Password Policy Control

2008-03-09 Thread Clément OUDOT
Hello, I'm using Net::LDAP for several years (scripts, LemonLDAP::NG project) and I try now to use Password Policy (with overlay ppolicy in OpenLDAP). As I see, no control module has been implemented to deals with Password Policy control response. So I propose myself to write one (on the model of

Re: Password Policy Control

2008-03-10 Thread Clément OUDOT
Chris Ridd a écrit : > > On 9 Mar 2008, at 12:07, Clément OUDOT wrote: > >> Hello, >> >> I'm using Net::LDAP for several years (scripts, LemonLDAP::NG project) >> and I try now to use Password Policy (with overlay ppolicy in OpenLDAP). >> >> A

Re: Password Policy Control

2008-03-10 Thread Clément OUDOT
Chris Ridd a écrit : > > On 10 Mar 2008, at 10:56, Clément OUDOT wrote: > >> Chris Ridd a écrit : >>> >>> On 9 Mar 2008, at 12:07, Clément OUDOT wrote: >>> >>>> Hello, >>>> >>>> I'm using Net::LDAP for several yea

Re: perl-ldap 0.35?

2008-03-20 Thread Clément OUDOT
Sánta Gergely a écrit : > Hi! > > I'd like to ask, are there any plans to release new version from svn > repository? There are many (for me mandatory) changes, which would be > good to have by simple package upgrade... > I add my voice to this call :) Please let us know if you need help to achi

Re: LDAP_CONTROL_PAGED and SunOne

2008-04-02 Thread Clément OUDOT
rectory > doesn't support paged controls? To check this, please search your RootDSE to see if the control 1.2.840.113556.1.4.319 is present. If not, this control is not provided by your LDAP server. If it is, good luck to find what's wrong in your script ;) -- Clément OUDOT http://coudot.blogs.linagora.com

Re: LDAP Client

2008-04-04 Thread Clément OUDOT
Didi a écrit : > Hi > > I personally would go with the openldap c stuff. Here is a little > example program I wrote for work > https://sourceforge.net/projects/ldaptest (use cvs) > might give you some help. > > Otherwise the source of ldapsearch is quite easy. But this of course > would be openldap

Re: Wild cards in LDAP filters fail for AD esp *

2008-05-08 Thread Clément OUDOT
; Filter rules are schema dependent. To use wildcard, you shoud have a substring matching rule for your attribute. Maybe Active Directory does not have it on 'memberOf'. -- Clément OUDOT http://coudot.blogs.linagora.com/

Re: Check connection

2008-06-10 Thread Clément OUDOT
rint("Connected\n"); > } > > if ( $mesg->is_bound($possibly_with_a_dn) ) { > Print("Bound\n"); > } > Hi, maybe you can use the whoami extended operation to check the user bounded: http://search.cpan.org/~gbarr/perl-ldap-0.36/lib/Net/LDAP/Extens

Making a perl code compliant with new and old versions of Perl-LDAP

2008-07-01 Thread Clément OUDOT
Hello, I belong to the LemonLDAP::NG[1] community, which open source software is a websso for Apache using mod_perl and of course Net::LDAP (we are doing authentication and authorization trough LDAP). I recently added the password policy support to our authentication portal, so a user can know if

Re: Strange behavoir of PasswordPolicy module

2008-09-02 Thread Clément OUDOT
> Attached is a potential fix for this. Note that is also renames the > error method for fetching the password policy error to be called > pp_error. This is because there is already an error method in the > Control base class which has a different purpose. > > A diff can also be seen at > > http://

Re: Strange behavoir of PasswordPolicy module

2008-09-03 Thread Clément OUDOT
> Would help if I attached it :-) > Ok, I confirm this one is working! Do you plan to release it soon? And have you a visibility on the uploading of perl-ldap packahe into main Linux distributions? Thanks for your precious help. Clément OUDOT.

Manage IA5strings with Perl LDAP

2008-11-25 Thread Clément OUDOT
that, please let me know. Thanks for your help, Clément OUDOT.

