[ldap] Re: Ldap User and Group problem

2010-01-07 Thread Dieter Kluenter
vinu upadhya writes: > Can you please explain how to set olcloglevel to more verbose value as I am > new to the ldap concept. Also what is olcloglevel? what is its use? My > slapd.conf file is located under /etc/openldap/slapd.conf. > > Thank you so much [cid] slapd.conf is deprecated, see ma

[ldap] Re: Ldap User and Group problem

2010-01-07 Thread Dieter Kluenter
vinu upadhya writes: > Thanks for the reply > > I am using Webmin tool for Ldap administration. In webmin tool there is an > option for adding users as well as adding users to particular group,I am using > this tool. Now I have planned to restart the server and then later I am > planning to check

[ldap] Re: Ldap User and Group problem

2010-01-06 Thread Dieter Kluenter
"Vinayak" writes: > Hi > I have a Ldap Server installed on opensuse 10.3. Recently from past 2 days > I have been facing a problem in adding particular user to particular > group. there are so many groups created in the server, so that User > without in group can not be able to run any of the app

[ldap] Re: Expanding authentication and authorization in LDAP

2009-08-17 Thread Dieter Kluenter
Matt Juszczak writes: > Thanks Dieter. > > Basically, we're trying to share our directory information with > another site, but only if the user says its OK. So the other site's > permissions are really on an entry by entry basis. So you're saying > create a group for each user is probably not t

[ldap] Re: Expanding authentication and authorization in LDAP

2009-08-17 Thread Dieter Kluenter
Matt Juszczak writes: >> In OpenLDAP's nssov you use access controls on the ipHost entries >> instead, and just by assigning users to groups and granting groups >> access to the ipHost / authorizedService attribute you can control >> authorization in a centralized location. It's far more scalable

[ldap] Re: LDAP + Samba + Posix

2009-05-27 Thread Dieter Kluenter
André Ribas writes: > Adam Williams wrote: >> >> >> André Ribas wrote: >>> Ok, then I'll have all the posix users in my ldap base, but how >>> about the samba users? >>> >>> >>> And a lot of samba users... but Samba needs that the user exists in >>> the linux too. So my problem is how to migrate

[ldap] Re: Is a searchable dc tree rooted in a null base suffix wrong or just hubris?

2008-12-04 Thread Dieter Kluenter
Bill Cole <[EMAIL PROTECTED]> writes: > The question in my Subject is what all this boils down to, so if you > have no time to read a long explanation, feel free to answer it as > asked... [...] Yes, it is valid to define a DIT with root "", but your clients should point to a defined subtree. -D

[ldap] Re: LDAP Error 32 v/s Empty Result Set

2008-10-15 Thread Dieter Kluenter
"Agarwal, Sharad" <[EMAIL PROTECTED]> writes: > Thanks Adam. > > My apologies, I should have been more clear on that front. Both the > searchBase and bind information is valid. The only thing out of order > (if we can call it that) is that the search is for something that does > not exist. Put ano

[ldap] Re: ldap model to provide rights to people/groups

2008-10-13 Thread Dieter Kluenter
"Wessel Louwris" <[EMAIL PROTECTED]> writes: > Hi, > > I have some trouble designing an LDAP model. I have to setup something in > which I can lookup what > right a person has to access a certain module. > This has to be generic in respect of where the peoples/groups are stored in > the direct

[ldap] Re: find Active directory server location

2008-07-11 Thread Dieter Kluenter
Thts me <[EMAIL PROTECTED]> writes: > Thanks. That helps! > Also how do I find out the port of the Active directory server? Default port is 389, but again ask your DNS, as Active Directory registers service ldap and port with SLP. -Dieter -- Dieter Klünter | Systemberatung http://www.dkluente

