perl-ldap-dev

A simple question!

[Paul B. <pb...@ni...>]

Hello everyone,

I am very new with Perl-Ldap.  I have a windows 2000 machine with
ActivePerl installed and a Unix machine with Directory server installed. I
would like to use the directory services from the windows 2000 machine
using Perl; how do I start with?  What do I need to install on the Windows
machine? (I think it's Perl-Ldap)

Any guidance will be greatly appreciated.

Thanks in advance.

Paul


------------------------------------------------------------------------------
Paul Bezzam
Academic Computer Services
1805 North Broad Street
Floor 7, Wachman Building
Philadelphia, PA 19122
Tel: 215 204 5555

Thank you for writing

[<he...@co...>]

Hello,

We have received your email. Thank you for writing. This message is an automatic response to your email. It is intended
to answer many commonly asked questions regarding our service and the particular offers that you receive. If you have
further questions or comments after reading this email, there is a different address below that you may use. If you
need instructions for unsubscribing, see the information below.

__________________________________________
General F.A.Q. (answers to these questions are below)

o My email address has changed. How do I make sure that I continue to receive your mailings?
o The link that you have sent me does not work. What should I do?
o The page cannot be displayed / an error message appears. Now what?
o What exactly is Colonize.com and is there a charge for using it?
o What if I do not have a credit card?  Can I still participate in your offers?
o I am not a United States citizen.  Can I participate in your offers?
o I have a question about one of the offers.  Who do I direct it to?
o I would like to suggest an offer or comment on one of the offers that I received, what     should I do?
o Can you tell me how the shopping spree works?
o How do I unsubscribe from this mailing?
___________________________________________


My email address has changed. How do I make sure that I continue to receive your mailings?
--------------------------------
The easiest way to make sure you continue to receive our mailings at your new address is to simply visit
http://www.colonize.com and register with your new address. If you no longer wish to receive our mailings at your old
address, simply send a blank email to the unsubscribe address at the bottom of one of our past mailings.


The link that you have sent me does not work. What should I do?
--------------------------------
We test all links prior to sending them out to ensure that they do work.  If you have America Online please be sure
that you are using the link labeled for AOL users.  You can also type the address of the link in if you are unable to
use the link.


The page cannot be displayed / an error message appears. Now what?
--------------------------------
If the page is not coming up our computer system may be temporarily unavailable or it may be operating at maximum
capacity.  Please try again at a later time.


What exactly is Colonize.com and is there a charge for using it?
--------------------------------
Colonize.com is a service that notifies their customers of exciting offers and promotions that are currently available
on the Internet.  These offers are for discounted items, $ off amounts or free items.  We are not an Internet Service
Provider. There is never any charge to become a member of Colonize.com or to use our services. You are never under any
obligation to purchase any of the offers that we notify you of.  After all, they are just offers!


What if I do not have a credit card?  Can I still participate in your offers?
--------------------------------
That depends on the individual merchants.  Some of the merchants will only accept credit cards but some do have
alternate payment arrangements.  You'll need to check the offers that interest you to determine this fact.


I am not a United States citizen.  Can I participate in your offers?
--------------------------------
Again, this depends on the individual merchants.  You'll need to check the site of the offers to determine which ones
are available to international residents.


I have a question about one of the offers.  Who do I direct it to?
--------------------------------
If you have a question about one of the offers that we have notified you of you'll need to direct it to the merchant
who is making the offer.  If you use the link that we provided to you for the offer, you'll go to the site where you
can find all the information for contacting the Customer Service team of that merchant.


I would like to suggest an offer or comment on one of the offers that I received, what should I do?
--------------------------------
If you would like to suggest an offer or make a comment on one of the offers you received, please send an email to
of...@co.... If a reply is necessary, we will try to respond as soon as we can. Please be patient though.


Can you tell me how the shopping spree works?
--------------------------------
Usually, within 24 hours of registering for our service you will receive an e-mail that details the shopping spree.
Included in the e-mail are links for each of the offers. You click on the links for the offers that interest you. The
links will open to the page that displays the offer. You then follow the steps as they are outlined on the site. Please
be sure to read over the terms and conditions of the offers to ensure a positive shopping experience.


How do I unsubscribe from this mailing?
--------------------------------
The EASIEST way to unsubscribe is to click in the unsubscribe link that is included at the bottom of all the offers
that we send out to you. This link is encoded with your email and ensures that you will be unsubscribed with the email
address you originally gave us.  
IMPORTANT NOTE: You must use the above-mentioned method to unsubscribe. Due to the volume of email that we receive, we
are not able to process manual unsubscribe requests through email.
--------------------------------

If your question has not been answered through this auto responder, please send an email to que...@co.... We
will try to reply to you as soon as possible. Please be patient though, as we get many emails a day.

Thanks for your support!

Colonize.com Customer Support Team 
 





    
    
    
    

Re: Testing for existence of attributes

[Chris R. <chr...@me...>]

On 14/8/02 7:23 am, Craig Robinson <cra...@ep...> wrote:

> Net::LDAP experts,
> 
> I have a problem that has been bugging me for ages.
> 
> I am trying to see if an email address exists within our organization. The
> following is a snippet of code which returns the DN of an entry which matches
> a certain email address:
> 
> use Net::LDAP;
> $ldap = Net::LDAP->new("bartfarst.env.qld.gov.au") or die "$@";
> $DS_mesg = $ldap->search(base => "o=env,st=qld,c=au",filter =>
> "mail=craig.robinson\@epa.qld.gov.au");
> $DS_entry = $DS_mesg->shift_entry;
> $DS_dn = $DS_entry->dn;
> print "DN: $DS_dn\n";
> $ldap->unbind;
> 
> It works great if the email address exists. BUT if the email address does not
> exist, I get the following error message:
> 
> "Can't call method "dn" on an undefined value at test.pl line 5."
> 
> I would prefer a message like:
> 
> "Sorry Craig, there is no entry which has this email address"
> 
> Does anyone know of a <simple> way of finding out if an entry containing a
> specific attribute exists, or better still, DOES NOT EXIST??

This is not entirely what you've asked for, but it solves the problem for
the above scriptlet.

$DS_mesg = $ldap->search(...);
if ($DS_mesg->count() != 1) {
    print "Cannot find one entry with this email address\n";
} else {
    $DS_entry = $DS_mesg->shift_entry;
    ...
}

Cheers,

Chris

Re: Net::LDAP Filter question

[Chris R. <chr...@me...>]

On 13/8/02 7:08 pm, Vanole, Mike <mik...@at...> wrote:

> Thanks for the path to go down.
> 
> My ldap admin says the fields are not text so wildcards won't work. He

Correct. The syntax of your attributes seems to be GeneralizedTime;
attributes using this syntax typically only allow equality match (=) and
ordering matches (>= and <=). No substring matching rules are usually
defined (though you could check your server) and hence no "wildcards" are
allowed in searches.

> suggested trying this without the equals symbol, but it also failed (a bit
> differently):
> $filter = "(&(whenCreated > 20020812000000.0Z) (whenCreated <
> 20020812235959.0Z))";
> 
> Bad filter at get_ldap.pl line 63.
> 
> This also fails with "Bad filter":
> my $filter = "(whencreated > 20020812000000.0Z)";

Also correct; LDAP filters support <= and >=, not < and >. See RFC 2254.

> I can do this but I still don't achieve my objective of getting under the
> server imposed sizelimit:
> 
> $whenCreated = $entry->get_value( whenCreated, asref => 0 );
> 
> if ($whenCreated =~ /^20020812/) {
> ..do something perlish...
> 
> Working with Net::LDAP and seeking advice from my ColdFusion counterparts I
> am finding they are only a little helpful because the differences in options
> available between ADO, VB, and ColdFusion (basically NT) and Net::LDAP are
> many. For instance I am bumping into a server imposed sizelimit with
> Net::LDAP that the NT guys don't have. And apparently they don't have the
> filter issues I'm having. Is there a *differences* document that anyone can
> point me to? I'm die-hard-perl-on-UNIX so moving to NT is not an option.

There's no reason you couldn't use the same sort of filter that they're
using. Do the server logs contain their search filters? If not, consider
snooping the LDAP network traffic between ColdFusion and the directory.
Programs like Ethereal <http://www.ethereal.com/> will do this and decode
lots of protocols (including LDAP :-) automatically.

Cheers,

Chris

Testing for existence of attributes

[Craig R. <cra...@ep...>]

Net::LDAP experts,

I have a problem that has been bugging me for ages.

I am trying to see if an email address exists within our organization. The =
following is a snippet of code which returns the DN of an entry which match=
es a certain email address:

use Net::LDAP;
$ldap =3D Net::LDAP->new("bartfarst.env.qld.gov.au") or die "$@";
$DS_mesg =3D $ldap->search(base =3D> "o=3Denv,st=3Dqld,c=3Dau",filter =3D> =
"mail=3Dcraig.robinson\@epa.qld.gov.au");
$DS_entry =3D $DS_mesg->shift_entry;
$DS_dn =3D $DS_entry->dn;
print "DN: $DS_dn\n";
$ldap->unbind;

It works great if the email address exists. BUT if the email address does n=
ot exist, I get the following error message:

"Can't call method "dn" on an undefined value at test.pl line 5."

