Re: Search access does not return any result

2011-11-15 Thread sim123
On Mon, Nov 14, 2011 at 4:45 PM, Howard Chu wrote: > sim123 wrote: > >> >> >> On Mon, Nov 14, 2011 at 1:37 PM, sim123 > <mailto:sim3...@gmail.com>> wrote: >> >>Hi All, >> >>I am playing with access controls on openldap 2.4

Re: Search access does not return any result

2011-11-14 Thread sim123
On Mon, Nov 14, 2011 at 1:37 PM, sim123 wrote: > Hi All, > > I am playing with access controls on openldap 2.4.26, I have a user with > search access on everything > > access to * > by anonymous auth > by dn="uid=102,ou=system,dc=example,dc=com&q

Search access does not return any result

2011-11-14 Thread sim123
Hi All, I am playing with access controls on openldap 2.4.26, I have a user with search access on everything access to * by anonymous auth by dn="uid=102,ou=system,dc=example,dc=com" search And when I perform search I get nothing ldapsearch -H "ldap://testldap:389"; -D "uid=102,

Compile Error for ldapc++ library

2011-11-10 Thread sim123
I am trying to compile ldapc++ library distributed with openldap-2.4.26 and getting following error during make: ../src/LDAPAsynConnection.h: In function ‘int main(int, char**)’: ../src/LDAPAsynConnection.h:310: error: ‘LDAPAsynConnection::LDAPAsynConnection(const LDAPAsynConnection&)’ is private

SyncRepl for subtree

2011-11-02 Thread sim123
Hi All, I am trying to setup syncrepl, and consumer needs only one subtree from provider and I want to create another subtrees in consumer side, something like this mentioned in this post: http://www.openldap.org/lists/openldap-software/200610/msg00126.html and I am getting same error with openl

Re: Overlay memberof does not work with groupOfUniqueNames

2011-10-07 Thread sim123
; > JL > > Thanks, will try that. > > 2011/10/7 sim123 > >> >> >> On Fri, Oct 7, 2011 at 4:22 AM, JOSE L MARTINEZ-AVIAL >> wrote: >> >>> Never mind, I just found it can setup on the slapd.conf. >>> >>> JL >>> >&

Re: bind using CN instead of UID

2011-10-07 Thread sim123
On Thu, Oct 6, 2011 at 9:50 AM, Craig White wrote: > Obviously there is something that I don't understand because I would expect > to be able to bind using CN as well as UID attribute... > > version: 2.4.21-0ubuntu5.5 > > * this as you can see works * > # ldapsearch -x -D 'uid=cwhite,ou=p

Re: Overlay memberof does not work with groupOfUniqueNames

2011-10-07 Thread sim123
On Fri, Oct 7, 2011 at 4:22 AM, JOSE L MARTINEZ-AVIAL wrote: > Never mind, I just found it can setup on the slapd.conf. > > JL > > > 2011/10/7 JOSE L MARTINEZ-AVIAL > >> Hi, >> I've an openldap 2.4.23 over RHEL4. I compilled it with the option to >> use overlay memberof, and it's been working w

Re: slapd does not creating pid file

2011-09-16 Thread sim123
On Fri, Sep 16, 2011 at 12:01 PM, Quanah Gibson-Mount wrote: > --On Friday, September 16, 2011 11:46 AM -0700 sim123 > wrote: > > Hi, >> >> >> I am using openldap 2.4.25 and configured location of pidfile and >> argsfile in slapd.conf. However, when running s

slapd does not creating pid file

2011-09-16 Thread sim123
Hi, I am using openldap 2.4.25 and configured location of pidfile and argsfile in slapd.conf. However, when running slapd its not creating pid file or args file. On searching for this issue I found the bug reported earlier stating similar problem. Is that fixed or do I need to do some other config

Re: secure passwords

2011-09-16 Thread sim123
sha2 > > basicly you dont want cleartext password stored in the DIT, so you want to > hash it > > I tried ppolicy overlay with ppolicy_hash_cleartext on, looks like its doing SSHA with ldapadd or ldapmodify operations. However, just wondering if this is the best way. Thanks > Cheers,

Generating unique identifier

2011-09-15 Thread sim123
Does openldap support generating unique identifier or guids, I need to generate it using a ldap C API and wondering if DS does that for me or do I need my own GUID generator in application. Thanks for the help and support.

