Fwd: Example for SASL bind to Microsoft AD

2013-07-25 Thread radiatejava
Thanks Michael for the response. Would you mind sharing the exact syntax (I am having Win 2008 server) and getting these errors: ldapsearch -H ldap://10.77.125.83 -s sub -b "dc=agentdev,dc=com" -D sburn...@agentdev.com -Y DIGEST-MD5 "(cn=iqsyed)" SASL/DIGEST-MD5 authentication started Please ente

Replicating the Access Log

2013-07-25 Thread Tim Gustafson
Hi, I'm using the accesslog overlay on all three of my LDAP servers to record BIND and WRITE operations. Is there any reason I can't replicate the data from cn=log on all three of my servers in MirrorMode so that all three of my servers contain a complete audit log of all bind and write operation

Re: how to configure subsuffix?

2013-07-25 Thread Quanah Gibson-Mount
--On Thursday, July 25, 2013 10:27 PM +0300 Zeus Panchenko wrote: hi all, I'm absolutely new to LDAP and need advice, please how is it better/correct to configure database to implement "corporative users tree" covered? what I mean is structure for head office (ho), branch 1 of head office (

how to configure subsuffix?

2013-07-25 Thread Zeus Panchenko
hi all, I'm absolutely new to LDAP and need advice, please how is it better/correct to configure database to implement "corporative users tree" covered? what I mean is structure for head office (ho), branch 1 of head office (bo1), ... branch N of head office (boN): - ho -+- bo1 -+- People

Replicating schema

2013-07-25 Thread espeake
Okay so I am very new to openLDAP and we are running v 2.4.28 on ubuntu 12.04. In trying to set up a mirror with two servers that will grow to 3 soon. THis is what I get in the log about syncing the schema: Jul 25 13:26:42 tntest-ldap-1 slapd[27954]: conn=1004 fd=16 ACCEPT from IP= 172.17.3.14

Re: Antw: delta sync error message in log

2013-07-25 Thread Michael Ströder
Howard Chu wrote: Ulrich Windl wrote: I thought I read that delta sync with multi-master is not working yet... Is ist working in the meantime? Read the Changelog for 2.4.27. Just to avoid misunderstandings: One should use recent release 2.4.35+ because there have been important fixes to del

Re: Example for SASL bind to Microsoft AD

2013-07-25 Thread Michael Ströder
Howard Chu wrote: radiatejava wrote: I am trying to do OpenLDAP integration with Microsoft AD/LDAP. For some initial troublehooting purpose, I am looking for using ldapsearch command with SASL bind (DIGEST-MD5). Can anyone give me the exact syntax for how to use ldapsearch command with SASL bin

Re: cn=monitor issues.

2013-07-25 Thread Michael Ströder
Quanah Gibson-Mount wrote: --On Thursday, July 25, 2013 9:44 AM -0500 Mónico Briseño wrote: Hi, there. I have installed ldap in Ubuntu 12.04. I decided to use cn=monitor. I added that line in the slap.conf script. I stopped and started the slpad deamon. After that I typed the following command:

Re: Ldap features installed.

2013-07-25 Thread Quanah Gibson-Mount
--On Thursday, July 25, 2013 10:03 AM -0500 Mónico Briseño wrote: Hi, there. I installed Ldap in Ubuntu 12.04 Question: How can I know the ldap features are installed? Ask the Ubuntu OpenLDAP package maintainers? Or download their dpkg source to see what they do as far as configuring O

Re: cn=monitor issues.

2013-07-25 Thread Quentin PETEL
Maybe with : ldapsearch -x -D 'cn=admin,dc=example,dc=com' -W -b 'dc=exemple,dc=com' 'cn=monitor' '(objectClass=*)' '*' '+' Le 25/07/2013 16:44, Mónico Briseño a écrit : Hi, there. I have installed ldap in Ubuntu 12.04. I decided to use cn=monitor. I added that line in the slap.conf script. I

Re: cn=monitor issues.

2013-07-25 Thread Quanah Gibson-Mount
--On Thursday, July 25, 2013 9:44 AM -0500 Mónico Briseño wrote: Hi, there. I have installed ldap in Ubuntu 12.04. I decided to use cn=monitor. I added that line in the slap.conf script. I stopped and started the slpad deamon. After that I typed the following command: ldapsearch -x -D 'cn=ad

Ldap features installed.

2013-07-25 Thread Mónico Briseño
Hi, there. I installed Ldap in Ubuntu 12.04 Question: How can I know the ldap features are installed? -- M.S. José M. Briseño Cortés Universidad de Guadalajara Instructional Technologist Univ. Houston Moodle Teacher Certificate NTCM, IACEP, iNACOL, ACM member

cn=monitor issues.

2013-07-25 Thread Mónico Briseño
Hi, there. I have installed ldap in Ubuntu 12.04. I decided to use cn=monitor. I added that line in the slap.conf script. I stopped and started the slpad deamon. After that I typed the following command: ldapsearch -x -D 'cn=admin,dc=example,dc=com' -W \ -b 'cn=monitor' -s base '(objectClass=*)' '*

Re: Example for SASL bind to Microsoft AD

2013-07-25 Thread Howard Chu
radiatejava wrote: I am trying to do OpenLDAP integration with Microsoft AD/LDAP. For some initial troublehooting purpose, I am looking for using ldapsearch command with SASL bind (DIGEST-MD5). Can anyone give me the exact syntax for how to use ldapsearch command with SASL bind for active direct

Example for SASL bind to Microsoft AD

2013-07-25 Thread radiatejava
I am trying to do OpenLDAP integration with Microsoft AD/LDAP. For some initial troublehooting purpose, I am looking for using ldapsearch command with SASL bind (DIGEST-MD5). Can anyone give me the exact syntax for how to use ldapsearch command with SASL bind for active directory ? Appreciate your

Re: Antw: delta sync error message in log

2013-07-25 Thread Howard Chu
Ulrich Windl wrote: I thought I read that delta sync with multi-master is not working yet... Is ist working in the meantime? Read the Changelog for 2.4.27. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Arch

Re: str2entry: invalid value for attributeType objectClass #2 URGENT

2013-07-25 Thread Dieter Klünter
Am Thu, 25 Jul 2013 10:51:25 +0400 schrieb 25Dollar Tech <25dollartechh...@gmail.com>: > Hello Team, > > I have a problem with OpenLDAP exporting and importing in to a > different machine. > > When I use slapadd -l /backupfilname.ldif I used to get below error > message > > _

Re: delta sync error message in log

2013-07-25 Thread Quentin PETEL
It means that your syncrep directives are not the good ones i think, or . For each DIT you yant to replicate, you need to have : The syncprov module load: dn: cn=module{0},cn=config objectClass: olcModuleList cn: module{0} olcModulePath: /usr/lib/ldap olcModuleLoad: {0}back_hdb *olcModuleLoad: