Menu
▾
▴
perl-ldap-dev
You can subscribe to this list here.
| 2000 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(200) |
Jun
(129) |
Jul
(184) |
Aug
(204) |
Sep
(106) |
Oct
(79) |
Nov
(72) |
Dec
(54) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2001 |
Jan
(83) |
Feb
(123) |
Mar
(84) |
Apr
(184) |
May
(106) |
Jun
(111) |
Jul
(104) |
Aug
(91) |
Sep
(59) |
Oct
(99) |
Nov
(100) |
Dec
(37) |
| 2002 |
Jan
(148) |
Feb
(88) |
Mar
(85) |
Apr
(151) |
May
(80) |
Jun
(110) |
Jul
(85) |
Aug
(43) |
Sep
(64) |
Oct
(89) |
Nov
(59) |
Dec
(42) |
| 2003 |
Jan
(129) |
Feb
(104) |
Mar
(162) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: Graham B. <gb...@po...> - 2000-05-11 16:42:22
|
On Thu, May 11, 2000 at 10:28:30AM -0600, Kevin Konowalec wrote:
> Return code: 1 Message: LDAP_OPERATIONS_ERROR :Server encountered an
> internal error
>
> When we sniff the packets going back and forth we can see that slapd is
> returning a result, but perl-ldap doesn't seem to handle it. Am I doing
> something wrong or is this a bug?
Can you turn on debug with
$ldap = Net::LDAP->new('smtp.srv.ualberta.ca',port=>1389, debug => 3) or die "$@";
And send us the outout around where the problem seems to be.
Graham.
|
|
From: Kevin K. <kev...@ua...> - 2000-05-11 16:29:35
|
Hello!
Having just recently installed Perl-LDAP as a replacement for Mozilla's
Perldap, I've been trying to run the simplest of queries to see if it works.
Here's what I do:
!/usr/local/bin/perl
use Net::LDAP;
use Net::LDAP::Util qw( ldap_error_name
ldap_error_text) ;
$ldap = Net::LDAP->new('smtp.srv.ualberta.ca',port=>1389) or die "$@";
$ldap->bind( dn => 'cn=manager, dc=ualberta, dc=ca',
password => 'NotVerySecret');
$mesg = $ldap->search(base => "dc=ualberta,dc=ca", filter =>
"(uid=dummyuser)");
if ($mesg->code) {
LDAPerror("Searching",$mesg);
}
foreach $entry ($mesg->all_entries) {
$entry->dump;
}
The output of this program is:
Return code: 1 Message: LDAP_OPERATIONS_ERROR :Server encountered an
internal error
When we sniff the packets going back and forth we can see that slapd is
returning a result, but perl-ldap doesn't seem to handle it. Am I doing
something wrong or is this a bug?
Thanks in advance
Kevin Konowalec
Web Systems Analyst
University of Alberta
Kev...@ua...