[ldap] Re: find Active directory server location

2008-07-11 Thread Dieter Kluenter
Thts me <[EMAIL PROTECTED]> writes: > hi, > > My Active directory server is located somewhere in my network. Is there a > way to find its location (IP address) & port ? Active Directory registers with your domain name service using Service Location Protocol (SLP), just ask your name server for se

[ldap] Re: ldap client on solaris

2008-07-09 Thread Dieter Kluenter
Hi, Umar <[EMAIL PROTECTED]> writes: > Dear Members! > > I have Linux ldap server with SSL/TLS. > > I have solaris 10 and i want to communicate solaris 10 with my linux ldap > server would you please help me how i can do it. Could you please be a bit more precise? What brand of directory server

[ldap] Re: [newbie] How to clear any database information...

2008-05-07 Thread Dieter Kluenter
Hello, "Bernard T. Higonnet" <[EMAIL PROTECTED]> writes: > Hello, > > I have installed the openldap server under FreeBSD 7.0 and am just beginning > to try and use it. > > Before sending emails to this list about the other numerous problems I have, > is there a simple way to bring the database

[ldap] Re: Help needed to create a Referral entry

2007-10-12 Thread Dieter Kluenter
"Mittal, Nitin \(US - Mumbai\)" <[EMAIL PROTECTED]> writes: > Hi > > I am struggling with creating a referral entry in my apacheDS DIT, > > 1.)) I created an entry with following classes :- top, extensibleObject and > referral > However I am not sure about the format of value string for attribut

[ldap] Re: Simple access list problem

2007-09-16 Thread Dieter Kluenter
Lars Staun Knudsen <[EMAIL PROTECTED]> writes: > Hi > > I'm having trouble of giving a single user read access to a group. I > created "cn=postfix,ou=Service,dc=dom", and i want the user to have > read right. Instead of always putting the user/pwd of the all access > admin in my conf-files.

[ldap] LDAP Convention 2007

2007-07-18 Thread Dieter Kluenter
Hello, this years LDAPcon is beeing helt at Cologne, Germany. You are all invited to attend this Convention. http://www.guug.de/veranstaltungen/ldapcon2007/ the registration is now open. -Dieter -- Dieter Klünter | Systemberatung http://www.dkluenter.de GPG Key ID:8EF7B6C6 --- You are curren

[ldap] Re: XML format to describe LDAP Schema

2007-05-21 Thread Dieter Kluenter
"François Beretti" <[EMAIL PROTECTED]> writes: > Hi, > > do you know a format (in XML if possible) used to describe an LDAP Schema ? > > I found DSMLv1 (not DSMLv2), but the XML Schema defining it is not > valid, the website www.dsml.org is dead, and it doesn't seem to be > used. > > Are there oth

[ldap] Re: deployment scenario: possible?

2007-03-20 Thread Dieter Kluenter
Hi, Matija Grabnar <[EMAIL PROTECTED]> writes: > I've only dealt with LDAP as a programmer so far (writing clients that > fetched data) but now I need to do a feasibility study of a > non-standard deployment: > > We want to set up a segment of our network, firewalled from the inside > of the comp

[ldap] Re: test ldap question...

2007-02-07 Thread Dieter Kluenter
"bruce" <[EMAIL PROTECTED]> writes: > hi... > > i have a question that i need to solve for a possible research project for a > class next semester. > > i'm looking at creating a test system of faculty across universities, to > demonstrate some various methods of data mining/web services/etc... > >

[ldap] Re: Still Lost On SASL Documentation

2006-12-13 Thread Dieter Kluenter
Original-Nachricht Datum: Wed, 13 Dec 2006 15:25:56 +0100 Von: "Ralph Rößner" <[EMAIL PROTECTED]> An: Adam Williams <[EMAIL PROTECTED]> Betreff: [ldap] Re: Still Lost On SASL Documentation > To clarify one point: > > On Tue, Dec 12, 2006 at 12:51:27PM -0500, Adam Williams wrote

[ldap] Re: BDB Problem

2006-11-19 Thread Dieter Kluenter
Rachel Florentine <[EMAIL PROTECTED]> writes: > 103103105104102 > > 8585 > Hi; > I've rebuilt openldap with this incantation: > make WITH_BDB_VER=42 WITH_SASL=yes WITH_MODULES=yes WITH_PROXYCACHE=yes > WITH_UNIQUE=yes WITH_PPOLICY=yes WITH_ACCESSLOG=yes install clean > after editing Makefile to ad

[ldap] Re: "Two tier" LDAP servers

2006-11-19 Thread Dieter Kluenter
Hi, "Adam Brandizzi" <[EMAIL PROTECTED]> writes: > Hi, people! > > I work for a Brazilian institution which has a series of labs for > ditigal inclusion over the country and want to unify the > authentication database using LDAP. > > It would be simple, except for one rather uncommon detail: my >

[ldap] Re: address book in ldap

2006-11-13 Thread Dieter Kluenter
Mark Schwarz <[EMAIL PROTECTED]> writes: > Hi there, > > i'm looking for a "howto" a address book in ldap. > The plan is a couple of users with there own private address books. > (mozilla scheme) > Every user must be able read/write to his own private adress book only. > A nice feature to browse a

[ldap] Re: ldapmodify, bound as "self"

2006-10-19 Thread Dieter Kluenter
Martin Schwartz <[EMAIL PROTECTED]> writes: > Hello, > > I have an elementary problem and simply can't find the solution. I want > my users being able to modify their own data. Modification by others > should be forbidden. My test goes: [...] > Can someone explain why, and what to do instead? > se

[ldap] Re: Some More Newbie Questions

2006-10-19 Thread Dieter Kluenter
Ted Johnson <[EMAIL PROTECTED]> writes: > man openssl(1), man ca(1). > Hmmm. The first doesn't even have the string "pem" in it! The second talks a > bit about pem, but nowhere does it address the issue of concatenation! Here's > a snippet from the latter. Perhaps I'm missing something here? > Si

[ldap] Re: Some More Newbie Questions

2006-10-19 Thread Dieter Kluenter
Ted Johnson <[EMAIL PROTECTED]> writes: > >> TLSCertificateKeyFile cannot be encrypted, what is the preferred way to >> protect it? > Filesystem protection. > 20 minutes of googling gave me unsatisfactory results. I presume you mean: > chown root > chgrp wheel > chmod 0600 > If you mean more than

[ldap] Re: Some More Newbie Questions

2006-10-18 Thread Dieter Kluenter
Ted Johnson <[EMAIL PROTECTED]> writes: > - Original Message > > > From: Quanah Gibson-Mount <[EMAIL PROTECTED]> > > > Quanah enlightened me today to the fact that man pages hold more information > than merely command-line commands! And so naturally, I've spend the past few > hours studyi

[ldap] Re: keeping log of modifications?

2006-10-18 Thread Dieter Kluenter
Hi, 张韡武 <[EMAIL PROTECTED]> writes: > Hello. In our system we have been tracking the data for correctness for > a long time and this work is hard to do if we don't keep operation > history, e.g. which operator changed the contact information of which > person on what date. > > Basically what we

[ldap] Re: What Is "Key"?

2006-10-07 Thread Dieter Kluenter
Ted Johnson <[EMAIL PROTECTED]> writes: > Dieter Kluenter wrote: >> Ted Johnson > <[EMAIL PROTECTED]> writes: >> >>> Hi; >>> I'm new to LDAP and working to integrate this with > a >>> Plone/Zope >>> installation. In readin

[ldap] Re: What Is "Key"?

