Email based self registration

2017-10-01 Thread John Lewis
Is there an application that supports both email based self registration and OpenLDAP storage of the account data?

What is the current OLC way to replace the nis schema with the rfc2307bis schema?

2017-10-01 Thread John Lewis
What is the current OLC way to replace the nis schema with the rfc2307bis schema?  There are hacks published, but I couldn't find a document that takes advantage of OLC, removes the nis schema, and installs the rfc2307bis schema. It feels like something that I would do often enough that I would w

meta backend , rwm AD source , uppercase to lowercase

2017-10-01 Thread Nicolas Renault
Hello, My question, I have a meta backend that work perfectly but on the dev team somebody ask me : Why on AD this organizationalUnit have these valuies on  attrs : managedBy: CN=Surname Name,OU=Users,DC=domain,DC=fr seeAlso:        CN=Sunrame2 Name2,OU=Users,DC=domain,DC=fr and on meta on

Re: Openldap and sssd: getting slapd to do TLS negotiation or getting sssd to NOT do TLS negotiation

2017-10-01 Thread Paulm
On Thu, Sep 28, 2017 at 01:08:17PM -0400, Robert Heller wrote: > OK, I have narrowed things down to slapd and sssd not playing nice with each > other. slapd is able to listen on ldaps (port 636) and accept SSL > connections > (eg from openssl s_client and other applications using straight SSL).

Re: country attribute

2017-10-01 Thread Michael Ströder
richard lucassen wrote: > I was afraid that my own "c" would inherit the MUST > of the original "c" as well. Attribute types only inherit from their SUP attribute type. There's no MUST in an attribute type description. Object classes inherit the MUST from their SUP object classes. But if you defi

Re: country attribute

2017-10-01 Thread Ralf Mattes
Am Sonntag, 01. Oktober 2017 20:12 CEST, richard lucassen schrieb: > Ok, I'll try that, I was afraid that my own "c" would inherit the MUST > of the original "c" as well. Attributes don't have MUST or MAY - Object class definitions regulate MUST/MAY. Cheers, Ralf Mattes

Re: country attribute

2017-10-01 Thread richard lucassen
On Sun, 1 Oct 2017 10:27:41 +0200 Michael Ströder wrote: > > But I have to give it a different name (e.g. "cty") though, right or > > wrong? > > No. Why? > > An object class description may reference any attribute type > description present in the schema (and defined in configuration > _before_

Re: country attribute

2017-10-01 Thread Michael Ströder
richard lucassen wrote: > On Sat, 30 Sep 2017 15:30:07 +0200 > Michael Ströder wrote: > >>> BTW: I tried to use the "c" attribute in my AUXILIARY objectclass, >>> but slapd complains that it conflicts with the existing "c". I >>> suppose this is because I applied different properties to it? >> >>