perl-ldap-dev Mailing List for perl-ldap (Page 26)

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

On Tue, Sep 10, 2002 at 01:42:11AM -0400, Matt Selsky wrote:
> Please find more complete patches to get Net::LDAP working with perl 
> 5.004_04 attached.

Thanks, applied.

Graham.




On Mon, Sep 09, 2002 at 03:24:02PM -0400, Srini Narayanappa wrote:
> Hi there,
> 
> Can anyone show me simple example of how I can replace a multi-valued
> attribute? For example, I need the attribute "projectIndfex" to have
> the folowing values:
> 
>   projectIndex: 1246
>   projectIndex: 9654
>   projectIndex: 88
> 
> My code below adds only the last value in the array:

That is because you are telling the server to replace the projectIndex
attribute with a single value 1246, then replace the projectIndex
attribute with a single value 9654, then replace the projectIndex
attribute with a single value 88. So you end up with just the single
value 88.

What you want is

 @modattrs = ( 'projectIndex', [ "1246", "9654", "88" ]);

Also as you are only doing a single change, ordering is not important,
so you don't need to specify changes =>, but can give replace =>
directly.

 my $result = $ldap->modify( $query->param("dn"),
                             replace => \@modattrs,
                           );

Graham.

> 
> -----------------------------------------
> 
> @modattrs = ( 'projectIndex', "1246",
>               'projectIndex', "9654",
>               'projectIndex', "88"
>             );
> 
> my $result = $ldap->modify( $query->param("dn"),
>                             changes => [
>                             #replace => [ @$modattrs ]
>                             replace => [ @modattrs ]
>                             ]
>                           );
> 
> -----------------------------------------
> 
> Regards,
> Srini
> 
> 
> _________________________________________________________________
> Join the worlds largest e-mail service with MSN Hotmail. 
> http://www.hotmail.com
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by: OSDN - Tired of that same old
> cell phone?  Get a new here for FREE!
> https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390



On Tue, Sep 10, 2002 at 09:50:05PM -0700, Robbie Allen wrote:
> Active Directory supports the tree delete control, which was defined as an
> internet draft (draft-armijo-ldap-treedelete) but eventually expired.  It is
> pretty straightforward to use:
> 
> my $treedel = Net::LDAP::Control->new(
>                   type     => "1.2.840.113556.1.4.805",
>                   value    => '',
>                   critical => 0,
>                );
> $rc = $ldap->delete($dn_to_delete, control => [ $treedel ]);

Actually you can just do

  $rc = $ldap->delete($dn_to_delete, control => { type => LDAP_CONTROL_TREE_DELETE });

> And I could make an Net::LDAP::Control::TreeDelete module out of it.  Just
> wanted to check first to see if anyone would object since it is not defined
> in an RFC (yet).

Fine by me.

At some point I plan to have classes for all common controls that are defined
by the most popular servers.

Graham.




Yes, next release.

Graham.

On Tue, Sep 10, 2002 at 09:39:07PM -0700, Robbie Allen wrote:
> I remember discussing this before, but weren't we going to make the default
> LDAP version be 3 instead of 2?
> 
> $LDAP_VERSION 	= 2;      # default LDAP protocol version
> 
> 
> Robbie Allen
> 
> 
> 
> -------------------------------------------------------
> In remembrance
> www.osdn.com/911/



Active Directory supports the tree delete control, which was defined as an
internet draft (draft-armijo-ldap-treedelete) but eventually expired.  It is
pretty straightforward to use:

my $treedel = Net::LDAP::Control->new(
                  type     => "1.2.840.113556.1.4.805",
                  value    => '',
                  critical => 0,
               );
$rc = $ldap->delete($dn_to_delete, control => [ $treedel ]);

And I could make an Net::LDAP::Control::TreeDelete module out of it.  Just
wanted to check first to see if anyone would object since it is not defined
in an RFC (yet).

