Re: Logging question

2006-06-13 Thread Howard Chu
matthew sporleder wrote: On 6/13/06, Ski Kacoroski <[EMAIL PROTECTED]> wrote: Hi, How do folks handle logging and debugging on a busy ldap server without being able to filter the logs into different files. In particular, I have a server that holds both machine and account data. The machine da

Re: Logging question

2006-06-13 Thread matthew sporleder
On 6/13/06, Ski Kacoroski <[EMAIL PROTECTED]> wrote: Hi, How do folks handle logging and debugging on a busy ldap server without being able to filter the logs into different files. In particular, I have a server that holds both machine and account data. The machine data is updated quite often

Logging question

2006-06-13 Thread Ski Kacoroski
Hi, How do folks handle logging and debugging on a busy ldap server without being able to filter the logs into different files. In particular, I have a server that holds both machine and account data. The machine data is updated quite often via a cron job run on the machines (cfengine) and

Re: Synrepl on 2.3

2006-06-13 Thread FRLinux
On 6/13/06, Aaron Richton <[EMAIL PROTECTED]> wrote: Turn up debugging on both sides (-d trace sync) and see what's happening, or not. i.e., you should see the slave connect to the master, bind, and do a search for "* +" or whatever you specify. Smart money is often on err=49 (invalid credential

Re: LDAP_DEPRECATED

2006-06-13 Thread Jonathan Abbey
On Thu, Jun 08, 2006 at 10:23:36AM +0200, Lise Didillon wrote: | Thank you very much, I've no more questions about ldap_deprecated. It's a | very good documentation How long have the functions that are guarded by LDAP_DEPRECATED been in the OpenLDAP API? I'm finishing up work on getting a new re

Re: openldap backend to Web Services?

2006-06-13 Thread Kurt D. Zeilenga
At 07:23 AM 6/13/2006, judd wrote: >I dunno folks, it seems that the original poster wanted to access the >Web service via a standard LDAP client querying a standard LDAP server, >and we should be recommending backend-perl or backend-shell. As the comments do see to have wandered beyond the scope

RE: openldap backend to Web Services?

2006-06-13 Thread judd
I'd also add to this that there is a robust Ruby LDAPServer object. I have not tried it, but it looks VERY good from the documentation. And since when has documentation been better than implementation in an open source project? On 11:32 am 06/13/06 "Kifah-web" <[EMAIL PROTECTED]> wrote: > Thanks

Re: openldap backend to Web Services?

2006-06-13 Thread Marc Boorshtein
I've done this before with a Virtual Directory. If you are looking for something Open Source and know Java, I would suggest ApacheDS. I've had success building custom backends for that directory before. Marc

Re: openldap backend to Web Services?

2006-06-13 Thread Dieter Kluenter
Hi, "Kifah-web" <[EMAIL PROTECTED]> writes: > Thanks a lot Judd, > > And thanks to everyone else who contributed to my question. > Actually I think most relevant is building a perl or shell > thingobviously no one has done it yet...so I guess I gotta go through > this. [...] >> How many folks

Re: Synrepl on 2.3

2006-06-13 Thread Pierangelo Masarati
On Tue, 2006-06-13 at 14:31 -0400, Aaron Richton wrote: > Do you > actually have those backslashes in there? slapd.conf doesn't use that. Actually it used to; not sure this has been preserved with back-config, but I guess it did. It was a very little advertised feature introduced to allow breakin

Re: Synrepl on 2.3

2006-06-13 Thread Aaron Richton
> None of the new entries from the master are actually showing on the > slave. Has anyone seen that ? I've never "none" happen seen that when properly configured. Do you actually have those backslashes in there? slapd.conf doesn't use that. Turn up debugging on both sides (-d trace sync) and see

Synrepl on 2.3

2006-06-13 Thread FRLinux
Hello, Since we have migrated our servers to 2.3, it seems that replications are not getting through anymore. I gave a good read at http://www.openldap.org/doc/admin23/syncrepl.html which seems to document the same kind of setup we have. The Master is a 2.3.21 openldap server on FreeBSD 6.1 and

Re: PLAIN and ANONYMOUS authendication

2006-06-13 Thread Hallvard B Furuseth
Durai raj writes: >I installed the OpenLDAP with SASL, DB and SSL in Linux fedora >core. The ldapsearch doesn't not show the PLAIN and ANONYMOUS >auth. mechnanism. But it shows the GSSAPI, CRAM and DIGEST-MD5. If I remember correctly, PLAIN is normally only shown if TLS is established,

RE: openldap backend to Web Services?

