How to obtain Operations Attributes

2011-03-18 Thread Suneet Shah
Hello, I am using the Java JDK 1.6.x to query ldap. I am using the query below. However, I need to be able to pull out the operational attributes as well. Any thoughts on how I can obtain the list of operational attributes without having to specify them? SearchControls searchCtls = new Se

Re: Error code 65 - invalid structural object class chain (groupOfUniqueNames/posixGroup)]

2011-03-18 Thread Quanah Gibson-Mount
--On Friday, March 18, 2011 4:16 PM -0400 Casey Jordan wrote: Hi group, I am trying to import an ldif and I keep getting this error which has me totally stumped: An LDAP object may only have one structural objectClass. You've provided two. --Quanah -- Quanah Gibson-Mount Sr. Member o

Re: newbie problem importing ldap

2011-03-18 Thread Chris Jacobs
Regarding slapd.conf: I don't know for sure about Ubuntu's default setup, but it's likely that it's using the slapd.d dir vs slapd.conf. The contents of slapd.d aren't intended to be edited by hand. You'd have to use ldapmodify. Reach the admin guide, man pages, and search this mailing list for

Error code 65 - invalid structural object class chain (groupOfUniqueNames/posixGroup)]

2011-03-18 Thread Casey Jordan
Hi group, I am trying to import an ldif and I keep getting this error which has me totally stumped: [LDAP: error code 65 - invalid structural object class chain (groupOfUniqueNames/posixGroup)] ( And here is the attributes it fails on ) dn: cn=dba,ou=Groups,dc=exist,dc=easydita , dc=com gidNum

Re: newbie problem importing ldap

2011-03-18 Thread deconya
Hi Are you sure? I have a server working and not has any slapd.conf inside. The new server too. Are two ubuntu 9.04 server. Thanks 2011/3/18 Jonathan Clarke > On 18/03/11 15:42, deconya wrote: > > Ok and where i can change it? > > > > Mi ldap.conf only has: > > > > base dc=esci,dc=es > > > > u

Re: Confused about pwdpolicy - password changing policy

2011-03-18 Thread Luo, Frank Y.F. Mr.
any help here? thx On Mar 14, 2011, at 11:38 AM, Luo, Frank Y.F. Mr. wrote: I have an administrative user "uid=admin,ou=people,dc=compnay,dc=com" and The first ACI sentence is like this access to * by dn=" uid=admin,ou=people,dc=compnay,dc=com" manage ... {omitted} by * break acce

Re: Letting Users Create Groups

2011-03-18 Thread Tim Gustafson
> ACLs along these lines should do the rest Actually, this doesn't seem to work: access to dn.exact="ou=Group,dc=example" attrs=children by users write by * break access to dn.subtree="ou=Group,dc=example" attrs=entry filter="(&(objectClass=posixGroup)(objectClass=myGroup)(gidNumber>=10

Re: newbie problem importing ldap

2011-03-18 Thread deconya
Ok and where i can change it? Mi ldap.conf only has: base dc=esci,dc=es uri ldapi://127.0.0.1/ ldap_version 3 rootbinddn cn=admin,dc=esci,dc=es Is other file? Sorry If are a newbie questions :-) 2011/3/18 Benjamin Griese > Hello, > your database suffix doesn't fit to your ldif, you're mi

Re: Letting Users Create Groups

2011-03-18 Thread Tim Gustafson
> to prevent gidNumber duplicates you probably need slapo-unique. That works well; here's my configuration: overlay unique unique_uri ldap:///ou=Group,dc=example?cn?sub? unique_uri ldap:///ou=Group,dc=example?gidNumber?sub? > ACLs along these lines should do the rest: > > access to dn.exact="ou

Re: Understanding back_perl SampleLDAP.pm

2011-03-18 Thread Marco Pizzoli
Hi Hallward, thanks for the answer. I saw that you made a correction to the comment included in the source. But forgive me, I continue to not understand. In the comment you wrote: # This demo module keeps an in-memory hash {"DN" => "LDIF entry", ...} How could I populate manually (in the Perl

Re: openldap installed, running but can't connect remotely

2011-03-18 Thread Casey Jordan
Thanks, after playing with this a bit it worked perfectly. Cheers, Casey On Fri, Mar 18, 2011 at 8:57 AM, wrote: > Casey Jordan wrote: > > Hi group, > > > > I hope this is the right list to post this under. I have been having > > a problem connecting to an ldap server I just set up on ubuntu 1

Re: newbie problem importing ldap

2011-03-18 Thread Benjamin Griese
Hello, your database suffix doesn't fit to your ldif, you're missing "dc=es" in your database suffix declaration. bye. On Fri, Mar 18, 2011 at 13:11, deconya wrote: > Hi list > > Im having problems configuring a new slave ldap server. I made > > # slapcat -l master.ldif in masters server > > Ins

Re: OpenLDAP migration from 2.3 to 2.4

2011-03-18 Thread Dieter Kluenter
Am Fri, 18 Mar 2011 11:01:50 - (UTC) schrieb j...@bordengrammar.kent.sch.uk: > Hi All, > > I'm currently in the progress of moving from v2.3 to 2.4 and have been > following the procedure shown in the documentation for switching from > the old slapd.conf to the new cn= format, i.e. slaptest -

newbie problem importing ldap

2011-03-18 Thread deconya
Hi list Im having problems configuring a new slave ldap server. I made # slapcat -l master.ldif in masters server Inside ubuntu server with openldap 2.4 Im going to import using # slapadd -c -l ./master.ldif Appears: slapadd: line 1: database (dc=esci) not configured to hold "dc=esci,dc=es" s

[no subject]

2011-03-18 Thread Juan José Aragonés
Hello After installing and configuring openLDAP in Linux I’m trying to do the same in Windows 7. No, it’s not my idea but what my boss wants me to do. So I downloaded openLDAP from http://www.userbooster.de/en/download/openldap-for-windows.aspx and installed. Configured my slapd.conf as follo

Re: ppolicy pwdMinLenght, pwdAccountLockedTime and pwdLockoutDuration don't work as supposed

2011-03-18 Thread Michael Ströder
Theo Alves wrote: > [..] when an user access > ldap by python the ppolicy pwdMinLenght doesn't work. The user can > freely put a password too short. That doesn't happen when using passwd. > Check out the python code snip: > > import ldap > dn = 'uid=%s,ou=People,dc=example,dc=com' % 'user1' > con

Re: Understanding back_perl SampleLDAP.pm

2011-03-18 Thread Hallvard B Furuseth
I wrote: > $this should be the return value from sub new. It's a blessed reference > to a hash table, thus %{$this} (or just %$this) is the hash table. Oops, I lost the final sentence: %$this is a {dn: entry} hash, filled in by sub add & co. -- Hallvard

Re: Understanding back_perl SampleLDAP.pm

2011-03-18 Thread Hallvard B Furuseth
Marco Pizzoli writes: > sub search { > my $this = shift; > (...) > for my $dn ( *keys %{$this}* ) { > (...) > > I'm interested in knowing what "keys %{$this}" should contain and why, in > trying to use this sample perl module I cannot see any "key" of the array > variable $this. $

Re: openldap installed, running but can't connect remotely

2011-03-18 Thread harry . jede
Casey Jordan wrote: > Hi group, > > I hope this is the right list to post this under. I have been having > a problem connecting to an ldap server I just set up on ubuntu 10.10 > > I can use ldapsearch locally and get good results. > > but when I try to connect remotely IE: > > *sudo ldapsearch -xLL

OpenLDAP migration from 2.3 to 2.4

2011-03-18 Thread jpb
Hi All, I'm currently in the progress of moving from v2.3 to 2.4 and have been following the procedure shown in the documentation for switching from the old slapd.conf to the new cn= format, i.e. slaptest -f -F path> . If I copy over slapd.conf from my old server and run slapd -d 256 , it starts

openldap installed, running but can't connect remotely

2011-03-18 Thread Casey Jordan
Hi group, I hope this is the right list to post this under. I have been having a problem connecting to an ldap server I just set up on ubuntu 10.10 I can use ldapsearch locally and get good results. but when I try to connect remotely IE: *sudo ldapsearch -xLLL -W -H ldap://ice.rit.edu -d1 "dc=

ppolicy pwdMinLenght, pwdAccountLockedTime and pwdLockoutDuration don't work as supposed

2011-03-18 Thread Theo Alves
Hello there, We have 40 machines on an educational informatics lab authenticating with LDAP. I am using python ldap module as management tool. I am experiencing two problems at now. The first one is when an user access ldap by python the ppolicy pwdMinLenght doesn't work. The user can freely p

Understanding back_perl SampleLDAP.pm

2011-03-18 Thread Marco Pizzoli
Hi list, could someone help me in understanding what the SampleLDAP.pm perl module do in its search routine? This is the code: sub search { my $this = shift; my ( $base, $scope, $deref, $sizeLim, $timeLim, $filterStr, $attrOnly, @attrs ) = @_; print {*STDERR} "==

Re: Schema Design :: ACL on Groups by Group Members only

2011-03-18 Thread Andrew Findlay
On Thu, Mar 17, 2011 at 09:20:59PM +0100, Dieter Kluenter wrote: > > I want "n" number of groups (or similar structure which keeps member > > information) to be created and only group members have access to those > > groups. Members are defined in separate user branch so my DIT look > > like > >