2006-10-07 Thread Dieter Kluenter
Ted Johnson <[EMAIL PROTECTED]> writes: > Hi; > I'm new to LDAP and working to integrate this with a > Plone/Zope > installation. In reading the documentation for the > same, they use the > term "key", such as "group key" and "user key", and I > don't know to what > this refers. Could someone enli

[ldap] Re: last-resort problem with GQ and CDS-Silver

2006-10-06 Thread Dieter Kluenter
"Manilal K M" <[EMAIL PROTECTED]> writes: > Hi all, >Recently I migrated from openldap-2.2.13 to CDS Silver 3.3 (symas > ldap) in my CentOS-4.4 server. Earlier I had a ldbm backend, but now > bdb is used. I used GQ for browsing the ldap tree . Earlier when > openldap is used it was working. Bu

[ldap] Re: Planning LDAP & LDIF

2006-09-23 Thread Dieter Kluenter
Lars Staun Knudsen <[EMAIL PROTECTED]> writes: > Hi > > I'm trying to setup OpenLDAP on Debian Sarge, my plan is use it for > authentication for Linux/MacOs clients, mail-server, WebDav on > apache2 and etc. Get acqainted with SASL Authentication and OpenLDAP as backend, in particular with auxpro

[ldap] Re: Authentication in LDAP centralised database

2006-09-20 Thread Dieter Kluenter
bijayant kumar <[EMAIL PROTECTED]> writes: > Hi, >   I have configured openLDAP server and client. And i am planning to > create a centralize database > for my users. We provide domains to our clients. Now i want that users of one > particular domain should > not be able to see the email ids

[ldap] Re: Creating another domain under existing domain

2006-09-15 Thread Dieter Kluenter
bijayant kumar <[EMAIL PROTECTED]> writes: > Hi, >   I am trying to configure Virtual Mailserver using Postfix, OpenLDAP, and > Courier.  I am following this site : [...] > ldap_add: Internal (implementation specific) error (80) >     additional info: no structuralObjectClass operational a

[ldap] Re: postfix with openLDAP

2006-09-13 Thread Dieter Kluenter
bijayant kumar <[EMAIL PROTECTED]> writes: > Hi, >   I am trying to configure postfix and courier-imap with openLDAP. But i > am not getting any good documents on this topic. I have posted my problem 4 > days before also. But didnt get any reply. Please please help me. I will be > very thankfu

[ldap] Re: tls problem

2006-08-27 Thread Dieter Kluenter
Karsten Römke <[EMAIL PROTECTED]> writes: > Dieter Kluenter schrieb: >> Hi, >> >> Karsten Römke <[EMAIL PROTECTED]> writes: >> >>> Dieter Kluenter schrieb: >>>> Hi, >> >>> Hi, >>> I have done: >>>

[ldap] Re: tls problem

2006-08-26 Thread Dieter Kluenter
Hi, Karsten Römke <[EMAIL PROTECTED]> writes: > Dieter Kluenter schrieb: >> Hi, > Hi, > I have done: > oracle:/etc/openldap # openssl x509 -in servercrt.pem -text > servercrt.txt > oracle:/etc/openldap # openssl x509 -in cacert.pem -text > cacert.txt >

[ldap] Re: tls problem

2006-08-24 Thread Dieter Kluenter
Hi, Karsten Römke <[EMAIL PROTECTED]> writes: > Dieter Kluenter schrieb: >> Karsten Römke <[EMAIL PROTECTED]> writes: >> >>> Dieter Kluenter schrieb: >>>> Quanah Gibson-Mount <[EMAIL PROTECTED]> writes: >>>> >>>&

[ldap] Re: tls problem

2006-08-23 Thread Dieter Kluenter
Karsten Römke <[EMAIL PROTECTED]> writes: > Dieter Kluenter schrieb: >> Quanah Gibson-Mount <[EMAIL PROTECTED]> writes: >> >>> --On Wednesday, August 23, 2006 8:18 PM +0200 Karsten Römke >>> <[EMAIL PROTECTED]> wrote: [...] >>> These do

