You can subscribe to this list here.
2000 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(200) |
Jun
(129) |
Jul
(184) |
Aug
(204) |
Sep
(106) |
Oct
(79) |
Nov
(72) |
Dec
(54) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2001 |
Jan
(83) |
Feb
(123) |
Mar
(84) |
Apr
(184) |
May
(106) |
Jun
(111) |
Jul
(104) |
Aug
(91) |
Sep
(59) |
Oct
(99) |
Nov
(100) |
Dec
(37) |
2002 |
Jan
(148) |
Feb
(88) |
Mar
(85) |
Apr
(151) |
May
(80) |
Jun
(110) |
Jul
(85) |
Aug
(43) |
Sep
(64) |
Oct
(89) |
Nov
(59) |
Dec
(42) |
2003 |
Jan
(129) |
Feb
(104) |
Mar
(162) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
From: <Hd...@DT...> - 2000-06-09 11:34:43
|
Hi people, Until today I've been using version 0.11 of this package (and with good results too!). It was only today that I noticed there was a 0.19 version available. Leave it to ActiveState to not update their repository... So, in my naivety I thought: let's try if I can install the real thing on my Win32 box with ASPerl Build 522 (meaning their version of 5.005_03). Running perl makefile.pl was a breeze, but make keeps giving me the following message: Makefile:109: *** commands commence before first target. Stop. Has anyone on the list seen this before? If so could you be so kind as to let me know what I can do about it? (I am no make expert...) I am using a Win32 port of GNU Make version 3.77 for this. Alternatively, since there are no things to be compiled as far as I did see, would it be a problem if I copied things by hand to their appropriate directories (I should be able to figure those out myself)? Thanks a lot. Grx HdV P.S. I noticed there were some typos in the LDAP_error message descriptions (in my old version of perl-ldap that is). If they are still in there (I'll check as soon as I get this thing running) where do I send the corrected texts? Direct to Graham or to this list? -- A television may insult your intelligence, but nothing rubs it in like a computer. J.A. de Vries aka HdV Delft University of Technology Computing Centre Email: J.A...@DT... Email: Hd...@DT... |
From: Chris R. <Chr...@me...> - 2000-06-09 07:50:29
|
On Thu, 08 Jun 2000 22:18:26 CDT, Mark Wilcox wrote: > No that's not true (or at least shouldn't be, I haven't tested this in > Net::LDAP v .19 to make sure it wasn't broken). You should get error code > 49. > How are you checking, this is how the code should look: > my $mesg = $ldap->bind($dn, password=>"password"); > > die ("failed to bind ",$mesg->code(),"\n") if $mesg->code(); > > mark You should use 'dn => $dn' instead of just a plain $dn, I think. One additional point to note is that the following: my $mesg = $ldap->bind(dn => $dn, password=>"password") or die; does *not* call 'die' if the server rejects the bind. It only calls 'die' if something nasty has happened inside Net::LDAP, which is not the same thing at all. Graham, would it be more sensible for Net::LDAP to just call die itself instead of returning undef on failure? It would mean clients would have to wrap more calls inside eval { } but I'm not sure that's a bad thing. Cheers, Chris |
From: Mark W. <mew...@un...> - 2000-06-09 03:14:48
|
No that's not true (or at least shouldn't be, I haven't tested this in Net::LDAP v .19 to make sure it wasn't broken). You should get error code 49. How are you checking, this is how the code should look: my $mesg = $ldap->bind($dn, password=>"password"); die ("failed to bind ",$mesg->code(),"\n") if $mesg->code(); mark Yann Ramin wrote: > Hi, > > I've noticed that no error code is returned when a bind operation uses > invalid credentials. ? How can I test if a bind was successful or > not? This is my main LDAP authentication scheme :) > > Yann > > -- > > -------------------------------------------------------------------- > Yann Ramin at...@at... > Atrus Trivalie Productions www.atrustrivalie.eu.org > irm.it.montereyhigh.com > Monterey High IT www.montereyhigh.com > ICQ 46805627 > AIM oddatrus > Marina, CA > > "All cats die. Socrates is dead. Therefore Socrates is a cat." > - The Logician > > # fortune > "To be responsive at this time, though I will simply say, and therefore > this is a repeat of what I said previously, that which I am unable to > offer in response is based on information available to make no such > statement." > -------------------------------------------------------------------- |
