Re: Compile openldap library with GSSAPI enabled

2013-02-19 Thread Michele
Ok I've tried that and my AD server supports all mechanism you listed above. The problem is that I'm compiling a client application and I'd like to use GSSAPI mechanism, but when I compile OpenLDAP I'm not sure if it is compiling also the GSSAPI stuff. Also when I try to connect my client to my AD

Re: Compile openldap library with GSSAPI enabled

2013-02-19 Thread Patrick Lists
Hi Michele, On 02/19/2013 11:31 AM, Michele wrote: Ok I've tried that and my AD server supports all mechanism you listed above. The problem is that I'm compiling a client application and I'd like to use GSSAPI mechanism, but when I compile OpenLDAP I'm not sure if it is compiling also the GSSAP

Re: ldapi without TLS and ldap with TLS?

2013-02-19 Thread Patrick Lists
Hi Philip, Thank you for your elaborate feedback. Comments inline. On 02/19/2013 03:42 AM, Philip Guenther wrote: [snip] "We need to protect corporate data in LDAP from being modified or even accessed by untrusted resources. Yes. [snip] "Because some of the applications cannot be

Re: Compile openldap library with GSSAPI enabled

2013-02-19 Thread Dan White
On Mon, Feb 18, 2013 at 3:33 PM, Dan White wrote: You have the necessary sasl components installed to support gssapi authentication. To verify that your AD server supports gssapi: ldapsearch -LLL -x -H ldap://ad.example.org -s "base" -b "" supportedSASLMechanisms dn: supportedSASLMechanisms:

RE: Openldap Chaining

2013-02-19 Thread jeevan kc
Thanks for the reply Gavin. So that means I need to configure and add the overlays only on the slaves and not on the master, right? Jeevan > Date: Fri, 15 Feb 2013 20:43:02 + > Subject: Re: Openldap Chaining > From: ghe...@suretecsystems.com > To: jeev_...@hotmail.com > CC: openldap-techni

openLDAP is not working with MySQL cluster

2013-02-19 Thread SHEKHAR PODICHETI
Hi, I tried connecting openLDAP server with MySQL cluster through NDB APIs. I made configuration changes in slapd.conf so that it connect to NDB. However it is throwing Unrecongnized NDB. I request tou to help me. It will be great if u share me sample slapd.conf file that has the NDB configurati

Re: openLDAP is not working with MySQL cluster

2013-02-19 Thread Quanah Gibson-Mount
--On Wednesday, February 20, 2013 12:48 AM +0530 SHEKHAR PODICHETI wrote: Hi, I tried connecting openLDAP server with MySQL cluster through NDB APIs. I made configuration changes in slapd.conf so that it connect to NDB. However it is throwing Unrecongnized NDB. I request tou to help me. It

modifying cn=config - Invalid credentials (49)

2013-02-19 Thread Asmaa Ahmed
Hi, I am trying to modify cn=config, but I don't understand why It doesn't work any more. root@auth-dev:/etc/ldap# ldapsearch -v -x -D 'cn=admin,cn=config' -W ldap_initialize( )Enter LDAP Password: ldap_bind: Invalid credentials (49)root@auth-dev:/etc/ldap# ldapsearch -v -x -D 'cn=admin,^C-W

Re: modifying cn=config - Invalid credentials (49)

2013-02-19 Thread Patrick Lists
On 02/20/2013 12:41 AM, Asmaa Ahmed wrote: Hi, I am trying to modify cn=config, but I don't understand why It doesn't work any more. root@auth-dev:/etc/ldap# ldapsearch -v -x -D 'cn=admin,cn=config' -W ldap_initialize( ) Enter LDAP Password: ldap_bind: Invalid credentials (49) ^^

Re: modifying cn=config - Invalid credentials (49)

2013-02-19 Thread Quanah Gibson-Mount
--On Wednesday, February 20, 2013 10:41 AM +1100 Asmaa Ahmed wrote: Hi, I am trying to modify cn=config, but I don't understand why It doesn't work any more. root@auth-dev:/etc/ldap# ldapsearch -v -x -D 'cn=admin,cn=config' -W It looks like you have configured your cn=config DB to use

RE: modifying cn=config - Invalid credentials (49)

2013-02-19 Thread Asmaa Ahmed
yes, but how can I modify the configuration now?I can add users for instance, but I can't modify cn=config! ldapadd -v -x -D 'cn=admin,dc=domain,dc=com' -W -f sasl-config.ldif modifying entry "cn=config"ldap_modify: Insufficient access (50) Thanks. > Date: Tue, 19 Feb 2013 17:46:19 -0800 > From

RE: modifying cn=config - Invalid credentials (49)

2013-02-19 Thread Quanah Gibson-Mount
--On Wednesday, February 20, 2013 1:28 PM +1100 Asmaa Ahmed wrote: yes, but how can I modify the configuration now? I can add users for instance, but I can't modify cn=config! ldapadd -v -x -D 'cn=admin,dc=domain,dc=com' -W -f sasl-config.ldif modifying entry "cn=config" ldap_modify: Ins

RE: modifying cn=config - Invalid credentials (49)

2013-02-19 Thread Asmaa Ahmed
Do you mean something like that? ldapsearch -QY EXTERNAL -H ldapi:///ldap_sasl_interactive_bind_s: Authentication method not supported (7) additional info: SASL(-4): no mechanism available: Thanks. > Date: Tue, 19 Feb 2013 18:34:32 -0800 > From: qua...@zimbra.com > To: asabatg...@hotmail.

RE: modifying cn=config - Invalid credentials (49)

2013-02-19 Thread Quanah Gibson-Mount
--On Wednesday, February 20, 2013 1:45 PM +1100 Asmaa Ahmed wrote: Do you mean something like that? ldapsearch -QY EXTERNAL -H ldapi:/// ldap_sasl_interactive_bind_s: Authentication method not supported (7) additional info: SASL(-4): no mechanism available: Yes. Looks like you've busted

Re: modifying cn=config - Invalid credentials (49)

2013-02-19 Thread Dan White
On 02/20/13 13:45 +1100, Asmaa Ahmed wrote: Do you mean something like that? ldapsearch -QY EXTERNAL -H ldapi:/// ldap_sasl_interactive_bind_s: Authentication method not supported (7) additional info: SASL(-4): no mechanism available: Thanks. You have likely misconfigured sasl, via your

RE: modifying cn=config - Invalid credentials (49)

2013-02-19 Thread Asmaa Ahmed
Hello,Actually I only added kerberos authentication for sasl.In '/etc/ldap/sasl2/slapd.conf', I added only mech_list: GSSAPICan I add other mechanisms too? ldapsearch -x -H ldapi:// -b '' -s base -LLL supportedSASLMechanisms dn: supportedSASLMechanisms: GSSAPI Thanks. > Date: Tue, 19 Feb 2013

Re: modifying cn=config - Invalid credentials (49)

2013-02-19 Thread Dan White
On 02/20/13 16:20 +1100, Asmaa Ahmed wrote: Actually I only added kerberos authentication for sasl. In '/etc/ldap/sasl2/slapd.conf', I added only mech_list: GSSAPI Can I add other mechanisms too? ldapsearch -x -H ldapi:// -b '' -s base -LLL supportedSASLMechanisms dn: supportedSASLMechanisms: G

RE: modifying cn=config - Invalid credentials (49)

2013-02-19 Thread Asmaa Ahmed
Thanks. The modification enabled the mechanism, and solved my problem. > Date: Tue, 19 Feb 2013 23:45:52 -0600 > From: dwh...@olp.net > To: asabatg...@hotmail.com > CC: openldap-technical@openldap.org > Subject: Re: modifying cn=config - Invalid credentials (49) > > On 02/20/13 16:20 +1100, Asma

Fwd: openLDAP is not working with MySQL cluster

2013-02-19 Thread SHEKHAR PODICHETI
Hi, I tried connecting openLDAP server with MySQL cluster through NDB APIs. I made configuration changes in slapd.conf so that it connects to NDB. However it is throwing Unrecongnized NDB. I request you to help me. It will be great if u share me sample slapd.conf file that has the NDB configurat