Re: secure passwords

2011-09-14 Thread sim123
2011/9/14 sim123 > > > 2011/9/14 Michael Ströder > >> sim123 wrote: >> > I am not sure what password modification extended operation is >> >> It's a separate LDAP extended operation working on a already existing >> entry >> not a normal mo

Re: secure passwords

2011-09-14 Thread sim123
2011/9/14 Michael Ströder > sim123 wrote: > > I am not sure what password modification extended operation is > > It's a separate LDAP extended operation working on a already existing entry > not a normal modify operation (see RFC 3062). > So if I add a user from C A

Re: secure passwords

2011-09-14 Thread sim123
On Wed, Sep 14, 2011 at 3:00 AM, Buchan Milne wrote: > On Tuesday, 13 September 2011 23:01:23 sim123 wrote: > > Hi All, > > > > I am trying to store SSHA passwords in openldap instead of plain text via > C > > code and wondering how this works. I tried exploring arch

Re: secure passwords

2011-09-13 Thread sim123
/entry/the_ssha_password_storage_scheme Is that true for OpenLDAP? Can I use similar algorithm for generating password? Or should password policy will suffice ? On Tue, Sep 13, 2011 at 2:01 PM, sim123 wrote: > Hi All, > > I am trying to store SSHA passwords in openldap instead of plain

Re: Bind with attribute + RDN instead of DN

2011-09-13 Thread sim123
On Mon, Sep 12, 2011 at 7:24 AM, Marc Patermann < hans.mo...@ofd-z.niedersachsen.de> wrote: > Hi, > > sim123 schrieb (12.09.2011 07:15 Uhr): > > > Well, while browsing for solution I realized that I was misinterpreting >> RDN, so basically what I want is

secure passwords

2011-09-13 Thread sim123
Hi All, I am trying to store SSHA passwords in openldap instead of plain text via C code and wondering how this works. I tried exploring archives, FAQ etc and what I gathered from there is openLDAP has built in support for various password encryption algorithm however it does not have any APIs for

Re: Bind with attribute + RDN instead of DN

2011-09-11 Thread sim123
On Sun, Sep 11, 2011 at 9:46 PM, sim123 wrote: > > > On Fri, Sep 9, 2011 at 11:57 AM, sim123 wrote: > >> Hi All, >> >> I want third party applications to authenticate against my ldap using any >> attribute (specially mail & password) is it possible

Re: Bind with attribute + RDN instead of DN

2011-09-11 Thread sim123
On Fri, Sep 9, 2011 at 11:57 AM, sim123 wrote: > Hi All, > > I want third party applications to authenticate against my ldap using any > attribute (specially mail & password) is it possible to do a bind using any > attribute with/without RDN rather then DN? For example my LDA

Bind with attribute + RDN instead of DN

2011-09-09 Thread sim123
Hi All, I want third party applications to authenticate against my ldap using any attribute (specially mail & password) is it possible to do a bind using any attribute with/without RDN rather then DN? For example my LDAP user looks like this : dn: uid=1,ou=users,dc=example,dc=local objectClass:

Re: parsing output from ldap_search_ext_s C API

2011-04-21 Thread sim123
On Thu, Apr 21, 2011 at 10:36 AM, sim123 wrote: > Hi All, > > I am using ldap_search_ext_s C API and having strange results, not sure if > I am missing something or its an API bug: > > My Directory Tree looks like this: > > | -- dc=example,dc=com > | --

parsing output from ldap_search_ext_s C API

2011-04-21 Thread sim123
Hi All, I am using ldap_search_ext_s C API and having strange results, not sure if I am missing something or its an API bug: My Directory Tree looks like this: | -- dc=example,dc=com | -- ou=users,dc=example,dc=com | -- uid=1,ou=users,dc=example,dc=com | --- cn=john | ---

