'm looking for an XMPP server with the best LDAP support. I don't know about best. I picked ejabberd due to stability, and how it does basic stable

Re: ACL syntax for delegating a subdomain to a group

with slapacl and/or ldapsearch. Once, happy convert the slapd.conf to a slapd.d setup and reference the right LDIF output to import/update on your test environment. Then once double happy make live. Best way to learn, sorry :-) -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M

Re: delta-syncrepl stopped receiving changes

, Gavin Henry. OpenLDAP Engineering Team. E ghe...@openldap.org Community developed LDAP software. http://www.openldap.org/project/

Re: replicating accesslog

replicated as well? Hi Marvin, What version are you on? Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/ Suretec Systems

Re: delta-syncrepl stopped receiving changes

Hi Dave, Have you been able to reproduce it since? Thanks. So far I've only had the one failure and I haven't been able to reproduce it since. That's tricky then. Did you file an ITS? Will check... -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930

Re: slapo-chain + TLS = help

. Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/ Suretec Systems is a limited company registered in Scotland. Registered number

Re: slapo-chain + TLS = help

There are some good instances where StartTLS isn't attractive: when the LDAP servers are behind F5 BigIPs for example. My 2 cents. Yeah, true. Depends on environment and some kit just won't do StartTLS.

Re: Translucent Proxy to filter users

Enterprise would only see a few hundred users instead of thousands. Is this doable? Is there a better solution? Or you could use back-ldap too. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretecsystems.com Open Source

Re: What will happen if there are two user with same uid in OpenLDAP server

=example,dc=com with uid in the entry or uid=ghenry,ou=Users,dc=example,dc=com ? Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com

Re: Translucent Proxy to filter users

is the management moving forward. Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/ Suretec Systems is a limited company registered

Re: slapo-chain on syncrepl slave. I simply can't get it working. Help??

? If I do ldapmodify -x -D .. -h provider.hostname -W -f modfile.ldif it works fine. It's only when slapo-chain handles the referrals. Remove your dn{} line and see http://www.openldap.org/doc/admin24/appendix-ldap-result-codes.html#strongerAuthRequired (8) -- Kind Regards, Gavin Henry

Re: What will happen if there are two user with same uid in OpenLDAP server

with uid, it works, but if I login with common name, it fails. http://www.catb.org/~esr/faqs/smart-questions.html as you can find out what RDN is by Google which is quicker than what you wrote. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0

Re: slapo-chain on syncrepl slave. I simply can't get it working. Help??

Remove your dn{} line. Sorry, which dn line do you mean? This? authzTo: {0}dn:* Yeah. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretecsystems.com Open Source. Open Solutions(tm). http

Re: slapo-chain on syncrepl slave. I simply can't get it working. Help??

On 29 Jul 2012, at 11:08, elekktrett...@exemail.com.au elekktrett...@exemail.com.au wrote: No difference. What were you hoping it would do? Sorry, I replied in a rush! Gavin.

Re: Special characters in distinguished name

formed your DN. What does it look like? Check the objectClass definitions for those attributes and look up the syntax type. That will tell you. Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretec.co.uk

Internal telephone extension number

Hi all, What attribute are you using to represent an internal telephone extension? Can't see any standards based ones. Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretec.co.uk Open Source. Open

Re: modify search base dn depending on search filter

. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/ Suretec Systems is a limited company registered in Scotland. Registered number: SC258005

Re: personalization

I have a requirement to support personalization. I didn't find many articles to do that. Please point me some of the articles related to it. HI, Please explain more. Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887

Re: MDB configuration admin guide

from BDB to MDB. Can anyone point me where i can find these document. This is in the man page - please read man slapd-mdb as you would with most Open Source software :-) Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224

Re: Internal telephone extension number

On 10 August 2012 15:48, Hallvard Breien Furuseth h.b.furus...@usit.uio.no wrote: Gavin Henry ghe...@suretec.co.uk wrote: What attribute are you using to represent an internal telephone extension? Our site just uses telephoneNumber with the full number, and leaves it to the users to know