[ldap] Re: tls problem

2006-08-23 Thread Dieter Kluenter
Quanah Gibson-Mount <[EMAIL PROTECTED]> writes: > --On Wednesday, August 23, 2006 8:18 PM +0200 Karsten Römke > <[EMAIL PROTECTED]> wrote: > >> ok, t would be nice if it is a configuration problem >> I have tried the openssl -s_client. >> openssl s_client -connect oracle.hhb.bonn.de:636 -showcerts

[ldap] Re: tls problem

2006-08-23 Thread Dieter Kluenter
Quanah Gibson-Mount <[EMAIL PROTECTED]> writes: > --On Wednesday, August 23, 2006 7:22 PM +0200 Dieter Kluenter > <[EMAIL PROTECTED]> wrote: > >> Karsten Römke <[EMAIL PROTECTED]> writes: >> >>> Quanah Gibson-Mount schrieb: >>>> >

[ldap] Re: tls problem

2006-08-23 Thread Dieter Kluenter
Karsten Römke <[EMAIL PROTECTED]> writes: > Quanah Gibson-Mount schrieb: >> >> >> --On Wednesday, August 23, 2006 6:09 PM +0200 Karsten Römke >> <[EMAIL PROTECTED]> wrote: > TLS trace: SSL_connect:before/connect initialization > TLS trace: SSL_connect:SSLv2/v3 write client hello A > TLS trace:

[ldap] Re: Simuating delay for the LDAP server response

2006-08-22 Thread Dieter Kluenter
"qazmlp" <[EMAIL PROTECTED]> writes: > We want to simulate the case where the response from the LDAP server > should be delayed by certain seconds. > Is it possible to simulate the server delay at the OpenLDAP server? As far as I know one can not configure OpenLDAP to delay requested responds, bu

[ldap] Re: LDAP Schema Expiration date

2006-07-27 Thread Dieter Kluenter
Adam Tauno Williams <[EMAIL PROTECTED]> writes: >> > i would like to know how can i create a LDAP schema, >> > that associate an expiration date to a ldap account. >> RFC-2589 describes a dynamic object. > > Interesting, I've never used dynamic objects before; but it appears > that OpenLDAP suppo

[ldap] Re: LDAP Schema Expiration date

2006-07-27 Thread Dieter Kluenter
Anthony <[EMAIL PROTECTED]> writes: > Hello, > > i would like to know how can i create a LDAP schema, > that associate an expiration date to a ldap account. RFC-2589 describes a dynamic object. Dieter -- Dieter Klünter | Systemberatung http://www.dkluenter.de GPG Key ID:8EF7B6C6 --- You are

[ldap] Re: openldap problems with german umlaute

2006-07-21 Thread Dieter Kluenter
Dieter Schicker <[EMAIL PROTECTED]> writes: > Hi, > > when I try to add a ldif file (encryption: utf-8) with german umlaute in > in it, I get: > > ldap_add: Invalid syntax (21) > additional info: memberUid: value #6 invalid per syntax > > Any ideas? How can I get diacritics and umlaute to

[ldap] Re: Problems with extension.schema

2006-06-13 Thread Dieter Kluenter
"Julio Hevia" <[EMAIL PROTECTED]> writes: > Hello list! > > I have some problems with the extension.schema. The thing is I would like > to add some notes with the 'comment' attribute. But I have an error: [...] > This is part of my extension.schema: (sorry about the flood) > > attributetype ( 1.3.

[ldap] Re: postalAddress not searchable with asterisk?