Re: Manage IA5strings with Perl LDAP

2008-11-26 Thread Clément OUDOT
> On Nov 25, 2008, at 9:45 AM, Clément OUDOT wrote: >> Hello, >> >> after some research on the net, I can't find any perl code that can >> read/write IA5strings. > > IA5Strings are basically ASCII strings. The only printable differences > is t

Re: Manage IA5strings with Perl LDAP

2008-11-27 Thread Clément OUDOT
> > On Nov 26, 2008, at 4:28 AM, Clément OUDOT wrote: >> Thanks for your answer. I have to translate java code to perl ;) But >> another question, it seems the value we get from AD is binary, I use >> the >> "raw" attribute in Net::LDAP search but the valu

Re: Manage IA5strings with Perl LDAP

2008-11-28 Thread Clément OUDOT
> > On 27 Nov 2008, at 15:58, Clément OUDOT wrote: > >>> >>> On Nov 26, 2008, at 4:28 AM, Clément OUDOT wrote: >>>> Thanks for your answer. I have to translate java code to perl ;) But >>>> another question, it seems the value we get from AD is

Re: LDAP and AD sync

2009-12-11 Thread Clément OUDOT
>Folks, > > I am a n00b to perl scripting and need help to start building my own. I am > currently working on a project where the LDAP(389-ds) and Active Directory > are always in sync. I have a very minimal set of attributes and > conditions > to keep them in sync. > > Can anyone share their

Re: ldap search problem.

2010-02-07 Thread Clément OUDOT
> > Hello, > > > > LDAP search failed to return any result but I can get the result back > using the same base and filter in ldp.exe. Here is the code: > > > > !/usr/bin/perl > > > use Net::LDAP; > > > > $ldap = Net::LDAP->new("server", port =>389) or die 'Could not contact > LDAP server'; > > $lda

Error on Constants.pm with Perl-LDAP 0.4001

2010-07-21 Thread Clément OUDOT
Hello, I am a developer of LemonLDAP::NG, a WebSSO product written in Perl, that uses a lot Perl-LDAP. So first, thanks for all the work done in this program! We use Perl-LDAP for a long time, but I have a problem with latest release 0.4001 (by the way, the irelease is not published on the websit

Re: Error on Constants.pm with Perl-LDAP 0.4001

2010-07-21 Thread Clément OUDOT
Le 21 juillet 2010 12:43, Clément OUDOT a écrit : > Hello, > > I am a developer of LemonLDAP::NG, a WebSSO product written in Perl, > that uses a lot Perl-LDAP. So first, thanks for all the work done in > this program! > > We use Perl-LDAP for a long time, but I have

Re: Check for write access on attributes

2010-08-30 Thread Clément OUDOT
2010/8/28 Kilian Röhner : > Hi, > > when i'm trying to modify an attribute of an entry, i am not allow to > modify, the update method gives me of course an "Insufficent Access Error". > > I want to prevent that, so my question is: How can i check _before_ > doing the modify, if i am allowed to do i

Re: hashing ldap entries

2010-09-29 Thread Clément OUDOT
2010/9/28 Robert Threet : > Encrypting the passwords. > > Prentice Bisbal wrote: >> Robert Threet wrote: >>> IS there a method of calling SSHA when stuffing passwords into the >>> directory? >>> >> >> Do you mean to encrypt the passwords with SSHA, or to make sure SSL is >> being used when adding p

Problem with LDAP search filter containing a backslash ('\')

2011-07-20 Thread Clément OUDOT
sers, dc=example, dc=com To make this works, I added this line : $searchFilter =~ s/\\//; My question: is this a bug in my code, or can this be a Perl-LDAP bug? I am using version 0.4001. Thanks for your help, Clément OUDOT http://lemonldap-ng.org

Re: Problem with LDAP search filter containing a backslash ('\')

2011-07-20 Thread Clément OUDOT
Le 20 juillet 2011 12:24, Chris Ridd a écrit : > > On 20 Jul 2011, at 10:02, Clément OUDOT wrote: > >> Hi, >> >> I have a piece of code where I build a search filter with some >> variables, like this: >> >>    my $searchFilter = >>    

