Reputation
638
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
3 11
Newest
 Revival
Impact
~14k people reached

Apr
19
comment How to backup and restore users for openldap replication setup (syncrepl)
I believe slapadd doesn't participate in the syncrepl process. You would need to use ldapadd.
Apr
19
comment OpenLDAP advanced ACL configuration
@MosheShmukler You definitely don't need to list the rootDN. There is no way you can prevent the rootDN from having full access. That's the account that OpenLDP uses internally. You shouldn't use it for anything yourself.
Apr
4
comment Multiple DN suffixes in openLDAP
Yes you did, that's how you defined the first tree. It's another database.
Mar
8
comment How to change an attribute value for all entries of ldap directory using ldapmodify command?
@Andy Agreed, it isn't possible. OP will have to traverse the DIT.
Mar
8
comment Why does OpenLDAP not auto add inheritied objectclasses
@GardenMWM JXplorer will show whatever is there. It doesn't suppress objectClasses, or anything else except operational attributes, which you can display via the Properties option.
Mar
8
comment ldap_add: Constraint violation (19) additional info: some attributes not unique
You will need to post the LDIF file you're adding from.
Feb
27
comment Why I cannot add groupOfUniqueNames to LDAP?
You need to add top and whatever other objectClasses are inherited.
Feb
27
comment Why does OpenLDAP not auto add inheritied objectclasses
No it doesn't. Some clients, e.g. JXplorer, do that for you. The server doesn't.
Feb
27
comment Why does OpenLDAP not auto add inheritied objectclasses
I don't know what kind of an answer you're expecting to this question here. It should be addressed to the OpenLDAP developers.
Jan
28
comment TCP window on Video Server
@eshalev Very nice, but does that have anything to do with this answer?
Jan
27
comment OpenLDAP Multiple Directory Manager Accounts / Groups
It's documented. You shouldn't use the RootDN account for anything. That's for OpenLDAP itself. For one thing, it bypasses all the overlays.
Nov
21
comment Openldap Master Slave configuration
Chain overlay works for me but it is buggy prior to version 2.4.34.
Nov
19
comment Chasing referrals in Ldap
This is really off topic. Should be migrated to stackoverflow.
Nov
1
comment mysql replication setup but not working
According to these displays it is all working perfectly. What do the relevant portions of the respective my.ini files look like?
Oct
21
comment Apache LDAP auth: denied all time
The Require entries in your AuthzProviderAlias block appear to be redundant. The same things are stated in the `<AuthzProviderAlias ...> header line.
Oct
2
comment How to set a user as RootDN in OpenLDAP
You don't want to do this. You want to use the RootDN only for the server itself. Any action carried out by a human or an application should be done as a user registered in the DIT and having appropriate permissions. The reason is that the RootDN bypasses many checks internally, for example it completely bypasses the password policy overlay.
Oct
2
comment How to Exclude an URL for Apache Mod_proxy?
He didn't say anything about wanting a 404 error.
Aug
27
comment Are there any ldap proxy servers that can supplement the results from the main ldap server?
@SvW I disagree. The OP didn't ask for a configuration, he asked for a product, and this answer provides one. The link to a configuration article is a bonus.
Jul
10
comment is TCP port exhaustion real?
@voretaq7 Agreed, edited.
Jul
9
comment Distributing a subtree into different LDAP servers
Nevertheless there is no answer that doesn't require the OP to define further subtrees. It could also be accomplished via the LDAP back end.