perl-ldap-dev

Re: Access Control

[Chris R. <chr...@me...>]

spencer <sp...@co...> wrote:
> Hi,
> Does anyonne know if perl-ldap has any function call which allows for
> manipulation of Access Control of directory tree? I don't remember seeing
> this topic being discussed before. Please kindly point out.
> 
> Many thanks.
> 
> spencer
> 

Specification of access controls is not defined by any LDAP RFCs, so each
server will handle them in an effectively proprietary way.

Many servers store access controls in attributes of entries in the
directory, so you can use the existing Net::LDAP methods (eg modify) to
change access controls.

The syntax used by access controls is also not well defined. RFC 2252
assigns an OID to a syntax called ACIitem, which is how you define access
controls in an X.500 directory server. No string form of this syntax is
defined (ie you can only use ;binary to manipulate the values) and it is
not likely to be the same as the LDAP-specific access control syntax which
is being approximately defined in an Internet Draft.

So you can probably already do it with Net::LDAP, but you are pretty much
on your own regarding the form of the values holding the access controls.

Cheers,

Chris

Access Control

[spencer <sp...@co...>]

Hi,
Does anyonne know if perl-ldap has any function call which allows for
manipulation of Access Control of directory tree? I don't remember seeing
this topic being discussed before. Please kindly point out.

Many thanks.

spencer

Copying an entry

[Jim H. <ha...@us...>]

I'm attempting to move an entry to another container via copy and delete
since my server (Novell NDS eDirectory) apparently won't allow a moddn to
a different one.  I am using perl-ldap-0.19 and perl 5.005_03 on one
Solaris system and perl-ldap-0.22 on another. Strange things are happening
with both versions.  In executing the code below, which is a callback from
a search, it prints the "attempting to add" message for both things found
in the search, but never prints either "Add fail" or "attempting to
delete", which seems like an impossibility.  It goes into some sort of
catatonic state after printing the 2 "attempting to add" messages.  It
also neither adds nor deletes.

Any ideas of what I should try?

Here is the code I am using:

sub process_entry {
# execute this once for each entry found in searchldap
  my $uid;
  my ( $search, $entry ) = @_ ;
  return unless $search;
  return unless $entry;
  $dn = $entry->dn;                 # get the dn for this one;
#set the dn for the corresponding disabled place
  my $newdn = $dn;
  $dn =~ /^\w+\=(\w+)/;             # the first thing in the dn is what we
want
  $uid = $1;                        # the uid
  $newdn =~ s/o\s*\=\s*usna/ou\=usna\,o\=disabled/i; 
  my $newentry = Net::LDAP::Entry->new;
  $newentry = $entry;
  $newentry->dn($newdn);
  print "attempting to add entry ",$newentry->dn,"\n" if $testing;
  $mesg = $ldap->add($newentry);
  if ($mesg->code) {
    print "Add fail for $newdn\n  ",
           Net::LDAP::Util::ldap_error_name($mesg->code), "\n" if
$testing;
    print ERROR "Add fail for $newdn\n  ",
           Net::LDAP::Util::ldap_error_name($mesg->code), "\n";
  } else {
    print "attempting to delete $dn\n" if $testing;
    $mesg = $ldap->delete($dn); #delete old entry
    print LOG "moved to $newdn\n";
    if ($mesg->code) {
      print "Delete fail for $dn\n  ",
           Net::LDAP::Util::ldap_error_name($mesg->code), "\n" if
$testing;
      print ERROR "Delete fail for $dn\n  ",
           Net::LDAP::Util::ldap_error_name($mesg->code), "\n";
    } else {
      if ($testing) {
         print "would have sent deluser for $uid\n";
      } else {
        system "senddeluser $uid";
      }
    }
  }
  $search->pop_entry;
}


--Jim Harle

Re: Questions about Net::LDAP::Schema and OpenLDAP

[Mark W. <mew...@un...>]

Sorry, Kurt hadn't realized you'd shipped 2.0 yet. Congrats, I know that's
been a long road :)

Mark

On Mon, 18 Sep 2000, Kurt D. Zeilenga wrote:

> At 11:25 AM 9/18/00 -0500, Mark Wilcox wrote:
> >The current version of openLDAP doesn't support LDAP v3 so you can't view
> >or update the schema dynamically. You must use the configuration files on
> >the server.
> 
> The current version of OpenLDAP, release 2.0, does support LDAPv3.
> Publishing of subschema information is supported, but modification
> is not.  You must use the configuration files on the server.
> 
> Kurt
> 
> 

Re: Questions about Net::LDAP::Schema and OpenLDAP

[Kurt D. Z. <Ku...@Op...>]

At 11:25 AM 9/18/00 -0500, Mark Wilcox wrote:
>The current version of openLDAP doesn't support LDAP v3 so you can't view
>or update the schema dynamically. You must use the configuration files on
>the server.

The current version of OpenLDAP, release 2.0, does support LDAPv3.
Publishing of subschema information is supported, but modification
is not.  You must use the configuration files on the server.

Kurt

Re: Questions about Net::LDAP::Schema and OpenLDAP

[Mark W. <mew...@un...>]

The current version of openLDAP doesn't support LDAP v3 so you can't view
or update the schema dynamically. You must use the configuration files on
the server.

Mark

On Mon, 18 Sep 2000, Chris Ridd wrote:

> Nicolas Rosa <nic...@ha...> wrote:
> > Hi,
> > 
> > I'm working on some piece of code to implement openLDAP in a mid-range
> > project.
> > I'd like to use the schema for testing entries but when I use it there
> > was no response.
> > 
> > I think I have to populate a Schema entry but when I do it the server
> > respond that there are no syntax verificators.
> > 
> > Can someone help me to populate the schema and manage-it ?
> >                                     Thanks
> > 
> 
> This is probably more a question you should ask the OpenLDAP guys, as it
> sounds more of a server issue than a client (Net::LDAP) problem..
> 
> You might also want to cut and past the *precise* error when you talk to
> them - "verificators" doesn't sound like a real word! :-)
> 
> Cheers,
> 
> Chris
> 

Re: Questions about Net::LDAP::Schema and OpenLDAP

[Kurt D. Z. <Ku...@Op...>]

At 04:18 PM 9/18/00 +0200, Nicolas Rosa wrote:
>Can someone help me to populate the schema and manage-it ?

OpenLDAP 2.x relies on configuration based schema definitions.
You cannot change it via LDAP.

I suggest further questions regarding the use of OpenLDAP
Software be directed at the OpenLDAP-software mailing list.
See http://www.openldap.org/lists/ for details.

Kurt

Re: Questions about Net::LDAP::Schema and OpenLDAP

[Clif H. <cl...@di...>]

> 
> Hi,
> 
> I'm working on some piece of code to implement openLDAP in a mid-range
> project.
> I'd like to use the schema for testing entries but when I use it there
> was no response.
> 
> I think I have to populate a Schema entry but when I do it the server
> respond that there are no syntax verificators.
> 
> Can someone help me to populate the schema and manage-it ?
>                                     Thanks
> 
> 

What you get back depends on the version of OpenLDAP that you
are running.

OpenLDAP 1.2.? anything is ldap version 2 which will not return schema 
data.

OpenLDAP 2 is ldap version 3 which should return schema data.

Regards,

Clif Harden           INTERNET:  c-h...@ti...

Re: Questions about Net::LDAP::Schema and OpenLDAP

[Chris R. <chr...@me...>]

Nicolas Rosa <nic...@ha...> wrote:
> Hi,
> 
> I'm working on some piece of code to implement openLDAP in a mid-range
> project.
> I'd like to use the schema for testing entries but when I use it there
> was no response.
> 
> I think I have to populate a Schema entry but when I do it the server
> respond that there are no syntax verificators.
> 
> Can someone help me to populate the schema and manage-it ?
>                                     Thanks
> 

This is probably more a question you should ask the OpenLDAP guys, as it
sounds more of a server issue than a client (Net::LDAP) problem..

You might also want to cut and past the *precise* error when you talk to
them - "verificators" doesn't sound like a real word! :-)

Cheers,

Chris

Questions about Net::LDAP::Schema and OpenLDAP

[Nicolas R. <nic...@ha...>]

Hi,

I'm working on some piece of code to implement openLDAP in a mid-range
project.
I'd like to use the schema for testing entries but when I use it there
was no response.

I think I have to populate a Schema entry but when I do it the server
respond that there are no syntax verificators.

Can someone help me to populate the schema and manage-it ?
                                    Thanks

Re: Mysterious error

[Jonathan L. <jon...@le...>]

Duh, should have gave a little more info.
I am using Net::LDAP 0.19 with OpenLDAP on a Linux webserver.
I cannot easily upgrade the module, since it is a production machine and with
recent API changes, so telling me get the newest version isn't really helpful.
And this version has been working fine for months and I am not doing anything new.

Woohoo, just took another look and caught my mistake. I guess a third cup of coffee helped.
In case any one wants to know what happened:

I wrote the same wrapper for ldap->search and consolidated them into one module, after they 
seemed to be exactly the same. But the last 2 arguments were in opposite order, so instead 
of passing an empty array ref as the attributes to find (which meant all), I was passing
an empty arrayref as the base. 

Would it be possible to have a better error message? Like :
"Base is not valid", or something?

Thanks for your time.


 Graham Barr (gb...@po...) was saying:

> Could you post the code you are using to call ->search with ?
> 
> Which version of Net::LDAP do you have installed ? The latest is 0.22
> 
> Graham.
> 
> On Fri, Sep 15, 2000 at 10:26:14AM -0500, Jonathan Leto wrote:
> > Hello everyone, just a quick question that my sleepless brain can't 
> > figure out this early in the morning. 
> > 
> > I was working all day yesterday writing an ldap web app, and today I 
> > go to test it out and I get :
> > 
> > Can't call method "dn" on unblessed reference at /usr/lib/perl5/site_perl/5.005/Net/LDAP.pm line 230.
> > 
> > which pertains to:
> > 
> > my %stash = (
> >     baseObject   => ref($base) ? $base->dn : $base,
> >     scope        => 2,
> >     derefAliases => 2,
> >     sizeLimit    => $arg->{sizelimit} || 0,
> >     timeLimit    => $arg->{timelimit} || 0,
> >     typesOnly    => $arg->{typesonly} || $arg->{attrsonly} || 0,
> >     filter       => $filter,
> >     attributes   => $arg->{attrs} || []
> >   );
> > 
> > I haven't changed anything that I can see would cause a problme and all my scripts pass syntax checks,
> > so I was wondering if anybody could help me figure out where to look for the problem.
> > 
> > Thanks.
> > 
> > -- 
> > jon...@le... 
> > "With pain comes clarity."
> > 
> > 

-- 
jon...@le... 
"With pain comes clarity."

Re: Mysterious error

[Graham B. <gb...@po...>]

Could you post the code you are using to call ->search with ?

Which version of Net::LDAP do you have installed ? The latest is 0.22

Graham.

On Fri, Sep 15, 2000 at 10:26:14AM -0500, Jonathan Leto wrote:
> Hello everyone, just a quick question that my sleepless brain can't 
> figure out this early in the morning. 
> 
> I was working all day yesterday writing an ldap web app, and today I 
> go to test it out and I get :
> 
> Can't call method "dn" on unblessed reference at /usr/lib/perl5/site_perl/5.005/Net/LDAP.pm line 230.
> 
> which pertains to:
> 
> my %stash = (
>     baseObject   => ref($base) ? $base->dn : $base,
>     scope        => 2,
>     derefAliases => 2,
>     sizeLimit    => $arg->{sizelimit} || 0,
>     timeLimit    => $arg->{timelimit} || 0,
>     typesOnly    => $arg->{typesonly} || $arg->{attrsonly} || 0,
>     filter       => $filter,
>     attributes   => $arg->{attrs} || []
>   );
> 
> I haven't changed anything that I can see would cause a problme and all my scripts pass syntax checks,
> so I was wondering if anybody could help me figure out where to look for the problem.
> 
> Thanks.
> 
> -- 
> jon...@le... 
> "With pain comes clarity."
> 
> 

Mysterious error

[Jonathan L. <jon...@le...>]

Hello everyone, just a quick question that my sleepless brain can't 
figure out this early in the morning. 

I was working all day yesterday writing an ldap web app, and today I 
go to test it out and I get :

Can't call method "dn" on unblessed reference at /usr/lib/perl5/site_perl/5.005/Net/LDAP.pm line 230.

which pertains to:

my %stash = (
    baseObject   => ref($base) ? $base->dn : $base,
    scope        => 2,
    derefAliases => 2,
    sizeLimit    => $arg->{sizelimit} || 0,
    timeLimit    => $arg->{timelimit} || 0,
    typesOnly    => $arg->{typesonly} || $arg->{attrsonly} || 0,
    filter       => $filter,
    attributes   => $arg->{attrs} || []
  );

I haven't changed anything that I can see would cause a problme and all my scripts pass syntax checks,
so I was wondering if anybody could help me figure out where to look for the problem.

Thanks.

-- 
jon...@le... 
"With pain comes clarity."

Re: RELEASE: perl-ldap 0.22

[Chris R. <chr...@me...>]

Chris Ridd <chr...@me...> wrote:
> A policy of removing stuff that's been deprecated in a release <= 0.10
> different from the current one would be OK in my view.

Ahem, >= 0.10 different...

Cheers,

Chris

Re: RELEASE: perl-ldap 0.22

[Chris R. <chr...@me...>]

Graham Barr <gb...@po...> wrote:
> But it was Netscape who annoyed my by calling thiers perldap, as perl-ldap
> had already existed for a long-ish time.

Fair enough then. I note that perldap hasn't been updated for quite a while
now, so if we wait long enough it'll all be moot.

> No, it's just my spelling :)
> 
>> It kind of bugs me when I see it,
>> which I'm coming to think is a darn good way of making me fix scripts
>> which use deprecated (sic) methods :-)
> 
> :-)

Righto then! I was going to offer a little patch but on second thoughts...

> Graham.
> 
> PS: We probably should start thinking of removing some of the methods that
> have been deprecated for a long time.

A policy of removing stuff that's been deprecated in a release <= 0.10
different from the current one would be OK in my view.

Cheers,

Chris

Re: RELEASE: perl-ldap 0.22

[Graham B. <gb...@po...>]

On Fri, Sep 15, 2000 at 11:31:22AM +0100, Chris Ridd wrote:
> I suppose it is too late now, but would it be worth renaming perl-ldap to,
> I dunno, net-ldap? This better reflects the module name, and is distinctly
> different from Netscape's perldap package so it *should* stop people
> posting to the wrong list (ha!)

Well it was originally called perl-ldap because it contains more than
Net::LDAP::*. Although this is slowly changing, Authen::SASL will soon be
moved into a separate distribution.

But it was Netscape who annoyed my by calling thiers perldap, as perl-ldap
had already existed for a long-ish time.

I also like to think that it has become known as perl-ldap, so I am
reluctant to change it now.

> Veering further off topic now, but is "deprecate" being deliberately
> mispelled in the source as "depricate"?

No, it's just my spelling :)

> It kind of bugs me when I see it,
> which I'm coming to think is a darn good way of making me fix scripts which
> use deprecated (sic) methods :-)

:-)

Graham.

PS: We probably should start thinking of removing some of the methods that
have been deprecated for a long time.

Re: RELEASE: perl-ldap 0.22

[Chris R. <chr...@me...>]

Graham Barr <gb...@po...> wrote:
> perl-ldap 0.22 has been released and can be obtained from 
> 
>   http://download.sourceforge.net/perl-ldap/perl-ldap-0.22.tar.gz
> 
> It will also, shortly be on the CPAN sites around the world, in the
> directory
> 
>   authors/id/G/GB/GBARR/
> 
> See http://www.cpan.org/SITES.html for a mirror site near you or
> use the CPAN multiplexor at
> 
>   http://www.perl.com/CPAN
> 
> 
> perl-ldap is an LDAP v3 client library written almost entirely in perl.
> This makes it portable to any platform that perl has already been ported
> to and there is no need to a C compiler to perform installation.

I suppose it is too late now, but would it be worth renaming perl-ldap to,
I dunno, net-ldap? This better reflects the module name, and is distinctly
different from Netscape's perldap package so it *should* stop people
posting to the wrong list (ha!)

Veering further off topic now, but is "deprecate" being deliberately
mispelled in the source as "depricate"? It kind of bugs me when I see it,
which I'm coming to think is a darn good way of making me fix scripts which
use deprecated (sic) methods :-)

Cheers,

Chris

RELEASE: perl-ldap 0.22

[Graham B. <gb...@po...>]

perl-ldap 0.22 has been released and can be obtained from 

  http://download.sourceforge.net/perl-ldap/perl-ldap-0.22.tar.gz

It will also, shortly be on the CPAN sites around the world, in the
directory

  authors/id/G/GB/GBARR/

See http://www.cpan.org/SITES.html for a mirror site near you or
use the CPAN multiplexor at

  http://www.perl.com/CPAN


perl-ldap is an LDAP v3 client library written almost entirely in perl.
This makes it portable to any platform that perl has already been ported
to and there is no need to a C compiler to perform installation.

RELEASE_NOTES

perl-ldap 0.22 September 14 2000
================================

* Quick release to fix memory problem with 5.6.0

Re: trouble with perl-ldap 0.21 on perl 5.6.0

[Graham B. <gb...@po...>]

On Thu, Sep 14, 2000 at 01:09:20PM -0500, Joe Ramey wrote:
> [Sorry if someone has already reported this, I am not on the mailing
> list and I tried checking the mailing list archives but can't get to
> the web site right now.]

Thanks for the feedback, but yes this has already been reported.

Thanks,
Graham.

trouble with perl-ldap 0.21 on perl 5.6.0

[Joe R. <ra...@hc...>]

[Sorry if someone has already reported this, I am not on the mailing
list and I tried checking the mailing list archives but can't get to
the web site right now.]

I have been running Net::LDAP version 0.2 for a while and it's been
fine.  Today I tried installing 0.21 but the install failed.  During
one of the tests, t/53schema, it loops forever until it runs out of
memory.  I narrowed the problem down to a small snippet of code and
found that it worked fine under perl 5.00503 but not under 5.6.0.
Finally, I made this change to Schema.pm:

*** Schema.pm.ORIG      Wed Aug 16 06:00:37 2000
--- Schema.pm   Thu Sep 14 13:08:13 2000
***************
*** 414,420 ****
  
        my @tokens;
        push @tokens, $+
!         while $val =~ /(?:^|\G)\s*(?:
                         ([()])
                        |
                         ([^"'\s()]+)
--- 414,420 ----
  
        my @tokens;
        push @tokens, $+
!         while $val =~ /(?:\G)\s*(?:
                         ([()])
                        |
                         ([^"'\s()]+)

Now it passes all the tests.  I don't know whether this change is
safe, nor whether this is really a bug in perl 5.6.0 or in Net::LDAP
0.21.

Joe

Our of memory with 0.21 and perl5.6.0

[Graham B. <gb...@po...>]

The new schema code tickles another problem with 5.6.0 and causes
all memory to be consumed. This time though it is a bug in earlier
versions that actually got fixed :)

Here is a patch.

Graham.

RELEASE: perl-ldap 0.21

[Graham B. <gb...@po...>]

perl-ldap 0.21 is on it's way to CPAN and is already avaliable
from sourceforge

  http://download.sourceforge.net/perl-ldap/perl-ldap-0.21.tar.gz

The RELEASE_NOTES for this release are

perl-ldap 0.21 September 12 2000
================================

* Change ->get back to return what 0.19 returned
* Depricate ->get in favor of ->get_value
* Net::LDAP::Schema now supports matchingRules
* Added experimental onerror option to ->new
* New FAQ by Clif Harden


Graham.

Re: Updated faq

[Graham B. <gb...@po...>]

Thanks Clif. I will include this in 0.21 which I will try to do today (honest :)

Graham.

On Mon, Sep 11, 2000 at 10:05:38PM -0500, Clif Harden wrote:
> 
> Attached is the latest faq pod file.
> This faq has Graham's get_values modifications
> and various other reader recommended changes.
> 
> You can view faq on the web at 
> http://www.utdallas.edu/~charden/faq.html

Updated faq

[Clif H. <ch...@te...>]

Attached is the latest faq pod file.
This faq has Graham's get_values modifications
and various other reader recommended changes.

You can view faq on the web at 
http://www.utdallas.edu/~charden/faq.html

Regards,

Clif Harden          c-h...@ti...
                     ch...@te...

Re: Reverse Sort NS LDAP 4.1x

[Jeff M. <jef...@pr...>]

That's the ticket! It works fine now.

Thanks, Graham.


Graham Barr wrote:

> PLease try the attached patch.
>
> Graham.
>
>   ------------------------------------------------------------------------
>
>    pName: p
>     Type: Plain Text (text/plain)