Re: RE24 testing call (OpenLDAP 2.4.36)

--On August 9, 2013 9:34:24 PM +0200 Peter Gietz wrote: Built on CentOS release 6.4 (Final) against openssl with hdb and mdb went fine Thanks! --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc Zimbra :: the leader in open source messaging and

Re: RE24 testing call (OpenLDAP 2.4.36)

--On August 10, 2013 1:21:03 AM +0200 Patrick Lists wrote: Hi Quanah, On 07/29/2013 09:44 PM, Quanah Gibson-Mount wrote: If you know how to build OpenLDAP manually, and would like to participate in testing the next set of code for the 2.4.36 release, please do so. Generally, get the code

Re: RE24 testing call (OpenLDAP 2.4.36)

Hi Quanah, On 07/29/2013 09:44 PM, Quanah Gibson-Mount wrote: If you know how to build OpenLDAP manually, and would like to participate in testing the next set of code for the 2.4.36 release, please do so. Generally, get the code for RE24:

Re: Schema Replication and data replication.

--On August 9, 2013 12:55:17 PM -0500 espe...@oreillyauto.com wrote: So I have installed openldap 2.4.35 and it shows in the dpkg -l list. From the master that is running I ran: slapcat -n0 -F /etc/ldap/slapd.d -l /mnt/downloads/ldap/config-20130809-3.ldif on my server that I have ran the

Re: separate login/password for several services?

Andrew Findlay wrote: > Do you reall want every user account on every service to have a > different username? to be honest, I do not want, but in practice when I need to land some mail domain with whole it's users at my MTA, I need to decide what to do with widely used mailboxes like admin, info

Re: RE24 testing call (OpenLDAP 2.4.36)

Built on CentOS release 6.4 (Final) against openssl with hdb and mdb went fine Cheers, Peter Am 29.07.2013 21:44, schrieb Quanah Gibson-Mount: > If you know how to build OpenLDAP manually, and would like to > participate in testing the next set of code for the 2.4.36 release, > please do so. >

Re: Schema Replication and data replication.

So I have installed openldap 2.4.35 and it shows in the dpkg -l list. From the master that is running I ran: slapcat -n0 -F /etc/ldap/slapd.d -l /mnt/downloads/ldap/config-20130809-3.ldif on my server that I have ran the update on and the server that I have not run the update on I run the

developing module that instantiates check_password() function

Hello, I wish to develop a user-defined loadable module that instantiates the check_password() function as described in the slapo-ppolicy man page. The man page specifies the function prototype as int check_password (char *pPasswd, char **ppErrStr, Entry *pEntry); In which header file is the 'E

Re: separate login/password for several services?

On Fri, Aug 09, 2013 at 05:53:57PM +0300, Zeus Panchenko wrote: > To: Andrew Findlay Please keep replies on the list so that they become searchable and everyone can benefit. > here is the diagram depicting what I am thinking about while talking :) > > https://www.dropbox.com/s/212kdpbiug9obkc/

Re: Schema Replication and data replication.

--On August 9, 2013 9:07:06 AM -0500 espe...@oreillyauto.com wrote: So I have been able to build a package for ubuntu. A few questions. I have yet to find where to set the default install directory when I run ./configure. The default is /etc/openldap and I would like to change it to /etc/ld

Re: separate login/password for several services?

Andrew Findlay wrote: > > now I do can ldapadd these ldif-s successfully > > ---[ ldif ] > > dn: authorizedService=xmpp.org,uid=jdoe,ou=People,dc=org > > authorizedService: xmpp.org > > ... > > uid: john > > > > dn: authorizedService=xmp

Re: separate login/password for several services?

Just crazy idea... several attributes for user passwords (userPassword1, userPassword2, ...) in user account and proxy-mapping overlay (slapo-translucent? slapo-rwm?) with mapping attribute userPassword into userPassword1 or userPassword2 with dependencies from service IP. WBR On 09.08.2013

Re: Schema Replication and data replication.

So I have been able to build a package for ubuntu. A few questions. I have yet to find where to set the default install directory when I run ./configure. The default is /etc/openldap and I would like to change it to /etc/ldap which is the current install directory. I was able to install the pac

Re: separate login/password for several services?

On Fri, Aug 09, 2013 at 04:17:02PM +0300, Zeus Panchenko wrote: > the uniqueness while *creating* the dn ... since for dn-s > > dn: authorizedService=target-service,uid=target-user1,ou=People,dc=org > dn: authorizedService=target-service,uid=target-user2,ou=People,dc=org > ... > dn: authorizedSer

Re: separate login/password for several services?

Andrew Findlay wrote: > > lets say I have two users with name John and I need to give each one > > acces to some service, but both of them wish the service uid=john (for > > example, it is common issue for MTA serving different mail domains with > > different user space for each one) > > The firs

Re: separate login/password for several services?

On Fri, Aug 09, 2013 at 01:20:55PM +0300, Zeus Panchenko wrote: > is there way to avoid target service uid clashing in this case? > > lets say I have two users with name John and I need to give each one > acces to some service, but both of them wish the service uid=john (for > example, it is comm

Re: separate login/password for several services?

Andrew Findlay wrote: > ... > You would end up creating two new attributes for each service type, > and OpenLDAP would still not check the passwords for you in a useful way. > > Better method: Create a sub-entry below the user entry for each service. > The service-specific entry can use the stand

One questions about nested gourp support of openldap

Hi, there To meet the following requirement: "groupA" contains user entries: cn=a,ou=users,dc=test,dc=com cn=b,ou=users,dc=test,dc=com "groupB" contains "groupA" I have following questions: 1 Which object classes should I use to implement above requirement? Could anyone give a