I would prefer a message like:

"Sorry Craig, there is no entry which has this email address"

Does anyone know of a <simple> way of finding out if an entry containing a =
specific attribute exists, or better still, DOES NOT EXIST??

(If you would like to reply off-list, I will summarise and post summary bac=
k to list.)

Cheers, Craig

Craig Robinson
Environmental Protection Agency
Tel: (07) 3006 4629     Fax: (07) 3247 6534
Email: cra...@ep...

Visit us at: http://www.epa.qld.gov.au 

RE: Net::LDAP Filter question

[Vanole, M. <mik...@at...>]

Thanks for the path to go down.

My ldap admin says the fields are not text so wildcards won't work. He
suggested trying this without the equals symbol, but it also failed (a bit
differently):
$filter = "(&(whenCreated > 20020812000000.0Z) (whenCreated <
20020812235959.0Z))";

Bad filter at get_ldap.pl line 63.

This also fails with "Bad filter":
my $filter = "(whencreated > 20020812000000.0Z)"; 

I can do this but I still don't achieve my objective of getting under the
server imposed sizelimit:

$whenCreated = $entry->get_value( whenCreated, asref => 0 );

if ($whenCreated =~ /^20020812/) {
	..do something perlish...

Working with Net::LDAP and seeking advice from my ColdFusion counterparts I
am finding they are only a little helpful because the differences in options
available between ADO, VB, and ColdFusion (basically NT) and Net::LDAP are
many. For instance I am bumping into a server imposed sizelimit with
Net::LDAP that the NT guys don't have. And apparently they don't have the
filter issues I'm having. Is there a *differences* document that anyone can
point me to? I'm die-hard-perl-on-UNIX so moving to NT is not an option.


-----Original Message-----
From: Chris Ridd [mailto:chr...@me...]
Sent: Tuesday, August 13, 2002 11:30 AM
To: Vanole, Mike; Vanole, Mike; 'per...@li...'
Subject: Re: Net::LDAP Filter question


On 13/8/02 4:53 pm, Vanole, Mike <mik...@at...> wrote:

> Correction below on the range filter. I was actually trying this:
> 
> my $filter = "(&(whenCreated >= 20020812000000.0Z) (whenCreated =<
> 20020812235959.0Z))"
> or
> my $filter = "(&(whenCreated >= 200208120000000Z) (whenCreated =<
> 200208122359590Z))"
> 
> and even this:
> my $filter = "(&(whencreated >= 20020812000000.0Z))";
> or
> my $filter = "(&(whencreated >= 200208120000000Z))";

Does your server support ordering (ie >= and <=) matching rules on the
whencreated attribute? You may need to download the schema to discover this.

If so, do you need any additional indexes on the server?

Cheers,

Chris

Re: Net::LDAP Filter question

[Chris R. <chr...@me...>]

On 13/8/02 4:53 pm, Vanole, Mike <mik...@at...> wrote:

> Correction below on the range filter. I was actually trying this:
> 
> my $filter = "(&(whenCreated >= 20020812000000.0Z) (whenCreated =<
> 20020812235959.0Z))"
> or
> my $filter = "(&(whenCreated >= 200208120000000Z) (whenCreated =<
> 200208122359590Z))"
> 
> and even this:
> my $filter = "(&(whencreated >= 20020812000000.0Z))";
> or
> my $filter = "(&(whencreated >= 200208120000000Z))";

Does your server support ordering (ie >= and <=) matching rules on the
whencreated attribute? You may need to download the schema to discover this.

If so, do you need any additional indexes on the server?

Cheers,

Chris

RE: Net::LDAP Filter question

[Vanole, M. <mik...@at...>]

Correction below on the range filter. I was actually trying this:

my $filter = "(&(whenCreated >= 20020812000000.0Z) (whenCreated =<
20020812235959.0Z))"
	or
my $filter = "(&(whenCreated >= 200208120000000Z) (whenCreated =<
200208122359590Z))"

and even this:
my $filter = "(&(whencreated >= 20020812000000.0Z))";
	or
my $filter = "(&(whencreated >= 200208120000000Z))";

