ldap, kerberos and authorization by group membership

2013-03-15 Thread brendan kearney
all, please excuse my ignorance, as i am still learning. i have started working with mit kerberos 5 and openldap. i have the krb5 database in ldap, have several principals created, can can authenticate using kerberos. what i would like to accomplish is authorization based on group membership.

Re: ldap.conf clarification

2013-03-15 Thread Philip Guenther
On Fri, 15 Mar 2013, Mik J wrote: > Sorry if my question seem to be simple but I've read the ldap.conf > manpage and I would like to clarify what I understood > > ldap.conf is the configuration file read by the ldap client. > > TLS_REQCERT never > means that the client doesn't ask the server for

Re: Multiple uid's?

2013-03-15 Thread Dan White
On 03/15/13 10:24 -0700, R V wrote: Is there a alias entry that can be used for authentication? Basically I am looking for away to allow a user record to have multiple uid's. Example: uid johnsmith uid jsmith Trying to bring multiple services under one authentication method. The challengin

Re: Encryption or hash for password?

2013-03-15 Thread harry . jede
Gerhardus Geldenhuis wrote: > Hi > I am using the default Ubuntu 12.10 openldap installation and have > inherited an existing ldap setup. When I do a slapcat -n 1 > > It shows userPassword entries as follows: > > userPassword:: > e2NyeFB0fSQxJEkwKGc3bGJjJFpwL3JndlpCZDBlSPZuZGdoMFczTC8= Attributes

ldap.conf clarification

2013-03-15 Thread Mik J
Hello, Sorry if my question seem to be simple but I've read the ldap.conf manpage and I would like to clarify what I understood ldap.conf is the configuration file read by the ldap client. TLS_REQCERT never means that the client doesn't ask the server for a certificate. Therefore the server wi

Re: Lua wrapper for LMDB

2013-03-15 Thread Howard Chu
Shmulik Regev wrote: Hi, I've been working on a Lua wrapper for LMDB - https://github.com/shmul/lightningdbm . It is a thin wrapper around the database leveraging upon Lua's elegant integration with C libraries. Feedback is welcomed warmly. Looks nice and clean. I'll add a link to it on the L

Re: Encryption or hash for password?

2013-03-15 Thread Howard Chu
Gerhardus Geldenhuis wrote: Thanks, I thought crypt as well... but then I would expect it to look like: userPassword: {CRYPT}saHW9GdxihkGQ instead slapcat generates: userPassword:: skadfjsajf= Two small differences: there is two :: instead of one and all of the userPassword entries ends in =.

Lua wrapper for LMDB

2013-03-15 Thread Shmulik Regev
Hi, I've been working on a Lua wrapper for LMDB - https://github.com/shmul/lightningdbm . It is a thin wrapper around the database leveraging upon Lua's elegant integration with C libraries. Feedback is welcomed warmly. Cheers, Shmul

Re: Encryption or hash for password?

2013-03-15 Thread Gerhardus Geldenhuis
Thanks, I thought crypt as well... but then I would expect it to look like: userPassword: {CRYPT}saHW9GdxihkGQ instead slapcat generates: userPassword:: skadfjsajf= Two small differences: there is two :: instead of one and all of the userPassword entries ends in =. Regards On 15 March 2013 15:

Re: Encryption or hash for password?

2013-03-15 Thread Wes Hardin
On 03/15/2013 09:58 AM, Gerhardus Geldenhuis wrote: > Hi > I am using the default Ubuntu 12.10 openldap installation and have inherited > an > existing ldap setup. When I do a slapcat -n 1 > > It shows userPassword entries as follows: > > userPassword:: e2NyeFB0fSQxJEkwKGc3bGJjJFpwL3JndlpCZDBlSP

Re: provider/consumer: entries have identical CSN

2013-03-15 Thread Marc Patermann
Walter, Walter Werner schrieb (15.03.2013 10:58 Uhr): I get a strange replication problem. After i didn't find a solution somewhere on internet i decided to post to this mailing-list. Probably i should describe my system settings. Both consumer and provider are running on suse 12.1. And i got t

provider/consumer: entries have identical CSN

2013-03-15 Thread Walter Werner
hi to everyone I get a strange replication problem. After i didn't find a solution somewhere on internet i decided to post to this mailing-list. Probably i should describe my system settings. Both consumer and provider are running on suse 12.1. And i got the errors with openldap version 2.4.26-3.1