Robbie Allen



I remember discussing this before, but weren't we going to make the default
LDAP version be 3 instead of 2?

$LDAP_VERSION 	= 2;      # default LDAP protocol version


Robbie Allen




Please find more complete patches to get Net::LDAP working with perl 
5.004_04 attached.

Net/LDAP/Filter.pm and Net/LDAP/Search.pm have been patched.

> Net::LDAP::Filter seems to have regressed when used on perl 5.004_04  
> I'm getting this error message when running a script that uses 
> Net::LDAP
> 
> /^(\\.|[^\\*]*)*\*/: regexp *+ operand could be empty at /opt/ACISperl5004/lib/site_perl/Net/LDAP/Filter.pm line 120.
> 
> This seems to have been fixed (from the CVS logs) in Net::LDAP::Filter 
> 1.4
> 
> http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/perl-ldap/ldap/lib/Net/LDAP/Filter.pm.diff?r1=1.3&r2=1.4
> 
> It seems to have seen broken again between versions 1.5 and 1.6:
> 
> http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/perl-ldap/ldap/lib/Net/LDAP/Filter.pm.diff?r1=1.5&r2=1.6
> 
> 
> This patch should fix the problem again.
> 
> $ diff -u /opt/ACISperl5004/lib/site_perl/Net/LDAP/Filter.pm /tmp/Filter.pm 
> --- /opt/ACISperl5004/lib/site_perl/Net/LDAP/Filter.pm  Thu Jan 31 09:02:25 2002
> +++ /tmp/Filter.pm      Tue Sep 10 01:19:02 2002
> @@ -117,7 +117,7 @@
>    # If the op is = and contains one or more * not
>    # preceeded by \ then do partial matches
>  
> -  if ($op eq '=' && $val =~ /^(\\.|[^\\*]*)*\*/o ) {
> +  if ($op eq '=' && $val =~ /^(\\.|[^\\*]+)*\*/o ) {
>  
>      my $n = [];
>      my $type = 'initial';

status
Reply-To: 

Net::LDAP::Filter seems to have regressed when used on perl 5.004_04  
I'm getting this error message when running a script that uses 
Net::LDAP

/^(\\.|[^\\*]*)*\*/: regexp *+ operand could be empty at /opt/ACISperl5004/lib/site_perl/Net/LDAP/Filter.pm line 120.

This seems to have been fixed (from the CVS logs) in Net::LDAP::Filter 
1.4

http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/perl-ldap/ldap/lib/Net/LDAP/Filter.pm.diff?r1=1.3&r2=1.4

It seems to have seen broken again between versions 1.5 and 1.6:

http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/perl-ldap/ldap/lib/Net/LDAP/Filter.pm.diff?r1=1.5&r2=1.6


This patch should fix the problem again.

$ diff -u /opt/ACISperl5004/lib/site_perl/Net/LDAP/Filter.pm /tmp/Filter.pm

--- /opt/ACISperl5004/lib/site_perl/Net/LDAP/Filter.pm  Thu Jan 31 09:02:25 2002
+++ /tmp/Filter.pm      Tue Sep 10 01:19:02 2002
@@ -117,7 +117,7 @@
   # If the op is = and contains one or more * not
   # preceeded by \ then do partial matches
 
-  if ($op eq '=' && $val =~ /^(\\.|[^\\*]*)*\*/o ) {
+  if ($op eq '=' && $val =~ /^(\\.|[^\\*]+)*\*/o ) {
 
     my $n = [];
     my $type = 'initial';



I believe that what you want is a reference to an array.

Like this =3D=3D
> my $result =3D $ldap->modify( $query->param("dn"),
>                             changes =3D> [
>                             replace =3D> [ \@modattrs ]    <<<<<<<<=
<<<<<<<<<<<
>                             ]
>                           );
Sorry that I haven't tested the code out, but I don't have anNet::LDA=
P
distribution on this machine, at the moment.