Re: Problem with LDAP search filter containing a backslash ('\')

2011-07-20 Thread Clément OUDOT
Le 20 juillet 2011 13:13, Chris Ridd a écrit : > > On 20 Jul 2011, at 11:34, Clément OUDOT wrote: > >> Hi, >> >> I will have a look to Net::LDAP::Filter, but I see in Net::LDAP that a >> new Net::LDAP::Filter is created in the search subroutine when filter >

Re: Problem with LDAP search filter containing a backslash ('\')

2011-07-22 Thread Clément OUDOT
2011/7/20 Chris Ridd : > > On 20 Jul 2011, at 13:36, Graham Barr wrote: > >> >> On Jul 20, 2011, at 07:32 , Francis Swasey wrote: >> >>> >>> >>> On Jul 20, 2011, at 8:26, Chris Ridd wrote: >>> > > > Graham, should _escape be made public? It seems like it would be useful.

Re: Problem with LDAP search filter containing a backslash ('\')

2011-07-27 Thread Clément OUDOT
2011/7/27 Peter Marschall : > Hi, > > On Wednesday, 20. July 2011, Graham Barr wrote: >> On Jul 20, 2011, at 07:32 , Francis Swasey wrote: >> > On Jul 20, 2011, at 8:26, Chris Ridd wrote: >> >> Graham, should _escape be made public? It seems like it would be useful. >> > Perhaps a flag on the new

Re: Use of uninitialized value $cn in substitution (s///) at ...

2012-03-08 Thread Clément OUDOT
Le 7 mars 2012 21:43, Prentice Bisbal a écrit : > Okay, > > I'm sure this error has come up repeatedly on this list, but I've > googled and googled, and can't find an answer, probably because "Use of > unitialized value" comes up for just about every perl error. > > I'm an occasional Perl programm

Re: Search for member of a groupOfNames group

2013-01-09 Thread Clément OUDOT
2013/1/7 Brian Gaber : > I have OpenLDAP ldap with many groupOfNames groups. I want to determine if a > user is a member of a specific group. > > I would like return a True or False whether user is a member of group or not. You can use the compare operation. See perldoc Net::LDAP : compar

Re: LDAP search

2013-10-01 Thread Clément OUDOT
2013/10/1 Paul Fontenot > I am just beginning my foray into Perl with LDAP and I'm not getting what > I expected to get from the LDAP server. If I use ldapsearch like this: > > ldapsearch -h ldap.example.com -p 389 -x -b "c=us" > > Then I recieve what I expect - everything below the basedn, howev

Re: slow AD ldap query or bad filter/algorithm?

2015-12-11 Thread Clément OUDOT
2015-12-11 12:12 GMT+01:00 Natxo Asenjo : > hi, > > I need to get mail enabled groups info from Active Directory. > > AD mail enabled groups (be it distribution or security groups) keeps the > member attributes as distinguishednames > > Example: > > CN=mailgroup,OU=Groep,DC=domain,DC=tld > objectC

Re: slow AD ldap query or bad filter/algorithm?

2015-12-11 Thread Clément OUDOT
2015-12-11 12:54 GMT+01:00 Natxo Asenjo : > hi, > > On Fri, Dec 11, 2015 at 12:15 PM, Clément OUDOT > wrote: > >> You should do a search directly on the member DN (with scope base) >> instead of requestind the suffix in sub _get_ad_user_mail : >> >> sub

Re: NameErr: DSID-03050C55, problem 2003 (BAD_ATT_SYNTAX) when adding group with nested group

2015-12-16 Thread Clément OUDOT
2015-12-16 10:31 GMT+01:00 Natxo Asenjo : > hi, > > creating a group with nested groups in it fails with error > > NameErr: DSID-03050C55, problem 2003 (BAD_ATT_SYNTAX), data 0, best match > of: > > in ldap AD 2008r2 > > This is the code: > > my $nested_group = "HRM - Management"; > my $dn = "cn=$