Re: cn=config example

2007-09-20 Thread Emmanuel Dreyfus
Howard Chu <[EMAIL PROTECTED]> wrote: > If you have an existing slapd.conf you can simply let slapd convert it to a > cn=config database for you. That's the -F flag, but how does it works? I made little attemps, without much success. As I understand, schema replication won't work with syncrepl o

Re: optimal index for ldap

2007-09-20 Thread Buchan Milne
On Wednesday 19 September 2007 15:52:02 Ace wrote: > Hi Masters, > > We have around 10 entries of the form - > > dn: cn=rr1,ou=addressbook,dc=zlemail,dc=com > objectClass: top > objectClass: inetOrgPerson > mail: [EMAIL PROTECTED] > userPassword: [EMAIL PROTECTED] > cn: rr1 > sn: rr1 > > What s

Re: Error 32 and 65 - why?

2007-09-20 Thread Keryx Info
Aaron Richton skrev: You're just starting out? Try adding your suffix itself first, e.g. perform an ldapadd on "dc=labbnet,dc=ne,dc=keryx,dc=se". (Although I thought that would come up as 'no superior' or something...eh, it's not a case I test all that often.) Yep! That helped. Thanks! BTW

Re: Error 32 and 65 - why?

2007-09-20 Thread Aaron Richton
You're going to make me read the manual? I'm like most of the people on the list, I don't need to read the docs! ;) http://www.openldap.org/doc/admin23/quickstart.html step #10. On Thu, 20 Sep 2007, Keryx Info wrote: Aaron Richton skrev: You're just starting out? Try adding your suffix itsel

Re: cn=config example

2007-09-20 Thread Howard Chu
Gavin Henry wrote: Emmanuel Dreyfus wrote: Howard Chu <[EMAIL PROTECTED]> wrote: If you have an existing slapd.conf you can simply let slapd convert it to a cn=config database for you. That's the -F flag, but how does it works? I made little attemps, without much success. As I understand, sc

Re: Error 32 and 65 - why?

2007-09-20 Thread Buchan Milne
On Thursday 20 September 2007 09:45:05 Keryx Info wrote: > Aaron Richton skrev: > > You're just starting out? Try adding your suffix itself first, e.g. > > perform an ldapadd on "dc=labbnet,dc=ne,dc=keryx,dc=se". > > > > (Although I thought that would come up as 'no superior' or > > something...eh,

Re: optimal index for ldap

2007-09-20 Thread Ace
On Wednesday 19 September 2007 15:52:02 Ace wrote: >> Hi Masters, >> >> We have around 10 entries of the form - >> >> dn: cn=rr1,ou=addressbook,dc=zlemail,dc=com >> objectClass: top >> objectClass: inetOrgPerson >> mail: [EMAIL PROTECTED] >> userPassword: [EMAIL PROTECTED] >> cn: rr1 >> sn: rr1

Re: cn=config example

2007-09-20 Thread Gavin Henry
Emmanuel Dreyfus wrote: Howard Chu <[EMAIL PROTECTED]> wrote: If you have an existing slapd.conf you can simply let slapd convert it to a cn=config database for you. That's the -F flag, but how does it works? I made little attemps, without much success. As I understand, schema replication wo

Re: cn=config example

2007-09-20 Thread Buchan Milne
On Thursday 20 September 2007 05:35:14 Emmanuel Dreyfus wrote: > Howard Chu <[EMAIL PROTECTED]> wrote: > > If you have an existing slapd.conf you can simply let slapd convert it to > > a cn=config database for you. > > That's the -F flag, but how does it works? I made little attemps, > without much

Re: optimal index for ldap

2007-09-20 Thread Buchan Milne
On Thursday 20 September 2007 14:51:02 Ace wrote: > On Wednesday 19 September 2007 15:52:02 Ace wrote: > >> Hi Masters, > >> > >> We have around 10 entries of the form - > >> > >> dn: cn=rr1,ou=addressbook,dc=zlemail,dc=com > >> objectClass: top > >> objectClass: inetOrgPerson > >> mail: [EMAIL

Re: optimal index for ldap

2007-09-20 Thread Ace
> The problem here is when I have index on cn, it didn't finds what I search > for. Here is search query - > ldapsearch -x -b "dc=zlemail,dc=com" "(cn=rr1)" >Did you consult the documentation? For instance, please see the section on the >index directive in the man page for slapd-bdb. It says: > >"

Re: cn=config example

2007-09-20 Thread Gavin Henry
Howard Chu wrote: Gavin Henry wrote: Emmanuel Dreyfus wrote: Howard Chu <[EMAIL PROTECTED]> wrote: If you have an existing slapd.conf you can simply let slapd convert it to a cn=config database for you. That's the -F flag, but how does it works? I made little attemps, without much success.