Re: openLDAP 2.4.25 make fails with TLS errors

2011-04-05 Thread sim123
On Tue, Apr 5, 2011 at 1:52 PM, sim123 wrote: > > > On Tue, Apr 5, 2011 at 9:54 AM, Quanah Gibson-Mount wrote: > >> >> >> --On April 5, 2011 9:38:24 AM -0700 sim123 wrote: >> >> Thanks for your reply, I don't need to use mozilla NSS however when I

Re: openLDAP 2.4.25 make fails with TLS errors

2011-04-05 Thread sim123
On Tue, Apr 5, 2011 at 9:54 AM, Quanah Gibson-Mount wrote: > > > --On April 5, 2011 9:38:24 AM -0700 sim123 wrote: > > Thanks for your reply, I don't need to use mozilla NSS however when I >> compile --with-tls flag I get error saying - NSS library is not found, >

Re: openLDAP 2.4.25 make fails with TLS errors

2011-04-05 Thread sim123
On Mon, Apr 4, 2011 at 5:30 PM, Quanah Gibson-Mount wrote: > > > --On April 4, 2011 12:02:00 PM -0700 sim123 wrote: > > I am trying to compile openLDAP 2.4.25 with TLS and cyrusSASL and >> following these two links >> >> http://www.openldap.org/faq/data/cache/19

openLDAP 2.4.25 make fails with TLS errors

2011-04-04 Thread sim123
I am trying to compile openLDAP 2.4.25 with TLS and cyrusSASL and following these two links http://www.openldap.org/faq/data/cache/196.html http://www.openldap.org/pub/ksoper/OpenLDAP_TLS.html configure and make depend works but make fails with very long list of undeclared/undefined errors in TLS

Re: user authentication on attributes

2011-03-30 Thread sim123
On Wed, Mar 30, 2011 at 12:18 PM, sim123 wrote: > > > On Wed, Mar 30, 2011 at 7:49 AM, Dan White wrote: > >> On 30/03/11 04:36 -0700, sim123 wrote: >> >>> On Tue, Mar 29, 2011 at 7:43 PM, Dan White wrote: >>> >>>> It looks like the search i

Re: user authentication on attributes

2011-03-30 Thread sim123
On Wed, Mar 30, 2011 at 7:49 AM, Dan White wrote: > On 30/03/11 04:36 -0700, sim123 wrote: > >> On Tue, Mar 29, 2011 at 7:43 PM, Dan White wrote: >> >>> It looks like the search is not returning any entries. From your >>> confluence >>> server, can

Re: user authentication on attributes

2011-03-30 Thread sim123
On Tue, Mar 29, 2011 at 7:43 PM, Dan White wrote: > On 29/03/11 14:47 -0700, sim123 wrote: > >> I have openLDAP server up and running and trying to integrate it with >> Confluence. My LDAP structure looks like >> >> DN :: uid=123, ou=users, dc=example, dc=co

user authentication on attributes

2011-03-29 Thread sim123
I have openLDAP server up and running and trying to integrate it with Confluence. My LDAP structure looks like DN :: uid=123, ou=users, dc=example, dc=com uid :: 123 mail :: bja...@example.com cn :: barbara sn :: jason userPassword :: test (plain test for now) I have another similar entry in anot

Re: Efficient Searching for Groups & its members

2011-03-24 Thread sim123
On Thu, Mar 24, 2011 at 1:39 AM, Marc Patermann < hans.mo...@ofd-z.niedersachsen.de> wrote: > sim123, > > (no top posting, please!) > > sim123 schrieb am 24.03.2011 01:10 Uhr: > >> On Wed, Mar 23, 2011 at 5:01 PM, Indexer > inde...@internode.on.net>>

