[ovirt-users] aaa-LDAP schema selection

[Jamie Lawrence]

Hello all,

I’d like to get the LDAP plugin working. We have a lovely LDAP setup deployed 
(OpenLDAP), and nobody here has a clue how to map what we have to the options 
the installer presents.

Well, a clue, yes. 

We include the core, cosine, nis, inetorgperson and misc schemas in the config.

The RHDS, 389, AD, IPA and Novell options are eliminated because we aren’t 
running any of that. I eliminated ‘RFC-2307 Schema (Generic)’ by finding 
attributes not included in the RFC, but added by OpenLDAP. 

Assuming what we are running maps to any of them, one of the  ‘OpenLDAP 
[RFC-2307|Standard] Schema' seem likely. 

Does anyone know of a test (attribute that should be in one, or not in another, 
or some such) to figure this out? Can it be inferred from my schema includes 
(listed above)? I fear that determining this via process of elimination is 
going to be brutal due to difficult-to-replicate weirdness because of only 
minor differences, and the fact that there are other moving parts at the moment 
with this setup.

And to those who enjoy them, happy holidays.

-j

smime.p7s
Description: S/MIME cryptographic signature
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] aaa-LDAP schema selection

[Alon Bar-Lev]

Hi,

Of course only OpenLDAP schamas are to be considered.

In most cases it is sufficient to check if user is of uidObject object class 
which means that you use openldap scehma or posixAccount which means that you 
are using rfc2307.

Regards,
Alon

- Original Message -
> From: "Jamie Lawrence" <jlawre...@squaretrade.com>
> To: "users" <users@ovirt.org>
> Sent: Thursday, December 24, 2015 3:06:56 AM
> Subject: [ovirt-users] aaa-LDAP schema selection
> 
> Hello all,
> 
> I’d like to get the LDAP plugin working. We have a lovely LDAP setup deployed
> (OpenLDAP), and nobody here has a clue how to map what we have to the
> options the installer presents.
> 
> Well, a clue, yes.
> 
> We include the core, cosine, nis, inetorgperson and misc schemas in the
> config.
> 
> The RHDS, 389, AD, IPA and Novell options are eliminated because we aren’t
> running any of that. I eliminated ‘RFC-2307 Schema (Generic)’ by finding
> attributes not included in the RFC, but added by OpenLDAP.
> 
> Assuming what we are running maps to any of them, one of the  ‘OpenLDAP
> [RFC-2307|Standard] Schema' seem likely.
> 
> Does anyone know of a test (attribute that should be in one, or not in
> another, or some such) to figure this out? Can it be inferred from my schema
> includes (listed above)? I fear that determining this via process of
> elimination is going to be brutal due to difficult-to-replicate weirdness
> because of only minor differences, and the fact that there are other moving
> parts at the moment with this setup.
> 
> And to those who enjoy them, happy holidays.
> 
> -j
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users