Password Controls support?

2005-07-12 Thread [EMAIL PROTECTED]
Does openLDAP support password controls such as, 2.16.840.1.113730.3.4.4 LDAP_CONTROL_PWEXPIRED "Using Password Policy Controls". 2.16.840.1.113730.3.4.5 LDAP_CONTROL_PWEXPIRING "Using Password Policy Controls" The ldap.h file does not list those controls. It also says some of t

Trouble changing user passwords

2005-07-12 Thread Kris Vassallo
Hello, I am trying to allow my users to change their own passwords using the ldappasswd command. When the following command is run ldappasswd -AxSWD "uid=kris,ou=people,dc=x,dc=com" I get the following back Old password: Re-enter old password: New password: Re-enter new password: Enter L

loglevel -1 in slapd.conf [auf Viren überprüft]

2005-07-12 Thread Hans Moser
Hi! With OL 2.3.4 I get the following issue. When I change loglevel in slapd.conf to "-1", OL dies immediatly after startup. No logs are written. When I change loglevel to something else and start slapd with "-d -1", I get the debug output on the console as usual. Hans

Re: Password Controls support?

2005-07-12 Thread Howard Chu
See the slapo-ppolicy(5) man page in OpenLDAP 2.3. [EMAIL PROTECTED] wrote: Does openLDAP support password controls such as, 2.16.840.1.113730.3.4.4 LDAP_CONTROL_PWEXPIRED "Using Password Policy Controls". 2.16.840.1.113730.3.4.5 LDAP_CONTROL_PWEXPIRING "Using Password Policy Cont

Re: Trouble changing user passwords

2005-07-12 Thread Howard Chu
Kris Vassallo wrote: Hello, I am trying to allow my users to change their own passwords using the ldappasswd command. When the following command is run ldappasswd -AxSWD "uid=kris,ou=people,dc=x,dc=com" I get the following back Old password: Re-enter old password: New password: Re-enter

Re: Password Controls support?

2005-07-12 Thread Michael Ströder
Howard Chu wrote: > [EMAIL PROTECTED] wrote: >> >> Does openLDAP support password controls such as, >> >> 2.16.840.1.113730.3.4.4LDAP_CONTROL_PWEXPIRED >> "Using Password Policy Controls". >> >> 2.16.840.1.113730.3.4.5LDAP_CONTROL_PWEXPIRING >> "Using Password Policy Controls" >> >> The lda

Re: loglevel -1 in slapd.conf [auf Viren überpr üft]

2005-07-12 Thread Howard Chu
Hans Moser wrote: Hi! With OL 2.3.4 I get the following issue. When I change loglevel in slapd.conf to "-1", OL dies immediatly after startup. No logs are written. When I change loglevel to something else and start slapd with "-d -1", I get the debug output on the console as usual. Sounds l

problem with ldap replication

2005-07-12 Thread carole gimenez
Hi, I have openldap 2.2.18 Hi all, I want to replicate partially the branch "ou=people,dc=ups-tlse,dc=fr" to keep only some attributes as: cn, sn, uid, mail, ... useful for sendmail. On master ldap, if i declare the replica in slapd.conf as this: replica uri=ldaps://gw1-mail.cict.fr:636 s

Re: problem with ldap replication

2005-07-12 Thread Quanah Gibson-Mount
--On Tuesday, July 12, 2005 11:51 AM +0200 carole gimenez <[EMAIL PROTECTED]> wrote: Hi, I have openldap 2.2.18 Hi all, I want to replicate partially the branch "ou=people,dc=ups-tlse,dc=fr" to keep only some attributes as: cn, sn, uid, mail, ... useful for sendmail. On master ldap, if i

Back-sql: ldap_entries queries are hardcoded(?)

