Re: trying to understand referrals

2010-08-04 Thread Khaled Blah
Hi Chris, my problems arose from not understanding the whole rebinding process. I understand that the LDAP structure must be prepared to handle referrals and to make a "backup" of the information that is affiliated with the original LDAP server. Before I would think that storing this information w

Kerberos userpassword storage

2010-08-04 Thread Indexer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Im attempting to use Kerberos as a password storage backend in my ldap server. I have the server setup with its own principal of the form ldap/domainn...@realm , and this keytab is in the KRB5_KTNAME environment variable as slapd starts. I h

Re: Kerberos userpassword storage

2010-08-04 Thread Howard Chu
Indexer wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Im attempting to use Kerberos as a password storage backend in my ldap server. I have the server setup with its own principal of the form ldap/domainn...@realm , and this keytab is in the KRB5_KTNAME environment variable as sla

about LDIF operation by API

2010-08-04 Thread owen nirvana
It seems nothing is provided for operating LDIF. How to implement ldif export and import with C/C++ in OpenLDAP. gtalk:freeespe...@gmail.com

Re: cn=Config GUI was: Re: ldap on Ubuntu 10.0.4

2010-08-04 Thread Marcio Merlone
Em 03-08-2010 17:12, Howard Chu escreveu: Chris Jacobs wrote: This has been asked before - and the response has always been any gui ldap browser - like apache directory studio. I used to use jxplorer but that seems not to be actively maintained these days. I would definitely use Apache Direc

Re: cn=Config GUI was: Re: ldap on Ubuntu 10.0.4

2010-08-04 Thread Emmanuel Lecharny
On 8/4/10 1:36 PM, Marcio Merlone wrote: Em 03-08-2010 17:12, Howard Chu escreveu: Chris Jacobs wrote: This has been asked before - and the response has always been any gui ldap browser - like apache directory studio. I used to use jxplorer but that seems not to be actively maintained thes

Back-ldap and Nssov

2010-08-04 Thread Mustafa A. Hashmi
Hi all, I am using Openldap 2.4.23 (on Ubuntu Hardy 8.04) to test nssov. Everything is working perfectly on the primary server, with user, group and host information being pulled from Openldap via nssov. Testing of authorized service / pam integration via slapd acls is also working correctly. On

Re: Kerberos userpassword storage

2010-08-04 Thread Gémes Géza
2010-08-04 10:30 keltezéssel, Howard Chu írta: > Indexer wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> Hi, >> >> Im attempting to use Kerberos as a password storage backend in my >> ldap server. >> >> I have the server setup with its own principal of the form >> ldap/domainn...@r

Re: cn=Config GUI was: Re: ldap on Ubuntu 10.0.4

2010-08-04 Thread Dieter Kluenter
Marcio Merlone writes: > Em 03-08-2010 17:12, Howard Chu escreveu: >> Chris Jacobs wrote: >>> This has been asked before - and the response has always been any >>> gui ldap >> browser - like apache directory studio. >> >> I used to use jxplorer but that seems not to be actively maintained >> the

what makes client use mech=SIMPLE?

2010-08-04 Thread Klavs Klavsen
Hi, I have many ubuntu 8.04 clients which all work fine with my ldap server. I am now trying to connect a 10.04 client to the server - but login fails - and the only difference in output (in the debug file on the server) is the mech=SIMPLE line in the client that works. The one that works: A

using ldap to control access to other services

2010-08-04 Thread William Cai
Hi List, I have been using LDAP for some time. The LDAP server is mainly used to store user information. Today I heard that LDAP can be used to control access to other services. More specific, "The way it works is that your (or any other) app calls LDAP with like "I am user A, here is my ticket, s

Webmin LDAP User Module Don't Wor

2010-08-04 Thread Andrea Minardi
Webmin's LDAP Users and Groups module stopped working after upgrading from Webmin 1.400 to webmin 1.510 I have been using Webmin's LDAP Users and Groups module on my company's server to administer users. It was working fine on Webmin 1.400, but after upgrading I get the error: "Webmin has conn

Re: about LDIF operation by API

2010-08-04 Thread masarati
> It seems nothing is provided for operating LDIF. How to implement ldif > export and import with C/C++ in OpenLDAP. In HEAD there is a not yet released API for parsing LDIF into data structures. See ITS#6194. p.

Re: Webmin LDAP User Module Don't Wor

2010-08-04 Thread Quanah Gibson-Mount
--On Wednesday, August 04, 2010 9:54 AM +0200 Andrea Minardi wrote: Webmin's LDAP Users and Groups module stopped working after upgrading from Webmin 1.400 to webmin 1.510 Then I suggest you contact whomever the author of webmin is? Not really sure how this is relevant to OpenLDAP. --Qua

Re: using ldap to control access to other services

2010-08-04 Thread Dan White
On 04/08/10 18:12 +0800, William Cai wrote: Hi List, I have been using LDAP for some time. The LDAP server is mainly used to store user information. Today I heard that LDAP can be used to control access to other services. More specific, "The way it works is that your (or any other) app calls LDA

Re: Unclear attribute: entry

2010-08-04 Thread Dieter Kluenter
Klaus Ethgen writes: > Hello, > > I have to admit that I do not know what exactly the entry attribute (and > partly the children attribute too) is for. I know that it is needed to > give access to any other attribute but that is not enough for me as I > want to _know_ what it is for. > > Unfortun

Re: Webmin LDAP User Module Don't Wor

2010-08-04 Thread Chris Jacobs
Andrea, Check the upgrade docs for webmin - perhaps the manager/root dn password needs entering again? Conversely, use the command line ldap tools and see if you can bind, modify, etc, as the use Webmin is using. But Quanah's on track, i.e.: * Thing X and Thing Y have been working. * Upgrade T

Re: using ldap to control access to other services

2010-08-04 Thread Brent Bice
William Cai wrote: Hi List, I have been using LDAP for some time. The LDAP server is mainly used to store user information. Today I heard that LDAP can be used to control access to other services. More specific, "The way it works is that your (or any other) app calls LDAP with like "I am user

Re: can't get slapd to do pass-through authentication

2010-08-04 Thread Brent Bice
Dieter Kluenter wrote: Did you create a lib/sasl2/slapd.conf, or wherever your sasl configuration files are located? I created a lib/sasl2/slapd.conf file again and in it specified: pwcheck_method: saslauthd saslauthd_path: /var/state/saslauthd/mux And I confirmed that that is, indeed, t

Re: Proxycache overlay to back-ldap with cn=config

2010-08-04 Thread Nicolas Brisac
Sorry to bump on my own question... Does anyone have an idea how I could solve this? Nico Hi, I'm trying to set up a proxy-cache to a couple of OpenLDAP servers configured in mirror mode. The back-ldap part is working fine and I can query the underlying slapd instances through

Re: can't get slapd to do pass-through authentication

2010-08-04 Thread Dan White
On 04/08/10 14:54 -0700, Brent Bice wrote: Dieter Kluenter wrote: Did you create a lib/sasl2/slapd.conf, or wherever your sasl configuration files are located? I created a lib/sasl2/slapd.conf file again and in it specified: pwcheck_method: saslauthd saslauthd_path: /var/state/saslauthd/mux