converting dsml schema to ldapv3 ldif format?

2004-01-30 Thread Mike Jackson
a, however, so would be painful... Thanks! -- Mike Jackson

include file as attribute

2004-02-09 Thread Mike Jackson
and not the contents of file.bin. BR, -- Mike Jackson

Re: Net::LDAP filter question

2004-06-02 Thread Mike Jackson
ext ([EMAIL PROTECTED]) wrote: > > $email => the email address the incoming message is sent to (IE > [EMAIL PROTECTED]) and the filter looks for an LDAP field called "mail" > which contains the value in $email. > > If that fails, we need instead to look for the email address in the LDAP > field

changetype parsing bug in Net::LDAP::LDIF

2004-06-22 Thread Mike Jackson
list is empty, unless I modify my LDIF change records to suit Net::LDAP::LDIF. And then they can't be used with OpenLDAP tools... Comments? Thanks! -- Mike Jackson

Re: Réf. : technique for recursive delete?

2004-08-17 Thread Mike Jackson
of speed are welcome :-) Thanks, -- Mike #!/usr/bin/perl -w # # recursive-ldap-delete.pl #

Re: Can someone explain why this doesn't work?

2004-08-23 Thread Mike Jackson
ext Hutchins, Mike ([EMAIL PROTECTED]) wrote: > I have no idea why this little chunk of code doesn't work. Any help > would be much appreciated. > > use Net::LDAP; > use Net::LDAP::LDIF; > > $ldap=Net::LDAP->new("cdenldap1", port => 389, > version =>

Re: Perl : LDAP : Authorize user for a service

2004-10-28 Thread Mike Jackson
ext Asu Vohra ([EMAIL PROTECTED]) wrote: > Hi, > > I am new to LDAP. Can anyone tell me how can I authorize a user in LDAP for a > particular service using Perl? > Hi, The LDAPv3 standard only provides an authentication interface "BIND". Before you consider how you will authorize a user, y

inserting references into entries

2004-11-04 Thread Mike Jackson
://a.b.c/ou=remote-server/dc=foo,dc=com'); $entries->add($ref); The idea is that I want to create some entries in memory, so that I can search through them, and I want those entries to also contain some references. Any ideas? Thanks, -- Mike Jackson

Re: problem when parsing a ldif file

2004-11-08 Thread Mike Jackson
Aurelien Magniez wrote: Hi, I'm trying to parse with the Net::LDAP::Schema module the following file and I can't retrieve all the attributes and objectclasses in this file with the all_attributes function for example. dn: cn=Login Server (portal30_sso) cn: Login Server (portal30_sso) description: C

Re: Attribute with value of any kind.

2004-11-11 Thread Mike Jackson
ext Relho de Couro ([EMAIL PROTECTED]) wrote: > Hi, > > Does anyone know how to define (in a LDAP schema) an attribute of any kind? > I would like to create an attribute that supports any kind of symbol > contained in a keyboard or even binary data. > > Example of values for the desired attribute

Re: atomic incriment...

2004-11-24 Thread Mike Jackson
Chris Ridd ([EMAIL PROTECTED]) wrote: > > There's a gap between the search and the first modify in which another DUA > could change the value in cn=Registry. You will need a strategy for coping > with that - perhaps retry the search/modify a couple of times and only fail > when all the attempts hav

Re: Recursive delete ...

2005-01-28 Thread Mike Jackson
ext Messerer, Jeremiah ([EMAIL PROTECTED]) wrote: > Is there any existing Perl API to delete an entire directory or do > selective deletion? I have searched many web sources and found nothing. > I need to delete an entire organization. Also, I need to delete all > entries of a subtree except for on

strange difference in retrieved certs

2005-02-14 Thread Mike Jackson
Hi, I am encountering a really strange problem and I am wondering if somebody can help me to figure out why, possibly to save me a lot of time debugging this. I have a script which retrieves a user's cert like this: e->get_value('userCertificate;binary') When I execute it on my gentoo

Re: strange difference in retrieved certs

2005-02-14 Thread Mike Jackson
Graham Barr wrote: The sounds like the old utf8 encoding issue. You could try changing your LANG environment variable not to mention utf8, or upgrade to a later release of perl. Either I think will fix the problem Graham. Thanks a lot, Graham. Unsetting LANG solved the problem. -- mike

Re: decoding an X509 Certificate with Convert:ASN1 ?

2005-03-01 Thread Mike Jackson
Alexander Jung wrote: Hello, On Tue, 1 Mar 2005 18:30:36 +0100, Alexander Jung <[EMAIL PROTECTED]> wrote: i try to decode X509 Certificates (as stored in userCertificate;binary) using this test-script: [ ... ] ok, after finding an exact example for my problem in the distribution of Convert::ASN1,

Re: decoding an X509 Certificate with Convert:ASN1 ?

2005-03-02 Thread Mike Jackson
Alexander Jung wrote: Hello, On Tue, 01 Mar 2005 20:02:59 +0200, Mike Jackson <[EMAIL PROTECTED]> wrote: [ ... ] I have taken the x509 ASN.1 certificate profile definition from the x509decode script and written my own library, which I was planning to release to CPAN, but it's not f

Re: Net::LDAP (DirSync control)

2005-03-03 Thread Mike Jackson
Chris Ridd wrote: The only objection I'd have to this is that they're non-standard and proprietary controls. All the other ones we include are from RFCs, or from Internet drafts that are intended to become RFCs. So I'd personally prefer if they were in a separate CPAN module for that reason. Maybe

Re: Recursive delete ...

2005-03-15 Thread Mike Jackson
Messerer, Jeremiah wrote: I was not able to find this script. Could you please send me the url or navigational steps to find it in CPAN. Thanks, Jeremiah http://svn.mutatus.co.uk/wsvn/perl-ldap/trunk/contrib/recursive-ldap-delete.pl?op=file&rev=0&sc=0 -- mike

Re: Convert::ASN1::X509 Version 0.2

2005-08-18 Thread Mike Jackson
ext Alexander Jung ([EMAIL PROTECTED]) wrote: > Hello, > > after copying the x509ecode example for the third time, I put its > example to use for building my first Perl module. > > As its fairly short, I include it with this mail. Hopefully it is > usefull for anyone in need of wretching informat

Re: Net::LDAP performance problems

2005-09-01 Thread Mike Jackson
ext Sagar R. Shah ([EMAIL PROTECTED]) wrote: > > I decided to investigate further and profiled a script that obtained all > the LDAP attributes for a specific userid 500 times. Here's the profiler > output: > > $ dprofpp tmon.out > Total Elapsed Time = 27.01739 Seconds > User+System Time = 20.4

Re: Net::LDAP performance problems

2005-09-02 Thread Mike Jackson
memory and drives the system load up. The exception is if you happen to use mod_perl... BR, -- Mike Jackson

test for base64 encoded attributes

2005-09-07 Thread Mike Jackson
Hi, Is there any technique to determine if the value of an attribute inside of a Net::LDAP::Entry object is base64 encoded or not? Perhaps this is more of a general question, or a MIME::Base64 question. I am looking for something like: @attr = $entry->get_value('myAttr'); while (@attr) {

Re: test for base64 encoded attributes

2005-09-07 Thread Mike Jackson
Chris Ridd wrote: However, you do know that there's no need to base64 encode attribute values in LDAP? LDAP's a binary protocol. The only use of base64 is when writing certain unsafe values to LDIF *files*, and (curiously) in some hashed password mechanisms. Hi, Thanks for the reply. Somehow,

Re: RFC: Data::Sync

2005-09-30 Thread Mike Jackson
Charles Colbourn wrote: Hi all, I've recently uploaded to CPAN Data::Sync - a utility module which may be of interest to dbi & perl-ldap users. I've posted a thread on www.perlmonks.org here: http://www.perlmonks.org/?node_id=494094 asking for comments and suggestions, if anyone would like to

Re: Freeing resources?

2005-11-24 Thread Mike Jackson
Miro Dietiker, MD Systems wrote: Hi! I'm doing series of ldap searches and I'm new on ldap query implementation. Compared to database queries (where you get a result which can be freed) I don't understand the way how to free a message and its associated resources and can't find any documentation

Re: Subject: Re: HowTo retrieve a userCertificate;binary from ldif file using Net::LDAP::LDIF

2005-12-01 Thread Mike Jackson
Chris Ridd wrote: On 1/12/05 4:04, Rion, Bob <[EMAIL PROTECTED]> wrote: Yes, I manually unfolded and un-encoded the entry and it is a valid certificate in DER format. I was thinking more of the 'userCertificate;binary::' being correct in the file, because that's what LDIF.pm will be trying

Re: Perl LDAPAdmin

2005-12-14 Thread Mike Jackson
ps. Do you mean a perl CGI app? I have started working one one, but it is very far from being "feature complete". -- Mike Jackson

Re: Net::LDAP::FilterMatch

2005-12-18 Thread Mike Jackson
[EMAIL PROTECTED] wrote: Hi, attached is Net::LDAP::FilterMatch, a module to match Net::LDAP::Entry objects against a Net::LDAP::Filter filter. It can be used to filter out entries from an LDIF, but also as a simple solution for searching while using Net::LDAP::Server. Comments are welcome.

Re: getting an Base64 encoded attribute from ldap

2006-01-17 Thread Mike Jackson
[EMAIL PROTECTED] wrote: Hello, I am having a problem getting a base64 encoded attribute from an ldap server. When I am doing an ldapsearch from a unix commandline I get the attribute correctly: QWxhZGRpbjpvcGVuIHNlc2FtZQ== decoding ( decode_base64($encoded) ) it gives me the rigt content

Re: TLS confidentiality required error

2006-03-02 Thread Mike Jackson
Hans Holt wrote: Hi, I'm new to Net::LDAP and want to use it to acess an OpenLDAP server that accepts simple authentication over TLS. TLSVerifyClient is set to 'never' on the server. Using the openldap package ldapsearch establishes a tls connection and searches the ldap directory as expected.

Re: Net:Net:Net::LDAP::FAQ

2006-03-08 Thread Mike Jackson
Wilbert Barbara (CI/OSI) * wrote: Hello, Net::LDAP Net::LDAPS Is there a possible to LDAP bind with an encrypted (SHA, SSHA, CRYPT, ...) password? I don't like to write the secret password to the perl file. If the script is interactive, then just ask the user for the password with Term::Read

Re: Proper objectClass ordering?

2006-08-29 Thread Mike Jackson
Philip Prindeville wrote: Hi. I'm dealing with an LDAP server that answers queries with data that has the objectClass attribute in no particular order, i.e. and had a question for you all. objectClass is a multivalued attribute, and RFC 2251 says that the return order of multivalued attribute

Re: Proper objectClass ordering?

2006-08-29 Thread Mike Jackson
Philip Prindeville wrote: Right, but that's a fair amount of work. I'm wondering if there might be a more compact representation of the objectclass stacking hierarchy that could lend itself to a quick, efficient convenience method for reordering the objectclass array, such as: my %objectClassI