Fedora directory users - Jun 2006 - Need information about phpldapadmin and Fedora DS

We have the Howto here - 
http://directory.fedora.redhat.com/wiki/Howto:phpLdapAdmin

But it seems apparent from some recent IRC conversations that users 
can''t even get this far - they can''t even get phpldapadmin to
display
anything, even though it works fine with openldap.  So if you have any 
information about setting up phpldapadmin with fedora ds, please let me 
know.

Thanks.

Richard,
What I had to do to get PLA to work with FDS was:
1 - edit /etc/php.ini to increase the memory_limit value, I changed 8M to
32M
2 - edit /var/www/html/phpldapadmin/config/config.php to specify the Server
and Base settings.

If I do not set the ''base'' setting, then I get this

"Could not determine the root of your LDAP tree.
It appears that the LDAP server has been configured to not reveal its root.
Please specify it in config.php"

One question I have is - what needs to be changed in FDS to allow clients to
determine the root?

I''m running FDS 1.0.2, default setup for example.com as outlined in the
quickstart.

Thanks,

Toby



On 6/23/06, Richard Megginson <rmeggins@redhat.com>
wrote:
>
> We have the Howto here -
> http://directory.fedora.redhat.com/wiki/Howto:phpLdapAdmin
>
> But it seems apparent from some recent IRC conversations that users
> can''t even get this far - they can''t even get
phpldapadmin to display
> anything, even though it works fine with openldap.  So if you have any
> information about setting up phpldapadmin with fedora ds, please let me
> know.
>
> Thanks.
>
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>
>
>

Toby Kraft wrote:
> Richard,
> What I had to do to get PLA to work with FDS was:
> 1 - edit /etc/php.ini to increase the memory_limit value, I changed 8M 
> to 32M
> 2 - edit /var/www/html/phpldapadmin/config/config.php to specify the 
> Server and Base settings.
>
> If I do not set the ''base'' setting, then I get this
>
> "Could not determine the root of your LDAP tree.
> It appears that the LDAP server has been configured to not reveal its 
> root.
> Please specify it in config.php"
What OS?  Fedora Core 4? 5?
>
> One question I have is - what needs to be changed in FDS to allow 
> clients to determine the root? 
I''m not sure - fds allows rootdse searches by anonymous by default, and
returns the namingContexts attribute, so I don''t know what else 
phpldapadmin is looking for - have you checked the access log to see 
what it''s searching for?  Is there anything in the phpldapadmin logs 
about this?
>
> I''m running FDS 1.0.2, default setup for example.com 
> <http://example.com> as outlined in the quickstart.
>
> Thanks,
>
> Toby
>
>
>
> On 6/23/06, *Richard Megginson* <rmeggins@redhat.com 
> <mailto:rmeggins@redhat.com>> wrote:
>
>     We have the Howto here -
>     http://directory.fedora.redhat.com/wiki/Howto:phpLdapAdmin
>
>     But it seems apparent from some recent IRC conversations that users
>     can''t even get this far - they can''t even get
phpldapadmin to display
>     anything, even though it works fine with openldap.  So if you have any
>     information about setting up phpldapadmin with fedora ds, please
>     let me
>     know.
>
>     Thanks.
>
>
>
>     --
>     Fedora-directory-users mailing list
>     Fedora-directory-users@redhat.com
>     <mailto:Fedora-directory-users@redhat.com>
>     https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>
>
>
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>

2006/6/23, Richard Megginson
<rmeggins@redhat.com>:
> We have the Howto here -
> http://directory.fedora.redhat.com/wiki/Howto:phpLdapAdmin
>
> But it seems apparent from some recent IRC conversations that users
> can''t even get this far - they can''t even get
phpldapadmin to display
> anything, even though it works fine with openldap.  So if you have any
> information about setting up phpldapadmin with fedora ds, please let me
> know.
Hello,

I''ve installed pla on fedora core 4 with disabled anonymous acces.
This caused pla to disfunction and I had to set this acl to get it
working :

(targetattr = "subschemaSubentry || aliasedObjectName ||
hasSubordinates || objectClasses || namingContexts || matchingRuleUse
|| ldapSchemas || attributeTypes || serverRoot || modifyTimestamp ||
icsAllowRights || matchingRules || creatorsName || dn || ldapSyntaxes
|| createTimestamp")
(version 3.0;
acl "Anonymous acces on the schema";
allow (read,compare,search)
(userdn = "ldap:///anyone")
;)

Best regards,
-- 
Mikael Kermorgant

Mikael Kermorgant wrote:
> 2006/6/23, Richard Megginson <rmeggins@redhat.com>:
>> We have the Howto here -
>> http://directory.fedora.redhat.com/wiki/Howto:phpLdapAdmin
>>
>> But it seems apparent from some recent IRC conversations that users
>> can''t even get this far - they can''t even get
phpldapadmin to display
>> anything, even though it works fine with openldap.  So if you have any
>> information about setting up phpldapadmin with fedora ds, please let me
>> know.
>
> Hello,
>
> I''ve installed pla on fedora core 4 with disabled anonymous acces.
> This caused pla to disfunction and I had to set this acl to get it
> working :
To which entry did you add this aci?
>
> (targetattr = "subschemaSubentry || aliasedObjectName ||
> hasSubordinates || objectClasses || namingContexts || matchingRuleUse
> || ldapSchemas || attributeTypes || serverRoot || modifyTimestamp ||
> icsAllowRights || matchingRules || creatorsName || dn || ldapSyntaxes
> || createTimestamp")
> (version 3.0;
> acl "Anonymous acces on the schema";
> allow (read,compare,search)
> (userdn = "ldap:///anyone")
> ;)
>
> Best regards,

> > I''ve installed pla on fedora core 4 with disabled anonymous
acces.
> > This caused pla to disfunction and I had to set this acl to get it
> > working :
> To which entry did you add this aci?
I added it on the root dse.

Best regards,
-- 
Mikael Kermorgant

Mikael Kermorgant wrote:
>> > I''ve installed pla on fedora core 4 with disabled
anonymous acces.
>> > This caused pla to disfunction and I had to set this acl to get it
>> > working :
>> To which entry did you add this aci?
>
> I added it on the root dse.
>
> Best regards,
Thanks!

http://directory.fedora.redhat.com/wiki/Howto:phpLdapAdmin