|
|
From: Allen, R. <ra...@ci...> - 2000-05-11 15:49:04
|
In Active Directory the default server LDAP sizelimit is 1,000 (considered 1 page). If I have a query that needs to retrieve more than 1,000 entries, is it possible to tell the LDAP client to get the results in chunks of 1,000 (retrieve multiple pages)? Thanks, Robbie Allen |
|
From: Chris R. <Chr...@me...> - 2000-05-11 10:29:00
|
On Thu, 11 May 2000 09:23:39 BST, Graham Barr wrote: > On Wed, May 10, 2000 at 05:29:34PM +0100, Chris Ridd wrote: > > A simple example of the sort of high-level problem newbies have is that > > they try to search for an entry using a search filter that includes > > part of the entry's DN. The difference between a DN and the attributes > > in an entry is obviously not being spotted. > > Any addition to the FAQ or example pod, or even another pod ? > > Graham. > I haven't really looked at the FAQ or Examples pods before, but having had a quick look just now I think this sort of stuff should go elsewhere. People really want more of a guide to LDAP, not in this case a guide to the API. If I get some time (on the next long trip I suspect) I'll see what I can come up with. Cheers, Chris |
|
From: Graham B. <gb...@po...> - 2000-05-11 08:25:54
|
On Wed, May 10, 2000 at 05:29:34PM +0100, Chris Ridd wrote: > I still feel there's a need for some more documentation somewhere, at a > higher level than what the Netscape manuals have. (I also don't like > the Netscape site because it uses frames, and you can't bookmark inside > a frame.) Yes, I hate that in frames too. > A simple example of the sort of high-level problem newbies have is that > they try to search for an entry using a search filter that includes > part of the entry's DN. The difference between a DN and the attributes > in an entry is obviously not being spotted. Any addition to the FAQ or example pod, or even another pod ? Graham. |
|
From: Graham B. <gb...@po...> - 2000-05-11 08:24:28
|
On Thu, May 11, 2000 at 07:11:22AM +0100, Graham Barr wrote: > It would seem the bug is in Convert::ASN1, I will try to look into this > today. And here is a patch, it will be on sourceforge shortly. If people can test this and if all is OK I will do a perl-ldap and Convert::ASN release to CPAN Graham. |
|
From: Graham B. <gb...@po...> - 2000-05-11 08:00:43
|
I would appriciate if others that where haveing problms with 0.16 could try the code from sourceforge, as it seems to have fixed things. Graham. ----- Forwarded message from Stuart Squibb <Stu...@iw...> ----- From: Stuart Squibb <Stu...@iw...> To: "Graham Barr (E-mail)" <gb...@po...> Subject: perl-ldap problem fixed by latest patch Date: Wed, 10 May 2000 09:48:38 +0100 X-Mailer: Internet Mail Service (5.5.2650.21) Graham, You will no doubt be pleased to hear that your latest patch 1.3 (0.16_02 of LDAP.pm + ASN1::IO.pm) appears to have cured my ongoing problems from Win32 client against Exchange. I've tested against a directory of 12,000 entries. Sorry I wasn't more help in resolving the problem. Stuart. ----- End forwarded message ----- |
|
From: David B. <D.B...@ma...> - 2000-05-11 06:36:29
|
Graham,
perl:
"This is perl 5.005_03 built for i586-linux."
Also:
i586 linux 2.2.13 (SuSe 6.3).
perl_ldap 0.16 (1 week old from website)
Convert::ASN1-0.04
Convert::BER-1.31
LDAP server: Netware 5.0 SP4 with LDAP NLM's 3.02
(I'm not sure if it was me you were asking or Pythagoras Watson, but you
know now anyway)
David.
>It would seem the bug is in Convert::ASN1, I will try to look into this
>today.
>
>What version of perl are you using ?
>
>Graham.
>
>
>
>
--------------------------------------------------------------------
David Bussenschutt Email: D.B...@ma...