Re: Advice on restoring database and keeping kerberos mappings to users in the database

2007-09-20 Thread Ezra Taylor
Thanks. I appreciate you response. On 9/19/07, Aaron Richton <[EMAIL PROTECTED]> wrote: > > If you have a complete/coherent slapcat output, and you stop slapd, remove > your database and perform a slapadd using that output, without modifying > your configuration (i.e. slapd.conf), you should en

Re: cn=config example

2007-09-20 Thread Buchan Milne
On Thursday 20 September 2007 16:37:58 Gavin Henry wrote: > Howard Chu wrote: > > Note that this feature was already documented in the existing > > slapd/slapadd/slap* manpages in 2.3. It's a shame that we go to the > > trouble of writing these docs that nobody actually reads. > > We should just wr

Can't see DIT

2007-09-20 Thread Daniel Guerrero
Hi all, I'm trying to see my DIT with ldapsearch, but I can't see anything... the answer is the following: prompt> ldapsearch -x -b "dc=example,dc=com" # extended LDIF # # LDAPv3 # base with scope subtree # filter: (objectclass=*) # requesting: ALL # # search result search: 2 result: 32 No suc

Re: Can't see DIT

2007-09-20 Thread David Damon
Daniel, First try this; /usr/bin/ldapsearch -x -D "cn=Admin,dc=example,dc=com" -b "dc=example,dc=com" -W Second try the man pages for ldapsearch(1). Regards, David Damon Senior Systems Integration Analyst Office: (714) 442-7562 FAX:(714) 442-2845 "Daniel Guerrero" <[EMAIL PROTECT

Re: cn=config example

2007-09-20 Thread Emmanuel Dreyfus
Howard Chu <[EMAIL PROTECTED]> wrote: > Note that this feature was already documented in the existing > slapd/slapadd/slap* manpages in 2.3. It's a shame that we go to the trouble of > writing these docs that nobody actually reads. And it's a sad that project leaders immediatly assume users are

Re: cn=config example

2007-09-20 Thread Gavin Henry
Emmanuel Dreyfus wrote: Howard Chu <[EMAIL PROTECTED]> wrote: Note that this feature was already documented in the existing slapd/slapadd/slap* manpages in 2.3. It's a shame that we go to the trouble of writing these docs that nobody actually reads. And it's a sad that project leaders immedi

Re: cn=config example

2007-09-20 Thread Howard Chu
Gavin Henry wrote: Emmanuel Dreyfus wrote: Howard Chu <[EMAIL PROTECTED]> wrote: Note that this feature was already documented in the existing slapd/slapadd/slap* manpages in 2.3. It's a shame that we go to the trouble of writing these docs that nobody actually reads. And it's a sad that pro

Re: cn=config example

2007-09-20 Thread Aaron Richton
And it's a sad that project leaders immediatly assume users are just unwilling to read the docs, rather than wondering if the docs need improvement. I just discovered why my slapd -f slapd.conf -F slapd.d attempt failed: permissions on the slapd.d directory were wrong, so slapd just start and qui

Re: cn=config example

2007-09-20 Thread Gabriel Stein
People... I have a idea about OpenLDAP documentation. There´s a good documentation at OpenLDAP website. Why not create more efforts to create a Howto series? I´m writing constantlty a howto week´s about basic OpenLDAP features, like some integrations and hints. We can create something like a wiki,

Re: cn=config example

2007-09-20 Thread Gavin Henry
Howard Chu wrote: Gavin Henry wrote: Emmanuel Dreyfus wrote: Howard Chu <[EMAIL PROTECTED]> wrote: Note that this feature was already documented in the existing slapd/slapadd/slap* manpages in 2.3. It's a shame that we go to the trouble of writing these docs that nobody actually reads. And

Re: cn=config example

2007-09-20 Thread Gavin Henry
Gabriel Stein wrote: People... I have a idea about OpenLDAP documentation. There´s a good documentation at OpenLDAP website. Why not create more efforts to create a Howto series? I´m writing constantlty a howto week´s about basic OpenLDAP features, like some integrations and hints. We can cre

Re: cn=config example

2007-09-20 Thread Hex Star
Hello I have a recommendation for the idap recommendation, specifically for a howto. I think a great howto would be one that expands on this: http://mattfleming.com/node/190 except going into much more detail outlining every step necessary for it to work. That is a good setup that will give ldap us

Documentation request (was: Re: cn=config example)

2007-09-20 Thread Russ Allbery
Gavin Henry <[EMAIL PROTECTED]> writes: > I'd love to also see, "It would be really helpful if x, y and x was > covered". Ask and you shall receive. It would be really helpful if the slapd.access man page said something more useful than: The statement set= is undocumented yet. -- Russ A

Re: Documentation request

2007-09-20 Thread Howard Chu
Russ Allbery wrote: Gavin Henry <[EMAIL PROTECTED]> writes: I'd love to also see, "It would be really helpful if x, y and x was covered". Ask and you shall receive. It would be really helpful if the slapd.access man page said something more useful than: The statement set= is undocumen

Re: Documentation request

2007-09-20 Thread Russ Allbery
Howard Chu <[EMAIL PROTECTED]> writes: > So, for those of you using sets - why are they useful to you, and in what > ways are they still too limited? I personally am concerned that they are > too expensive to evaluate; if we could provide similar features using a > less general model that would be

Re: Documentation request

2007-09-20 Thread Quanah Gibson-Mount
--On Thursday, September 20, 2007 6:37 PM -0700 Russ Allbery <[EMAIL PROTECTED]> wrote: Howard Chu <[EMAIL PROTECTED]> writes: So, for those of you using sets - why are they useful to you, and in what ways are they still too limited? I personally am concerned that they are too expensive to ev

Re: Documentation request

2007-09-20 Thread Howard Chu
Quanah Gibson-Mount wrote: --On Thursday, September 20, 2007 6:37 PM -0700 Russ Allbery <[EMAIL PROTECTED]> wrote: Howard Chu <[EMAIL PROTECTED]> writes: So, for those of you using sets - why are they useful to you, and in what ways are they still too limited? I personally am concerned that

Re: cn=config example

2007-09-20 Thread Howard Chu
Emmanuel Dreyfus wrote: Aaron Richton <[EMAIL PROTECTED]> wrote: This is a concrete case of improvement: "slapd should not be silent on EACCES (or others)." Well, it's not silent: it sends an error to the logs. The oddity here is that there are two functionalities blent into the same program

Re: Documentation request

2007-09-20 Thread Russ Allbery
Howard Chu <[EMAIL PROTECTED]> writes: > Quanah Gibson-Mount wrote: >> This allows users who bind to the server to read their person entry when >> their binding user id matches the user id in the people tree. > I guess that makes sense. What is an example "user" in this case, does > that reside u

Re: cn=config example

2007-09-20 Thread Gabriel Stein
Thanks Gavin for your answer. I appreciate this. Yes, sounds like a good plan. The Admin Guide is a excelent start to the wiki. On next months, if a have a good howto´s to the wiki, where I can install wiki and leave the howto´s? There´s a possibility to have private wiki with contributors at ope

Re: cn=config example

2007-09-20 Thread Emmanuel Dreyfus
Aaron Richton <[EMAIL PROTECTED]> wrote: > This is a concrete case of improvement: "slapd should not be silent on > EACCES (or others)." Well, it's not silent: it sends an error to the logs. The oddity here is that there are two functionalities blent into the same program: the LDAP server and th

uid not case-sensitiv / How can i modify to octetstring / in core.schema not included / Version 2.3.80 [Virus checked]

2007-09-20 Thread ems
Hello, i'am new on this List. We upgraded from openldap 2.2.30 to 2.3.80. (Solaris 10) Is it right, that in core.schema the entry for uid (and others) is now removed (commented) ? How can i now found this entry ? Is it hardcoded in Source ? The Reason/Problem is, that we have modified th

Re: cn=config example

2007-09-20 Thread Emmanuel Dreyfus
Howard Chu <[EMAIL PROTECTED]> wrote: > Use slaptest instead. Oh, right, I missed that one. Perhaps this is the missing piece in the docs? It's not obvious how to explain it, though. I'm not sure the sentence below is satisfying. -F slapd-config-directory Specifies the slapd

Re: Documentation request

2007-09-20 Thread Quanah Gibson-Mount
--On Thursday, September 20, 2007 8:43 PM -0700 Russ Allbery <[EMAIL PROTECTED]> wrote: Don't users just bind using account entries anyway? Isn't this the same as "by self read" ? Or you're saying that there can be multiple accounts with the same uid? There aren't, so I think you're right.

Re: uid not case-sensitiv / How can i modify to octetstring / in core.schema not included / Version 2.3.80 [Virus checked]

2007-09-20 Thread Dieter Kluenter
[EMAIL PROTECTED] writes: > Hello, > > i'am new on this List. > > We upgraded from openldap 2.2.30 to 2.3.80. (Solaris 10) > > Is it right, that in core.schema the entry for uid (and others) is now > removed (commented) ? How can i now > found this entry ? Is it hardcoded in Source ? Yes, it is