Lazy ACLs and keeping your DIT as flat as possible

to ou=Groups, why shouldn't I at the same time add a new ACL via cn=config? Cheers. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretec.co.uk Open Source. Open Solutions(tm). http://www.suretecsystems.com/ Suretec

Breathing life into the OpenLDAP Cookbook

to register to edit. Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretec.co.uk Open Source. Open Solutions(tm). http://www.suretecsystems.com/ Suretec Systems is a limited company registered in Scotland

Re: Breathing life into the OpenLDAP Cookbook

I'm pretty sure all these topics are still relevant and I've added some more: http://wiki.suretec.org/openldap:cookbook Feel free to add anything in the right place. You'll need to register to edit. I think we'll need to add mdb :-) -- Kind Regards, Gavin Henry. Managing Director. T +44

Re: Breathing life into the OpenLDAP Cookbook

On 10 Aug 2012, at 18:01, NetNinja 2bitni...@gmail.com wrote: This a nice page, but have you added any content at all? Doesn't look like it :) Gavin.

Re: Breathing life into the OpenLDAP Cookbook

/products/surevoip-numbers Free for one year. Cheers. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretec.co.uk Open Source. Open Solutions(tm). http://www.suretecsystems.com/ Suretec Systems is a limited company

Re: Internal telephone extension number

telephoneExtNumber would be perfect. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/ Suretec Systems is a limited company registered

Re: Breathing life into the OpenLDAP Cookbook

Ok so what did he add to the site? I don't care about a UK phone number. With DokuWiki, anything green means it's a valid link with content. So just go to: http://wiki.suretec.org/openldap:cookbook and look for green. Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224

Re: ACL: access to all values vs. to value

Gavin Henry wrote: is there a possibility to create an acl statement that grants access to any (unknown) value of an attribute but denys access to all values of the same attribute? Can you explain that again? BTW: Your answer didn't find its way into the openldap-technical archive: http

Re: got into a checksum error situation

On 12 August 2012 00:00, Patrick Hemmer openl...@stormcloud9.net wrote: Sent: Sat Aug 11 2012 18:06:49 GMT-0400 (EDT) From: Jeff Dickens j...@seamanpaper.com To: Gavin Henry ghe...@suretecsystems.com openldap-technical@openldap.org Subject: Re: got into a checksum error situation Yes, I

Re:

Excellent. Thanks for following up. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretec.co.uk Open Source. Open Solutions(tm). http://www.suretecsystems.com/ Suretec Systems is a limited company registered

Re: delta-syncrepl stopped receiving changes

if using cn=config and make sure mdb module is loaded if slapd built that way Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretec.co.uk Open Source. Open Solutions(tm). http://www.suretecsystems.com

Re: Lazy ACLs and keeping your DIT as flat as possible

in the conf. I guess I'll have to create branches to split up users. Then again, I'm adding a group to ou=Groups, why shouldn't I at the same time add a new ACL via cn=config? Cheers. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0

Re: help with setting up replication

#Load the syncprov and accesslog modules. dn: cn=module{0},cn=config changetype: modify add: olcModuleLoad olcModuleLoad: syncprov Are you using the Ubuntu OpenLDAP build? -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E

Re: got into a checksum error situation

in slapd.d/* and then slapadd it back. Checksums will sort themselves. As an aside, my TLS config does indeed work now. Nice work! -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretec.co.uk Open Source. Open

Re: Advice request : LDAP server discovering

to use. Then you only set the one server on the client side. You could also go further and load balance/HA the directory proxy in each area. Not sure on your requirements. Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E

Re: Openldap Chaining

. Thanks Hi Jeevan, You chain to a Master/Provider. Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/ Suretec Systems

Re: ACL and New users binding as anonym haveous

Hi, I presume you're using pam_ldap? What are your settings? Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/ Suretec

Re: Openldap Chaining

Thanks for the reply Gavin. So that means I need to configure and add the overlays only on the slaves and not on the master, right? Yep. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretecsystems.com Open

Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?

http://searchdatacenter.techtarget.com/feature/IT-pros-suffer-OpenLDAP-configuration-headaches Any one been in touch with them? -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghe...@suretec.co.uk Open Source. Open

Re: TOTP configuration

On 9 Nov 2015 11:37, "PRAJITH" wrote: > > Hi, > > Could you please add more info about the TOTP modul? I could not find any single article about this. Could you file a doc request on the OpenLDAP ITS? Thanks.

