load balancer

2015-08-27 Thread Eileen(=^??^=)
Hi team, I have two LDAP servers using mirrormode. I want to run a FREE service to achieve load balancer for these servers. Due to i can't find any load balancer information in OpenLDAP-Admin-Guide, so my question is which kind of service do you advice for load balancer, or which kind se

Permission management with LDAP

2015-08-27 Thread Fischer, Johannes
Hi again, I didn’t want to do a thread high jacking so here a second mail with a complete other question If I’have a structure like: User - Role Role - User - Permission Permission - Role Now I want to get the authorization for some permission, So I have

Send Success with first found entry

2015-08-27 Thread Fischer, Johannes
Hi again, more and more I get a feeling how all this work together. But often you don't know what you actually need to look up... I've looked on the LDAP server of the Institute to get a feeling how the real IT-guys managed their server... (It was a disaster from a data protection perspective..

Re: disable simple paged results control support?!

2015-08-27 Thread Igor Shmukler
Aaron, I don't know what is happening, hence tried to tap into collective wisdom. My LDIF was written to disable paged search for everyone, hence dn: cn=config If I knew how the rule should be written, I would not bother smart people. Sincerely, Igor Shmukler On Thu, Aug 27, 2015 at 5:50 PM,

Re: disable simple paged results control support?!

2015-08-27 Thread Aaron Richton
On Thu, 27 Aug 2015, Igor Shmukler wrote: search: 4 result: 0 Success obviously isn't result: 11 Administrative limit exceeded text: pagedResults control not allowed so yeah, that prtotal=disabled doesn't seem to hit. I'd turn up slapd logging and see what's going on. (Are you positive th

Re: disable simple paged results control support?!

2015-08-27 Thread Igor Shmukler
Hello Aaron, Thank you for responding. I am still trying to process your email. Hopefully, I understand some of your suggestions. Thank you for referring me to test025. I would be delighted to get: "Unavailable Critical Extension" in return for simple paged results request. My problem is that the

Re: AW: disable unique overlay from member attributes

2015-08-27 Thread Howard Chu
Fischer, Johannes wrote: "Hallo" Dieter, Hi @all, I've changed the entry and added the quotes: dn: olcOverlay=unique,olcDatabase={1}hdb,cn=config changetype: add objectClass: olcOverlayConfig objectClass: olcUniqueConfig olcOverlay: unique olcUniqueUri: "ignore ldap:///?members?sub"; The result

Re: disable simple paged results control support?!

2015-08-27 Thread Aaron Richton
On Thu, 27 Aug 2015, Igor Shmukler wrote: olcSizeLimit: size.prtotal=disabled What is wrong with the LDIF? It was successfully applied using ldapmodify(1), yet my server still does not throw an unsupported control, instead providing clients with paged results. You can see how prtotal=disabled

AW: Mail attribute: how to make it mandatory.

2015-08-27 Thread Fischer, Johannes
Hi Simone, It is not that hard to add a new schema. (for me it’s harder to modify the unique overlays… ;-)) Step by step: 1. Backup the Database a. ldapsearch -h $host -b $ldaproot -D $admin -w $pswd > $outfile 2. Remove the Database a. ldapdelete -h $host -x -r -D $a

AW: disable unique overlay from member attributes

2015-08-27 Thread Fischer, Johannes
"Hallo" Dieter, Hi @all, I've changed the entry and added the quotes: dn: olcOverlay=unique,olcDatabase={1}hdb,cn=config changetype: add objectClass: olcOverlayConfig objectClass: olcUniqueConfig olcOverlay: unique olcUniqueUri: "ignore ldap:///?members?sub"; The result is the same error. What el

authz-regexp behavior with GSSAPI

2015-08-27 Thread Peter Heinemann
Good day, I am trying to figure out different behaviors with authz-regexp in slapd.conf. openldap 2.4-39 RHEL 6.5 cyrus-sasl and cyrus-sasl-gssapi 2.1.23-15 krb5-libs 1.10.3-42 We're mapping based on a search for the presence of the userPassword attribute. In production is: sasl-host pennid

AW: Mail attribute: how to make it mandatory.

2015-08-27 Thread Fischer, Johannes
One „quick“ fix could be to change the schema, Or you can create a new schema which meet the requirement. (This is the better solution I think) Greetings John Von: openldap-technical [mailto:openldap-technical-boun...@openldap.org] Im Auftrag von Simone Taliercio Gesendet: Dienstag, 25. August

Re: disable simple paged results control support?!

2015-08-27 Thread Igor Shmukler
Hello, Sorry, I am [still] having problems disabling paged results. The below LDIF is not working: dn: cn=config changetype: modify replace: olcSizeLimit olcSizeLimit: size.prtotal=disabled What is wrong with the LDIF? It was successfully applied using ldapmodify(1), yet my server still does not

Re: disable simple paged results control support?!

2015-08-27 Thread Igor Shmukler
OK, I might have found the setting: olcSizeLimit: size.prtotal=disabled Thank you On Thu, Aug 27, 2015 at 1:46 PM, Igor Shmukler wrote: > Hello, > > I am trying to make my client, developed for OpenLDAP also compatible > with Oracle DSEE. > Oracle DSEE is missing support for simple paged results

disable simple paged results control support?!

2015-08-27 Thread Igor Shmukler
Hello, I am trying to make my client, developed for OpenLDAP also compatible with Oracle DSEE. Oracle DSEE is missing support for simple paged results, which I use. Yet, ODSEE supports virtual list view with server-side sorting. I adjusted my code, to use that - VLV+SSS as a fallback whenever the

Re: Mail attribute: how to make it mandatory.

2015-08-27 Thread Simone Taliercio
Hi John, OhMygGod, you are an angel! We are in the middle of a release, but I'll try to test your step-by-step guide asap. I noticed that some steps are suitable for configuration based on the new cn=config. I'm still based on slapd.conf so I would need to rearrange those steps, right ? :) Than