B
Srini Narayanappa wrote:
>=20
> Hi there,
>=20
> Can anyone show me simple example of how I can replace a multi-valu=
ed
> attribute? For example, I need the attribute "projectIndfex" to hav=
e
> the folowing values:
>=20
>   projectIndex: 1246
>   projectIndex: 9654
>   projectIndex: 88
>=20
> My code below adds only the last value in the array:
>=20
> -----------------------------------------
>=20
> @modattrs =3D ( 'projectIndex', "1246",
>               'projectIndex', "9654",
>               'projectIndex', "88"
>             );
>=20
> my $result =3D $ldap->modify( $query->param("dn"),
>                             changes =3D> [
>                             #replace =3D> [ @$modattrs ]
>                             replace =3D> [ @modattrs ]
>                             ]
>                           );
>=20
> -----------------------------------------
>=20
> Regards,
> Srini
>=20
> _________________________________________________________________
> Join the world=92s largest e-mail service with MSN Hotmail.
> http://www.hotmail.com
>=20
> -------------------------------------------------------
> This sf.net email is sponsored by: OSDN - Tired of that same old
> cell phone?  Get a new here for FREE!
> https://www.inphonic.com/r.asp?r=3Dsourceforge1&refcode1=3Dvs3390




Hi,

I'm just learning perl-ldap now and must say I find this package to be awesome!.

Anyhow, I got two problems. Both are related to the fact that I got an old ldap
directory that needs some careful maintenance. Right now, I want to remove a
couple of objectclasses and remove the attributes that go with them.

So here's my first question: How can I check usong the schema class that an
attribute is not in use by another objectclass the entry contains?

Next, I'm trying to write a simple delete-objectclass function, I get the error :
Can't call method "modify" on an undefined value at
/usr/lib/perl5/site_perl/5.6.1/Net/LDAP/Entry.pm line 212.

when I execute it. Heres the function:

sub ldap_remove_objectclass ($$) {
    my ($objectclass,$searchdn,$ldap) = @_;
    my (@delete);
    my $mesg = $ldap->search (base   => "$searchdn",
                  filter => "objectClass=$objectclass" );
    my $schema = $ldap->schema();
    my @attributes = $schema->attributes($objectclass);

    foreach my $attr (@attributes) {
            print "Attribute: ". $attr;
        }

my $max = $mesg->count();
    for ($i=0;$i < $max;$i++) {

        my @entryatt;
        my $entry = $mesg->entry($i);

        print "Doing entry " . $entry->dn(). " \n";

        $entry->delete($objectclass);
        foreach my $attr (@attributes) {
            if ($entry->exists($attr)) {

                print "Deleting $attr with value: " . $entry->get_value($attr) .
" \n";
                #   $entryatt = (@entryatt,$attr);
                    @delete =  (@delete,$attr=>'');
                $entry->replace(@delete);
            }
        $entry->update();

     }

}

I've set the version to 3 in the bind, but this doesn't help. Does anyone know
what I'm doing wrong?

Yours,

Tarjei Huse


Mob: 920 63 413 


-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/




Hi there,

Can anyone show me simple example of how I can replace a multi-valued
attribute? For example, I need the attribute "projectIndfex" to have
the folowing values:

  projectIndex: 1246
  projectIndex: 9654
  projectIndex: 88

My code below adds only the last value in the array:

-----------------------------------------

@modattrs = ( 'projectIndex', "1246",
              'projectIndex', "9654",
              'projectIndex', "88"
            );

my $result = $ldap->modify( $query->param("dn"),
                            changes => [
                            #replace => [ @$modattrs ]
                            replace => [ @modattrs ]
                            ]
                          );

-----------------------------------------

Regards,
Srini


_________________________________________________________________
Join the worlds largest e-mail service with MSN Hotmail. 
http://www.hotmail.com




Hi. 

It seems y to have au small bug in last version of Perl-ldap (0.26), for the processing of LDAP backup (replica).

