search for: replog

Sorry.. One more email.. I tried to create the IDMAP container on the LDAP with an example I found: dn: ou=Idmap,dc=softeng,dc=com objectClass: organizationalUnit ou: idmap structuralObjectClass: organizationalUnit and it gives: adding new entry "ou=Idmap,dc=softeng,dc=com" ldap_add: Constraint violation additional info: structuralObjectClass: no user modification allowed

...sn pres,sub,eq index displayName pres,sub,eq index sambaSID eq index sambaPrimaryGroupSID eq index sambaDomainName eq index default sub # Replicas of this database #replogfile /var/lib/ldap/openldap-master-replog #replica host=ldap-1.example.com:389 tls=yes # bindmethod=sasl saslmech=GSSAPI # authcId=host/ldap-master.example.com@EXAMPLE.COM

...m" write by dn="cn=Domain Admins,ou=Groups,dc=msdpl,dc=com" write by dn="cn=Administrators,ou=Groups,dc=msdpl,dc=com" write by dn="cn=Account Operators,ou=Groups,dc=msdpl,dc=com" write by * none access to * by * read # Replicas of this database #replogfile /var/lib/ldap/openldap-master-replog replogfile /usr/local/ldap-2.3/var/openldap-slurp/openldap-master-replog replica host=192.168.129.18:389 suffix="dc=msdpl,dc=com" binddn="cn=manager,dc=msdpl,dc=com" credentials=secret bindmet...

...o it first with manual configuration but after no success, i prefered to install mgeups-psp package to do it directly. But since when i execute psp, the attempt finish with an "No communication with UPS" error. Same is when i type: mge-shut -u root -DDDDDDDDDD /dev/ttyS0 . I unplog and replog and after reboot my system for some times. I tried also to do a configuration of my serial port but without success. My setserial command output is: dev/ttyS0 uart 16550A port 0x03f8 irq 4 baud_base 115200 spd_normal skip_test auto_irq I'm use serial port on a fedora core 3 system. Pleas...

...will not stop the server if you change this. pidfile /var/run/slapd/slapd.pid # List of arguments that were passed to the server argsfile /var/run/slapd.args # Read slapd.conf(5) for possible values loglevel 256 # Create a replication log in /var/lib/ldap for use by slurpd. replogfile /var/log/ldap.log # Where the dynamically loaded modules are stored modulepath /usr/lib/ldap moduleload back_ldbm ####################################################################### # Specific Backend Directives for ldbm: # Backend specific directives apply to this backend...

...for this database index objectClass eq,pres index ou,cn,mail,surname,givenname eq,pres,sub index uidNumber,gidNumber,loginShell eq,pres index uid,memberUid eq,pres,sub index nisMapName,nisMapEntry eq,pres,sub # Replicas of this database #replogfile /var/lib/ldap/openldap-master-replog #replica host=ldap-1.example.com:389 starttls=critical # bindmethod=sasl saslmech=GSSAPI # authcId=host/ldap-master.example.com@EXAMPLE.COM Am running it under RedHat Linux 5.1. Please do help am quite under pressure Regards Kevin

I'm trying to set up an Idmap Backend LDAP server for winbind. I don't need a full blown SAMBA PDC; just a server to provide the SID to UID/GID mappings. We're using a Windows Active Directory server to authenticate against but we want the above mappings to be the same across multiple samba machines. Can we just stand up a simple ldap server and just add the mappings and that's

...e the database file are physically stored for database #1 directory "/var/lib/ldap" # Indexing options for database #1 index objectClass eq # Save the time that the entry gets modified, for database #1 lastmod on # Where to store the replica logs for database #1 replogfile "/var/lib/ldap/replog" replica uri=ldap://192.168.0.132:389 binddn="uid=replication,ou=users,dc=mailan,dc=local" bindmethod=simple credentials=secofr # bindmethod=simple credentials="{SSHA}KsGfPaQR67EKAEbW9FYvloppjVBDSk47" # tls=yes # # The userPassword...

...eq,subinitial index sambaSID,sambaPrimaryGroupSID,sambaDomainName, eq index mailLocalAddress eq ### Addressbook entries index memberof eq index active,userscode eq,sub,pres index companyname eq,sub,pres ## default index index default pres,eq lastmod on #cachesize 1000 #dbcachesize 10000 replogfile /var/lib/ldap/replog # Access list for samba # uses user admin (the rootdn) at the moment. # include /etc/ldap/samba-access.conf # Access list for the ou=addressbook and user addressbook # use user addressguest for outlook # include /etc/ldap/address-access.conf ## GLOBAL ACCESS access to dn.b...

...for this database index objectClass eq,pres index ou,cn,mail,surname,givenname eq,pres,sub index uidNumber,gidNumber,loginShell eq,pres index uid,memberUid eq,pres,sub index nisMapName,nisMapEntry eq,pres,sub # Replicas of this database #replogfile /var/lib/ldap/openldap-master-replog #replica host=ldap-1.example.com:389 tls=yes # bindmethod=sasl saslmech=GSSAPI # authcId=host/ldap-master.example.com@EXAMPLE.COM

.../etc/ldap/schema/phpgwaccount.schema include /etc/ldap/schema/phpgwcontact.schema modulepath /usr/lib/ldap moduleload back_ldbm backend ldbm schemacheck on pidfile /var/run/slapd/slapd.pid argsfile /var/run/slapd/slapd.args password-hash {MD5} replogfile /var/lib/ldap/replog loglevel 256 database ldbm suffix "dc=ub,dc=unibas,dc=ch" rootdn "cn=manager,dc=ub,dc=unibas,dc=ch" rootpw {MD5}XXXXXXXXXXXXXXXXXXXXXX== directory "/var/lib/ldap/ub" lastmod on cachesi...

...sambaSID sub #index uid,uidNumber,gidNumber,memberUid eq #index cn,mail,surname,givenname eq,subinitial #index sambaPrimaryGroupSID eq #index sambaDomainName eq # Save the time that the entry gets modified, for database #1 lastmod on # Where to store the replica logs for database #1 # replogfile /var/lib/ldap/replog # The userPassword by default can be changed # by the entry owning it if they are authenticated. # Others should not be able to see it, except the # admin entry below # These access lines apply to database #1 only access to attrs=userPassword,shadowLastChange by...

...S-.... - - - ---- and it should be: - -> first step dn: .... add: objectClass objectClass: sambaSamAccount - - add: sambaSID sambaSID: S-.... - - - -> no error occured - ---- the next thing i found belongs to 'maybe unnecessary' changes to the LDAP entries for machine accounts. my replog file shows such entries: - ---- dn: uid=pc-210$,ou=Computer,dc=domain,dc=de changetype: modify add: sambaPwdCanChange sambaPwdCanChange: 1067459841 - - delete: sambaPwdCanChange sambaPwdCanChange: 1067458941 - - add: sambaPwdLastSet sambaPwdLastSet: 1067459841 - - delete: sambaPwdLastSet sambaPwdLa...

...sambaSID sub #index uid,uidNumber,gidNumber,memberUid eq #index cn,mail,surname,givenname eq,subinitial #index sambaPrimaryGroupSID eq #index sambaDomainName eq # Save the time that the entry gets modified, for database #1 lastmod on # Where to store the replica logs for database #1 # replogfile /var/lib/ldap/replog # The userPassword by default can be changed # by the entry owning it if they are authenticated. # Others should not be able to see it, except the # admin entry below # These access lines apply to database #1 only access to attrs=userPassword,shadowLastChange by d...

...the database file are physically stored for database #1 directory "/var/lib/ldap" # Indexing options for database #1 index objectClass eq # Save the time that the entry gets modified, for database #1 lastmod on # Where to store the replica logs for database #1 # replogfile /var/lib/ldap/replog # The userPassword by default can be changed # by the entry owning it if they are authenticated. # Others should not be able to see it, except the # admin entry below # These access lines apply to database #1 only access to attrs=userPassword,sambaNTPassword,sambaLMPass...

...the database file are physically stored for database #1 directory "/var/lib/ldap" # Indexing options for database #1 index objectClass eq # Save the time that the entry gets modified, for database #1 lastmod on # Where to store the replica logs for database #1 # replogfile /var/lib/ldap/replog # The userPassword by default can be changed # by the entry owning it if they are authenticated. # Others should not be able to see it, except the # admin entry below # These access lines apply to database #1 only access to attrs=userPassword,sambaNTPassword,sambaLMPass...

...#1 index objectClass eq # Save the time that the entry gets modified, for database #1 lastmod on # Checkpoint the BerkeleyDB database periodically in case of system # failure and to speed slapd shutdown. checkpoint 512 30 # Where to store the replica logs for database #1 # replogfile /var/lib/ldap/replog # The userPassword by default can be changed # by the entry owning it if they are authenticated. # Others should not be able to see it, except the # admin entry below # These access lines apply to database #1 only access to attrs=userPassword,shadowLastChange,sambaLMPas...

...; write by dn="cn=Domain Admins,ou=Groups,dc=msdpl,dc=com" write by dn="cn=Administrators,ou=Groups,dc=msdpl,dc=com" write by dn="cn=Account Operators,ou=Groups,dc=msdpl,dc=com" write by * none access to * by * read # Replicas of this database #replogfile /var/lib/ldap/openldap-master-replog #replica host=ldap-1.example.com:389 starttls=critical # bindmethod=sasl saslmech=GSSAPI # authcId=host/ldap-master.example.com@EXAMPLE.COM ################################################################### my samba pdc with LDAP, smb.conf file is...

...by dn="cn=Domain Admins,ou=Groups,dc=msdpl,dc=com" write by dn="cn=Administrators,ou=Groups,dc=msdpl,dc=com" write by dn="cn=Account Operators,ou=Groups,dc=msdpl,dc=com" write by * none access to * by * read # Replicas of this database #replogfile /var/lib/ldap/openldap-master-replog #replica host=ldap-1.example.com:389 starttls=critical # bindmethod=sasl saslmech=GSSAPI # authcId=host/ldap-master.example.com@EXAMPLE.COM ################################################################### my samba pdc with LDAP, smb.conf fil...

...access. # Do not enable referrals until AFTER you have a working directory # service AND an understanding of referrals. #referral ldap://root.openldap.org #pidfile //var/run/slapd.pid #argsfile //var/run/slapd.args # Create a replication log in /var/lib/ldap for use by slurpd. #replogfile /var/lib/ldap/master-slapd.replog # Load dynamic backend modules: # modulepath /usr/sbin/openldap # moduleload back_ldap.la # moduleload back_ldbm.la # moduleload back_passwd.la # moduleload back_shell.la # # The next three lines allow use of TLS for connections using a dum...