From: Yann R. <at...@at...> - 2000-06-09 02:00:57
|
Ok, a followup on my bind question, I figured out the problem. There doesn't seem to be a way to have two simultaneous connections open. Take this code example: sub auth { my ($self, $uid, $passwd) = @_; my $uidsearch = "(&(objectclass=person)(uid=".$uid."))"; $mesg = $self->{LDAP}->search ( # perform a search base => $self->{ldap_config_base}, filter => $uidsearch ); my @result = $mesg->entries; my $entr = @result[0]; if (! defined $entr) { return 1; } my $entry = $entr->dn; $self->{LDAP}->unbind; undef $self->{LDAP}; $self->{AUTHLDAP} = Net::LDAP->new("192.168.0.41") or die "$@"; my $mesg = $self->{AUTHLDAP}->bind($entry, password => $passwd); print "And the result is...".$mesg->code."\n"; $self->{LDAP} = Net::LDAP->new("192.168.0.41") or die "$@"; $self->bind; # Bind as super user if ($mesg->code) { $self->{AUTHLDAP}->unbind; undef $self->{AUTHLDAP}; return 1; } $self->{AUTHLDAP}->unbind; undef $self->{AUTHLDAP}; return 0; } It works, only because LDAP is unbound and destroyed before AUTHLDAP is connected. Why? Yann -- -------------------------------------------------------------------- Yann Ramin at...@at... Atrus Trivalie Productions www.atrustrivalie.eu.org irm.it.montereyhigh.com Monterey High IT www.montereyhigh.com ICQ 46805627 AIM oddatrus Marina, CA "All cats die. Socrates is dead. Therefore Socrates is a cat." - The Logician # fortune "To be responsive at this time, though I will simply say, and therefore this is a repeat of what I said previously, that which I am unable to offer in response is based on information available to make no such statement." -------------------------------------------------------------------- |
From: Yann R. <at...@at...> - 2000-06-08 22:00:34
|
Hi, I've noticed that no error code is returned when a bind operation uses invalid credentials. ? How can I test if a bind was successful or not? This is my main LDAP authentication scheme :) Yann -- -------------------------------------------------------------------- Yann Ramin at...@at... Atrus Trivalie Productions www.atrustrivalie.eu.org irm.it.montereyhigh.com Monterey High IT www.montereyhigh.com ICQ 46805627 AIM oddatrus Marina, CA "All cats die. Socrates is dead. Therefore Socrates is a cat." - The Logician # fortune "To be responsive at this time, though I will simply say, and therefore this is a repeat of what I said previously, that which I am unable to offer in response is based on information available to make no such statement." -------------------------------------------------------------------- |
From: Mark W. <mew...@un...> - 2000-06-08 19:24:52
|
This might be of interest. Mark ---------- Forwarded message ---------- Date: Thu, 08 Jun 2000 11:51:01 -0700 From: Morteza Ansari <mo...@en...> To: lda...@pa... Subject: [ldap-nis] LDAP authentication methods Well it took a while, but it is finally here! After years of living with simple bind and clear text password, now we have standard based stronger security options for LDAP. Today 3 new RFC came out of IETF (after years of discussions/arguments/yelling/...): RFC 2829 Authentication Methods for LDAP (ftp://ftp.isi.edu/in-notes/rfc2829.txt) RFC 2830 Lightweight Directory Access Protocol (v3): Extension for Transport Layer Security (ftp://ftp.isi.edu/in-notes/rfc2830.txt) RFC 2831 Using Digest Authentication as a SASL Mechanism (ftp://ftp.isi.edu/in-notes/rfc2831.txt) This is very good news and hopefully directory vendors as well as directory enabled applications will start using these new options/extensions soon. Cheers, Morteza |
From: Graham B. <gb...@po...> - 2000-06-08 17:41:40
|
This is already fixed in 0.19 which was released today. It will be on CPAN soon, or you can get it from http://download.sourceforge.net/perl-ldap/perl-ldap-0.19.tar.gz Graham. On Thu, Jun 08, 2000 at 05:44:26PM +0200, Felix the double Helix wrote: > Hi, > > Sampo (sa...@ik...) and I have found and fixed a tricky bug in > Net::LDAP version 0.18. > > The problem occurs when you try to bind two times in a row to an > LDAP server using a bind DN and a password. In LDAP.pm, a "last" > statement leaves the iterator in the %ptype associative array in a "bad" > state, so next time the "bind" function is called and the "each" > statement iterates on %ptype it will just see the elements on %ptype > that are left over from the previous operation. > > In my opinion a simple way to fix this is to call the "keys" statement > on %ptype in order to reset the iterator. > > Thanks to Sampo (sa...@ik...) for helping me track this one down! > > Regards, > > - Felix > > > > Here's the context diff: > > > > diff -c lib/Net/LDAP.pm /usr/local/lib/perl5/site_perl/5.005/Net/LDAP.pm > > *** lib/Net/LDAP.pm Mon May 22 13:16:25 2000 > --- /usr/local/lib/perl5/site_perl/5.005/Net/LDAP.pm Thu Jun 8 > 17:38:44 2000 > *************** > *** 168,173 **** > --- 168,174 ---- > > my($auth_type,$passwd) = (simple => ""); > > + > while(my($param,$type) = each %ptype) { > if (exists $arg->{$param}) { > ($auth_type,$passwd) = ($type,$arg->{$param}); > *************** > *** 174,179 **** > --- 175,183 ---- > last; > } > } > + # Reset the iterator on %ptype, otherwise we'll get screwed next > time we > + # run the loop > + keys %ptype; > > if ($auth_type eq 'sasl') { > # if ($version < 3) { > > > |
From: Felix t. d. H. <the...@gm...> - 2000-06-08 15:47:28
|
Hi, Sampo (sa...@ik...) and I have found and fixed a tricky bug in Net::LDAP version 0.18. The problem occurs when you try to bind two times in a row to an LDAP server using a bind DN and a password. In LDAP.pm, a "last" statement leaves the iterator in the %ptype associative array in a "bad" state, so next time the "bind" function is called and the "each" statement iterates on %ptype it will just see the elements on %ptype that are left over from the previous operation. In my opinion a simple way to fix this is to call the "keys" statement on %ptype in order to reset the iterator. Thanks to Sampo (sa...@ik...) for helping me track this one down! Regards, - Felix Here's the context diff: diff -c lib/Net/LDAP.pm /usr/local/lib/perl5/site_perl/5.005/Net/LDAP.pm *** lib/Net/LDAP.pm Mon May 22 13:16:25 2000 --- /usr/local/lib/perl5/site_perl/5.005/Net/LDAP.pm Thu Jun 8 17:38:44 2000 *************** *** 168,173 **** --- 168,174 ---- my($auth_type,$passwd) = (simple => ""); + while(my($param,$type) = each %ptype) { if (exists $arg->{$param}) { ($auth_type,$passwd) = ($type,$arg->{$param}); *************** *** 174,179 **** --- 175,183 ---- last; } } + # Reset the iterator on %ptype, otherwise we'll get screwed next time we + # run the loop + keys %ptype; if ($auth_type eq 'sasl') { # if ($version < 3) { |
From: Clif H. <c-h...@ti...> - 2000-06-08 14:44:32
|
This message is for John Berthels. John please give the list an update on the schema.pm changes. Regards, Clif Harden INTERNET: c-h...@ti... |
From: Graham B. <gb...@po...> - 2000-06-08 08:49:42
|
0.19 is on it's way to CPAN. The CVS is upto date and the dist file can also be downloaded from http://download.sourceforge.net/perl-ldap/perl-ldap-0.19.tar.gz I have also updated the web page at http://perl-ldap.sourceforge.net/ The page now contains a link to the tutorial Mark will be presenting at the perl conference this year. RELEASE_NOTES ------------- perl-ldap 0.19 June 8 2000 ============================ * Fixed bug which caused 2nd and subsequent binds to be anonymous. * Fixed bug in moddn. * Fix bug which caused a call to ->pop_entry or ->shift_entry to hang forever. Graham. |
From: Clif H. <cl...@di...> - 2000-06-07 14:35:49
|
> > Both of these versions of software have problems. > > Use Net::LDAP 0.18. > > Try to go back to PERL 5.005 or 5.004. PERL 5.6 has > quite a few problems and I think it has problems running > Net::LDAP anything. > > Regards, > > Clif Harden INTERNET: c-h...@ti... > > > Disregard this stupid message I just sent. I meant to hit the elm forget key and instead hit the elm send key. It has been one of those mornings where nothing seems to be going right. Regards, Clif Harden INTERNET: c-h...@ti... |
From: Clif H. <cl...@di...> - 2000-06-07 14:27:04
|
> > Hi, > > I was using Perl5.6 and Net::LDAP 0.16. The > problem, apparently was with Perl, not IBM's LDAP. > I upgraded to Net::LDAP 0.18 (the webpage was out of date) > and it now works although it hangs on the unbind. > > Graham Barr says that Perl5.6 has bugs so I am reverting > to Perl5.00503 > > -Feisal > > Mark Wilcox wrote: > > > > What version of Net::LDAP are you using and can you send a debug trace > > from Net::LDAP. > > > > mark > > Both of these versions of software have problems. Use Net::LDAP 0.18. Try to go back to PERL 5.005 or 5.004. PERL 5.6 has quite a few problems and I think it has problems running Net::LDAP anything. Regards, Clif Harden INTERNET: c-h...@ti... |
From: Feisal M. <Fei...@uw...> - 2000-06-07 13:58:40
|
Hi, I was using Perl5.6 and Net::LDAP 0.16. The problem, apparently was with Perl, not IBM's LDAP. I upgraded to Net::LDAP 0.18 (the webpage was out of date) and it now works although it hangs on the unbind. Graham Barr says that Perl5.6 has bugs so I am reverting to Perl5.00503 -Feisal Mark Wilcox wrote: > > What version of Net::LDAP are you using and can you send a debug trace > from Net::LDAP. > > mark |
From: Mark W. <mew...@un...> - 2000-06-07 13:41:29
|
What version of Net::LDAP are you using and can you send a debug trace from Net::LDAP. mark On Tue, 6 Jun 2000, Feisal Mohammed wrote: > Hi, > > Has anyone used Net::LDAP with AIX and IBM's V3.1.1 > LDAP server? > > I am trying to get started, but cannot get past bind > it fails with a error code of 1. The meagre logs > from slapd show that a connection is made but that's > all. I know that IBM's server is standard because I > use openldap + gq to read it across the network. > > -Feisal > > |
From: Feisal M. <Fei...@uw...> - 2000-06-07 03:24:48
|
Hi, Has anyone used Net::LDAP with AIX and IBM's V3.1.1 LDAP server? I am trying to get started, but cannot get past bind it fails with a error code of 1. The meagre logs from slapd show that a connection is made but that's all. I know that IBM's server is standard because I use openldap + gq to read it across the network. -Feisal |
From: Skliarouk P. <skl...@bi...> - 2000-06-06 09:47:40
|
I have several entries in LDAP: dn: cn=Dazy, dp=peoples, o=company, c=il cn: Dazy sn: none userid: 1002 dn: cn=Dazy2, dp=peoples, o=company, c=il cn: Dazy2 sn: none userid: 1003 dn: cn=Dazy3, dp=peoples, o=company, c=il cn: Dazy3 sn: none I need to print records which doesn't have attribute 'userid'. How could I do that? PS. Please cc: to me directly, as I'm not subscribed to the mailing list. -- Bye, | ICQ: 43062358 Ari and Aglaia | Linux inside, idiot outside |
From: Chris R. <Chr...@me...> - 2000-06-06 08:29:37
|
On Mon, 05 Jun 2000 14:03:53 EDT, Jim Harle wrote: > There are a variety of ways of doing this. My preference is > @base_attributes = ( > objectclass => 'minimalRadiusPerson', An addditional point no-one's noticed: You need to include minimalRadiusPerson's superclasses if you want to be really correct. It is probably just subclassed from top, but check your schema. objectclass => [ 'top', 'minimalRadiusPerson' ], Cheers, Chris |
From: Mark W. <mew...@un...> - 2000-06-06 00:45:57
|
David Leigh wrote: > > It looks like (you didn't really give us a lot of information to go on > > here) that you're trying to develop a CGI program to update an LDAP > > server. In this case you should use LDAP to authenticate. Now if you have > > your LDAP server setup to do SASL with Kerberos instead of simple > > authentication, then you can use that if you want. > > > Mark > > Sorry I wasn't more clear... But yes, I have a CGI which needs to > update an LDAP directory. At this point, I'd rather use LDAP > authentication than SASL or Kerberos. How does Net::LDAP interact with > mod_auth_ldap? Specifically, doesn't mod_auth_ldap unbind after > authentication? How can the cgi figure out who to bind as, and how? A CGI application cannot interact with an Apache authentication module. The closest you can come is to get the username from the REMOTE_USER variable but you can't get the password. Thus you're better off simply writing a login form, your script authenticates the user to LDAP and then using cookies or similar technique to keep track if the user is logged in or not. If your using LDAP ACLs to handle modification rights, you'll need to keep the user's dn and password stored somewhere because CGI is stateless (and you don't want the user to enter their password on each screen). Probably the safest mechanism is to store it encrypted on the server and use a cookie to lookup the dn and password each time. Optionally if you want to write your application as an Apache module you can use my Apache::AuthNetLDAP module as an example on how to use LDAP authentication from inside an Apache module. Then you can store the dn and password in a hashtable in memory. Mark > > > Thanks, > -David |
From: David L. <dl...@us...> - 2000-06-05 23:20:32
|
> It looks like (you didn't really give us a lot of information to go on > here) that you're trying to develop a CGI program to update an LDAP > server. In this case you should use LDAP to authenticate. Now if you have > your LDAP server setup to do SASL with Kerberos instead of simple > authentication, then you can use that if you want. > Mark Sorry I wasn't more clear... But yes, I have a CGI which needs to update an LDAP directory. At this point, I'd rather use LDAP authentication than SASL or Kerberos. How does Net::LDAP interact with mod_auth_ldap? Specifically, doesn't mod_auth_ldap unbind after authentication? How can the cgi figure out who to bind as, and how? Thanks, -David |
From: Pythagoras W. <py...@ec...> - 2000-06-05 19:22:33
|
On Mon, Jun 05, 2000 at 01:46:24PM -0400, Eric S. Johansson wrote: :$base_attributes = { ... : }; ... : $ldap_res = $mast_srv->add ($dn, : attrs => $base_attributes You should be able to change that line to: attrs => [%$base_attributes] to convert that hash reference to the expected array reference. -- Py (Amateur Radio: KF6WFP) -- 3.141592653589793238462643383... Pythagoras Watson -- "Live long and may all your kernels pop." === py...@cs... ==== http://www.ecst.csuchico.edu/~py/ === |
From: Eric S. J. <es...@ha...> - 2000-06-05 18:33:09
|
----- Original Message ----- From: "Mark Wilcox" <mew...@un...> To: "Eric S. Johansson" <es...@ha...> Cc: <per...@ma...> Sent: Monday, June 05, 2000 2:20 PM Subject: Re: passing dynamic attribute lists > I didn't read this message before I made my earlier reply. > > If you replace your {} with [], your code should work as you expect > without any other modifications. thanks for the clarification. Unfortunately, my code is filled with hash related features so I will need to convert the hash array to a list just before I do the LDAP call. ugh... --- eric |
From: Mark W. <mew...@un...> - 2000-06-05 18:22:54
|
I didn't read this message before I made my earlier reply. If you replace your {} with [], your code should work as you expect without any other modifications. Mark On Mon, 5 Jun 2000, Eric S. Johansson wrote: > this is probably more of the perl problem than anything else but I'm trying > to figure out how to pass a dynamic list of attributes to LDAP add. The > base attribute list looks exactly like: > > $base_attributes = { > objectclass => 'minimalRadiusPerson', > ServiceType => '2', > FramedProtocol => 'PPP', > FramedMTU => '1500', > AscendIdleLimit => '900' > }; > > as the data source specifies additional attributes, I add them to the hash. > Passing them on the other hand has been a bit of a problem. I'm missing > something about perl references which will let me pass this reference to an > anonymous hash in as an attrs argument. I've tried different forms but I'm > not getting the right level of dereferencing. What I missing? > ... > $ldap_res = $mast_srv->add ($dn, > attrs => $base_attributes > ); > die "unable to add entry $dn " if ($ldap_res->code); > > > > > > |
From: Mark W. <mew...@un...> - 2000-06-05 18:21:16
|
The Perl [] syntax means an array refeference. Thus you can also write it: $attrs = ['cn','mail','uid'] and you can pass it to the search() method without needing a \ in front of the variable. I'm not sure how this is trickier than before? If you already have a list of attributes as a hash, you can use keys or values to get the attributes back as an array. Mark On Mon, 5 Jun 2000, Eric S. Johansson wrote: > > ----- Original Message ----- > From: "Jim Harle" <ha...@us...> > To: "Eric S. Johansson" <es...@ha...> > Cc: <per...@ma...> > Sent: Monday, June 05, 2000 2:03 PM > Subject: Re: passing dynamic attribute lists > > > > There are a variety of ways of doing this. My preference is > > @base_attributes = ( > > objectclass => 'minimalRadiusPerson', > > ServiceType => '2', > > FramedProtocol => 'PPP', > > FramedMTU => '1500', > > AscendIdleLimit => '900' > > ); > > $ldap_res = $mast_srv->add ($dn, > > attrs => \@base_attributes > > ); > > > > That is, using an array for the attribute list, then using a reference to > > that array for "attrs". Don't forget the \ before the reference. > > I'm confused. I thought that attrs => [] was a reference to a hash not a > list. Converting attributes to a fixed array makes things a little more > tricky... > > > > > |
From: Eric S. J. <es...@ha...> - 2000-06-05 18:13:23
|
----- Original Message ----- From: "Jim Harle" <ha...@us...> To: "Eric S. Johansson" <es...@ha...> Cc: <per...@ma...> Sent: Monday, June 05, 2000 2:03 PM Subject: Re: passing dynamic attribute lists > There are a variety of ways of doing this. My preference is > @base_attributes = ( > objectclass => 'minimalRadiusPerson', > ServiceType => '2', > FramedProtocol => 'PPP', > FramedMTU => '1500', > AscendIdleLimit => '900' > ); > $ldap_res = $mast_srv->add ($dn, > attrs => \@base_attributes > ); > > That is, using an array for the attribute list, then using a reference to > that array for "attrs". Don't forget the \ before the reference. I'm confused. I thought that attrs => [] was a reference to a hash not a list. Converting attributes to a fixed array makes things a little more tricky... |
From: Jim H. <ha...@us...> - 2000-06-05 18:06:41
|
There are a variety of ways of doing this. My preference is @base_attributes = ( objectclass => 'minimalRadiusPerson', ServiceType => '2', FramedProtocol => 'PPP', FramedMTU => '1500', AscendIdleLimit => '900' ); $ldap_res = $mast_srv->add ($dn, attrs => \@base_attributes ); That is, using an array for the attribute list, then using a reference to that array for "attrs". Don't forget the \ before the reference. --Jim Harle US Naval Academy On Mon, 5 Jun 2000, Eric S. Johansson wrote: > this is probably more of the perl problem than anything else but I'm trying > to figure out how to pass a dynamic list of attributes to LDAP add. The > base attribute list looks exactly like: > > $base_attributes = { > objectclass => 'minimalRadiusPerson', > ServiceType => '2', > FramedProtocol => 'PPP', > FramedMTU => '1500', > AscendIdleLimit => '900' > }; > > as the data source specifies additional attributes, I add them to the hash. > Passing them on the other hand has been a bit of a problem. I'm missing > something about perl references which will let me pass this reference to an > anonymous hash in as an attrs argument. I've tried different forms but I'm > not getting the right level of dereferencing. What I missing? > ... > $ldap_res = $mast_srv->add ($dn, > attrs => $base_attributes > ); > die "unable to add entry $dn " if ($ldap_res->code); > > > > > > |