> -----Original Message-----
> From:	Vanole, Mike 
> Sent:	Tuesday, August 13, 2002 10:39 AM
> To:	'per...@li...'
> Subject:	Net::LDAP Filter question
> 
> Hi,
> 
> I'm trying to limit the return results with a tight filter. When I try to
> use the "*" in the following where I limit the search at
> "(whencreated=20020812*.0Z*) I get an error:
> 
> my $filter = "(&(samaccountname=${_}*) (samaccounttype=805556789)
> (!(objectcategory=group)) (whencreated=20020812*.0Z*))";
> 00000057: LdapErr: DSID-0C090534, comment: Error processing filter, data
> 0, v893 at get4 line 62.
> 
> The search only works when I enter the full timestamp.
> 
> These work fine:
> my $filter = "(&(samaccountname=${_}*) (samaccounttype=805556789)
> (!(objectcategory=group)))";
> my $filter = "(&(samaccountname=${_}*) (samaccounttype=805556789)
> (!(objectcategory=group)) (whencreated=20020812230501.0Z))";
> my $filter = "(whencreated=20020812230501.0Z)";
> 
> I tried the following from another post but it did not work, probably
> because we have the ".0Z" at the end of the timestamp:
> my $filter = "(&(whenCreated >= 20020812000000.0Z)
> (whenCreated=20020812235959.0Z))"
> or
> my $filter = "(&(whenCreated >= 200208120000000Z)
> (whenCreated=200208122359590Z))"
> 
> This is what an entry looks like:
> whenChanged: 20020617191927.0Z
> whenCreated: 20000930082047.0Z
> 
> Thanks in advance for any suggestions,
> Mike

Net::LDAP Filter question

[Vanole, M. <mik...@at...>]

Hi,

I'm trying to limit the return results with a tight filter. When I try to
use the "*" in the following where I limit the search at
"(whencreated=20020812*.0Z*) I get an error:

my $filter = "(&(samaccountname=${_}*) (samaccounttype=805556789)
(!(objectcategory=group)) (whencreated=20020812*.0Z*))";
00000057: LdapErr: DSID-0C090534, comment: Error processing filter, data 0,
v893 at get4 line 62.

The search only works when I enter the full timestamp.

These work fine:
my $filter = "(&(samaccountname=${_}*) (samaccounttype=805556789)
(!(objectcategory=group)))";
my $filter = "(&(samaccountname=${_}*) (samaccounttype=805556789)
(!(objectcategory=group)) (whencreated=20020812230501.0Z))";
my $filter = "(whencreated=20020812230501.0Z)";

I tried the following from another post but it did not work, probably
because we have the ".0Z" at the end of the timestamp:
my $filter = "(&(whenCreated >= 20020812000000.0Z)
(whenCreated=20020812235959.0Z))"
or
my $filter = "(&(whenCreated >= 200208120000000Z)
(whenCreated=200208122359590Z))"

This is what an entry looks like:
whenChanged: 20020617191927.0Z
whenCreated: 20000930082047.0Z

Thanks in advance for any suggestions,
Mike

Re: [Fwd] LDAP Help

[Chris R. <chr...@me...>]

On 7/8/02 8:59 pm, Graham Barr <gb...@po...> wrote:

> ----- Forwarded message from Joshua Kahn <ka...@ma...> -----
> 
> Date: Wed, 07 Aug 2002 14:58:16 -0500
> To: gb...@po...
> From: Joshua Kahn <ka...@ma...>
> Subject: LDAP Help
> 
> Graham-
> 
> I am working on a simple LDAP Search for our department site, however, I
> have encountered an error that I have not been able to solve.  In the error
> log, I get the following message:
> 
>    decode error 15 17 at /Library/Perl/Convert/ASN1/_decode.pm line 196.
> 
> I have not been able to determine what is causing this error, any
> ideas?  We are using a Mac OS-9 server.  It would seem to me that the
> server is returning information that the decoded is not prepared for.

That could be. Can you capture the exact message that the server's
returning? Call $ldap->debug(2) before issuing the search.

> my $dn         = "humonc";
[...]
> my $result = $ldap->search(
>      base   => $dn,
>      scope  => $scope,
>      filter => $filter
>   );

However, $dn does not contain a valid DN. Read RFC 2253
(<http://www.ietf.org/rfc/rfc2253.txt>) to find out what DNs look like.
Maybe your server's sending back a badly encoded or unexpected kind of error
in response to this bad search.

Cheers,

Chris

[Fwd] LDAP Help

[Graham B. <gb...@po...>]

----- Forwarded message from Joshua Kahn <ka...@ma...> -----

Date: Wed, 07 Aug 2002 14:58:16 -0500
To: gb...@po...
From: Joshua Kahn <ka...@ma...>
Subject: LDAP Help

Graham-

I am working on a simple LDAP Search for our department site, however, I 
have encountered an error that I have not been able to solve.  In the error 
log, I get the following message:

     decode error 15 17 at /Library/Perl/Convert/ASN1/_decode.pm line 196.

I have not been able to determine what is causing this error, any 
ideas?  We are using a Mac OS-9 server.  It would seem to me that the 
server is returning information that the decoded is not prepared for.