Re: Efficient Searching for Groups & its members

2011-03-23 Thread sim123
timization to get better performance? I am new to LDAP in general, so are they intended for such type of queries? Thanks. On Wed, Mar 23, 2011 at 5:01 PM, Indexer wrote: > > On 24/03/2011, at 10:22, sim123 wrote: > > Hi All, > > I am designing LDAP schema and the struc

Efficient Searching for Groups & its members

2011-03-23 Thread sim123
Hi All, I am designing LDAP schema and the structure looks like : --ROOT ou = people --- cn = john smith ou = groups -- ou = group1 member:john smith -- ou = group2 member: john smith I would like to find out what all groups john smith belongs to (I have f

Schema Design :: ACL on Groups by Group Members only

2011-03-17 Thread sim123
Hi There, I want "n" number of groups (or similar structure which keeps member information) to be created and only group members have access to those groups. Members are defined in separate user branch so my DIT look like dc=example,dc=com +--ou=people,dc=example,dc=com +uid=bjanson,ou=users,

Re: Any consideration while designing schema

2011-03-17 Thread sim123
ts of kudos to you guys!! Thanks. On Thu, Mar 17, 2011 at 3:30 AM, Andrew Findlay < andrew.find...@skills-1st.co.uk> wrote: > On Wed, Mar 16, 2011 at 11:20:41AM -0700, sim123 wrote: > > > For example, I have one client who is talking to LDAP server and this > client >

Re: Any consideration while designing schema

2011-03-16 Thread sim123
> > *Van:* openldap-technical-boun...@openldap.org [mailto: > openldap-technical-boun...@openldap.org] *Namens *sim123 > *Verzonden:* dinsdag 15 maart 2011 19:09 > *Aan:* openldap-technical@openldap.org > *Onderwerp:* Any consideration while designing schema > > > > Hi, >

OpenLDAP.org takes very long time to load

2011-03-15 Thread sim123
Hi There, just wanted to check, is it only I who is facing this issue? Thanks.

Any consideration while designing schema

2011-03-15 Thread sim123
Hi, I am in process of designing schema for my recent project with really basic skill set and found this article really interesting : http://www.skills-1st.co.uk/papers/ldap-schema-design-feb-2005/ldap-schema-design-feb-2005.pdf I am wondering what all things one should really keep in mind befor

openLDAP C++ API

2011-03-03 Thread sim123
Hi, I am evaluating openLDAP and need to perform ldapsearch from C++ program. I looked at openLDAP C++ API, however README says its an unstable release. So just wanted to understand, is it ok to use that API in production environment? Is anyone using it? If there is any other library for C++ and o

Re: Help needed with opeLDAP configuration

2011-02-25 Thread sim123
My apologies, did not look at the results. Again, extremely sorry. Thanks for the help and support. On Fri, Feb 25, 2011 at 1:34 PM, Dieter Kluenter wrote: > Am Fri, 25 Feb 2011 11:36:17 -0800 > schrieb sim123 : > > > Dear All, > > > > I am new to LDAP and o

Re: Help needed with opeLDAP configuration

2011-02-25 Thread sim123
800 sim123 > wrote: > > Dear All, >> >> >> I am new to LDAP and openLDAP, just installed and configured openLDAP >> 2.4.23 with Berkeley DB 4.8 on CentOS 5.4 >> using http://www.openldap.org/doc/admin24/quickstart.html >> >> make tes

Help needed with opeLDAP configuration

2011-02-25 Thread sim123
Dear All, I am new to LDAP and openLDAP, just installed and configured openLDAP 2.4.23 with Berkeley DB 4.8 on CentOS 5.4 using http://www.openldap.org/doc/admin24/quickstart.html make test gave an error on replication similar to this http://www.openldap.org/lists/openldap-technical/201006/msg002