It is now possible (since version 0.25_01) to specify several names of hosts to pass the reference of a table containing these names for the new method.

It doesn't work with version 0.26. The following path corrects the problem:

diff LDAP.pm LDAP.pm.old
100c100
<     if ($obj->_connect($h, $arg)) {
---
>     if ($obj->_connect($host, $arg)) {

regards

Vincent


-- 
Vincent MATHIEU                 
CRI - Universite NANCY 2            | Email : Vin...@un...
Pole Lorrain de Gestion             | Tel   : (33) 03.83.39.64.06
13, Rue Michel Ney - C.O. 75        | Fax   : (33) 03.83.39.64.43
54013 Nancy Cedex.   FRANCE




On 6/9/02 3:29 pm, Jim Karocki <Jam...@mr...> wrote:

> Any plans to include a password encrtyption routine.
> like SSHA into the code base?
> 
> Jim Karocki 

If by that you want Net::LDAP::bind to compute password hashes for you when
you're doing a simple bind, then no.

This is quite straightforward to do yourself using existing CPAN modules,
for instance using SHA1 passwords:

-----
use Digest::SHA1 qw(sha1_base64);
use Net::LDAP;

my $ldap = new Net::LDAP('ldap.example.com', version => 3);
my $res = $ldap->bind('cn=Some Person, o=example.com',
                      password => '{sha}' . sha1_base64('some password'));
-----

Cheers,

Chris




Any plans to include a password encrtyption routine.
like SSHA into the code base?

Jim Karocki 


************************************************************************
This message represents the originator's personal views and opinions, which
do not necessarily reflect those of MRK Technologies. If you received this
message in error you may not copy or deliver this message to anyone, please
contact the sender and delete the material from any computer. 
************************************************************************



Thanks to everyone!

>>> Graham Barr <gb...@po...> 09/02 3:04  >>>
On Mon, Sep 02, 2002 at 10:44:19AM -0700, Kurt D. Zeilenga wrote:
> At 09:57 AM 2002-09-02, Mark Wilcox wrote:
> >To encrypt passwords in openLDAP the client must take care of it.
>=20
> Or use the LDAP Password Modify Extended Operation [RFC 3062].

Which is supported with Net::LDAP;

use Net::LDAP::Extension::SetPassword;

$mesg =3D $ldap->set_password(
  user =3D>$user,
  oldpasswd =3D> $old,
  newpasswd =3D> $new
);

$new_passwd =3D $resp->gen_password;

Graham.




On Mon, Sep 02, 2002 at 10:44:19AM -0700, Kurt D. Zeilenga wrote:
> At 09:57 AM 2002-09-02, Mark Wilcox wrote:
> >To encrypt passwords in openLDAP the client must take care of it.
> 
> Or use the LDAP Password Modify Extended Operation [RFC 3062].

Which is supported with Net::LDAP;

use Net::LDAP::Extension::SetPassword;

$mesg = $ldap->set_password(
  user =>$user,
  oldpasswd => $old,
  newpasswd => $new
);

$new_passwd = $resp->gen_password;

Graham.



At 09:57 AM 2002-09-02, Mark Wilcox wrote:
>To encrypt passwords in openLDAP the client must take care of it.

Or use the LDAP Password Modify Extended Operation [RFC 3062].

Kurt




To encrypt passwords in openLDAP the client must take care of it.

For example you could use the crypt() command to DES encrypt passwords and
store them in the format of :
{crypt}<encrypted password>

or MD5:
{md5}<ecncrypted password>

Mark
----- Original Message -----
From: "Cristian Dotro " <CD...@ro...>
To: <per...@li...>
Sent: Thursday, August 29, 2002 10:51 AM
Subject: Modifying openldap passwords


> Hi, I have a problem using Net ldap module with perl, and I hope that you
could help me :)
>
> I had a little cgi program for create new users on ldap directory.
>
> I used add method and it works fine, the entry is added, but the password
stay in plain text format.
> (the attribute userPassword is not encripted)
>
> (Idem if I try to change a user password with modify method)
>
> Could you tell me how must I do it?
>
> Thanks a lot
>
> Cristian Dotro
>
>
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
>
>




Greetings,

The FAQ has an example of using callback

   sub callback
   {
   my ( $mesg, $entry) = @_;

     # First you must check to see if something was returned.
     # Last execution of callback subroutine will have no
     # defined entry and mesg object
     #
     if ( !defined($entry) )
     {
       print "No records found matching filter $match.\n"
       if ($mesg->count == 0) ; # if mesg is not defined nothing will print.
       return;
     }
    ....

The "print ... if $mesg->count == 0"  masks the fact that the first
execution of the subroutine
has
     $mesg                defined
     $entry                 undefined
     $mesg->count     greater than zero

Is this expected, unexpected (a bug?), or changed in a later release?

I am running:

/usr/local/lib/perl5/site_perl/5.6.1/Net/LDAP/

Control.pm:$VERSION = "0.04";
DSML.pm:$VERSION = "0.06";
Entry.pm:$VERSION = "0.15";
Extension.pm:$VERSION = "1.01";
Extra.pm:$VERSION = "0.01";
Filter.pm:$VERSION = "0.12";
LDIF.pm:$VERSION = "0.09";
Message.pm:$VERSION = "1.05";
Schema.pm:$VERSION = "0.10";
Search.pm:$VERSION = "0.07";
Util.pm:$VERSION = "0.06";

Regards,
Paul



----- Forwarded message from Patrice Gagnon <Pat...@gm...> -----

Date: Tue, 27 Aug 2002 16:30:00 -0400
To: gb...@po...
From: Patrice Gagnon <Pat...@gm...>
Subject: net::LDAPS

Hi,

I want to know where I can download Net::ldaps ppm file to install into my 
perl libraries??

thanks in advance,


/////////////////////////////////////////////////////////////////////////////////////////////// 

Pour de l'aide en tout temps écrire à: ai...@gm...
////////////////////////////////////////////////////////////////////////////////////////////// 

Patrice Gagnon
Technicien en informatique
Département de Génie mécanique
pavillon Pouliot, local 3313
Université Laval, Québec,
G1K 7P4
Tél.: (418)-656-2131 poste 8342
Télécopieur: (418)-656-7415
Pat...@gm...
////////////////////////////////////////////////////////////////////////////////////////////// 


----- End forwarded message -----



Hi, I have a problem using Net ldap module with perl, and I hope that you c=
ould help me :)

I had a little cgi program for create new users on ldap directory.

I used add method and it works fine, the entry is added, but the password s=
tay in plain text format.
(the attribute userPassword is not encripted)

(Idem if I try to change a user password with modify method)

Could you tell me how must I do it?

Thanks a lot

Cristian Dotro






You should know than a DN is never stored whthin a Directory, therefore,
there is no way to do a search based on the DN. But as you know the RDN
of your DN, you can do a search on this. Let's say if your DN is 

		DN: uid=jsmith,ou-people,dc-acme,dc=com

You can used a filter based on the RDN (uid) and also combine it with a
object class if you know the type of the object. For instance

		(&(uid=jsmith)(objectclass=inetOrgPerson))

I hope that can help.
Behruz


-----Original Message-----
From: per...@li...
[mailto:per...@li...] On Behalf Of Jim
Harle
Sent: Monday, August 26, 2002 8:52 AM
To: ra...@gm...
Cc: per...@li...
Subject: Re: Search for a DN

Raffaele,
  To just read a specific DN, do :

  $ldap->search(base=>$dnIwant, scope=>'base', filter=>'objectClass=*');

--Jim Harle

On Mon, 26 Aug 2002 ra...@gm... wrote:

