[Fedora-directory-users] Delete an nsPwPolicyContainer?
by Justin Crawford
Howdy,
Is it possible to manually delete this entry using command-line LDAP
tools?
dn: cn=nsPwPolicyContainer,ou=the_ou,dc=our,dc=domain
objectClass: nsContainer
objectClass: top
cn: nsPwPolicyContainer
pwdpolicysubentry:
cn="cn=nsPwPolicyEntry,ou=the_ou,dc=our,dc=domain",cn=nsPwPolicyContaine
r,ou=the_ou,dc=our,dc=domain
When I try to delete it with ldapdelete, the error indicates that the
entry contains other entries:
$ ldapdelete ... cn=nspwpolicycontainer,ou=the_ou,dc=our,dc=domain
Delete Result: Operation not allowed on non-leaf (66)
Furthermore, when I view it in the console, it _appears_ to contain
other entries (cn=nsPwPolicyEntry and cn=nsPwTemplateEntry). However,
it doesn't appear to contain other entries when I search from the
command line. How do I get at its subtree, if indeed it has a real
subtree?
TIA,
Justin Crawford
justin.crawford(a)cusys.edu
17 years, 6 months
Re: [Fedora-directory-users] trying to build
by Jo De Troy
Hi Rich,
here's the gmake command
# new unix installer
cd cm/newinst; gmake BUILD_OPT=1 NO_JAVA=1 -w all
gmake[2]: Entering directory `/home/ldap/ds71/ldapserver/ldap/cm/newinst'
/usr/bin/g++ -Wall -DNO_DBM -DLINUX -DLINUX2_2 -DLINUX2_4 -fPIC
-D_REENTRANT -DNO_NODELOC
K -DNO_LIBLCACHE -DXP_UNIX -DLinux -O2 -DMCC_HTTPD -DNS_DOMESTIC
-DNET_SSL -DCLIENT_AUTH
-DSERVER_BUILD -DNSPR20 -DNS_DS -DSPAPI20
-DBUILD_NUM=\"2006.304.843\" -DUPGRADEDB -DLINU
X -DLINUX2_0 -DLINUX2_2 -DLinux -DLDAP_DEBUG -DLDAP_REFERRALS
-DLDAP_LDBM -DLDA
P_LDIF -DLDBM_USE_DBBTREE -DSLAPD_PASSWD_SHA1 -DLDAP_SSLIO_HOOKS
-D__DBINTERFACE_PRIVATE
-DNO_LIBLCACHE -DNS_DIRECTORY -O -I../../../ldap/include
-I../../../built/RHEL4_x86_gc
c3_OPT.OBJ/include -I../../../include -I../../../include
-I../../../../mozilla/dist/Linux2
.6_x86_glibc_PTH_OPT.OBJ/include -I../../../../mozilla/dist/public/dbm
-I../../../../mozil
la/dist/public/nss -I../../../../mozilla/dist/public/svrcore
-I../../../../mozilla/dist/pu
blic/ldap -I/usr/include/sasl
-I../../../../setuputil/built/package/RHEL4_x86_gcc3_OPT.OBJ
/include -I../../../ldap/admin/include -I../../../ldap/admin/lib
-I../../../ldap/admin/src
-c ux-dialog.cc -o
../../../built/RHEL4_x86_gcc3_OPT.OBJ/dsadmin/obj/ux-dialog.o
In file included from
/usr/lib/gcc/i386-redhat-linux/3.4.6/../../../../include/c++/3.4.6/b
ackward/iostream.h:31,
from ux-dialog.cc:53:
Thanks again,
Jo
17 years, 6 months
Re: [Fedora-directory-users] trying to build
by Jo De Troy
Hi Rich,
is this enough?
Bye,
Jo
ux-dialog.cc: In function `int isAValidDN(const char*)':
ux-dialog.cc:186: error: `ldap_explode_dn' was not declared in this scope
ux-dialog.cc:194: error: `ldap_value_free' was not declared in this scope
ux-dialog.cc:194: warning: unused variable 'ldap_value_free'
ux-dialog.cc:196: error: `ldap_value_free' was not declared in this scope
ux-dialog.cc:196: warning: unused variable 'ldap_value_free'
ux-dialog.cc:203: error: `UTF8ToLocal' was not declared in this scope
ux-dialog.cc:206: error: `NSString' was not declared in this scope
ux-dialog.cc:206: error: expected `;' before "msg"
ux-dialog.cc:210: error: `msg' was not declared in this scope
ux-dialog.cc:211: error: `nsSetupFree' was not declared in this scope
ux-dialog.cc:206: warning: unused variable 'NSString'
ux-dialog.cc:210: warning: unused variable 'msg'
ux-dialog.cc: In function `int isValid(const char*)':
ux-dialog.cc:253: error: `ldap_utf8isspace' was not declared in this scope
ux-dialog.cc:254: error: `LDAP_UTF8INC' was not declared in this scope
ux-dialog.cc:253: warning: unused variable 'ldap_utf8isspace'
ux-dialog.cc:254: warning: unused variable 'LDAP_UTF8INC'
ux-dialog.cc: At global scope:
ux-dialog.cc:317: error: `Dialog' was not declared in this scope
ux-dialog.cc:317: error: `me' was not declared in this scope
ux-dialog.cc:317: error: expected primary-expression before "const"
ux-dialog.cc:317: error: expected primary-expression before "const"
ux-dialog.cc:318: error: initializer expression list treated as
compound expression
ux-dialog.cc:318: error: expected `,' or `;' before '{' token
ux-dialog.cc:342: error: `DialogInput' does not name a type
ux-dialog.cc:358: error: `DialogAction' does not name a type
ux-dialog.cc:424: error: `DialogAction' does not name a type
ux-dialog.cc:474: error: `DialogInput' does not name a type
ux-dialog.cc:487: error: `DialogAction' does not name a type
ux-dialog.cc:556: error: `DialogAction' does not name a type
ux-dialog.cc:621: error: `DialogInput' does not name a type
ux-dialog.cc:634: error: `DialogAction' does not name a type
ux-dialog.cc:692: error: `DialogAction' does not name a type
ux-dialog.cc:787: error: `DialogInput' does not name a type
ux-dialog.cc:799: error: `DialogAction' does not name a type
ux-dialog.cc:824: error: `DialogAction' does not name a type
ux-dialog.cc:853: error: `DialogInput' does not name a type
ux-dialog.cc:869: error: `DialogAction' does not name a type
ux-dialog.cc:886: error: `DialogAction' does not name a type
ux-dialog.cc:984: error: `DialogYesNo' does not name a type
ux-dialog.cc:997: error: `DialogAction' does not name a type
ux-dialog.cc:1015: error: `DialogAction' does not name a type
ux-dialog.cc:1034: error: `DialogYesNo' does not name a type
ux-dialog.cc:1054: error: `DialogAction' does not name a type
ux-dialog.cc:1084: error: `DialogAction' does not name a type
ux-dialog.cc:1130: error: `DialogInput' does not name a type
ux-dialog.cc:1143: error: `DialogAction' does not name a type
ux-dialog.cc:1167: error: `DialogAction' does not name a type
ux-dialog.cc:1208: error: `DialogYesNo' does not name a type
ux-dialog.cc:1223: error: `DialogAction' does not name a type
ux-dialog.cc:1236: error: `DialogAction' does not name a type
ux-dialog.cc:1261: error: `DialogYesNo' does not name a type
ux-dialog.cc:1278: error: `DialogAction' does not name a type
ux-dialog.cc:1296: error: `DialogAction' does not name a type
ux-dialog.cc:1326: error: `DialogYesNo' does not name a type
ux-dialog.cc:1343: error: `DialogAction' does not name a type
ux-dialog.cc:1361: error: `DialogAction' does not name a type
ux-dialog.cc:1391: error: `DialogInput' does not name a type
ux-dialog.cc:1403: error: `DialogAction' does not name a type
ux-dialog.cc:1425: error: `DialogAction' does not name a type
ux-dialog.cc:1455: error: `DialogInput' does not name a type
ux-dialog.cc:1467: error: `DialogAction' does not name a type
ux-dialog.cc:1494: error: `DialogAction' does not name a type
ux-dialog.cc:1536: error: `DialogInput' does not name a type
ux-dialog.cc:1550: error: `DialogAction' does not name a type