Senior Computing Support Officer & Systems Administrator/Programmer
Location: Griffith University. Information Technology Services
Brisbane Qld. Aust. (TEN bldg. rm 1.33) Ph:(07)38757079
--------------------------------------------------------------------
|
|
From: Graham B. <gb...@po...> - 2000-05-11 06:23:24
|
On Wed, May 10, 2000 at 01:32:31PM -0700, Pythagoras Watson wrote: > :Appears to me that your server is broke. > > Always a possibility, although I get the same results against both > Netscape Directory Server 3.X and OpenLDAP 1.2.3. Perhaps the problem > is still in Net::LDAP. Specifically I note that the SENDING debug info > (which I did not generate before) has (for the 127th search): > 30 52 02 01 80 63 4D 04 29 6F 3D 43 61 6C 69 66 0R...cM.)o=Calif > which I assume is also incorrect and is causing the server to return > the same bad info. I note that both sent and received packets are > encoded correctly when using Convert::BER. It would seem the bug is in Convert::ASN1, I will try to look into this today. What version of perl are you using ? Graham. |
|
From: Mark W. <mew...@un...> - 2000-05-10 20:49:23
|
You can get the Iplanet 4.0 server which I think is free for developers at www.iplanet.com. (I think MessagingDirect has a NT version as well www.messagingdirect.com, check with them for pricing). Eudora used to have a version of the UMichigan server for NT precomiple at www.eudora.com openLDAP will probably compile with the Cygnus stuff. openLDAP 2.0 should compile on NT, but I don't know it's current status, you'll have to get it off of CVS at www.openldap.org mark On Wed, 10 May 2000, Graham Barr wrote: > > ----- Forwarded message from Wolfgang Hammer <wol...@he...> ----- > > Date: Wed, 10 May 2000 17:38:54 +0200 > From: Wolfgang Hammer <wol...@he...> > X-Mailer: Mozilla 4.7 [de] (WinNT; I) > To: Graham Barr <gb...@po...> > Subject: Re: [Fwd] Re: can you write ... Thanks f. answer / ? LDAP Server f. NT > > Thank you for answering anf forwarding again. > > Question do you (or one of you) know a good simple LDAP Server for > Windows NT ? > > best ... Wolfgang Hammer > > > Graham Barr schrieb: > > > > Can anyone suggest anything other than read the RFC's ? > > > > ----- Forwarded message from Wolfgang Hammer <wol...@he...> ----- > > > > Date: Wed, 10 May 2000 16:12:26 +0200 > > From: Wolfgang Hammer <wol...@he...> > > X-Mailer: Mozilla 4.7 [de] (WinNT; I) > > To: Graham Barr <gb...@po...> > > Subject: Re: can you write doc's where newbies can find ANYTHING they need -> NOT > > ):=<< > > > > Thank you for answering, > > > > I want to search a LDAP, and don't know how. > > I do not find explanations about filters : > > -> filter => "(&(sn=Barr) (o=Texas Instruments))" ??? > > and get : > > -> get ( ATTR ) ??? > > > > Do you have an url or an other help ? > > > > (excuse my ):=<< ) > > > > best ... Wolfgang Hammer > > > > ----- End forwarded message ----- > > ----- End forwarded message ----- > > |
|
From: Mark W. <mew...@un...> - 2000-05-10 20:45:38
|
First you might want to try the latest issue of PerlMonth at www.perlmonth.com. I've got an article on there that shows the basics of searching LDAP with Net::LDAP. I have a slightly more advanced article on the subject in the May issue of Web Techniques. I'm not sure if they put the articles on the Web or not. I've written a book (Implementing LDAP), plus chapters in a number of other books (see www.amazon.com and search on my name). Mark On Wed, 10 May 2000, Gary Flynn wrote: > Graham Barr wrote: > > > > Can anyone suggest anything other than read the RFC's ? > > http://developer.netscape.com/docs/manuals/index.html?content=directory/41/ag/contents.htm > > Search filters in Chapter 8 > LDAP URLs in Appendix A > > Examples of URLs at > > http://www.jmu.edu/info-security/engineering/proj/uaea/parts/dir/ldap/demonstr.htm > > > > > ----- Forwarded message from Wolfgang Hammer <wol...