perl-ldap-dev

Re: Change objectclass (Long lines)

[Jan G. <jan...@pr...>]

Hi, Chris && List!

> If any of those object classes have mandatory attributes, you'll need t=
o
> supply values for those attributes in the same modify operation.

I tried it as follows:

--- snip ---
  $param->{ldap_add} =3D ['objectclass' =3D> [qw(posixaccount posixgroup =
shadowaccount)],
=09=09=09'uidnumber' =3D> $uidnr, 'gidnumber' =3D> $gidnr,
                                    'homedir'   =3D> "/data/users/$param-=
>{uid}"];
  &update_ldap_entry($param);
--- snip ---

&update_ldap_entry is tested and works.

IIRC (tried a lot of different things) this failed with Err 65. Is there =
something wrong with this?

TIA,
Jan
--=20
cat /dev/world | perl -e "while (<>) {(/(^.*? \?) 42 \!/) && (print $1)}"
errors->(c)
-=20

Re: Change objectclass

[Chris R. <chr...@ma...>]

On 5/3/03 12:30 pm, Jan Gruber <jan...@pr...> wrote:
> Hi, List!
> 
> I'm trying to change the objectclass of a ldap entry.
> I use the $handle->modify method.
> 
> When i try to change the objectclass (add posixaccount, posixgroup,
> shadowaccount)  I get an Err 65; Object class violation.

If any of those object classes have mandatory attributes, you'll need to
supply values for those attributes in the same modify operation.

Cheers,

Chris

Change objectclass

[Jan G. <jan...@pr...>]

Hi, List!

I'm trying to change the objectclass of a ldap entry.
I use the $handle->modify method.

When i try to change the objectclass (add posixaccount, posixgroup,=20
shadowaccount)  I get an Err 65; Object class violation.

Since objectclass is multivalued, I thought it could be the fault of my=20
change routine. But if I update another multivalued attribute of the same=
=20
entry with this routine, everything works as described in the docs.=20

So I'm stuck. There are no ACL's set (Netscape Directory Server).
Any hints?

TIA,
Jan
--=20
cat /dev/world | perl -e "while (<>) {(/(^.*? \?) 42 \!/) && (print $1)}"
errors->(c)
-=20

Re: perl-ldap-dev digest, Vol 1 #766 - 2 msgs

[Mikael L. <mik...@te...>]

> From: harsh <ha...@cs...>
> To: per...@li...
> Subject: Perl Compilation error
>=20
> Can someone explain the meaning of the error
>=20
> Status: 302 Moved
>=20
> harsh

Perhaps it=B4s a HTTP status code? Look at:
http://www.w3.org/Protocols/HTTP/HTRESP.html

/Mike

Re: Re[2]: perl-ldap-0.2701 on Win XP

[Graham B. <gb...@po...>]

On Tue, Mar 04, 2003 at 11:31:54PM +0100, Roland Bauer wrote:
> Yes, it's a perl script but it starts with #!/bin/sh ;-) 

So, if you cannot run it directly just type

  perl install-nomake

its not exactly rocket science

Graham.

Re[2]: perl-ldap-0.2701 on Win XP

[Roland B. <rol...@ff...>]

On Sun, 2 Mar 2003 22:00:24 +0000 Graham Barr <gb...@po...> wrote:

GB> > 1) On my Windows XP the shell script install-nomake cannot be
GB> executed
GB> > because of the #!/bin/sh

[...]

GB> It is just a perl script, but #!perl is not portable either. With is
GB> having
GB> it as #!/bin/sh at least some people can just run it, others just have
GB> to invoke it as 'perl install-nomake'

Yes, it's a perl script but it starts with #!/bin/sh ;-) 
It tells me ...
Can't exec /bin/sh at install-nomake line 1.
... when I invoke it as 'perl install-nomake'.

I thought Windows would ignore this line entirely, but it
seems that ActivePerl is searching for the regex /perl/i
in the first line of the script.

