RE: Syncrepl for AD replication

2010-02-22 Thread Siddhartha Jain
Thanks all for the responses especially Jonathan for that useful link to LSC. I think replication is the wrong word for my requirements, my apologies. All I need to pull from AD to LDAP are unique user-ids such that when a user gets created in AD, it's userid should get populated in LDAP and whe

Check password module/ppolicy problem on Solaris 10 (2.4.21 OL sources) server

2010-02-22 Thread Jose G. Torres
Hello everyone!, I am trying to get my solaris 10 openldap 2.4.21 server to use my check_password.so module using the ppolicy overlay. When I try to change a user's password from a linux client, I get the following error message. passwd ldapuser Changing password for ldapuser. Enter login(LDAP

Re: the parent of a result.

2010-02-22 Thread Emmanuel Lecharny
On 2/22/10 7:37 PM, Mihamina Rakotomandimby wrote: Manao ahoana, Hello, Bonjour, I look for the way to search for the parent of the matched target. FOr example, let's image a forum, with multiple topics - boys - girls - dogs Each topic has comments (for simplicit let's make them flat) - boys

the parent of a result.

2010-02-22 Thread Mihamina Rakotomandimby
Manao ahoana, Hello, Bonjour, I look for the way to search for the parent of the matched target. FOr example, let's image a forum, with multiple topics - boys - girls - dogs Each topic has comments (for simplicit let's make them flat) - boys - comment 234 - comment 65 - girls - comment 659

Re: Syncrepl for AD replication

2010-02-22 Thread Jonathan Clarke
On 21/02/2010 11:26, Stefan Jurisch wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Am 20.02.2010 17:28, schrieb Dieter Kluenter: I am looking to setup a LDAP server that can pull certain user attributes from Active Directory like userid (sAMAccountName), cn, sn and populate some othe

Re: openldap client GSSAPI authentication segfaults in fbgsd8-stable i386

2010-02-22 Thread George Mamalakis
On 22/02/2010 07:27, Dieter Kluenter wrote: George Mamalakis writes: On 18/02/2010 19:50, Dieter Kluenter wrote: George Mamalakis writes: [...] Dieter, in my ldap server: [r...@ldap /]# ls -lrta /etc/krb5.keytab -rw-r- 1 root ldap - 446 Sep 28 19:21 /etc/krb

Re: objectclass not found inetorgperson?

2010-02-22 Thread Ray Carrender
Actually it was that slapd.conf wasn't restarting correctly, I did a full reboot on my server and got this stuff to start to work. Not exactly sure why this is the case versus /usr/local/libexec/slapd.d restart but it works now and I'm all the wiser. Thanks! *Ray* Message: 13 > Date: Mon, 22 Feb

Re: openldap client GSSAPI authentication segfaults in fbgsd8-stable i386

2010-02-22 Thread George Mamalakis
On 22/02/2010 07:27, Dieter Kluenter wrote: George Mamalakis writes: On 18/02/2010 19:50, Dieter Kluenter wrote: George Mamalakis writes: [...] Dieter, in my ldap server: [r...@ldap /]# ls -lrta /etc/krb5.keytab -rw-r- 1 root ldap - 446 Sep 28 19:21 /etc/krb

Re: Syncrepl for AD replication

2010-02-22 Thread Michael Ströder
Stefan Jurisch wrote: > Am 20.02.2010 17:28, schrieb Dieter Kluenter: > >> Ask Microsoft to implement RFC-4533 into AD. > > That would be the best thing to do; Even if AD would support syncrepl directly one would have to deal with major schema differences. That's not so easy (see also Samba4).

Re: Syncrepl in OpenLDAP-2.4.20

2010-02-22 Thread Ralf Haferkamp
Am Sonntag 21 Februar 2010 19:34:22 schrieb Ralf Zimmermann: > Hi all, > > today I have made tests with Version 2.4.21 and my 2.4.20 > configuration. When I start slapd I get following error message: > > config error processing olcDatabase={1}hdb,cn=config: > invalid URL olcSyncrepl: value #0: