Re: MDB Status

On 28/09/12 02:38, Howard Chu wrote: For those who haven't been following along, support for OpenLDAP's MDB (memory-mapped database) library is also available for several other open source projects, including Cyrus SASL (sasldb mech), Heimdal Kerberos (hdb module), SQLite3, OpenDKIM, and Memcac

Re: cannot populate with smbldap-populate

On 29 avr. 2012, at 10:27, stefano malini wrote: > I used slapindex also, the output is: > > stefano@amahoro:~$ /usr/sbin/slapindex > /etc/ldap/slapd.conf: line 20: invalid path: Permission denied > slapindex: bad configuration file! Try running slapindex as the user "openldap". Also, make sure

Re: Convert *.schema to *.ldif

Le 03/04/12 20:39, Francis Swasey a écrit : On 4/3/12 11:50 AM, Howard Chu wrote: I don't see any description in the admin guide about how to convert a *.schema file into a *.ldif file. Google tells me that most people are using slaptest with the -F and -f parameters with a specially crafte

Re: Password expiration

olicy overlay. Jonathan -- ------ Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: openldap proxy to AD

e the ldap and meta backends to use a different authentication for the outgoing connection to the proxied server by setting mode=none in the idassert-bind directive. For example: idassert-bind bindmethod=simple binddn="cn=proxyuser,dc=ad,dc=com" credentials=secret mode=none Will cause all connections to the proxied LDAP server to use those credentials. Is this what you're trying to achieve? Jonathan -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: Ubuntu can't connect to SambaPDC

Hi, On 02/04/12 14:52, Imre Bertalan wrote: > Hi guys. > > This is not really an OpenLDAP question, but it seems we have some fine > qualified users here, so I'll ask this question here. :) > > I have a nice working Zentyal 2.2 server with DNS and SambaPDC. Windows > client's can join the domain

Re: REL_ENG versions produce different libraries?

On 30/03/2012 15:27, Howard Chu wrote: Nick Milas wrote: On 30/3/2012 3:04 μμ, Nick Milas wrote: I would expect some "test" parameter in build/version.var, but I didn't see any. Hmm, I guess I could simply change (in build/version.var): ol_patch=X from X to e.g. 29a or to 29.1 ? Woul

Re: Schema definitions: from Sun DS to OpenLDAP

On 07/06/11 08:06, Silvio Verrecchia wrote: > Hello gurus, > > I'm migrating a Sun DS to Openldap and I've an highly personalized > 99user.ldif file with user defined objectclass and attributes > (hundreds... :( :( ) > Regarding personalized schema definitions, is there a way > (script/batch/etc)

Re: Slapd Security based on port

are generally returned in 1-2 days. Jonathan -- ------ Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: question about cn=config replication and security.

ccess to the cn=config subtree. Jonathan -- ------ Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: slapo-lastbind

ical >> problem. >> Do you think it would be possible to have a similar feature with this >> overlay? Well, it's certainly possible, since the lastbind overlay reuses the almost exact portion of code from the ppolicy overlay, the patch could be made pretty simply I guess...

Re: slapo-lastbind

does not replicate failed password attempts or other operational attributes (actually, using the chain overlay it is possible to forward these updates for ppolicy but not currently with the lastbind overlay ). Jonathan -- ======

Re: OpenLDAP server as a proxy to AD and local auth db

the AD proxy as a subordinate to that. You'll then be able to have "local" users in OpenLDAP, and a subtree that is a proxy to your AD. Once you're there, it may be worth while setting up pcache (caching proxy), to save a bit of traffic between OpenLDAP and AD, and possibly provi

Re: CLI remotes write, php remotes can't

On 23 janv. 2011, at 00:30, "m...@grounded.net" wrote: I'm trying to find leads on what else to look for with this problem. Locally, I can create users, etc. From remote centos servers, I can create and read account info from command line. However, from remotes using php-ldap, I cannot crea

Re: Pass-Through authentication

On 14/11/10 18:29, Paulo Jorge N. Correia (paucorre) wrote: > Hi all, > > I’m just starting with openLDAP and saslauth, and I’m trying to > replicate what I can achieve with ADAM/AD LDS in Windows platform. > > > > I’m trying to use openldap to aggregate user information from several AD > serv

Re: ACL filter not working

#x27;m not entirely sure why you're allowed to do the search when using the "(objectClass=*)" filter, even though you don't have access to the above-mentioned entry pseudo-attribute... Jonathan -- -- Jonathan Clarke

Re: Syncrepl not replicating userPassword

d" retry="60 +" logbase="cn=accesslog" logfilter="(&(objectClass=auditWriteObject)(reqResult=0))" syncdata=accesslog updateref ldap://10.1.55.196 end slapd.conf -- == Jonathan CLARKE -- Normation 44 rue Cauchy, 94110 Arcueil, France -- Telephone: +33 (0)1 83 62 61 24 -- Web:http://www.normation.com/ ==

Re: Sometimes getent missing users

LIMIT" keyword in SQL requests, if that means anything to you. That's the short and simple version, the full version is RFC 2696: http://tools.ietf.org/html/rfc2696 Jonathan -- ====== Jonathan CLARKE -- Normat

Re: Sometimes getent missing users

be faulty, either on the clients or the server? What results do you get when running a similar search manually from the clients, via ldapsearch? Any error or warning messages in the slapd logs? Jonathan -- == Jonathan CLARKE

Re: questions about openldap replication

is may look like push, but it's more of a subscriber based relation. Hope this clears some things up! Jonathan -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: syncrepl only working in one direction

On 24/09/2010 10:24, Alister Forbes wrote: Hi Jonathon, On 24 Sep 2010, at 08:38, Jonathan CLARKE wrote: Hi, Le 24/09/2010 07:31, Alister Forbes a écrit : Hi Jonathon, On 23 Sep 2010, at 15:24, Jonathan CLARKE wrote: Hello Alister, Le 23/09/2010 12:04, Alister Forbes a écrit : All

Re: syncrepl only working in one direction

Hi, Le 24/09/2010 07:31, Alister Forbes a écrit : Hi Jonathon, On 23 Sep 2010, at 15:24, Jonathan CLARKE wrote: Hello Alister, Le 23/09/2010 12:04, Alister Forbes a écrit : All, I have two identical servers (RHEL based VMs, server1 and server3) running 2.4.23 openldap. built

Re: syncrepl only working in one direction

ng over: restart both instances of slapd with -c rid=001 -c rid=003, to reset the replication status, and take it from there. Hope this helps, Jonathan -- ====== Jonathan CLARKE -- Normat

Re: Invalid credentials (49)

ith something like: ldapsearch -x -D "c...@tis.local" -W -H ldap://192.168.10.206 Hope this helps, Jonathan -- == Jonathan CLARKE -- Normation 44 rue Cauchy, 94110 Arcueil, France -- Telephone: +33 (0)1 83 62 26 96 -- Web:http://www.normation.com/ ==

Re: Searched Attr=1.1

x27;re all in the same order on all servers. I see no changes between 2.4.22 and 2.4.23 that could lead to this specific error occuring, but of course it may be more complicated than it looks. Jonathan -- == Jonat

Re: Replicating from a mirrormode pair to a read-only server

Hi Andrew, On 10/09/2010 18:42, Andrew Findlay wrote: On Fri, Sep 03, 2010 at 08:06:31PM +0200, Jonathan CLARKE wrote: I don't have any problems using the 2 syncrepl statements side-by-side on the slave. When one master goes offline, replication continues from the other, etc. I have

Re: Searched Attr=1.1

the password policy (1.3.6.1.4.1.42.2.27.8.5.1). Could it be that the system you encounter this on does not have the syncprov and ppolicy overlays enabled, whereas your others do? Hope this helps, Jonathan -- ====== Jonathan CLARKE --

Re: Configuring AD using OpenLDAP

the forest. Hope this helps, Jonathan -- ====== Jonathan CLARKE -- Normation 44 rue Cauchy, 94110 Arcueil, France -- Telephone: +33 (0)1 83 62 26 96 -- Web:http://www.normation.com/ ==

Re: Configuring AD using OpenLDAP

;This list is intended for discussion of technical issues related to the use of OpenLDAP Software." OpenLDAP software includes slapd, the libraries, utilities, tools and sample clients (from http://www.openldap.org). Jonathan -- == Jonat

Re: Can't get TLS working.

ap.org/lists/mm/listinfo/openldap-software The official announcement was sent out to all subscribers, see: http://www.openldap.org/lists/openldap-software/201005/msg00095.html So I'm here. This is the right place to be :) Jonathan -- ======

