Re: trying to understand SID portion in contextCSN

Hi Quanah! Did NOT know that tool! Thanks again! Great info. MJ Op 06-07-2023 om 22:06 schreef Quanah Gibson-Mount: --On Thursday, July 6, 2023 3:44 PM +0200 cYuSeDfZfb cYuSeDfZfb wrote: Hi  Quanah, Thanks again for your answer. From what you have written, we understand now that

Re: OpenLDAP 2.5 + GSSAPI + Kerberos

I complicated things by mixing saslauthd and GSSAPI. I need to simplify and just focus on GSSAPI. I'll get rid of the regex mapping and just focus on getting authentication to work. I'll create a user like in the documentation (i.e. uid=kurt,cn=gssapi,cn=auth). I'm guessing I'll need a dn for cn

Re: trying to understand SID portion in contextCSN

--On Thursday, July 6, 2023 3:44 PM +0200 cYuSeDfZfb cYuSeDfZfb wrote: Hi  Quanah, Thanks again for your answer. From what you have written, we understand now that we should not aim for four identical timestamps in contextCSN attributes on each node. As contextCSN is updated (as you

Re: -Y external and SUSE

Thank's Michael, that it. I was looking for ldap-utils (the name of the package on Debian system) But on a SUSE system it's "openldap2-client". I removed it and it is working. I don't like SUSE :-) Am 05.07.23 um 20:43 schrieb Michael Wandel: rpm -qf $(which ldapsearch) -- Stefan Kania L

Re: OpenLDAP 2.5 + GSSAPI + Kerberos

On 2023-07-05 23:31, Bill MacAllister wrote: You do not need saslauthd to authenticate to slapd. You need that only if you need to support simple binds to the directory and only then on the client system. The statement "and only on the client system" of mine is just flat wrong. If you want to

Openldap 2.4 : Replication issue

Dear Team, I'm facing a weird issue : My env is : root@repnode:~# ldap-utils/focal-security,focal-updates,now 2.4.49+dfsg-2ubuntu1.9 amd64 [installed,automatic] libldap-2.4-2/focal-security,focal-updates,now 2.4.49+dfsg-2ubuntu1.9 amd64 [installed,automatic] libldap-common/focal-security,focal-

Re: OpenLDAP 2.5 + GSSAPI + Kerberos

Thanks for the reply Bill. This is certainly helpful. The OS is Redhat 9. Is there an equivalent to /etc/default/slapd? Everything I find says OpenLDAP no longer reads its configuration from the /etc/openldap/slapd.conf file. Instead, it uses a configuration database located in the /etc/openldap

Re: OpenLDAP 2.5 + GSSAPI + Kerberos

Am Wed, 05 Jul 2023 18:18:31 - schrieb dbars...@nd.edu: > Total newbie here so please be gentle. I'm trying to set up a simple > ldap server that uses SASL and Kerberos for authentication. I built > OpenLDAP --with-cyrus-sasl and --enable-spasswd. I have the service > principal and testsaslaut

Re: -Y external and SUSE

Am Wed, 5 Jul 2023 20:37:34 +0200 schrieb Stefan Kania : Hi All, I'm still alive, > Hi to all, > > I just installed openSUSE 15.5 and the actual symas packages. After > installing OpenLDAP I could start slapd but "ldapsearch -Y external > -H ldapi:///" is giving me a "can't connect to ldapserve

Re: trying to understand SID portion in contextCSN

Hi Quanah, Thanks again for your answer. >From what you have written, we understand now that we should not aim for four identical timestamps in contextCSN attributes on each node. As contextCSN is updated (as you said) only when a server receives a direct write. (and NOT for writes received thro