2006-06-13 Thread Kifah-web
Thanks a lot Judd, And thanks to everyone else who contributed to my question. Actually I think most relevant is building a perl or shell thingobviously no one has done it yet...so I guess I gotta go through this. I thought I might not have to "reinvent the wheel" :) > I dunno folks, it seems

Re: Trace the change on the directory

2006-06-13 Thread Aaron Richton
Reporting that you got an error with "overlay auditlog" when attempting to use auditlog would have been A Really Good Idea relative to reporting "it don't work". Including your slapd.conf in the first message, which also would have shown the missing directive, would also have been A Really Good Ide

RE : Re: RE : Re: Re : Trace the change on the directory

2006-06-13 Thread Eudes Leducq
Hi, I don't have the "overlay auditlog" parameter in sldap.conf, I have tried to put it but my server did'nt start. "overlay auditlog" seem not to be an overlay option , like unique Note: I have compiled my openLdap with all overlay Aaron Richton <[EMAIL PROTECTED]> a écrit : And I

Re: RE : Re: Re : Trace the change on the directory

2006-06-13 Thread Aaron Richton
And I assume you have "overlay auditlog" somewhere, or you'd fail parsing? Do you expect the auditlog to be global or for only one database? Where is the overlay directive in your slapd.conf? Better yet, just post your whole slapd.conf, maybe someone will spot other errors. On Tue, 13 Jun 2006, E

Re: How to make binding on downward referral possible.

2006-06-13 Thread Pierangelo Masarati
> > Is there any way to make binding follow the referral in the case of > downward referral ? > In upward referral it works fine.(Ie slapd.conf entry of referral) > But how I can make it with downward referral . My requirement is after > serchng the entry,client > should bind to the correspondi

Re: openldap backend to Web Services?

2006-06-13 Thread judd
Michael Ströder wrote: > Mark Mcdonald wrote: > >> If you're using perl there are a few existing modules out there too: >> >> http://search.cpan.org/search?query=DSML&mode=all >> > > And python-ldap has a module for DSMLv1. It's trivial to write a > LDIF-to-DSMLv1 converter script with it. > > Ciao

PLAIN and ANONYMOUS authendication

2006-06-13 Thread Durai raj
Hi All, I installed the OpenLDAP with SASL, DB and SSL in Linux fedora core. The ldapsearch doesn't not show the PLAIN and ANONYMOUS auth. mechnanism. But it shows the GSSAPI, CRAM and DIGEST-MD5. Is it the problem with the build? How can I use the PLAIN and ANONYMOUS methods in L

RE : Re: Re : Trace the change on the directory

2006-06-13 Thread Eudes Leducq
Hi, I'm sorry I have auditlog /usr/local/openLdap2.3.18/trace/changes.log in my slapd.conf I forgot to put it , but it don't work thx Aaron Richton <[EMAIL PROTECTED]> a écrit : What makes you think that the "overlay unique" will trace changes in the directory? What makes you think

Re : Trace the change on the directory

2006-06-13 Thread Eudes Leducq
Hi, I have read the manpage, and i added this line to my slapd.conf file: /usr/local/openLdap2.3.18/trace after overlay unique directive and before any database configuration parameters. my server start without problem, but i have any trace, my log file is empty. thx - Message d'origin

How to make binding on downward referral possible.

2006-06-13 Thread Sandeep A.S
Is there any way to make binding follow the referral in the case of downward referral ? In upward referral it works fine.(Ie slapd.conf entry of referral) But how I can make it with downward referral . My requirement is after serchng the entry,client should bind to the corresponding serv

Re: Re : Trace the change on the directory

2006-06-13 Thread Aaron Richton
What makes you think that the "overlay unique" will trace changes in the directory? What makes you think that "/usr/local/openLdap2.3.18/trace" will do anything whatsoever in slapd.conf? If you read the slapo-auditlog man page, you will see that there is a named configuration option; a file name s

Re: openldap backend to Web Services?

2006-06-13 Thread Michael Ströder
Mark Mcdonald wrote: > If you're using perl there are a few existing modules out there too: > > http://search.cpan.org/search?query=DSML&mode=all And python-ldap has a module for DSMLv1. It's trivial to write a LDIF-to-DSMLv1 converter script with it. Ciao, Michael.