> Hi
>
> A part of a script i made should search for the value of an Attribute
in an
> Entry and when the
> attribute does not exist or is empty it should search for the same one
level
> below.
>
> So far no problems... but to get the Entry wich is one level below the
> starting entry i need to
> search fot a DN:
>
> original Entry eg:
>
> cn=item,cn=group,dc=host,dc=com		=> Here i cant find the
value i need so...
>
> i search one level below:
>
> cn=group,dc=host,dc=com
>
> So i need to search for "cn=group,dc=host,dc=com". I recognized that i
could
> not use a DN in a filer
> argument ( "(dn=cn=group,dc=host,dc=com)" ) does not return any
results.
>
> So how can i search for an DN or better: How can i get an Entry on
wich i
> know the DN?
>
> cheers,
> Raffaele
>
> --
> GMX - Die Kommunikationsplattform im Internet.
> http://www.gmx.net
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by: OSDN - Tired of that same old
> cell phone?  Get a new here for FREE!
> https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
>



-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390




Looking at the list archives, I see that someone has already asked
the question I was about to pose:

	http://www.geocrawler.com/archives/3/3482/2002/5/0/8661737/

Unfortunately, I could find no follow-ups.

Is there a good reason not to include the "MultiHomed" argument in
Net::LDAP's call to IO::Socket::INET->new()?

Ray.



Hi.

The Net::LDAP::LDIF::new sub die when you want to open a LDIF file
through an external process by using the '...|' notation, because
this sub automagically adds a character to the file name.

I know that the caller can open itself the process, then pass the
filehandle, but I think it's better to do it in the sub.

This small patch use the plain file name from the caller if the
first or the last character is a pipe.

Jo=EBl Saunier

*** LDIF.pm.orig        Tue Aug 27 16:37:56 2002
--- LDIF.pm     Tue Aug 27 16:40:00 2002
***************
*** 37,42 ****
--- 37,43 ----
         require Symbol;
         $fh =3D Symbol::gensym();
         my $open =3D ($mode{$mode} || "<") . $file;
+       $open =3D $file if ($file =3D~ /^\|/ or $file =3D~ /\|$/);
         open($fh,$open) or return;
         $opened_fh =3D 1;
       }



Raffaele,
  To just read a specific DN, do :

  $ldap->search(base=>$dnIwant, scope=>'base', filter=>'objectClass=*');

--Jim Harle

On Mon, 26 Aug 2002 ra...@gm... wrote:

> Hi
>
> A part of a script i made should search for the value of an Attribute in an
> Entry and when the
> attribute does not exist or is empty it should search for the same one level
> below.
>
> So far no problems... but to get the Entry wich is one level below the
> starting entry i need to
> search fot a DN:
>
> original Entry eg:
>
> cn=item,cn=group,dc=host,dc=com		=> Here i cant find the value i need so...
>
> i search one level below:
>
> cn=group,dc=host,dc=com
>
> So i need to search for "cn=group,dc=host,dc=com". I recognized that i could
> not use a DN in a filer
> argument ( "(dn=cn=group,dc=host,dc=com)" ) does not return any results.
>
> So how can i search for an DN or better: How can i get an Entry on wich i
> know the DN?
>
> cheers,
> Raffaele
>
> --
> GMX - Die Kommunikationsplattform im Internet.
> http://www.gmx.net
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by: OSDN - Tired of that same old
> cell phone?  Get a new here for FREE!
> https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
>





2000	Jan	Feb	Mar	Apr	May (200)	Jun (129)	Jul (184)	Aug (204)	Sep (106)	Oct (79)	Nov (72)	Dec (54)
2001	Jan (83)	Feb (123)	Mar (84)	Apr (184)	May (106)	Jun (111)	Jul (104)	Aug (91)	Sep (59)	Oct (99)	Nov (100)	Dec (37)
2002	Jan (148)	Feb (88)	Mar (85)	Apr (151)	May (80)	Jun (110)	Jul (85)	Aug (43)	Sep (64)	Oct (89)	Nov (59)	Dec (42)
2003	Jan (129)	Feb (104)	Mar (162)	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec