ldapcon 2013?

ACL issues Insufficient access (50)

Hi there guys.

I'm facing a problem with my acl, basically I want my users be able to
change their password,  but I always get
New password:
Re-enter new password:
ldap_initialize(ldap://ldapserver  )
Enter LDAP Password:
Result: Insufficient access (50)

From the logs
access_allowed: backend default write access denied to userxxxx

Reading some posts, someone suggested to add olcAccess: {0} to * by *
write to the ACL, which I tested bu with no luck, I'm just using
simple
authentication, no ssl or that king of stuff.

dn: olcDatabase={0}config
objectClass: olcDatabaseConfig
olcDatabase: {0}config
olcAccess: {0} to * by * write

The weird thing is that I still see the anonymous access.

slap_access_allowed: backend default auth access granted to "(anonymous)"

I'm trying to change the password locally from the ldap server itself,
from the client doesn't work either, I'm using nslcd.conf and I'm not
allowing anon logins, but it seems
that by default in some place it' allowing it.

These are the default password policies:

objectClass: pwdPolicy
objectClass: person
objectClass: top
pwdAllowUserChange: TRUE
pwdAttribute: 2.5.4.35
pwdCheckQuality: 2
pwdExpireWarning: 600
pwdFailureCountInterval: 30
pwdLockout: TRUE
pwdLockoutDuration: 0
pwdSafeModify: FALSE
sn: dummy value
pwdGraceAuthNLimit: 5
pwdInHistory: 5
pwdMaxFailure: 5
pwdMinAge: 0
pwdMaxAge: 0
pwdMustChange: TRUE
pwdMinLength: 5

I'm Using:
openldap-servers-2.4.23-26.el6_3.2.x86_6
Centos 6.3

If you need more information just let me know.
Thanks in advance.
Best regards

Fwd: New Version Notification for draft-stroeder-mailboxrelatedobject-00.txt

HI!

Please review this draft intended to be published as informational RFC.

Ciao, Michael.

-------- Original Message --------
Subject: New Version Notification for draft-stroeder-mailboxrelatedobject-00.txt
Date: Sun, 16 Dec 2012 13:47:40 -0800
From: internet-drafts@...
To: michael@...
CC: michael@...

A new version of I-D, draft-stroeder-mailboxrelatedobject-00.txt
has been successfully submitted by Michael Ströder and posted to the
IETF repository.

Filename:	 draft-stroeder-mailboxrelatedobject
Revision:	 00
Title:		 Lightweight Directory Access Protocol (LDAP): Auxiliary Object Class
'mailboxRelatedObject'
Creation date:	 2012-12-16
WG ID:		 Individual Submission
Number of pages: 4
URL:
http://www.ietf.org/internet-drafts/draft-stroeder-mailboxrelatedobject-00.txt
Status:
http://datatracker.ietf.org/doc/draft-stroeder-mailboxrelatedobject
Htmlized:        http://tools.ietf.org/html/draft-stroeder-mailboxrelatedobject-00

Abstract:
   This document defines the auxiliary object class
   'mailboxRelatedObject' that can be used to associate an arbitrary
   object with a RFC 2822 mail address.

The IETF Secretariat

ldap_bind: Invalid credentials (49)

Hi,

I have Ubuntu 12.10 operating system.

I just installed slapd and want to use it as my e-mail AddressBook.

I'm following the tutorial:
http://linsec.ca/Using_OpenLDAP_as_an_Address_Book

When I'm trying to run the following command:
ldapadd -h localhost -D "cn=root,dc=mylan,dc=net" \
-W -x -f addr-skel.ldif

Enter LDAP Password: 

and when I add here the slapd administrator password that I was enter
when I was installed slapd and was asked for, I get error message:

ldap_bind: Invalid credentials (49)

How can I solve this problem?

--

-- 
Regards from Pal

Re: Lovely Generator From China

Dear Sir:

Glad to hear that you're in the market for generator. We specialize in this field for 
several years, with good quality and pretty competitive price. 
The product mode as follow:

1) Diesel generator set. 
2) Gasoline generator set.
3) Mobile-trailer power station.
4) ATS series diesel gen-sets.

Kindly contact me if any question. It's our pleasure to be on service of you!

Thanks & Best regards.
David.

Alexda international Ltd

Any case where same controlType is used twice?

HI!

Is there any known LDAP extended control which is used more than once in a
LDAPRequest or LDAPResponse? Or can a client expect that a controlType is only
used exactly once in the list of returned controls in a single message?

Up to now I've never seen something like this but one never knows.

Ciao, Michael.

Re: RDN construction (was: Re: LDAPS Connection difficulties)

filtered replication

Require TLS for simple binds with password

Hi,

I was happy to get your conversation about the LDAPS issues (although your mail went to the spam folder 

I do not want to interfere your problem finding, but would like to ask another question around this subject,
and having found the experts I want to keep that chance...

I have the following question: we have about 100 LDAP applications running to our Novell LDAP interface.
Some work on port 636, some on 389. Now I want to set the parameter "require TLS for simple bind with
password". My understanding was that TLS (or StartTLS) is an additional feature which can be used (but
must not be used) and that therefore the running applications should not be affected. I had to learn that
this is not true. Can you help me to identify the requirements to understand which applications would be
affected by this change?

Thanks in advance.

Jürgen 

Sitz der Gesellschaft / Corporate Headquarters: Lufthansa Systems Aktiengesellschaft, Kelsterbach,
Registereintragung / Registration: Amtsgericht Darmstadt 84307
Vorsitzender des Aufsichtsrats / Chairman of the Supervisory Board: Stephan Gemkow
Vorstand / Executive Board: Stefan Hansen (Vorsitzender / Chairman), Dr. Gunter Kuechler
 

*****SPAM***** LDAPS Connection difficulties

Better schema for room entries

HI!

The COSINE schema defined object class 'room' but requires setting attribute 
'cn' and also recommends to use it for forming the RDN:

http://tools.ietf.org/html/rfc4524#section-3.8

IMHO this does not make sense for most rooms. Are any LDAP admins here 
maintaining rooms as LDAP entries? Do you know a better existing schema?

Ciao, Michael.