ux-dialog.cc:1573: error: `DialogAction' does not name a type
ux-dialog.cc:1641: error: `DialogInput' does not name a type
ux-dialog.cc:1653: error: `DialogAction' does not name a type
ux-dialog.cc:1676: error: `DialogAction' does not name a type
ux-dialog.cc:1740: error: `DialogYesNo' does not name a type
ux-dialog.cc:1752: error: `DialogAction' does not name a type
ux-dialog.cc:1771: error: `DialogAction' does not name a type
ux-dialog.cc:1794: error: `DialogInput' does not name a type
ux-dialog.cc:1809: error: `DialogAction' does not name a type
ux-dialog.cc:1832: error: `DialogAction' does not name a type
ux-dialog.cc:1871: error: `DialogInput' does not name a type
ux-dialog.cc:1884: error: `DialogAction' does not name a type
ux-dialog.cc:1906: error: `DialogAction' does not name a type
ux-dialog.cc:1938: error: `DialogInput' does not name a type
ux-dialog.cc:1952: error: `DialogAction' does not name a type
ux-dialog.cc:1979: error: `DialogAction' does not name a type
ux-dialog.cc:2005: error: `DialogInput' does not name a type
ux-dialog.cc:2021: error: `DialogAction' does not name a type
ux-dialog.cc:2044: error: `DialogAction' does not name a type
ux-dialog.cc:2129: error: `DialogInput' does not name a type
ux-dialog.cc:2148: error: `DialogAction' does not name a type
ux-dialog.cc:2171: error: `DialogAction' does not name a type
ux-dialog.cc:2263: error: `DialogInput' does not name a type
ux-dialog.cc:2275: error: `DialogAction' does not name a type
ux-dialog.cc:2297: error: `DialogAction' does not name a type
ux-dialog.cc:2327: error: `DialogInput' does not name a type
ux-dialog.cc:2339: error: `DialogAction' does not name a type
ux-dialog.cc:2366: error: `DialogAction' does not name a type
ux-dialog.cc:2408: error: `DialogInput' does not name a type
ux-dialog.cc:2423: error: `DialogAction' does not name a type
ux-dialog.cc:2446: error: `DialogAction' does not name a type
ux-dialog.cc:2514: error: `DialogInput' does not name a type
ux-dialog.cc:2526: error: `DialogAction' does not name a type
ux-dialog.cc:2549: error: `DialogAction' does not name a type
ux-dialog.cc:2613: error: `DialogYesNo' does not name a type
ux-dialog.cc:2625: error: `DialogAction' does not name a type
ux-dialog.cc:2644: error: `DialogAction' does not name a type
ux-dialog.cc:2667: error: `DialogInput' does not name a type
ux-dialog.cc:2684: error: `DialogAction' does not name a type
ux-dialog.cc:2712: error: `DialogAction' does not name a type
ux-dialog.cc:2785: error: `DialogInput' does not name a type
ux-dialog.cc:2802: error: `DialogAction' does not name a type
ux-dialog.cc:2830: error: `DialogAction' does not name a type
ux-dialog.cc:2902: error: `DialogInput' does not name a type
ux-dialog.cc:2919: error: `DialogAction' does not name a type
ux-dialog.cc:2942: error: `DialogAction' does not name a type
ux-dialog.cc:3029: error: `DialogInput' does not name a type
ux-dialog.cc:3046: error: `DialogAction' does not name a type
ux-dialog.cc:3069: error: `DialogAction' does not name a type
ux-dialog.cc:3156: error: `DialogYesNo' does not name a type
ux-dialog.cc:3179: error: `DialogAction' does not name a type
ux-dialog.cc:3228: error: `DialogAction' does not name a type
ux-dialog.cc:3253: error: `DialogInput' does not name a type
ux-dialog.cc:3266: error: `DialogAction' does not name a type
ux-dialog.cc:3284: error: `DialogAction' does not name a type
ux-dialog.cc:3318: error: `DialogInput' does not name a type
ux-dialog.cc:3330: error: `DialogAction' does not name a type
ux-dialog.cc:3348: error: `DialogAction' does not name a type
ux-dialog.cc:3389: error: `DialogInput' does not name a type
ux-dialog.cc:3404: error: `DialogAction' does not name a type
ux-dialog.cc:3424: error: `DialogAction' does not name a type
ux-dialog.cc:3558: error: `DialogYesNo' does not name a type
ux-dialog.cc:3574: error: `DialogAction' does not name a type
ux-dialog.cc:3587: error: `DialogAction' does not name a type
ux-dialog.cc:3606: error: `DialogInput' does not name a type
ux-dialog.cc:3625: error: `DialogAction' does not name a type
ux-dialog.cc:3659: error: `DialogAction' does not name a type
ux-dialog.cc:3728: error: `DialogInput' does not name a type
ux-dialog.cc:3747: error: `DialogAction' does not name a type
ux-dialog.cc:3776: error: `DialogAction' does not name a type
ux-dialog.cc:3808: error: `DialogYesNo' does not name a type
ux-dialog.cc:3823: error: `DialogAction' does not name a type
ux-dialog.cc:3872: error: `DialogAction' does not name a type
ux-dialog.cc:3897: error: `DialogInput' does not name a type
ux-dialog.cc:3909: error: `DialogAction' does not name a type
ux-dialog.cc:3929: error: `DialogAction' does not name a type
ux-dialog.cc:3963: error: `DialogInput' does not name a type
ux-dialog.cc:3974: error: `DialogAction' does not name a type
ux-dialog.cc:3994: error: `DialogAction' does not name a type
ux-dialog.cc:4035: error: `DialogInput' does not name a type
ux-dialog.cc:4050: error: `DialogAction' does not name a type
ux-dialog.cc:4070: error: `DialogAction' does not name a type
ux-dialog.cc:4162: error: `DialogInput' does not name a type
ux-dialog.cc:4173: error: `DialogAction' does not name a type
ux-dialog.cc:4193: error: `DialogAction' does not name a type
ux-dialog.cc:4225: error: `DialogInput' does not name a type
ux-dialog.cc:4235: error: `DialogAction' does not name a type
ux-dialog.cc:4259: error: `DialogAction' does not name a type
ux-dialog.cc:80: warning: 'DEFAULT_SLAPDUSER' defined but not used
ux-dialog.cc:177: warning: 'int isAValidDN(const char*)' defined but not used
ux-dialog.cc:236: warning: 'int rootDNPwdIsValid(const char*)' defined
but not used
ux-dialog.cc:264: warning: 'int isValidServerID(const char*)' defined
but not used
ux-dialog.cc:289: warning: 'int isValidYesNo(const char*)' defined but not used
ux-dialog.cc:317: warning: 'dialogSetup' defined but not used
gmake[2]: *** [../../../built/RHEL4_x86_gcc3_OPT.OBJ/dsadmin/obj/ux-dialog.o]
Error 1
gmake[2]: Leaving directory `/home/ldap/ds71/ldapserver/ldap/cm/newinst'
gmake[1]: *** [ldapprogs] Error 2
gmake[1]: Leaving directory `/home/ldap/ds71/ldapserver/ldap'
gmake: *** [buildDirectory] Error 2
17 years, 6 months
Re: [Fedora-directory-users] trying to build
by Jo De Troy
Hi Rich,
seems like it's going wrong when starting to build the new unix installer
# new unix installer
cd cm/newinst; gmake BUILD_OPT=1 NO_JAVA=1 -w all
In file included from
/usr/lib/gcc/i386-redhat-linux/3.4.6/../../../../include/c++/3.4.6/b
ackward/iostream.h:31,
from ux-dialog.cc:53:
/usr/lib/gcc/i386-redhat-linux/3.4.6/../../../../include/c++/3.4.6/backward/backward_warni
ng.h:32:2: warning: #warning This file includes at least one
deprecated or antiquated head
er. Please consider using one of the 32 headers found in section
17.4.1.2 of the C++ stand
ard. Examples include substituting the <X> header for the <X.h> header
for C++ includes, o
r <iostream> instead of the deprecated header <iostream.h>. To disable
this warning use -W
no-deprecated.
ux-dialog.cc:68:18: utf8.h: No such file or directory
ux-dialog.cc:69:21: ux-util.h: No such file or directory
ux-dialog.cc:70:20: dialog.h: No such file or directory
In file included from ux-dialog.cc:71:
ux-dialog.h:43: error: `DialogYesNo' does not name a type
In file included from ux-dialog.cc:72:
ux-config.h:159: error: expected class-name before '{' token
ux-config.h:168: error: `Dialog' has not been declared
Thanks again,
Jo
17 years, 6 months
Re: [Fedora-directory-users] trying to build
by Jo De Troy
Hi Rich,
I get an error when compiling the directoryserver
gmake[2]: *** [../../../built/RHEL4_x86_gcc3_OPT.OBJ/dsadmin/obj/ux-dialog.o]
Error 1
Do you know what's causing this?
Bye,
Jo
17 years, 6 months
Re: [Fedora-directory-users] trying to build
by Jo De Troy
>> Hello,
>>
>> I'm trying to build FDS myself and I'm using the steps
documented on the wiki.
>>
>> When I start compiling perlldap I get the question below:
>>
>> PerLDAP - Perl 5 Module for LDAP
>> ================================
>> Directory containing 'include' and 'lib' directory of the Mozilla
>> LDAP Software Developer Kit (default: /opt/mozldap)
>> I know the SDK is checked out in mozilla/directory/c-sdk but I don't
>> see the lib directories there, the include directory is there.
>Have you built it already? All of the mozilla components put their
release files under >mozilla/dist. Perldap should automatically find
everything under there. Just hit "enter" at >the >perldap prompts.
Hello Rich,
the default value is /opt/mozldap. This surely isn't correct. I'll add
<buildpath>/mozilla/dist/Linux2.6_x86_glibc_PTH_OPT.OBJ instead
Bye,
Jo
17 years, 6 months
[Fedora-directory-users] Add user (Perl) CGI script
by Luis
Hello all,
I just wrote a CGI script that allows adding users to Fedora Directory
Server (FDS) very easily. The script is attached to this email. Future
revisions can be downloaded from:
http://lems.kiskeyix.org/toolbox/?f=adduser-ldap.cgi
The license is GPL. So feel free to add it to other projects.
Features:
* Simple to use and to install
* E-Mail is sent to the user that was created (templated) and CC to
another email
* Uses readily available Perl modules: Net::LDAP, CGI, Net::SMTP
* XHTML 1.0 and CSS plus javascript to avoid typing much (fields get
automagically populated as you type)
Installation:
copy cgi script to your cgi-bin dir:
cp adduser-ldap.cgi /var/www/cgi-bin/
make sure it's executable:
chmod ugo+rx /var/www/cgi-bin/adduser-ldap.cgi
create a "secret" file:
echo "password" > /etc/adduser-ldap.secret
chmod 0400 /etc/adduser-ldap.secret
chown apache /etc/adduser-ldap.secret
make sure that the needed Perl modules are installed (hint: perl
adduser-ldap.cgi)
modify the variables on top of the script to taste.
The script assumes that you will be using "admin" as your bind dn:
my $LDAPADMINCN =
"uid=admin,ou=Administrators,ou=TopologyManagement,o=netscapeRoot";
TLS is supported, but can be easily turned off if you are using it in
the same box as the server is running. (Just comment out the
start_tls() call).
Feel free to post this script to the wiki page. (I couldn't figure out
how to do that ;-))
I made this script to allow creating accounts by non-technical
personnel to the LDAP directory (used by Wildfire Jabber Server).
Everything works like a charm!
Enjoy
--
----)(-----
Luis Mondesi
*NIX Guru
Kiskeyix.org
"We think basically you watch television to turn your brain off, and
you work on your computer when you want to turn your brain on" --
Steve Jobs in an interview for MacWorld Magazine 2004-Feb
No .doc: http://www.gnu.org/philosophy/no-word-attachments.es.html
17 years, 6 months
[Fedora-directory-users] multiple naming attributes in DN
by Gennaro Tortone
Hi,
I'm setting up a Fedora Directory Server for user authentication;
Currently users are stored as the following:
dn: uid=user01,ou=People,dc=na,dc=infn,dc=it
<entry of user01>
dn: uid=user02,ou=People,dc=na,dc=infn,dc=it
<entry of user02>
Is it possible to publish each user entry as:
dn: uid=user01,ou=People,dc=na,dc=infn,dc=it
<entry of user01>
and also with:
dn: email=user01(a)domain.it,ou=People,dc=na,dc=infn,dc=it
<entry of user01>
Thanks in advance,
--
Gennaro Tortone
INFN Napoli
Italy
tel: +39 81 676169
"Computer Science is no more about computers
than astronomy is about telescopes."
- Edsger Dijkstra
17 years, 6 months
[Fedora-directory-users] trying to build
by Jo De Troy
Hello,
I'm trying to build FDS myself and I'm using the steps documented on the wiki.
When I start compiling perlldap I get the question below:
PerLDAP - Perl 5 Module for LDAP
================================
Directory containing 'include' and 'lib' directory of the Mozilla
LDAP Software Developer Kit (default: /opt/mozldap)
I know the SDK is checked out in mozilla/directory/c-sdk but I don't
see the lib directories there, the include directory is there. Which
is the directory I should enter?
Thanks again,
Jo
17 years, 6 months
[Fedora-directory-users] Help with PassSync / FDS Bind DN user
by Mike Sapsara
Hi,
I have Password sync working well between a 2003 AD server and FDS, but only
if I use the Directory Manager account as my Bind DN as defined in the
PassSync options on Windows. If I don't use that I can't overcome some of
the password aging contraints we are using for FDS users.
Does anyone have less powerful Bind DN account that they specifically
defined for AD -> FDS password sync, or pointers on how to define one ?
thanks,
Mike
17 years, 6 months