So the following shebang-lines seem to be accepted:
#!/bin/sh perl
#!/bin/sperlh
#!+++++++perl+++++++++++
#this is no perl script
#--------PERL-PERL-----------
#!perl

This will be ok as well:
#!/bin/sh -dummy perl

When the script starts with this line I can execute it with
'perl install-nomake' on Windows XP / ActivePerl 5.6.1.

Or another possibility:
An additional file install-nomake.bat which could be
started directly by typing 'install-nomake' on Windows.

Or three files:
install-nomake.pl
install-nomake      ... shell script calling install-nomake.pl
install-nomake.bat  ... DOS batch script calling install-nomake.pl  

These files would not conflict.

Regards
Roland

Re: Active State Perl-ldap

[Clif H. <cl...@go...>]

As of last week the ppm version of Net::LDAP is not up to date. 

Clif



On Tue, Mar 04, 2003 at 02:46:10PM -0600, Al Lilianstrom wrote:
> Try using PPM that is provided with ActiveState Perl. Search for ldap 
> once you've fired it up and then install. You'll also want Convert-ASN1 
> and Convert-BER.
> 
> 	al
> 
> Brian Sullivan wrote:
> >All,
> >
> >I am having a heck of a time getting the perl-ldap modules installed 
> >under windows 2K.  I have downloaded the Active State Perl and the 
> >perl-ldap modules but I cannot compile them because I don't have gmake 
> >for windows.  To get gmake I need the VC++ compiler from Microsoft which 
> >I don't have.  Can anyone recommend a less painful approach?
> >
> >AtDhVaAnNkCsE,
> >Brian
> >
> >
> 
> Al Lilianstrom
> CD/CSS/CSI
> Al....@fn...
> 
> 

[patch] Deep recursion when trying to bind without valid Kerberos ticket

[Maurice M. <rm...@Fh...>]

hi

I just get these messages when trying to bind with sasl/gssapi without
an valid kerberos ticket:
Deep recursion on subroutine "Net::LDAP::_sendmesg" at /usr/share/perl5/Net/LDAP/Bind.pm line 56.
Deep recursion on subroutine "Net::LDAP::sync" at /usr/share/perl5/Net/LDAP.pm line 643.
Deep recursion on subroutine "Net::LDAP::_recvresp" at /usr/share/perl5/Net/LDAP.pm line 607.
Deep recursion on subroutine "Net::LDAP::Bind::decode" at /usr/share/perl5/Net/LDAP.pm line 688.

the problem is that $sasl_conn->client_start or client_step just
return undef resulting in an endless loop. Hmm.. maybe it would
be advisable to check for defined() on $resp in
ldap/lib/Net/LDAP/Bind.pm too...

cu
Maurice

diff -ur ldap-orig/lib/Net/LDAP.pm ldap/lib/Net/LDAP.pm
--- ldap-orig/lib/Net/LDAP.pm   2003-01-27 19:24:15.000000000 +0100
+++ ldap/lib/Net/LDAP.pm        2003-03-04 22:17:58.000000000 +0100
@@ -253,6 +253,7 @@
     );
 
     my $initial = $sasl_conn->client_start;
+    _error($ldap, $mesg, LDAP_LOCAL_ERROR,"$@") unless defined($initial);
 
     $passwd = {
       mechanism   => $sasl_conn->mechanism,

Re: Active State Perl-ldap

[Graham B. <gb...@po...>]

On Tue, Mar 04, 2003 at 03:35:23PM -0500, Brian Sullivan wrote:
> All,
> 
> I am having a heck of a time getting the perl-ldap modules installed 
> under windows 2K.  I have downloaded the Active State Perl and the 
> perl-ldap modules but I cannot compile them because I don't have gmake 
> for windows.  To get gmake I need the VC++ compiler from Microsoft which 
> I don't have.  Can anyone recommend a less painful approach?

You can try editing you installed Config.pm and give it the name of
a version of make you do have (eg nmake)

MakeMaker used Config.pm to determin which version of make was used
to build perl and assumes that you are using the same version when
it chooses what format to write the makefile in.

Graham.

Re: Active State Perl-ldap

[Al L. <al....@fn...>]

Try using PPM that is provided with ActiveState Perl. Search for ldap 
once you've fired it up and then install. You'll also want Convert-ASN1 
and Convert-BER.

	al

Brian Sullivan wrote:
> All,
> 
> I am having a heck of a time getting the perl-ldap modules installed 
> under windows 2K.  I have downloaded the Active State Perl and the 
> perl-ldap modules but I cannot compile them because I don't have gmake 
> for windows.  To get gmake I need the VC++ compiler from Microsoft which 
> I don't have.  Can anyone recommend a less painful approach?
> 
> AtDhVaAnNkCsE,
> Brian
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: Etnus, makers of TotalView, The 
> debugger for complex code. Debugging C/C++ programs can leave you 
> feeling lost and disoriented. TotalView can help you find your way. 
> Available on major UNIX and Linux platforms. Try it free. www.etnus.com


-- 

Al Lilianstrom
CD/CSS/CSI
Al....@fn...

Active State Perl-ldap

[Brian S. <sul...@dt...>]

All,

I am having a heck of a time getting the perl-ldap modules installed 
under windows 2K.  I have downloaded the Active State Perl and the 
perl-ldap modules but I cannot compile them because I don't have gmake 
for windows.  To get gmake I need the VC++ compiler from Microsoft which 
I don't have.  Can anyone recommend a less painful approach?

AtDhVaAnNkCsE,
Brian

Re: Perl Compilation error

[Paul <yd...@ya...>]

--- harsh <ha...@cs...> wrote:
> Can someone explain the meaning of the error
> Status: 302 Moved

That's sounds like an HTTP return.
302 means the page has been *temporarily* moved, but it knows where
(302 is usually "Found"). 301 is a permanent move.

c.f. http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html


__________________________________________________
Do you Yahoo!?
Yahoo! Tax Center - forms, calculators, tips, more
http://taxes.yahoo.com/

Re: Perl Compilation error

[Peter M. <pet...@ma...>]

Hi,

On Tuesday 04 March 2003 20:16, harsh wrote:
> Can someone explain the meaning of the error
>
> Status: 302 Moved

If you want helpful answers you should provide a bit more=20
of information.

In the other case the answer is "no"

Peter
--=20
Peter Marschall     |   eMail: pet...@ma...
Scheffelstra=DFe 15   |          pet...@ad...
D-97072 W=FCrzburg    |   Tel:   +49 931 14721
PGP: 0BB1 04A3 0FB0 E27F 8018 52BA A286 7B23 9C22 2C83

Perl Compilation error

[harsh <ha...@cs...>]

Can someone explain the meaning of the error

Status: 302 Moved


harsh

AW: Binding to ActiveDirectory

[<MrT...@gm...>]

Thanks a lot.
I solved the problem.
I needed to set a password for my connection account.

Thx
Thorsten

-----Ursprungliche Nachricht-----
Von: per...@li...
[mailto:per...@li...]Im Auftrag von Graham
Barr
Gesendet: Sonntag, 2. Marz 2003 23:02
An: harsh
Cc: Thorsten Muller; per...@li...
Betreff: Re: Binding to ActiveDirectory


On Sun, Mar 02, 2003 at 08:33:36AM +0530, harsh wrote:
> 
> 
> >         $LDAP = Net::LDAP->new($Server)  || die "Cannot connect to
> > $Server\n";
> >         my $mesg = $LDAP->bind(dn => $Account, password => $Password);
> 				^^^^^^^^^^^^^^^
> 		Replace whole with $Account might work

It will not make any difference. The dn => is optional

Graham.


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf

[Fwd] net::ldap at OpenLDAP Developers' Day

[Graham B. <gb...@po...>]

I am not sure who I would classify as a core developer, but I will
not be able to go to this conference. If someone wants to go and
represent Net::LDAP then please speak up.

Graham.

----- Forwarded message from "Kurt D. Zeilenga" <Ku...@Op...> -----

Date: Mon, 03 Mar 2003 11:08:30 -0800
To: Graham Barr <gb...@po...>
From: "Kurt D. Zeilenga" <Ku...@Op...>
Subject: net::ldap at OpenLDAP Developers' Day

Graham,

If one of the net::ldap core developers is planning on attending
the OpenLDAP Developers' Day conference in San Francisco (21 March
2003), we'd welcome a "lightening talk" (3-5 minutes + Q/A) about
the current state of net::ldap (including possibly a discussion
of whatever net::ldap/OpenLDAP interoperability issues there
might be) from them.  

More info about the conference can be found at:
	http://www.openldap.org/conf/odd-sfo-2003/

Please feel free to forward this invite to other net::ldap core
developers.

Regards, Kurt


----- End forwarded message -----

Re: Search results not coming back sorted using iPlanet

[Graham B. <gb...@po...>]

On Mon, Mar 03, 2003 at 11:56:01AM -0500, Sta...@GI... wrote:
> Hey,
> 
> I've followed the examples on how to get the server to return
> sorted search results, but I have been unable to get the server
> to do so.  Latest iPlanet Directory Server is what I'm using.  The
> search does return the results, but they are not sorted.  I know
> iPlanet supports this, has anyone gotten sorted searches to
> work on iPlanet before?

Can you post the code you are using ?

Graham.

Search results not coming back sorted using iPlanet

[<Sta...@GI...>]

Hey,

I've followed the examples on how to get the server to return
sorted search results, but I have been unable to get the server
to do so.  Latest iPlanet Directory Server is what I'm using.  The
search does return the results, but they are not sorted.  I know
iPlanet supports this, has anyone gotten sorted searches to
work on iPlanet before?

-Stan

Re: Binding to ActiveDirectory

[Mark W. <ma...@mj...>]

Hi,
You'll need to set a password for your account otherwise you can't se=
arch AD
via LDAP. AD only allows anonymous searches on the root (not very use=
ful)
but it works better than I expected when you have the proper access
information (which is complicated by the fact that I don't know of an=
 easy
way to determine the user DN branch just from the AD DIT).

Mark
----- Original Message -----
=46rom: "Thorsten M=FCller" <MrT...@gm...>
To: <per...@li...>
Sent: Saturday, March 01, 2003 4:55 PM
Subject: Binding to ActiveDirectory


> Hi NG,
> first of all, i want to say Hello, cause this is my first mail to t=
his
> group.
> My name is Thorsten and i'm new to LDAP and M$ ActiveDirectory.
>
> I set up an AD and try to write a perl script under Linux
> to connect/bind with username and password to my AD.
>
> This is my perl script:
>
> #!/usr/lib/perl
>
> #use Net::LDAP;
> use Net::LDAP qw(:all);
> use Net::LDAP::Util qw( ldap_error_name ldap_error_text) ;
>
>
> sub LDAPError {
>         my ($from, $mesg) =3D @_;
>         print STDERR "\n";
>         print STDERR "Return code: ", $mesg->code . "\n";
>         print STDERR "Message: ", ldap_error_name($mesg->code);
>         print STDERR " : ", ldap_error_text($mesg->code);
>         print STDERR "MessageID: ", $mesg->mesg_id . "\n";
>         print STDERR "DN: ", $mesg->dn;
>         print STDERR "\n";
> }
>
> sub LDAPConnect {
>         my ($Server, $Account, $Password) =3D @_;
>         $Password =3D "";
>         my $LDAP;
>         $LDAP =3D Net::LDAP->new($Server)  || die "Cannot connect t=
o
> $Server\n";
>         my $mesg =3D $LDAP->bind(dn =3D> $Account, password =3D> $P=
assword);
>         print "Verbindung mit $Server als $Account\n";
>         LDAPError("Binding", $mesg) if $mesg->code();
>         return 0 if $mesg->code();
>         return $LDAP;
> }
>
>
> LDAPConnect("192.168.1.200","CN=3DThorsten M=FCller,DC=3Dtest-domai=
n,DC=3Dde","");
>
> #$ldap->unbind;
>
> When i start my script i receive the following:
>
> Return code: 48
> Message: LDAP_INAPPROPRIATE_AUTH : The server requires the client w=
hich
had
> attempted to bind anonymously or
> without supplying credentials to provide some form of credentials
> MessageID: 1
> DN:
>
> Is it right, that the username for the connection is the DN of any =
user
> i created in my AD.
>
> I used M$'s Tool "ldifde" to receive the details (including the dn)=
.
> My user has no password set.
>
> I don't know where to search for the failure.
>
> Hopefully someone can help.
>
> Thanks & Regards
> Thorsten
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
>
>

Re: Binding to ActiveDirectory

[Graham B. <gb...@po...>]

On Sun, Mar 02, 2003 at 08:33:36AM +0530, harsh wrote:
> 
> 
> >         $LDAP = Net::LDAP->new($Server)  || die "Cannot connect to
> > $Server\n";
> >         my $mesg = $LDAP->bind(dn => $Account, password => $Password);
> 				^^^^^^^^^^^^^^^
> 		Replace whole with $Account might work

It will not make any difference. The dn => is optional

Graham.

Re: perl-ldap-0.2701 on Win XP

[Graham B. <gb...@po...>]

On Sat, Mar 01, 2003 at 05:12:53PM +0100, Roland Bauer wrote:
> Hi, I have just subscribed
> to the list so maybe these are known issues ... 
> 
> 1) On my Windows XP the shell script install-nomake cannot be executed
> because of the #!/bin/sh
> However, the Perl part of the script does the job. I've called it install-nomake.pl
> (see the "patch" below). Is there really a need for a shell script or
> could install-nomake be just a Perl script?

It is just a perl script, but #!perl is not portable either. With is having
it as #!/bin/sh at least some people can just run it, others just have
to invoke it as 'perl install-nomake'

Graham.

RE: search hangs around forever

[Hirmke M. <Mi...@Hi...>]

Hi,

[...]
> 
> Using .2701 here are some code snippets of what I do to get 
> the attributes and objectclasses.

thx for your hints!

[...]
> 
> Regards,
> 
> Clif

Bye.
Michael.

RE: search hangs around forever

[Hirmke M. <Mi...@Hi...>]

Hi,

[...]
> When I look at 
> http://search.cpan.org/author/GBARR/perl-ldap-0.2701/lib/Net/LDAP/Schema.pod
> I see the methods I described among others.

you are perfectly right, but compare that one to
http://theoryx5.uwinnipeg.ca/CPAN/data/perl-ldap/Net/LDAP.html
which is linked from
http://theoryx5.uwinnipeg.ca/mod_perl/cpan-search?site=ftp.funet.fi;join=and;stem=no;arrange=file;case=clike;download=auto;age=;filetype=%20module%20name;modinfo=10366

and therefore seems to belong to version 0.2701!


[...]
> Instead of using the plural try the singular (method names and arguments
> taken from the URL above):
> attribute NAME_OR_OID
> objectclass NAME_OR_OID

Thx a lot - I will give it a try!

> Yours
> PEter

Bye.
Michael.

Re: Binding to ActiveDirectory

[harsh <ha...@cs...>]

>         $LDAP = Net::LDAP->new($Server)  || die "Cannot connect to
> $Server\n";
>         my $mesg = $LDAP->bind(dn => $Account, password => $Password);
				^^^^^^^^^^^^^^^
		Replace whole with $Account might work

harsh

Re: Authentication Problem

[harsh <ha...@cs...>]

Thanks to everyone,

Actually i 2 wrote similar code but it gave success
for every password i entered..
Later on I discovered the Problem is with Our LDAP 
server not with the code.It exepts only 1st 8 digits of passwd
and rejects remaining..
that means:-
Login:harsh
Passwd:harshpassword
Success

Login:harsh
Passwd:harshpass
Success

May be that's a bug :-)
Cheers
harsh