2006-05-26 Thread Dieter Kluenter
Zhang Weiwu <[EMAIL PROTECTED]> writes: > It is pertty strange that ldapsearch always return 0 results for > postalAddress search like this: > > postalAddress=*a* > > (varified there are a lot of entries with at least one 'a' in it) > > Any hint? As far as I know, there are no rules for substring

[ldap] Re: URGENT - OpenLdap corruption/recovery

2006-02-02 Thread Dieter Kluenter
"Ricardo Ferreira" <[EMAIL PROTECTED]> writes: > Dear Dieter, > > Sorry if I didn't send you the openLDAP version, I'll send you in the > following: > > Doing > $slapd -V > gives me > @(#) $OpenLDAP: slapd 2.2.20 (Jan 31 2005 15:12:48) $ > > Backend SleppyCat vs db-4.3.27 Did you edit a DB_CONFIG

[ldap] Re: URGENT - OpenLdap corruption/recovery

2006-02-01 Thread Dieter Kluenter
Hi, "Ricardo Ferreira" <[EMAIL PROTECTED]> writes: > Hi, > > I'm using openLDAP server with berkeley sleepycat as dabase backend with > more than 150GBytes of information. > > I'm having some problems when I'm adding information to LDAP server and > the connection suddenly went down despite net f

[ldap] Re: Export from LDAP to other formats?

2005-10-03 Thread Dieter Kluenter
Hi, Zhang Weiwu <[EMAIL PROTECTED]> writes: > Hello. Just wanna know if there are existing scripts to convert/export > LDAP to other formats. > > Examples are: excel acceptable formats, printable formats, vcards, etc. Here are 2 links, google will supply more http://www.yolinux.com/TUTORIALS/L

[ldap] Re: ldap schema for instant messengers

2005-08-23 Thread Dieter Kluenter
Zhang Weiwu <[EMAIL PROTECTED]> writes: > [EMAIL PROTECTED] wrote: [...] >>I'm not aware of one, although an updated evoltionPerson schema might >>provide one. If you are looking to create one I'd recommend just creating >>one attribute and an auxilliary objectclass; then use encoding in the

[ldap] Re: How to allow email clients to add and edit entries

2005-08-21 Thread Dieter Kluenter
Hi, "Ivan Carey" <[EMAIL PROTECTED]> writes: > What method do I use to allow Outlook 2002 and Thunderbird and Mozilla to > edit and add entries on the LDAP server. > I have set up slapd.conf with > access to * by * write > > access to * >by self write >by dn.base="cn=Manager,dc=mydomain,d

[ldap] Re: Gettings Schemas or Filter Objectclasses

2005-08-19 Thread Dieter Kluenter
"r-system.D. Rosier" <[EMAIL PROTECTED]> writes: > > Hello, > > I try to get data from a edirectory feeded LDAP Server and want to put them > into a new openldap. > I got the data with ldapsearch but there are some objectclasses in the old > ldap that the new one not knows > Such as NDSLogin

[ldap] Re: Filling in the gaps

2005-08-04 Thread Dieter Kluenter
Alan Batie <[EMAIL PROTECTED]> writes: > I've been playing with an existing ldap database for a little over a > year now, and even fixed the local custom schemas, currently used with > an older version of openldap that isn't so picky, so that the current > version likes them. And I started usi

[ldap] Re: building DIT

2005-07-17 Thread Dieter Kluenter
Hi, "Michael Mueller" <[EMAIL PROTECTED]> writes: > Hi list! > > we want to set up an openldap server for managing our user accounts > (unix/samba) and > personal user data (addressbook). I read a lot of howtos and technical > papers, which > are fine for technical overview but dont show how to o

[ldap] Re: Password policy in nis.schema(rfc2307 says its out of scope... )

2005-07-14 Thread Dieter Kluenter
Hi, jay alvarez <[EMAIL PROTECTED]> writes: > Hi, > I'm just curious, if I am bound to using ldap as an > authentication, is there a server that has any > password policy mechanism wherein I can enforce the > acceptable password such as not lesser than 8 > characters, etc. I'm reading the rfc of

[ldap] Re: mysql and ldap password encryption

2005-07-07 Thread Dieter Kluenter
Hi, Joey Esquibal <[EMAIL PROTECTED]> writes: > Hi! > > I have successfully configured my ldap server. However, I need to > process a text file which came from another server and add it to the > ldap database. The problem was, the text file which contains the MD5 > password was generated by MySQL