Re: Documentation

Hi all, I'll be back on this in June. Been a busy month at work. Thanks.

Re: Antw: Re: Documentation Feedback

Hi all, I'll be back on this in June. Been a busy month at work. Thanks.

Re: Virtual list view problem

On 8 September 2009 at 13:30, Venish Khant wrote: > Michael Ströder wrote: >> >> Venish Khant wrote: >> >>> >>> You have any idea about how to >>> upgrade openldap. >>> Because, my openldap version 2.4.15 so, I want upgrade. >>> >> >> Old one, but I'm just using this code

Re: Documentation Feedback

> I would offer to contribute to the documentation, but due to its lack of usefulness, do not have an understanding of the basic concepts myself. The best I would be able to do is describe my experience and provide the steps that I followed to get a basic installation working. > > Hopefully

Re: Documentation Feedback

> I would offer to contribute to the documentation, but due to its lack of usefulness, do not have an understanding of the basic concepts myself. The best I would be able to do is describe my experience and provide the steps that I followed to get a basic installation working. > > Hopefully

Documentation

Hi all, List what you love about our docs: List what you hate: List what you'd love to see: List what you can help with: Thanks. -- Kind Regards, Gavin Henry.

Re: Documentation

> > I guess what I'm trying to say, from my mobile phone, is if the documentation were more "agile" in engaging the community for identifying issues and taking in corrections, we may all be happier. > Some great feedback. Maybe we could host something like gitlab for this. Will have a chat on

Re: Documentation Feedback

Thanks Tom. Will take a look. We've never had an installation script like this as it's normally part of the distro packaging system. The OpenLDAP just ships the source code and every distro likes things in different places even with the FHS v3.0 gavin. -- Kind Regards, Gavin Henry.

Re: Introduction of openldapjs

> > Brilliant. Look forward to playing with it and vuejs.

Re: Using supportedControl 1.3.6.1.4.1.4203.1.10.1 (Subentries) - critical extension is unavailable 12

This isn't implemented in Net::LDAP yet. Please ignore :-) https://github.com/perl-ldap/perl-ldap/issues/59#issuecomment-751496848

Using supportedControl 1.3.6.1.4.1.4203.1.10.1 (Subentries) - critical extension is unavailable 12

Hi all, I'm doing this for a supportControl subentry delete: https://metacpan.org/pod/Net::LDAP::Control like so: my $subentry_ctrl = Net::LDAP::Control->new( type => '1.3.6.1.4.1.4203.1.10.1', value=> 'Subentries', critical => 1 );

Re: Configuring OpenLdap Proxy for Mirror-Mode

Hi Wayne, Ah, OK. What's your concern with just running with N-Way? Thanks. On Fri, 13 Aug 2021 at 21:33, Wayne McNaught wrote: > > Hi Gavin, > Thanks for responding. At the moment we have 3 back-end OpenLDAP servers V2.4 > in Multi-Master mode with N-Way Multi-Provider replication. We have

Re: Configuring OpenLdap Proxy for Mirror-Mode

On Thu, 12 Aug 2021 at 18:05, Wayne McNaught wrote: > > I have previously asked this question with no response 18 months ago, I would > still like some assistance I have configured multiple LDAPs in a Mirror-Mode > configuration and fronted by OpenLDAP in proxy mode. I understand that the >

Re: Highly Available Proxies

Same question as your other email :-)