retrieving the certificate from ldap store

Hi,
I am using ldap to store my user certificates. I need a way to get the
certificate back from the ldap.
Currently i am using usercertificate filter to fetch the certificate
but the problem is in this method
i have to copy the certificate mannually. Is there some way where you
can get the certificate as a file
from ldap.

kindly help

Thanks

getting the certificate from ldap

Hi,
I am using ldap as a certificate store. I need to fetch the
certificate from ldap time to time.
I am storing the certificate in der format. But after copying the
fetched certificate to a file
i am not able to convert it to pem format.

can anybody please help me how to get the certificate from ldap in a
file so that i need not
to copy the certificate to a file.

Thanks Prabhu

Servers with support for dynamic entries (RFC 2589)?

HI!

I'd like to do some more interop testing regarding dynamic entries (see RFC
2589). Any servers except OpenLDAP with slapo-dds which support the Refresh
Extended Operation?

Ciao, Michael.

Attributes for unlocking entries, all password-relevant attributes

HI!

I've implemented the use-case in web2ldap for unlocking entries which were
locked out because of password failure. IMHO it mainly boils down to delete
the relevant attributes from the entry. Another similar use-case is to unset
all password-relevant attributes.

Now I'm looking for proprietary password-relevant attributes in various
directory server implementations. I'd be glad to receive some input. A public
test LDAP server would be great.

So far I have this attribute lists:

For unlocking:

      # Samba-Passwortattribute
      u'sambaBadPasswordCount',u'sambaBadPasswordTime',
      # draft-behera-ldap-password-policy
      u'pwdAccountLockedTime',u'pwdFailureTime',

For unsetting everything:

      u'userPassword',
      # Samba-Passwortattribute
      u'sambaBadPasswordCount',u'sambaBadPasswordTime',
      u'sambaClearTextPassword',
      u'sambaLMPassword',u'sambaNTPassword',u'sambaPasswordHistory',
      u'sambaPreviousClearTextPassword',
      # draft-behera-ldap-password-policy
      u'pwdAccountLockedTime',u'pwdHistory',u'pwdChangedTime',

Explaining LDAP in a minute

I have always looked for a good way to explain to people what LDAP 
directories essentially are. I discovered that the file system analogy 
works very well.

This is my working version, as synthesised on my blog: 
http://blog.dzhuvinov.com/?p=1085

Feel welcome to use it in your own presentations. If you have 
suggestions for improvement I'd be glad to receive them.

Vladimir

***

Overall organisation

     * A file system consists of files in a tree-like structure.
     * An LDAP directory consists of entries in a tree-like structure.

Data types

     * A file in a file system is an arbitrary blob of text or binary
       data.
     * A directory entry is a collection of attributes, or name / value
       pairs. Attributes may be text or binary. They may be mandatory
       or optional, single or multi-valued.

Naming

     * A file in a file system has a name, e.g. "tax-report-2010.xml".

Explaining LDAP in a minute

Videos of the ldapcon 2011

Dear all,

the long awaited videos of the LDAPCon 2011 that took place last month
in Heidelberg are on-line.
Please have a look at: http://www.ldapcon.org/index.php?site=program

I'd like to thank all participants for their contributions that made the
conference a very thought-provoking and exciting event.

Best,

Peter

--

-- 
_______________________________________________________________________

Peter Gietz (CEO)
DAASI International GmbH                   phone: +49 7071 407109-0
Europaplatz 3                              Fax:   +49 7071 407109-9
D-72074 Tübingen                           mail:  peter.gietz@...
Germany                                    Web:   www.daasi.de

DAASI International GmbH, Tübingen
Geschäftsführer Peter Gietz, Amtsgericht Stuttgart HRB 382175

Directory Applications for Advanced Security and Information Management
_______________________________________________________________________

Group entry name attribute

HI!

I'd like to search for group entries by name.

It seems that a group entry's name is commonly stored in attribute 'cn'
(groupOfNames, organizationalRole, posixGroup etc.). Are there any other known
group entry naming attributes known? I did not find one in my schema collection...

Ciao, Michael.

ldabcon and umich ldap mailing list

Dear all,

at the last ldapcon (www.ldapcon.org) we talked about having a
mailinglist to discuss future ldapcons. Since this list is sort of
dormant, and since most of the conference participants are subscribers
already we thought it was a good idea to revive this list for this purpose.

If anyone on this list objects to this, please shout! Otherwise we would
just start discussing here.

Best,

Peter

--

-- 
_______________________________________________________________________

Peter Gietz (CEO)
DAASI International GmbH                   phone: +49 7071 407109-0
Europaplatz 3                              Fax:   +49 7071 407109-9
D-72074 Tübingen                           mail:  peter.gietz@...
Germany                                    Web:   www.daasi.de

DAASI International GmbH, Tübingen
Geschäftsführer Peter Gietz, Amtsgericht Stuttgart HRB 382175

Directory Applications for Advanced Security and Information Management
_______________________________________________________________________

Subscribed

Hey all,

this is Linus van Geuns, just heard about this list on LDAPCon.

Regards

Re: ldap digest: August 08, 2011

Dear Peter,

I registered right now at the conference. Thank you for taking the hurdles
of organize the conference.
I will be glad to meet you again at the venue. I made the payment through
paypal but I found no field to put my name for you for reference. My mail
is g <at> baruzzi.de or giovanni@...

Giovanni

Mit freundlichen Grüßen,

Dr. Giovanni Baruzzi
giovanni.baruzzi@...
<applewebdata://74A5C0F2-5CD7-431F-BB2B-806D27F5BE7D/giovanni.baruzzi <at> syntl
ogo.de>
t_ +49 7031 87 95 52
f_ +49 7031 87 95 54
m_ +49 171 50 62 569

Syntlogo GmbH
Mercedesstraße 1
D-71063 Sindelfingen

Am 09.08.11 06:27 schrieb "LDAP list digest" unter
<ldap@...>:

>LDAP Digest for Monday, August 08, 2011.
>
>1. LDAPCon 2011 Program published, extended early bird registration
>
>----------------------------------------------------------------------
>
>Subject: LDAPCon 2011 Program published, extended early bird registration
>From: Peter Gietz <peter.gietz@...>
>Date: Mon, 08 Aug 2011 17:26:05 +0200
>X-Message-Number: 1
>
>With the usual apologies.
>
>This is to announce that today the Program Committee finished the review
>process and published the program of the
>Third International Conference on LDAP (LDAPCon 2011), which will take
>place October 10-11, 2011 in Heidelberg, Germany.
>
>The program is available at:  http://www.ldapcon.org/index.php?site=3Dpro=
>gram
>
>The dead-line for the early bird registration has been extended to
>August 18th.
>
>Looking forward to meeting you in Heidelberg.
>
>Best,
>
>Peter
>
>--=20
>_______________________________________________________________________
>
>Peter Gietz (CEO)
>DAASI International GmbH                   phone: +49 7071 407109-0
>Europaplatz 3                              Fax:   +49 7071 407109-9
>D-72074 T=FCbingen                           mail:  peter.gietz@...
>Germany                                    Web:   www.daasi.de
>
>DAASI International GmbH, T=FCbingen
>Gesch=E4ftsf=FChrer Peter Gietz, Amtsgericht Stuttgart HRB 382175
>
>Directory Applications for Advanced Security and Information Management
>_______________________________________________________________________
>
>
>
>
>---
>
>END OF DIGEST
>