Recommended way to modify cn=schema entries?

I would like to re-order two schema entries to resolve a dependency issue (our local schema, included before dyngroup.schema, now references memberURL). However deleting a schema entry with ldapmodify does not appear to be supported: dn: cn={8}dyngroup,cn=schema,cn=config changetype: delete

Re: Adding new Object Classes

On Monday, 5 July 2010 14:38:10 Alexander Erameh wrote: > When I try to add to mine, I get the message below: > > Adding new entry "cn=qmail,cn=schema,cn=config" > Ldap_add: Insufficient access (50). > > This is the Command I used: > > ldapadd -xc -W -D "cn=admin,dc=socotherm-africa,dc=com" -f

RE: Adding new Object Classes

here is the full qmail.schema converted to OpenLDAP schema ldif, suitable for an ldapadd ... http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/cooker/openldap-extra- schemas/current/SOURCES/qmail.ldif?revision=535500&view=co And I have just added authldap.ldif: http://svn.mandriva.

MemberOf indexing

Hi all, I'm using the memberOf overlay and would like to use it with this kind of search -filter: (memberOf=*ou=foo,dc=it) I tried with "index memberOf sub", but this kind of indexing is prohibited by OL telling me: substr index of attribute "memberOf" disallowed I've seen that in the schema def

RE: Adding new Object Classes

Thank you so much Mike. Alexander -Original Message- From: openldap-technical-boun...@openldap.org [mailto:openldap-technical-boun...@openldap.org] On Behalf Of Buchan Milne Sent: Monday, July 05, 2010 11:00 AM To: openldap-technical@openldap.org Cc: Alexander Erameh Subject: Re: Adding

Re: Adding new Object Classes

On Friday, 2 July 2010 17:10:50 Alexander Erameh wrote: > Hi, > > When I try to add the attached Object Class, You mean that you are trying to add the schema definition for the objectclass ... > I get the error messages > below: > > Ldapmodify: invalid format (line 5) entry: > "cn=admin,dc=so

Re: meta setup

No ideas? I tried to set up a single AD + local version with meta. meta -> domain, com ad, domain, com -> AD ldap, domain, com -> localhost with configured with hdb It doesn't seem to work though :/ Bests Gidobo On Mon, Jun 28, 2010 at 1:05 AM, Gidobo 69 wrote: > > Hi, > > I plan to set

Re: ldap bind and password policy

On Monday, 5 July 2010 08:35:02 Christian Bösch wrote: > now i have tested this and got the following conclusion: > > ppolicy_forward TRUE on the consumer: > everything is well synced > ldapsearch on the consumer with wrong binding password gets search results. > not so on the provider. here i get

Re: ldap_bind: Can't contact LDAP server (-1)

BTW, I also tried changing to the actual ip address of the server, but that did not work either. [r...@ldapserver openldap]# diff ldap.conf.070210 ldap.conf 11c11 < URI ldap://127.0.0.1/ --- > URI ldap://192.168.150.133/ [r...@ldapserver ~]# service ldap restart Stopping slapd:

ldap_bind: Can't contact LDAP server (-1)

Greetings, Any pointers about this question will be greatly appreciated. Thanks in advanced. I've searched all over and tried all suggestions I found so far without success. I've setup a VMWare virtual machine. It's CentOS 5.4 with a static ip address --HostOnly. My initial setup was with default

syncrepl only database ACLs?

I've been trying to see if I can synchronize the ACLs for a database from one master to several other slaves. If I align the database in the config so it has the same name/index, it tries to synchronize, but so far I've only been able to manage either LDAP_NOT_ALLOWED_ON_RDN or a segfault. Here i

Re: Expired password allowed in via pwdGraceAuthNLimit w/o warning to user

I did not reply to your off-list mails, primarily because I was out of the office (at a data centre) all of Friday, and without internet access over the weekend. You could have sent those replies to your original thread to the list ... On Friday, 2 July 2010 20:09:15 Licause, Al wrote: > I hav

Re: ldap bind and password policy

Not I... Chris Jacobs, Systems Administrator Apollo Group | Apollo Marketing | Aptimus 2001 6th Ave Ste 3200 | Seattle, WA 98121 phone: 206.441.9100 x1245 | mobile: 206.601.3256 | fax: 206.441.9661 email: chris.jac...@apollogrp.edu - Original Message - From: Christian Bösch To: Chris J

Re: ldap bind and password policy

now i have tested this and got the following conclusion: ppolicy_forward TRUE on the consumer: everything is well synced ldapsearch on the consumer with wrong binding password gets search results. not so on the provider. here i get ldap_bind: Invalid credentials (49) ppolicy_forward FALSE on the