Re: syncrepl: contextCSN less than entryCSN

s written to disk. If you're checking via LDAP, then this is a whole different matter... -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: I can't login in my system using OpenLDAP

LDAP server). Being able to log in to a system using accounts from LDAP is another. To acheive this, I suggest you google one of many tutorials on "PAM NSS LDAP". Hope this helps, Jonathan -- ==

Re: Replicating from a mirrormode pair to a read-only server

Le 03/09/2010 17:18, Andrew Findlay a écrit : On Fri, Sep 03, 2010 at 04:35:24PM +0200, Jonathan CLARKE wrote: DB_LOCK_DEADLOCK errors are only a warning: retries should occur until the operation completes. Of course, if they can be avoided, best avoid! Question: is this topology sensible

Re: Defining a password attributetype

CLs can easily forbid authentication if such a flag is set, for example, unless access is done via the password manager webapp. Just a thought. Regards, Jonathan -- == Jonathan CLARKE -- Normation 44 rue

Re: Replicating from a mirrormode pair to a read-only server

l statements is certainly suboptimal, as all modifications will be replicated twice to all read-only servers. However, I don't see any reason why it shouldn't work, off the top of my head. Does slapd end up synchronizing everything? Jonathan -- == Jonat

Re: Can't start replication

3 14:09:05 rhel-lnx1 slapd[12715]: conn=1009 fd=9 closed -- Alister Forbes TACSUNS _.|._.|._ Cisco Systems Please avoid sending me Word or PowerPoint attachments. See - http://www.gnu.org/philosophy/no-word-attachments.html -- ===

Re: Defining a password attributetype

a special case. Similar behaviour could be achieved by writing an overlay, though, if that's what you want. Jonathan -- == Jonathan CLARKE -- Normation 44 rue Cauchy, 94110 Arcueil, Fr

Re: I can't see my /etc/ldap/slapd.conf file after reinstall

file /etc/ldap/slapd.conf? but the server is running. I believe that Debian testing has switched to the cn=config based configuration now, and you should find it stored in /etc/ldap/slapd.d/. -- -- Jonathan Clarke - jonat...@phillipou

Re: syncrepl help

kly, but one comment comes to mind: your setting of attrs="*" in the syncrepl statements is going to prevent operational attributes not to be replicated. This is most likely not what you want. Jonathan -- ------ Jonathan Clarke - j

Re: replication from child to Parent domain

P_ADDRESS}:${SON_LDAP_PORT} type=refreshOnly # five minutes, you should do syncrepl once a day in practice interval=00:01:00:00 etc As you can see, all params after the comment will be ignored. Jonathan -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: How to check LDAP replication status?

s... Jonathan -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: Syncrepl: Reliable method to ask a server for its own URL

e of the entry you changed. It contains the CSN, and thus the serverID of the server you performed the operation on, eg: entryCSN: 20100816090343.822782Z#00#001#00 Here the serverID is 001. Jonathan -- ------ J

Re: pass-through authentication

configuration file, named slapd.conf, to figure out how to communicate with saslauthd. The default path for this file (by SASL standards) is /usr/lib/sasl2/slapd.conf, but some distributions may use other paths (Debian uses /etc/ldap/sasl/slapd.conf). This file should contain at least &qu

Re: OpenLDAP as a proxy for Active Directory (missing attributes)

mberof" overlay over your ldap database. This seems unnecessary, an may well cause problems. I suggest you remove it. Hope this helps, Jonathan -- ------ Jonathan Clarke - jonat...@phillipoux.net

Re: Notification of userPassword change in OpenLDAP?

n.html#LDAP%20Sync%20Replication http://blog.normation.com/2010/07/18/java-ldap-sdk-for-syncrepl-replication-showcase/ Hope this helps, Jonathan -- ------ Jonathan Clarke - jonat...@phillipoux.net ---

Re: multi / standby master: incomplete replication after downtime (?)

o solve this: - configure /etc/hosts so that host --fqdn returns this name - run slapd with -h ldap://ldapmaster.local.site After changing it, I recommend a full re-sync of your backup instance. This should help! Jonathan -- == Jonathan CLARKE

Re: multi / standby master: incomplete replication after downtime (?)

ls="" Thanks for help... PS: my setup / slapd.conf is according to the book "openLDAP 2.4" by Oliver Liebel & John Martin Ungar. -- elmar -- -- Jonathan Clarke - jonat...@phillipoux.net ---

Re: Evidence of client information in openldap accesslog

ing. Jonathan -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: Unclear attribute: entry

(for read access to the entry itself) and for read (=r) access on each value of each attribute that is requested. Jonathan -- == Jonathan CLARKE -- Normation 44 rue Cauchy, 94110 Arcue

Re: Finiky old OpenLDAP Server: To be or not to be...

uation you're in, it's likely that after your slapadd, you just need to reindex the database. Stop slapd and run slapindex, making sure owners/permissions on the database files are identical before and after. Hope this helps, Jonathan -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: how to add a new database with slapd.d?

Le 27/07/2010 02:51, Zhang Weiwu a écrit : On 2010年07月26日 22:13, Jonathan Clarke wrote: Actually if you re-read that (means the document), you'll see that it says to use the 'olcBdbConfig' objectClass *in addition* to the olcDatabaseConfig objectClass. If you re-read my ori

Re: how to add a new database with slapd.d?

e the 'olcBdbConfig' objectClass *in addition* to the olcDatabaseConfig objectClass. Jonathan Clarke also wrote: One would usually add the new configuration object via LDAP, rather than by modifying the database files. This is the point of cn=config. However, adding files may work also... T

Re: How to let users change their passwords?

simple PHP web application, that takes a user's login, old password and defines a new password. It supports various niceties: simple password policy, updating Samba attributes, updating AD passwords directly, etc. Jonathan -- ==

Re: how to add a new database with slapd.d?

ite by anonymous auth by dn.base="cn=Admin,dc=example,dc=com" write by * none olcAccess: to * by self write by dn.base="cn=Admin,dc=example,dc=com" write by * read -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: Error "got search entry without sync state control" on N-Way Multimaster cn=config Runtime Configuration

lay={0}syncprov,olcDatabase={2}bdb,cn=config. Jonathan -- ------ Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: OpenLDAP, MS AD and SASLauthd

tion/1.2/howtos/activedirectory#pitfalls Jonathan -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: acls help

Le 21/07/2010 14:29, Juliano Rodrigues a écrit : On 21/07/10 05:33, Jonathan Clarke wrote: On 21/07/2010 02:28, Juliano Rodrigues wrote: Hello, Im using Phamm, its an php-web front-end to manage ldap postfix virtual hosting mail env. at my Fedora 11 box (openldap 2.4.15-7). Its designed to

Re: acls help

quot;user/vd & [$2]" write access to dn.regex=".+,o=hosting,dc=example,dc=tld$" by dn="cn=admin,dc=example,dc=tld" write by self write by dn.exact="cn=phamm,o=hosting,dc=example,dc=tld" read by anonymous auth access to dn.regex=".+,dc=tld$" by dn=&q

Re: accesslog overlay doesnt work

accesslog" database bdb suffix "cn=accesslog" index reqStart eq Any help is appreciated. My guess would be that you need to configure a different "directory" for your second database. Jonathan -- ------

Re: OpenLDAP authenticate the username/password with MS-AD?

OpenLDAP administrator's guide. -- Dan White -- ------ Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: OpenLDAP authenticate the username/password with MS-AD?

depending on your OS). Jonathan -- ------ Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: Configuring slapd.conf-less OpenLDAP

. You need to configure syslog to send messages from the "local4" facility to a log file. Depending on your syslog, something like the following in /etc/syslog.conf: local4.*/var/log/slapd.log Jonathan -- -- Jonat

Proxy cache overlay: effect of pcachePersist parameter?

Hi, I've set up an ldap backend, with a pcache overlay to cache binds for PAM. The config is below, for info. My question concerns the pcachePersist parameter. From the man page: pcachePersist { TRUE | FALSE } Specify whether the cached queries should be saved across restarts of the caching

Re: Problem with ADS authentication - any alternatives?

that it is indeed a SASL bind. AD does in fact accept plain LDAP binds with a username in place of a DN. Or at least usern...@domain.tld. It's one of those weird things... -- ------ Jonathan Clarke

Re: Syncrepl - frontend database cannot be shadow

a database (ie, this service is a consumer) and not provide it for other servers to replicate, you don't need syncprov. Regards, Jonathan -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: bdb/hdb cachesize calculation

On Tue, 13 Jul 2010 11:19:06 +0200, openldap...@stresst.net wrote: > On 07/12/2010 07:40 PM, Quanah Gibson-Mount wrote: >> --On Monday, July 12, 2010 5:01 PM +0200 openldap...@stresst.net wrote: >> >>> Attached to this message you'll find a quick and dirty bash script that >>> should determine the

Re: Adding rfc schema clashes

On Tue, 13 Jul 2010 07:32:53 +, Stuart Cherrington wrote: > Hi, > > Running OpenLDAP 2.4 on RHEL 5. > > In order for my SOlaris 10 clients to start using the OpenLDAP service I > need the objectclass 'nisDomainObject' to be declared. I found this > objecttype in the 'rfc2307bis.schema' file

Re: Cannot authenticate with user/password

On Mon, 12 Jul 2010 14:13:27 +0100, Nicholas Syrotiuk wrote: > Dear OpenLDAP users, > > We have downloaded OpenLDAP 2.4.22 from Sunfreeware.com and installed > it. We have successfully imported the LDAP data from another server. > We are using the *simple* authentication method. > > I can aut

Re: Attribute type is operational

On Mon, 12 Jul 2010 08:10:56 +, Stuart Cherrington wrote: > Hi, > > I'm running Openldap 2.4 on Rhel5. I've got the basics working, user > accounts etc, but have tried adding some new schemas which I'm getting > problems with. I followed a VERY helpful Blog at > http://oracle-cookies.blogspot

Re: Access control for multiple admins

1133.html > http://www.openldap.org/faq/data/cache/1134.html I thought this scenario would make a good example, but reading through these FAQ entries I see that this exact situation is already documented: http://www.openldap.org/faq/data/cache/1140.html Jonathan -- -

Re: ACL to allow an attribute to be cleared, but not changed to something else?

seem to be out of date on this subject... Thanks, Jonathan -- ------ Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: Adding Schema

t to grasp the implications, however, so I'd suggest reading an intro to LDAP schemas. Jonathan -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization

Re: Adding Schema

etc) is that seemingly several structural objectClasses appear in a single entry. This is in effect just one objectClass, the lowermost in the inheritance chain. Regards, Jonathan -- ------ Jonathan Clarke - jonat...@phillipoux.net

Re: LDAP proxy with local database

//www.openldap.org/lists/openldap-technical/201006/msg00225.html Regards, Jonathan -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: Adding Schema

s: qmailuser"? If your problem still occurs, try posting an excerpt of the LDIF that fails, and your config. Jonathan -- ------ Jonathan Clarke - jonat...@phillipoux.net --

Re: Openldap passwords synchronization

at would take a long time. Jonathan -- ------ Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: Copying trees from one consumer to another

both consumers. That would probably work, yes. I would instead recommend doing a slapcat on one consumer, copying over the file to second consumer, slapadd, then starting that consumer. Jonathan -- -- Jonathan Clarke - jonat...

Re: Simple question about LDAP and web authentication.

have the right idea? Apache does all this for you. See: http://httpd.apache.org/docs/2.1/mod/mod_authnz_ldap.html Jonathan -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap

Re: Interdomain authentication

list discussed this: http://www.openldap.org/lists/openldap-technical/201006/msg00225.html Jonathan -- ------ Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connecto

Re: Can't start ldap or can't create ldap database.

/1072.html. Note also that directives in DB_CONFIG can now be (advantageously) set up from slapd.conf or slapd-config via the dbconfig parameter. Jonathan -- ------ Jonathan Clarke - jonat...@phillipoux.net

Re: Syncrepl problems

ackend database definition. Looks like your mailer has provided the solution: it seems there's some funny (probably invisible) character after syncrepl. Delete the line and rewrite it... Jonathan -- ------ Jonathan Clarke - jon

Re: Multi master replication

when i try to login with that password i was not able to login. Below is my log files Are you sure that the ACLs allow the replication user to read the userPassword attribute? And, of course, bind using it? Jonathan -- -- Jonathan Clarke

Re: Distributed directories using meta backend

Allow users to authenticate to the system, inside or outside their home institution. Finally, it would be possible to use the backend relay, after which the main role of the backend? Thanks in advance. Luizmarceloo! -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: ACLs using members and groups

-- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: OpenLDAP, PADL and querying multiple ADs

with less overhead (e.g. no OpenLDAP server required). Thank you very much for any hints or pointers that you might share with me! I'm really lost... Best regards Markus -- ------ Jonathan Clarke - jonat...@phillipoux.net

Re: User restriction

w, "nss_base_passwd" is not a valid keyword in ldap.conf for OpenLDAP clients. If you're configuring this on a Linux server, I think you'll find the equivalent configuration in /etc/libnss_ldap.conf or similar. Hope this helps, Jonathan -- ---

Re: Write through an LDAP Proxy?

) to a distant LDAP server. If you just want an LDAP proxy with multiple backends, take a look at the meta and ldap backends: http://www.openldap.org/software/man.cgi?query=slapd-meta Hope this helps, Jonathan -- -- Jonathan Clarke

Re: Bidirectional sync using openldap and active directory

ectories, such as Ldap Synchronization Connector (LSC), which is designed for exactly this purpose - see http://lsc-project.org. Hope this helps, Jonathan -- -- Jonathan Clarke - jonat...

Re: Problem with syncrepl and deletion on openldap 2.4.21

n provide from the logs on the 2 inconsistent slaves? Note I'm not sure whether to open an ITS on this since it is a live system and hence the scope for testing/debugging is much more limited. But I can try my best to obtain extra information if asked. Many thanks, Mark. -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: RPM spec file

}/%{_lib} --with-tls --with-cyrus-sasl --enable-spasswd --enable-overlays --enable-modules However, they are statically compiled in, not as dynamic modules in separate files, which is maybe what you're expecting? Jonathan -- -- Jon

Re: openldap 2.4.21 - back-ldap + pcache ... backend binding

ou just want the proxy's clients to be able to access the AD server using the account you specified in idassert-bind, try mode=none. Otherwise, you'll need to set up some appropriate authentication on the proxy side. Regards, Jonathan -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: N-Way Replication noob questions

t again, only the most recent modification will be kept. Hope this helps, Jonathan -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: forgotten rootdn psw

at's what I must do, then so be it. You can simply change the rootdn's password in the configuration file or configuration backend: http://www.openldap.org/doc/admin24/slapdconfig.html#rootpw%20%3Cpassword%3E Hope this helps Jonathan -- -----

Re: syncrepl not working for pwdFailureTime attribute

e appropriately configured. This option was clearly designed for read-only slaves. I'm not sure what the behaviour would be in a multi-master setup. You could try this anyway. Any ideas from someone else? Regards, Jonathan -- ------ Jon

Re: OpenLDAP client configuration with CentOS 5.3

am now Do you think, there are some steps or configurations I am missing. Yes. To login via LDAP on your Linux box you also need to configure PAM and NSS. Plenty of information on that by googling. Jonathan -- -- Jonathan Clarke -

Re: OpenLDAP client configuration with CentOS 5.3

think you're looking for something like: ldapsearch -x -H ldap://xxx.yyy.com-D "cn=Directory Manager" "(objectclass=*)" -w _e3user However, are you sure that "cn=Directory Manager" exists and is the correct DN to bind with? Jonathan -- ------

Re: OpenLDAP client configuration with CentOS 5.3

d a valid account in your LDAP server and it's password. Jonathan -- ------ Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Connector (LSC) - http://lsc-project.org --

Re: posixGroup and groupofNames

ne listing members, and another one, dynamically filled from the contents of the first. Regards, Jonathan -- -- Jonathan Clarke - jonat...@phillipoux.net -- Ldap Synchronization Conn

Re: a newbie trying to get the basics of syncrepl going

n be added without restarting the provider server. However, initial setup *does* require changing the configuration of the provider. Jonathan -- ------ Jonathan Clarke - jonat...@phillipoux.net

Re: a newbie trying to get the basics of syncrepl going

On 25/02/2010 13:17, Seger, Mark wrote: -Original Message- From: Jonathan Clarke [mailto:jonat...@phillipoux.net] Sent: Thursday, February 25, 2010 6:00 AM To: Seger, Mark Cc: openldap-technical@openldap.org Subject: Re: a newbie trying to get the basics of syncrepl going On 23/02

  1   2   >