@he...> ----- > > > > Date: Wed, 10 May 2000 16:12:26 +0200 > > From: Wolfgang Hammer <wol...@he...> > > X-Mailer: Mozilla 4.7 [de] (WinNT; I) > > To: Graham Barr <gb...@po...> > > Subject: Re: can you write doc's where newbies can find ANYTHING they need -> NOT > > ):=<< > > > > Thank you for answering, > > > > I want to search a LDAP, and don't know how. > > I do not find explanations about filters : > > -> filter => "(&(sn=Barr) (o=Texas Instruments))" ??? > > and get : > > -> get ( ATTR ) ??? > > > > Do you have an url or an other help ? > > > > (excuse my ):=<< ) > > > > best ... Wolfgang Hammer > > > > ----- End forwarded message ----- > > |
|
From: Pythagoras W. <py...@ec...> - 2000-05-10 20:33:05
|
On Wed, May 10, 2000 at 05:30:13AM -0700, Kurt D. Zeilenga wrote: :At 02:59 AM 5/10/00 -0700, Pythagoras Watson wrote: :>This appears to be a decoding error on Net::LDAP's part. When the :>operation number (5th byte of response) reaches 128 (0x80), the :>resulting message code changes to two. :> :>To wit: :> searching 126 :> ... :> 30 38 02 01 7F 64 33 04 2F 75 69 64 3D 70 79 2C 08...d3./uid=py, :> ... :> 0002 02 1: INTEGER = 127 :> ... :> searching 127 :> ... :> 30 38 02 01 80 64 33 04 2F 75 69 64 3D 70 79 2C 08...d3./uid=py, :> ... :> 0002 02 1: INTEGER = -128 :> search failed: 2 :> : : 02 01 7F == 127 : 02 01 80 == -128 : :02 INTEGER :01 length of 1 :xx 2-complement base-256 value Interesting and good to know. :>From RSA's Layman's Guide: :> Some example BER encodings (which also happen to be DER :> encodings) are given in Table 3. :> :> Integer BER encoding :> value :> 0 02 01 00 :> 127 02 01 7F :> 128 02 02 00 80 :> 256 02 02 01 00 :> -128 02 01 80 :> -129 02 02 FF 7F : :Appears to me that your server is broke. Always a possibility, although I get the same results against both Netscape Directory Server 3.X and OpenLDAP 1.2.3. Perhaps the problem is still in Net::LDAP. Specifically I note that the SENDING debug info (which I did not generate before) has (for the 127th search): 30 52 02 01 80 63 4D 04 29 6F 3D 43 61 6C 69 66 0R...cM.)o=Calif which I assume is also incorrect and is causing the server to return the same bad info. I note that both sent and received packets are encoded correctly when using Convert::BER. -- Py (Amateur Radio: KF6WFP) -- 3.141592653589793238462643383... Pythagoras Watson -- "Live long and may all your kernels pop." === py...@cs... ==== http://www.ecst.csuchico.edu/~py/ === |
|
From: Chris R. <Chr...@me...> - 2000-05-10 16:41:34
|
On Wed, 10 May 2000 16:43:22 BST, Graham Barr wrote: > > Thank you for answering anf forwarding again. > > Question do you (or one of you) know a good simple LDAP Server for > Windows NT ? > > best ... Wolfgang Hammer The only ones for NT are commercial, I think. OpenLDAP is not yet stable on NT. Here are some vendors who have LDAP directories on NT, in alphabetical order: Netscape, Nexor, MessagingDirect, Microsoft. There are probably others, apologies if I've omitted any. Any specific enquiries or recommendations should probably be made off list, to avoid blushes ;-) Cheers, Chris |
|
From: Chris R. <Chr...@me...> - 2000-05-10 16:38:06
|
On Wed, 10 May 2000 11:43:05 EDT, Gary Flynn wrote: > Gary Flynn wrote: > > > > http://developer.netscape.com/docs/manuals/index.html?content=directory/41/ag/contents.htm > > Well, of course now I can't get to the 4.0 and 4.1 manuals. > > Try the 3.x manual at: > > http://developer.netscape.com/docs/manuals/directory/admin30/index.htm > > The LDAP URL info is in Appendix C instead of Appendix A. > I still feel there's a need for some more documentation somewhere, at a higher level than what the Netscape manuals have. (I also don't like the Netscape site because it uses frames, and you can't bookmark inside a frame.) A simple example of the sort of high-level problem newbies have is that they try to search for an entry using a search filter that includes part of the entry's DN. The difference between a DN and the attributes in an entry is obviously not being spotted. Cheers, Chris |
|
From: Richard H. <rh...@me...> - 2000-05-10 16:00:21
|
Sorry about all the test messages. I have been trying this for a few days now. Each and every time, I was interrupted by something urgent. Anyway email to per...@me... will now get an auto reply (see below) and the email will be forwarded to the new address. perl-ldap mailing list has been moved to per...@li... For more information please visit http://perl-ldap.sourceforge.net Your message has been forwarded to the new list address --rhu |
|
From: Graham B. <gb...@po...> - 2000-05-10 15:58:39
|
On Wed, May 10, 2000 at 10:50:38AM -0500, Clif Harden wrote: > The Examples.html page has example code on how to do searchs,adds, etc. > Maybe we could get Rusty to add a section about filters to it. Any additions to any of the documents, especially the faq or examples, will always be welcome from anyone. Graham. |
|
From: Clif H. <cl...@di...> - 2000-05-10 15:55:06
|
> > On Wed, 10 May 2000 15:15:14 BST, Graham Barr wrote: > > Can anyone suggest anything other than read the RFC's ? > > Most books on LDAP will contain a section on search filters, I would > assume. > > Tim Howes and Mark Smith's LDAP programming book does. > > Yeah, there's definitely a need for an "LDAP for Dummies" (no offence > Wolfgang!) document somewhere. I don't know that the Net::LDAP docs are > the place though. > > Cheers, > > Chris > > > The Examples.html page has example code on how to do searchs,adds, etc. Maybe we could get Rusty to add a section about filters to it. Regards, Clif Harden INTERNET: c-h...@ti... |
|
From: Gary F. <fl...@jm...> - 2000-05-10 15:53:54
|
Gary Flynn wrote: > > http://developer.netscape.com/docs/manuals/index.html?content=directory/41/ag/contents.htm Well, of course now I can't get to the 4.0 and 4.1 manuals. Try the 3.x manual at: http://developer.netscape.com/docs/manuals/directory/admin30/index.htm The LDAP URL info is in Appendix C instead of Appendix A. |
|
From: Graham B. <gb...@po...> - 2000-05-10 15:45:34
|
----- Forwarded message from Wolfgang Hammer <wol...@he...> ----- Date: Wed, 10 May 2000 17:38:54 +0200 From: Wolfgang Hammer <wol...@he...> X-Mailer: Mozilla 4.7 [de] (WinNT; I) To: Graham Barr <gb...@po...> Subject: Re: [Fwd] Re: can you write ... Thanks f. answer / ? LDAP Server f. NT Thank you for answering anf forwarding again. Question do you (or one of you) know a good simple LDAP Server for Windows NT ? best ... Wolfgang Hammer Graham Barr schrieb: > > Can anyone suggest anything other than read the RFC's ? > > ----- Forwarded message from Wolfgang Hammer <wol...@he...> ----- > > Date: Wed, 10 May 2000 16:12:26 +0200 > From: Wolfgang Hammer <wol...@he...> > X-Mailer: Mozilla 4.7 [de] (WinNT; I) > To: Graham Barr <gb...@po...> > Subject: Re: can you write doc's where newbies can find ANYTHING they need -> NOT > ):=<< > > Thank you for answering, > > I want to search a LDAP, and don't know how. > I do not find explanations about filters : > -> filter => "(&(sn=Barr) (o=Texas Instruments))" ??? > and get : > -> get ( ATTR ) ??? > > Do you have an url or an other help ? > > (excuse my ):=<< ) > > best ... Wolfgang Hammer > > ----- End forwarded message ----- ----- End forwarded message ----- |
|
From: Chris R. <Chr...@me...> - 2000-05-10 15:26:42
|
On Wed, 10 May 2000 15:15:14 BST, Graham Barr wrote: > Can anyone suggest anything other than read the RFC's ? Most books on LDAP will contain a section on search filters, I would assume. Tim Howes and Mark Smith's LDAP programming book does. Yeah, there's definitely a need for an "LDAP for Dummies" (no offence Wolfgang!) document somewhere. I don't know that the Net::LDAP docs are the place though. Cheers, Chris |
|
From: Gary F. <fl...@jm...> - 2000-05-10 15:12:57
|
Graham Barr wrote: > > Can anyone suggest anything other than read the RFC's ? http://developer.netscape.com/docs/manuals/index.html?content=directory/41/ag/contents.htm Search filters in Chapter 8 LDAP URLs in Appendix A Examples of URLs at http://www.jmu.edu/info-security/engineering/proj/uaea/parts/dir/ldap/demonstr.htm > > ----- Forwarded message from Wolfgang Hammer <wol...@he...> ----- > > Date: Wed, 10 May 2000 16:12:26 +0200 > From: Wolfgang Hammer <wol...@he...> > X-Mailer: Mozilla 4.7 [de] (WinNT; I) > To: Graham Barr <gb...@po...> > Subject: Re: can you write doc's where newbies can find ANYTHING they need -> NOT > ):=<< > > Thank you for answering, > > I want to search a LDAP, and don't know how. > I do not find explanations about filters : > -> filter => "(&(sn=Barr) (o=Texas Instruments))" ??? > and get : > -> get ( ATTR ) ??? > > Do you have an url or an other help ? > > (excuse my ):=<< ) > > best ... Wolfgang Hammer > > ----- End forwarded message ----- |
|
From: Graham B. <gb...@po...> - 2000-05-10 14:47:48
|
On Wed, May 10, 2000 at 07:16:13AM -0700, Kurt D. Zeilenga wrote: > Now, one could argue that client developers and server > admins shouldn't assume msgid increment by one for every > new request. But the fact they general do is good for > debugging as such oddities should be clues as to what's > going wrong, not normal circumstance. Well you will already be surprised with Net::LDAP there is no gaurantee that msgid will increment for any connection. All the RFC states is that the number must be unique among all outstanding requests. Graham. |
|
From: Richard H. <rh...@me...> - 2000-05-10 14:30:47
|
TEST |
|
From: Graham B. <gb...@po...> - 2000-05-10 14:17:27
|
Can anyone suggest anything other than read the RFC's ? ----- Forwarded message from Wolfgang Hammer <wol...@he...> ----- Date: Wed, 10 May 2000 16:12:26 +0200 From: Wolfgang Hammer <wol...@he...> X-Mailer: Mozilla 4.7 [de] (WinNT; I) To: Graham Barr <gb...@po...> Subject: Re: can you write doc's where newbies can find ANYTHING they need -> NOT ):=<< Thank you for answering, I want to search a LDAP, and don't know how. I do not find explanations about filters : -> filter => "(&(sn=Barr) (o=Texas Instruments))" ??? and get : -> get ( ATTR ) ??? Do you have an url or an other help ? (excuse my ):=<< ) best ... Wolfgang Hammer ----- End forwarded message ----- |
|
From: Kurt D. Z. <Ku...@Op...> - 2000-05-10 14:16:55
|
At 02:48 PM 5/10/00 +0100, Graham Barr wrote: >That does not mean that Net::LDAP should not. Of course. >Whats the point of perl-ldap attempting to be as portable as >possible if there are servers, albeit broken servers, that it >cannot communicate with. The reality is that you will not be able to communicate with broken servers. Broken encoding will break all kinds of things. Yes, you can workaround this particular case, but this doesn't necessarily mean it's a good idea. You should consider the overall impact of such a change. Does the change effect client developers? Yes. If I have an array of outstanding requests which I grown by one for every new async message I send, my code will break when msgid generated jumps over 128. Does the change effect server admins? Yes. They will see msgid jump from 127 to 129 and will likely wonder what happen to 128. Now, one could argue that client developers and server admins shouldn't assume msgid increment by one for every new request. But the fact they general do is good for debugging as such oddities should be clues as to what's going wrong, not normal circumstance. |
7902 messages has been excluded from this view by a project administrator.