2005-07-12 Thread Ken Johanson
Hello, I am wondering if the select, insert, update, delete statements can be customized for the ldap_entries table, in a similar fashion to how the other tables statements can be, as in ldap_attr_mappings? I would use a view to achieve this; unfortunately I'm bound to an older Mysql version

Re: loglevel -1 in slapd.conf [auf Viren überprüft]

2005-07-12 Thread Ettore Simone
Hi Hans, Use loglevel "any" enstead of -1, this should work. Regards, Ettore On 7/12/05, Hans Moser <[EMAIL PROTECTED]> wrote: > Hi! > > With OL 2.3.4 I get the following issue. > When I change loglevel in slapd.conf to "-1", OL dies immediatly after > startup. No logs are written. > When I cha

problem on starting the slapd daemon

2005-07-12 Thread javier rojas
hi folks, i tried to start the slapd daemon with: /usr/local/libexec/slapd -d -1 and got this error: @(#) $OpenLDAP: slapd 2.2.26 (Jul 8 2005 14:47:30) $ [EMAIL PROTECTED]:/tmp/openldap-2.2.26/servers/slapd daemon_init: daemon_init: listen on ldap:/// daemon_init: 1 listeners to open...

Re: problem on starting the slapd daemon

2005-07-12 Thread Quanah Gibson-Mount
--On Tuesday, July 12, 2005 11:02 AM -0400 javier rojas <[EMAIL PROTECTED]> wrote: access to dn=".*,dc=example,dc=com" attr=userPassword by dn="cn=Manager,dc=example,dc=com" write by self write by * auth< line 77 Shouldn't that be access to dn.regex=".*,dc=example,dc=com" attr=use

Re: problem on starting the slapd daemon

2005-07-12 Thread Aaron Richton
> access to dn=".*,dc=example,dc=com" attr=userPassword dn.subtree="dc=example,dc=com" would likely work better than a regex. If you still want to use a regex, dn.regex would be in order.

Re: access control question

2005-07-12 Thread Dave Holland
[I'm resending this as the first attempt didn't make it to the list.] On Thu, Jul 07, 2005 at 07:00:34PM +0200, Dieter Kluenter wrote: > You don't have to update. I think 'sets' will ideally meet your tasks. > http://www.openldap.org/faq/data/cache/1133.html Thanks. That looks like a very powerfu

Could not locate TLS/SSL package

2005-07-12 Thread Brian Gaber
Here are my paths LD_LIBRARY_PATH=/usr/local/BerkeleyDB.4.3/lib LDFLAGS="-L/usr/local/lib -L/usr/local/BerkeleyDB.4.3/lib -L/usr/local/ssl/lib -L/usr/kerberos/lib" CPPFLAGS="-I/usr/local/include -I/usr/local/BerkeleyDB.4.3/include -I/usr/local/ssl/include -I/usr/local/ssl/include/openssl -I/usr

Trouble with ldapadd

2005-07-12 Thread zyacoubi
Hi, I've successfully installed OpenLDAP, got it running, add customised schema, and had slapd start fine with the schema I've added. At the begining, I've put LDAP Public Key schema via include directive in slapd.conf. The content of this schema is: attributetype ( 1.3.6.1.4.1.22054.1.1.1.13 N

Simple Authentication Mechanism

2005-07-12 Thread Yoginee Bhagwat
hi, I have slapd running with ssl. I am trying to authenticate against it through java application. My java application passes following parameters to LDAP server user : cn=Manager,dc=wallst.dev.micromuse,dc=com password : secret host : shark port : 6560 security protocol : ssl Authent

Re: Trouble changing user passwords

2005-07-12 Thread Kris Vassallo
Ok, so I removed the 'A' flag from the command and got past that issue; thanks for the response. But, I am now into another problem here which I have inserted below. I tried putting the log level on -1 but there is so much stuff in there that I am not sure what I am looking at. I don't know what

Re: Trouble with ldapadd

2005-07-12 Thread Quanah Gibson-Mount
--On Tuesday, July 12, 2005 3:36 PM +0200 [EMAIL PROTECTED] wrote: Hi, I've successfully installed OpenLDAP, got it running, add customised schema, and had slapd start fine with the schema I've added. At the begining, I've put LDAP Public Key schema via include directive in slapd.conf. The