Any help you can give would be much appreciated.  I have included my code 
below.

Thank you,
Josh Kahn
University of Wisconsin-Madison Department of Human Oncology

---------------------------------------------------------------------------------------------------------------

my $hostname   = "mail.humonc.wisc.edu";
my $dn         = "humonc";
my $port       = 389;
my $scope      = "base";
my $filter     = "";
my @attributes = ("cn" , "mail");

sub search
{
# Data from HTML form
my $dfilter   = $cgi->param('dfilter');
my $criteria  = $cgi->param('criteria');

if    ($dfilter = "Email") { $filter = "mail=$criteria"; }
elsif ($dfilter = "Name")  { $filter = "cn=$criteria";   }

&connect;

$ldap->bind;

my $result = $ldap->search(
       base   => $dn,
       scope  => $scope,
       filter => $filter
    );

die $result->error if $result->code;

&startHTMLpage;

# display results

&endHTMLpage;

$ldap->unbind;

}

#################
sub connect
{
# Create new connection to mail server
$ldap = Net::LDAP->new($hostname,
       port    => $port,
       debug   => 3,
       timeout => 30
    ) || die ("Failed to open connection to mail server");

}


----- End forwarded message -----

Re: small LDAP.pod patch

[Graham B. <gb...@po...>]

Thanks

Graham.


On Wed, Jul 31, 2002 at 03:28:19PM -0400, Matt Selsky wrote:
> Fixes a spelling error.
> 
> --- LDAP.pod.orig	Wed Jul 31 15:24:25 2002
> +++ LDAP.pod	Wed Jul 31 15:26:32 2002
> @@ -611,7 +611,7 @@
>  
>  A filter that defines the conditions an entry in the directory must meet
>  in order for it to be returned by the search. This may be a string or a
> -L<Net::LDAP::Filter> object. See L<Net::LDAP::Filter> for a defintion of
> +L<Net::LDAP::Filter> object. See L<Net::LDAP::Filter> for a definition of
>  the filter format.
>  
>  =item attrs
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by: Dice - The leading online job board
> for high-tech professionals. Search and apply for tech jobs today!
> http://seeker.dice.com/seeker.epl?rel_code=31

small LDAP.pod patch

[Matt S. <se...@co...>]

Fixes a spelling error.

--- LDAP.pod.orig	Wed Jul 31 15:24:25 2002
+++ LDAP.pod	Wed Jul 31 15:26:32 2002
@@ -611,7 +611,7 @@
 
 A filter that defines the conditions an entry in the directory must meet
 in order for it to be returned by the search. This may be a string or a
-L<Net::LDAP::Filter> object. See L<Net::LDAP::Filter> for a defintion of
+L<Net::LDAP::Filter> object. See L<Net::LDAP::Filter> for a definition of
 the filter format.
 
 =item attrs

Re: Any help...

[Joseph K. <jk...@ro...>]

try
use Net::LDAP;
instead of
use NET::LDAP;

----- Original Message -----
From: "Khandelwal, Radhesham (Radhesham) %" <sh...@ag...>
To: <per...@li...>
Sent: Tuesday, July 16, 2002 3:31 PM
Subject: Any help...


> Hello,
> I have a problem, I am unable to run my perl script at command line of
Unix.
> perl script has just 2 lines.
>
> #! usr/bin/perl
> use NET::LDAP;
>
> it end up throwing error
>
> Can't locate Net/LDAP.pm in @INC (@INC contains...path) at ldap_test.pl
line
> 2.
>
> I have LDAP.pm package existing at /usr/perl5/site_perl/5.005/Net
> I have all other scripts running, even DBI too.
>
>
>
> I will appreciate your help
> Thanks
> Sham
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by: Jabber - The world's fastest growing
> real-time communications platform! Don't just IM. Build it in!
> http://www.jabber.com/osdn/xim
>

[Fwd] a moddn error

[Graham B. <gb...@po...>]

----- Forwarded message from Guoben Li <gu...@my...> -----

Date: Mon, 29 Jul 2002 14:47:58 -0700
To: <gb...@po...>
Cc: "Guoben Li" <gu...@my...>
From: "Guoben Li" <gu...@my...>
Subject: a moddn error

Hi Graham,

   I have a script which uses moddn(), among other things, on Solaris and it works.
I know that perl-ldap has not been tested on w2k but I tried anyway because there
is a need here.

   1) multiple item modify() doesn't work but I was able to use multiple single item
modify() as workaround;

   2) $result = $ldap->moddn( $udn, 
			deleteoldrdn => 'true',
			newrdn => "CN=$uid",
			newsuperior => "OU=$TRM_OU,$LDAP_ROOT");
	reported error: No value found for CHOICE.  I was unable to find the error in
LDAP.pm.

  Do you have any suggestion?  If you do please advise,

Thanks,

Guoben Li


----- End forwarded message -----

Re: DSML.pm and DSML pretty print option request.

[Chris R. <chr...@me...>]

Graham Barr <gb...@po...> wrote:
> Rather than adding a option 2, I would preer the user to specify
> the line ending characters. Maybe we change the pretty option
> to pass the line ending characters wanted, or we add another
> option to do that.

Doesn't XML have a canonical line end character? The last para of:

	<http://www.w3.org/TR/2000/REC-xml-20001006#sec-line-ends>

suggests so. But adding an option to specify arbitrary line-ending strings
is probably OK, though you will probably want to croak if the user tries to
use a string containing non-white space :-)

Cheers,

Chris

Re: DSML.pm and DSML pretty print option request.

[Clif H. <cl...@di...>]

> 
> On Mon, Jul 29, 2002 at 09:24:21AM -0500, Clif Harden wrote:
> > 
> > Graham,
> > 
> > I found another problem with the dsml module.
> > It is not base64 encoding binary attributes.
> 
> Can you send a testcase.


I will send you one.




> 
> Soon I should have the cpan RT system sending/monitoring
> the mailing list so that bugs would then be sent to
> bug...@rt...
> 
> > Also do we still need the DSML directory since 
> > we are no longer using XML::Parser.
> 
> No we don't. The tarball should not create it. If you have one
> it will be a leftover from a previous install.


It will be gone soon.


> 
> > Now for the pretty print option request.
> > 
> > Currently when we do a pretty print we use 1 as the
> > option value.  This will insert a "\n" between elements
> > so that it can be read easily on a UNIX system.
> > 
> > It would be nice to have an option value of 2 so that
> > we could insert a "\r\n" between elements so that 
> > the data could be easily read on a PC.  I have a soap
> > server and Visual Basic system that could use the
> > option.  
> 
> You mean you are creating the file on a UNIX box, and transfering
> to a PC ?

NO! I am not that dumb! 

I do a LDAP request to my SOAP server, the server does the Net::LDAP 
work, and sends back the LDAP data as XML.  It is all message traffic 
and gets around all of the problems assoicated with M$ ADO.  Unix 
systems can use it too.  Pretty slick system, but still needs some 
work to make it really usefull.

It is a very simple SOAP client/server system.  

> 
> Rather than adding a option 2, I would preer the user to specify
> the line ending characters. Maybe we change the pretty option
> to pass the line ending characters wanted, or we add another
> option to do that.

Specifing the line ending characters is probably the best solution.
Then it is up to the programmer to decide what to use and it makes
it platform independent.


> 
> Graham.
> 
> 


Clif

Re: DSML.pm and DSML pretty print option request.

[Graham B. <gb...@po...>]

On Mon, Jul 29, 2002 at 09:24:21AM -0500, Clif Harden wrote:
> 
> Graham,
> 
> I found another problem with the dsml module.
> It is not base64 encoding binary attributes.

Can you send a testcase.

Soon I should have the cpan RT system sending/monitoring
the mailing list so that bugs would then be sent to
bug...@rt...

> Also do we still need the DSML directory since 
> we are no longer using XML::Parser.

No we don't. The tarball should not create it. If you have one
it will be a leftover from a previous install.

> Now for the pretty print option request.
> 
> Currently when we do a pretty print we use 1 as the
> option value.  This will insert a "\n" between elements
> so that it can be read easily on a UNIX system.
> 
> It would be nice to have an option value of 2 so that
> we could insert a "\r\n" between elements so that 
> the data could be easily read on a PC.  I have a soap
> server and Visual Basic system that could use the
> option.  

You mean you are creating the file on a UNIX box, and transfering
to a PC ?

Rather than adding a option 2, I would preer the user to specify
the line ending characters. Maybe we change the pretty option
to pass the line ending characters wanted, or we add another
option to do that.

Graham.

DSML.pm and DSML pretty print option request.

[Clif H. <cl...@di...>]

Graham,

I found another problem with the dsml module.
It is not base64 encoding binary attributes.

Also do we still need the DSML directory since 
we are no longer using XML::Parser.


Now for the pretty print option request.

Currently when we do a pretty print we use 1 as the
option value.  This will insert a "\n" between elements
so that it can be read easily on a UNIX system.

It would be nice to have an option value of 2 so that
we could insert a "\r\n" between elements so that 
the data could be easily read on a PC.  I have a soap
server and Visual Basic system that could use the
option.  

Regards,

Clif 

Net::LDAP, mod_perl and localhost as LDAP Server

[Christian J. <chr...@kn...>]

Hello!

i have some troubles using NET::LDAP with mod_perl:

when i use localhost as servername for the LDAP server i always got an
"invalid credentials" error with code 49. when i use the dns name of the
machine i can connect, bind and whatever i want to do with Net::LDAP.

when i use the script without mod_perl i can also connect to
localhost...

can anybody plz tell me whats going wrong?

use strict;
use diagnostics;
use Net::LDAP;

my $ldap =3D Net::LDAP->new("localhost", version =3D> 3) or die "error: $@\=
n";
my $rc =3D $ldap->bind("cn=3DManager,dc=3Dknapp,dc=3Dintern", password =3D>=
 "password", version =3D> 3);

thx, Chris

Apache/1.3.22
mod_perl/1.26
libnet-ldap-perl 0.25-2

--=20
KNAPP Logistics Automation  http://www.knapp.com
Ing. Christian J=F6lly        Tel/FAX: (++43) 316 / 495 1926 / 495 394
G=FCnter-Knapp-Stra=DFe 5-7     A-8075 Hart bei Graz

Re: :LDAP, PHP, NDS and Inconsistencies

[Harald W. <hwa...@ha...>]

Chris Russell wrote:

> I found the problem. This:
>
> if (!($ldap->bind(dn=>$ACCOUNT, $PASSWORD))) {
>     die "$ACCOUNT cannot bind to $SERVER with the password you supplied\n";
> }
>
> should look like this:
>
> if (!($ldap->bind(dn=>$ACCOUNT, password => $PASSWORD))) {
>     die "$ACCOUNT cannot bind to $SERVER with the password you supplied\n";
> }
>
> I wasn't feeding the bind method the password statement correctly but it was
> still acting as though the bind was successful.

I think bind always returns true. You have to check $ldap->code (and $ldap->error, if the former is defined)

after a bind. It might as well be that You automatically bind as anonymous when presentng the wrong credentials.

Regards,

    Harals

--
Harald Wagener*An der Alster 42*20099 Hamburg*http://www.fcb-wilkens.com

RE: :LDAP, PHP, NDS and Inconsistencies

[Chris R. <C.G...@Br...>]

I found the problem. This:

if (!($ldap->bind(dn=>$ACCOUNT, $PASSWORD))) {
    die "$ACCOUNT cannot bind to $SERVER with the password you supplied\n";
}

should look like this:

if (!($ldap->bind(dn=>$ACCOUNT, password => $PASSWORD))) {
    die "$ACCOUNT cannot bind to $SERVER with the password you supplied\n";
}

I wasn't feeding the bind method the password statement correctly but it was
still acting as though the bind was successful.

Thanks to all who offered their help.

Re: more as one attributes in filter

[Jim H. <ha...@us...>]

To search for cn being either Frank or Thomas or Karl use
  (|(cn=Frank)(cn=Thomas)(cn=Karl))
Tor search for the range of modification times, use
  (&(modifyTimestamp >= 20020101000000Z)(modifyTimestamp >=20020131235959Z))

Net::LDAP is gracious enough to add the outermost () if you omit them, but the
actual protocol requires them.
  --Jim

On Tue, 23 Jul 2002 Bet...@gm... wrote:

> Hello, i have an new question over Net::LDAP ... i hope is my last Question
> for this Project.
> How can i search for more as One Attribute, and how can i attach the
> Attributes (and, or)
> in RFC1960 and other RFCs stand this form:
> (cn=Frank) (| (cn=thomas))
> but when i'm write this in my code, i dont get Entries from the x.500 Server
> but the Code is 87.
> espacially i want Attach (link) the Modifikation Timestamp Attribut so that
> i can say, i want all Entries, that are modifikatet between Time1 and Time2
> Pseudocode, which dosn't work
> filter=> "(modifyTimestamp >= 20020101000000Z) AND (modifyTimestamp >=
> 20020131235959Z)"
>
> how can i do this?
> Thanks for the Answers, ands also for the Answers from Yesterday.
> Frank
>
> --
> GMX - Die Kommunikationsplattform im Internet.
> http://www.gmx.net
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
>

more as one attributes in filter

[<Bet...@gm...>]

Hello, i have an new question over Net::LDAP ... i hope is my last Question
for this Project.
How can i search for more as One Attribute, and how can i attach the
Attributes (and, or)
in RFC1960 and other RFCs stand this form:
(cn=Frank) (| (cn=thomas))
but when i'm write this in my code, i dont get Entries from the x.500 Server
but the Code is 87.
espacially i want Attach (link) the Modifikation Timestamp Attribut so that
i can say, i want all Entries, that are modifikatet between Time1 and Time2
Pseudocode, which dosn't work
filter=> "(modifyTimestamp >= 20020101000000Z) AND (modifyTimestamp >=
20020131235959Z)"

how can i do this?
Thanks for the Answers, ands also for the Answers from Yesterday.
Frank

-- 
GMX - Die Kommunikationsplattform im Internet.
http://www.gmx.net

Re: Net::LDAP, PHP, NDS and Inconsistencies

[Paul L. <li...@so...>]

Chris,
 I've been successfull reading attributes from User objects in NDS
using both PerLDAP and Net::LDAP. The main thing is that your NetWare
server won't talk to you unless you're using SSL ( or you've overridden
the security settings on the server which is a really bad idea). If you
export youself a certificate (exact instructions escape me at the
moment) and use Net::LDAPS, and authenticate as a user who has rights to
do so, you should be able to read (or write)  just about anything from
NDS.
Paul




--
Paul Lieberman                                     li...@so...
Systems Engineer                                 541-552-6962
Computing Services Center
Southern Oregon University
Ashland, OR


>>> "Chris Russell" <C.G...@Br...> 07/22/02 08:51AM >>>
Hi Folks,

I'm trying to use Net::LDAP to evaluate a zenWorkstationGroup object so
that
I can extract the list of Workstation objects that are members of this
group. My ultimate intention with this is to produce both a web page
and a
command line tool that will enable me to re-image an entire room of
workstations by setting the relavent flag in the workstation objects.
I'm an
intermediate Perl user and a bit of a noob with PHP and LDAP. I've
used
Net::LDAP to extract e-mail address information from LDIF files before
but
that's about it.

I'm having trouble getting consistent results from the three different
tools
I'm using, Perl, PHP and Softerra LDAP Browser.  With the browser I can
see
the following attributes in the object:

	* equivalentToMe=(an array of workstation names)
	* objectClass=['zenWorkstationGroup', 'top', 'groupOfNames']
	* member=(an array of workstation names)
	* cn=CC0141

The quick hack PHP script I cobbled together also returned these
attributes.
My problem comes with Perl, which seems like it's just making it up
and
trying to palm me off with the results. These are the attributes it
returns:

	* guid
	* objectclass
	* revision

Apart from objectlass, I cannot see any of these other attributes in
any
other LDAP tool. More importantly, I cannot get at the 'member'
attribute
which is the one I really need.

The code I'm using is listed below, with the PHP code added below that.
As
you can see with the Net::LDAP code I'm using the hash reference method
on
the results, I've also tried returning the results as an array of
Net::LDAP::Entry objects and I get the same.

Help! I don't really know where to turn here, I've searched the
Net::LDAP
mailing lists through Google but couldn't come up with anything
relavent. I
found a reference in the newsgroup novell.devsup.perl to missing
attributes
but it was over a year old and the advice was to make sure some
dot-release
of NDS 7 was installed. We're currently on 8.5.12a.

I'd be very grateful if anyone could offer some advice or spin me round
and
point me ion the right direction.

Thanks in advance,
Chris Russell

Computer Centre,
University of Bradford.


## Code listing

# SNIP connection details

my $Result = $ldap->search (
                base => $BASE,
                scope => $SEARCH_SCOPE,
                filter => '(objectclass=zenWorkstationGroup)',
                attrs =>  ['*']
);

# Do something with errors
if ($Result->code ) {
    LDAPerror("Searching",$Result);
}

print STDERR "\nSearch returned " . $Result->count . " results\n\n";
my $Entries = $Result->as_struct;

foreach $entry (sort keys %{$Entries}) {
    print "DN: " . $entry . "\n";
    foreach $subentry (sort keys %{$Entries->{$entry}}) {
        print $subentry . "\n";
    }
    print "\n";
}

$ldap->unbind;

sub LDAPerror {
    my ($from,$mesg) = @_;

    print STDERR "\n";
    print STDERR "Return code: ",$mesg->code . "\n";
    print STDERR "Message: ", ldap_error_name($mesg->code);
    print STDERR " : ",        ldap_error_text($mesg->code);
    print STDERR "MessageID: ",$mesg->mesg_id . "\n";
    print STDERR "DN: ",$mesg->dn;
    print STDERR "\n";
}

## PHP Code

    //Perform Search
    $results_ident = ldap_search($link_indent,
$LDAP_ROOT_DN[$SERVER_ID],
$ldap_query);

    $entry = ldap_first_entry($link_indent, $results_ident);

    echo "<h1>";
    echo ldap_get_dn($link_indent, $entry);
    echo "</h1>";

    foreach (ldap_get_attributes($link_indent, $entry) as $attr) {
        echo $attr;
        echo "<br>";
    }



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf