perl-ldap-dev

Minor documentation patches

[Viktor L. <le...@lu...>]

Hello all.

I have been giving a course on Net::LDAP, and in preparing the material I found a few things 
with the documentation that I thought might be wrong. I am attaching a few diff:s with 
suggestions for changes. I am not at all sure that the changes are correct, but I thought that 
I might as well share them.

Best regards,
 Viktor Leijon (le...@lu...) 

Re: Adding records

[Vic G. <vg...@co...>]

Thanks!  I actually got the entry->add method to work - seems that I had a 
bad attribute name, and didn't catch it.

Vic

At 02:38 PM 6/29/01, Clif Harden wrote:
> >
> > Thanks, Cliff - but my basic problem is that I'm trying to use a variable
> > list of attributes.  I'm peering through the archives, and haven't found
> > one that makes clear to me the best way to
> > add a record with variable attribute list - I understand that it should be
> > an array, but haven't found a way to make it actually work.
> >
> > Vic
> >
> > At 01:16 PM 6/29/01, Clif Harden wrote:
> > > >
> > > > I just wish that I could stop beating my head against the wall.....
> > > >
> > > > I'm trying to add a record to our LDAP server using Net::LDAP.  I've
> > > > successfully modified and deleted records, so I know that our install
> > > > should be good, and I've gotten the basics down.  I'm not much of a 
> perl
> > > > programmer (more experience with C), so it's possible I'm just missing
> > > some
> > > > obvious way to do this in Perl.....
> > > >
> > > > I've got a variable number of attributes that I'm trying to add, so I
> > > first
> > > > tried...
> > > >
> > > > $ldap->add ($dn, attrs=>%hashcontainingattribute/valuepairs);
>                               ^
>                               |  This is a hash or associative array
>NOT the same as general array.  You need a general array.
>
>
>Since you want varying attributes from entry to entry you could
>do the following;
>
>@ADD = ();  # Create a new array
>
># do the next 2 lines in some sort of loop.
>
>push(@ADD, "attribute"); # add attribute
>push(@ADD, "value"); # add attribute`s value
>
>  #
>  # When you are ready to add the entry to the directory
>  # do;
>
>  $mesg = $ldap->add( $DN, attrs => [ @ADD ] );
>
>Regards,
>
>Clif

----
Vic Goldberg
Programer Analyst Lead, CIT
Cornell University
(607) 254-7441 (Voice)   (607) 255-6982 (Fax)
"Do not argue with Dragons,
for you are crunchy and taste good dipped in ketchup. "

Re: Perl load times with Net::LDAP

[Yann R. <at...@at...>]

The reason is simple: Net::LDAP is a lot of pure perl code. This takes awhile 
for Perl to compile. The only way around this is to utilize a caching 
mechanism such as FastCGI or mod_perl.

Yann

On Friday 29 June 2001 11:43 am, Jim McCullars wrote:
> Hi, I have just started using directory services and am using Net::LDAP to
> populate the directory and am working on a web interface to directory data
> for updating and searching.  It's going pretty well, except that perl
> seems to take a long time to load with "use Net::LDAP" in the source.  Not
> so much of a problem with running command-line stuff, but it will be for
> running CGI programs.  Most perl scripts run quite quickly, but here is a
> small test script:
>
> #!/usr/local/bin/perl
> use Net::LDAP;
> print"about to initialize...B\n";
> $ldap = Net::LDAP->new("info2.uah.edu") or die "$@";
> print"done initializing, about to bind\n";
> $ldap->bind($dn, password => $pw, version => 3);
> print"done binding\n";
> $ldap->unbind;
>
> When I run the script, it takes about 5-7 seconds before I get the first
> print statement, then all three run within one second.  I am pleased with
> the performance after it gets started, but something is taking too long to
> load.  This is perl 5.6.0 under Solaris 2.5.1.  Anyone know what the
> problem could be?  Again, other scripts don't exhibit this behavior.
> Thanks.
>
> Jim
> *-------------------------------------------------------------------------*
> * James H. McCullars                 I Phone: (256) 824-2610              *
> * Director of Systems & Operations   I Fax:   (256) 824-6643              *
> * Information Services               I Internet: mc...@em...    *
> * The University of Alabama          I -----------------------------------*
> *    in Huntsville                   I                                    *
> * Huntsville, AL 35899               I This space for rent - CHEAP!       *
> *-------------------------------------------------------------------------*

-- 

--------------------------------------------------------------------
Yann Ramin			at...@at...
Atrus Trivalie Productions	www.redshift.com/~yramin
AIM				oddatrus
Marina, CA			http://profiles.yahoo.com/theatrus

IRM/IRT Developer               DVfootage.com developer
SNTS Developer                  KLevel Developer

When smashing monuments, save the pedstals -- they always come in handy.
        -- Stanislaw J. Lem, "Unkempt Thoughts"

"Trying to make bits uncopyable is like trying to make water not wet.
The sooner people accept this, and build business models that take 
this into account, the sooner people will start making money again." 
                                                    -- Bruce Schneier 

Deep in the human unconscious is a pervasive need for a logical 
universe that makes sense. But the real universe is always one step 
beyond logic.
	- Muad'Dib (Dune, Frank Herbert) 
--------------------------------------------------------------------

Authen::SASL problem

[Adam S. <asa...@um...>]

Sorry if i already sent this around once (i don't remember if i did, but
in any case i'm still stuck) - i'm having problems with getting
Authen::SASL to interface properly with my OpenLDAP server.  I'm running
Red Hat 7.1, OpenLDAP 2.0.7, and Net::LDAP version 0.23.  What's
happening here is that i can bind just fine using a certain identity and
the CRAM-MD5 method off the command line, but when i try to bind through
a perl script using the Authen::SASL module, the same identity, and the
same method, i get an error 80 - no secret in database.  Only one other
person that i know of has run into this ("Fox", ld...@cd...), and he
was never able to figure out what the problem was.  So, I was wondering
if any of you either came across this, or (more likely) are using the
Authen::SASL module succesfully with an OpenLDAP server.  Please let me
know if you are able to use Authen::SASL successfully (as there is
virtually no online documentation of its use) - if i get any responses,
i'll post again with the actual fields and debug outputs and things.
Thanks ahead of time!!!


=================================================================
Adam Saltsman
"Shackle your mind and
Temporary Internet Software Developer            you're left on the
cross;
Internet2/UCAID
where ignorance reigns,
asa...@um...
life is lost."    -Zach de La Roca
=================================================================

Perl load times with Net::LDAP

[Jim M. <ji...@in...>]

Hi, I have just started using directory services and am using Net::LDAP to
populate the directory and am working on a web interface to directory data
for updating and searching.  It's going pretty well, except that perl
seems to take a long time to load with "use Net::LDAP" in the source.  Not
so much of a problem with running command-line stuff, but it will be for
running CGI programs.  Most perl scripts run quite quickly, but here is a
small test script:

#!/usr/local/bin/perl
use Net::LDAP;
print"about to initialize...B\n";
$ldap = Net::LDAP->new("info2.uah.edu") or die "$@";
print"done initializing, about to bind\n";
$ldap->bind($dn, password => $pw, version => 3);
print"done binding\n";
$ldap->unbind;

When I run the script, it takes about 5-7 seconds before I get the first
print statement, then all three run within one second.  I am pleased with
the performance after it gets started, but something is taking too long to
load.  This is perl 5.6.0 under Solaris 2.5.1.  Anyone know what the
problem could be?  Again, other scripts don't exhibit this behavior.
Thanks.

Jim
*-------------------------------------------------------------------------*
* James H. McCullars                 I Phone: (256) 824-2610              *
* Director of Systems & Operations   I Fax:   (256) 824-6643              *
* Information Services               I Internet: mc...@em...    *
* The University of Alabama          I -----------------------------------*
*    in Huntsville                   I                                    *
* Huntsville, AL 35899               I This space for rent - CHEAP!       *
*-------------------------------------------------------------------------*

Re: Adding records

[Clif H. <cl...@di...>]

> 
> Thanks, Cliff - but my basic problem is that I'm trying to use a variable 
> list of attributes.  I'm peering through the archives, and haven't found 
> one that makes clear to me the best way to
> add a record with variable attribute list - I understand that it should be 
> an array, but haven't found a way to make it actually work.
> 
> Vic
> 
> At 01:16 PM 6/29/01, Clif Harden wrote:
> > >
> > > I just wish that I could stop beating my head against the wall.....
> > >
> > > I'm trying to add a record to our LDAP server using Net::LDAP.  I've
> > > successfully modified and deleted records, so I know that our install
> > > should be good, and I've gotten the basics down.  I'm not much of a perl
> > > programmer (more experience with C), so it's possible I'm just missing 
> > some
> > > obvious way to do this in Perl.....
> > >
> > > I've got a variable number of attributes that I'm trying to add, so I 
> > first
> > > tried...
> > >
> > > $ldap->add ($dn, attrs=>%hashcontainingattribute/valuepairs);
                              ^
                              |  This is a hash or associative array
NOT the same as general array.  You need a general array.
                             

Since you want varying attributes from entry to entry you could
do the following;

@ADD = ();  # Create a new array

# do the next 2 lines in some sort of loop.

push(@ADD, "attribute"); # add attribute
push(@ADD, "value"); # add attribute`s value

 #
 # When you are ready to add the entry to the directory
 # do;

 $mesg = $ldap->add( $DN, attrs => [ @ADD ] );

Regards,

Clif 

Re: Adding records

[Vic G. <vg...@co...>]

Thanks, Cliff - but my basic problem is that I'm trying to use a variable 
list of attributes.  I'm peering through the archives, and haven't found 
one that makes clear to me the best way to
add a record with variable attribute list - I understand that it should be 
an array, but haven't found a way to make it actually work.

Vic

At 01:16 PM 6/29/01, Clif Harden wrote:
> >
> > I just wish that I could stop beating my head against the wall.....
> >
> > I'm trying to add a record to our LDAP server using Net::LDAP.  I've
> > successfully modified and deleted records, so I know that our install
> > should be good, and I've gotten the basics down.  I'm not much of a perl
> > programmer (more experience with C), so it's possible I'm just missing 
> some
> > obvious way to do this in Perl.....
> >
> > I've got a variable number of attributes that I'm trying to add, so I 
> first
> > tried...
> >
> > $ldap->add ($dn, attrs=>%hashcontainingattribute/valuepairs);
> >
> > That gave me a An invalid parameter was specified error.
> >
> > So, I tried "add"ing everything into an entry object (including a $dn
> > attribute), and use that variant
> >
> > $ldap->add ($entry);
> >
> > This gives me an encoding error.
> >
> > Anything seem obvious to anyone?  Thanks!
> >
> > Vic
> >
> > ----
> > Vic Goldberg
> > Programer Analyst Lead, CIT
> > Cornell University
> > (607) 254-7441 (Voice)   (607) 255-6982 (Fax)
> > "Do not argue with Dragons,
> > for you are crunchy and taste good dipped in ketchup. "
> >
> >
> >
>
>You are using a hash for attribute/value pairs, it needs
>an array.
>
>Example;
>
>    $mesg = $ldap->add( $DN,
>           attrs => [
>             name  => 'Graham Barr',
>             attr  => 'value1',
>             attr  => 'value2',
>             multi => [qw(value1 value2)]
>           ]
>         );
>
>
>Regards,
>
>Clif

----
Vic Goldberg
Programer Analyst Lead, CIT
Cornell University
(607) 254-7441 (Voice)   (607) 255-6982 (Fax)
"Do not argue with Dragons,
for you are crunchy and taste good dipped in ketchup. "

Re: Adding records

[Clif H. <cl...@di...>]

> 
> I just wish that I could stop beating my head against the wall.....
> 
> I'm trying to add a record to our LDAP server using Net::LDAP.  I've 
> successfully modified and deleted records, so I know that our install 
> should be good, and I've gotten the basics down.  I'm not much of a perl 
> programmer (more experience with C), so it's possible I'm just missing some 
> obvious way to do this in Perl.....
> 
> I've got a variable number of attributes that I'm trying to add, so I first 
> tried...
> 
> $ldap->add ($dn, attrs=>%hashcontainingattribute/valuepairs);
> 
> That gave me a An invalid parameter was specified error.
> 
> So, I tried "add"ing everything into an entry object (including a $dn 
> attribute), and use that variant
> 
> $ldap->add ($entry);
> 
> This gives me an encoding error.
> 
> Anything seem obvious to anyone?  Thanks!
> 
> Vic
> 
> ----
> Vic Goldberg
> Programer Analyst Lead, CIT
> Cornell University
> (607) 254-7441 (Voice)   (607) 255-6982 (Fax)
> "Do not argue with Dragons,
> for you are crunchy and taste good dipped in ketchup. "
> 
> 
>

You are using a hash for attribute/value pairs, it needs 
an array.

Example;

   $mesg = $ldap->add( $DN,
          attrs => [
            name  => 'Graham Barr',
            attr  => 'value1',
            attr  => 'value2',
            multi => [qw(value1 value2)]
          ]
        );


Regards,

Clif

Adding records

[Vic G. <vg...@co...>]

I just wish that I could stop beating my head against the wall.....

I'm trying to add a record to our LDAP server using Net::LDAP.  I've 
successfully modified and deleted records, so I know that our install 
should be good, and I've gotten the basics down.  I'm not much of a perl 
programmer (more experience with C), so it's possible I'm just missing some 
obvious way to do this in Perl.....

I've got a variable number of attributes that I'm trying to add, so I first 
tried...

$ldap->add ($dn, attrs=>%hashcontainingattribute/valuepairs);

That gave me a An invalid parameter was specified error.

So, I tried "add"ing everything into an entry object (including a $dn 
attribute), and use that variant

$ldap->add ($entry);

This gives me an encoding error.

Anything seem obvious to anyone?  Thanks!

Vic

----
Vic Goldberg
Programer Analyst Lead, CIT
Cornell University
(607) 254-7441 (Voice)   (607) 255-6982 (Fax)
"Do not argue with Dragons,
for you are crunchy and taste good dipped in ketchup. "

Re: Net::LDAP failing under Apache mod_perl (again)

[Chris R. <chr...@me...>]

tim fulcher <ful...@dr...> wrote:
> 
> The peculiarity is that the same script works ok under mod_perl on another
> solaris box. On that I've never had any problems with Net::LDAP. From

Using the same version of Solaris with the same patches?

> this I figure it must be somehow related to the configuration of Apache
> (though they are both similar, versions aside) or the machine itself,
> since the errors look like they come from the underlying I/O level.
> 
> I'll maybe try out the AuthNetLDAP module to see if it works

I remember hearing about problems with networking on Solaris 2.6 before -
most people tend to avoid 2.6 and stick with 2.5.x or 7 (or maybe even 8.)

Cheers,

Chris

Re: Net::LDAP failing under Apache mod_perl (again)

[tim f. <ful...@dr...>]

The peculiarity is that the same script works ok under mod_perl on another
solaris box. On that I've never had any problems with Net::LDAP. From this I
figure it must be somehow related to the configuration of Apache (though they
are both similar, versions aside) or the machine itself, since the errors look
like they come from the underlying I/O level.

I'll maybe try out the AuthNetLDAP module to see if it works


Tim

Clif Harden wrote:

> Tim,
>
> I think this same question came up several months ago and
> I think Graham stated the perl-ldap was NOT setup for use with
> mod_perl.
>
> I would check the archive messages to confirm this information.
>
> Regards,
>
> Clif Harden           INTERNET:  c-h...@ti...
>
> >
> >
> > Just another request to see if anyone here has an idea why a script
> > using Net::LDAP works fine from the command line but fails when run
> > under Apache::Registry. Its seems to connect OK but then the bind fails
> > with
> >
> > Mesg 1: I/O Error Resource Temporaily unavailable
> > or
> > Mesg code 82 :  Transport endpoint is not connected
> >
> > This happens regardless of me trying an anonymous bind or as root user.
> > I've got a PHP4 script to connect to the LDAP server fine running on the
> > same Apache server. The perl script also runs OK on another box running
> > perl 5.6.0, apache 1.3.17 & Net::LDAP v0.22.
> >
> > The only fiddling I did to Net::LDAP was to edit line 603 of LDAP.pm to
> > put IO::Select in quotes. This was to stop the error 'can't call method
> > "new" without a package or object reference' I was getting. I think I
> > saw this fix in the archives of this list a while back.
> >
> > Has anybody seen behaviour even remotely similar to this ? I suspect it
> > could be due to the machine set up itself, but where to look or tune is
> > beyond me !
> >
> > My environment:
> > Solaris 2.6
> > Apache 1.3.20
> > mod_perl 1.25
> > Perl 5.00503
> > Net::LDAP v 0.23
> >
> > Thanks for any information you might have
> >
> > Tim Fulcher
> >
> >
> >
>
> --

changing Net::LDAP::Entry changes

[Christopher A B. <ca...@tc...>]

The situation: we're populating MS Active Directory from a UNIX box
using LDAPS.  Our strategy is:

(1) Read changes from an LDIF-formatted file using Net::LDAP::LDIF's
    read_cmd() method
(2) Tweak the changes to make them work with Active Directory
(3) Send the changes to AD using Net::LDAP::Entry's update() method

(1) and (3) work beautifully.  (2) has become the stumbling block,
specifically for "modify" requests.

Active Directory is particular about the format of the unicodePwd
attribute.  So I'm taking the value from the LDIF file and converting
it to the format that AD wants, then using Net::LDAP::Entry::replace()
to ditch the old value and plug in the new one.  Unfortunately, this
results in the internal "changes" array having *two* replace
operations: the original replace operation read in from the LDIF file, 
and the new one I put in there.  AD barfs on the first one as
expected.

What I really want to do is "change the changes", not add a new change 
to the list of changes.  My temporary workaround will likely be to
muck with the "changes" array directly.  But I'm open to better
solutions.  I see there is an (undocumented?) "changes" method that
returns the contents of the changes array.  Perhaps if it returned a
reference to the array I could muck with it without depending on the
internal representation of the Entry object.

%%  Christopher A. Bongaarts  %%  ca...@tc...       %%
%%  Internet Services         %%  http://umn.edu/~cab  %%
%%  University of Minnesota   %%  +1 (612) 625-1809    %%

Re: Net::LDAP failing under Apache mod_perl (again)

[Clif H. <cl...@di...>]

Graham probably was saying it was not setup to do what the person
was trying to do with mod_perl.

Moments after I sent the message I remmebered that AuthenLDAP and 
one other module use perl-ldap with mod_perl.

Regards,

Clif Harden 




> 
> I maintain the Apache::AuthenLDAP and Apache::AuthzLDAP modules. I've
> never had a problem related to Net::LDAP, which underlies my packages.
> 
> Regards,
> Christian
> 
> > -----Original Message-----
> > From: per...@li...
> > [mailto:per...@li...]On Behalf Of Clif
> > Harden
> > Sent: Wednesday, June 27, 2001 8:51 AM
> > To: ful...@dr...
> > Cc: per...@li...; gb...@po...
> > Subject: Re: Net::LDAP failing under Apache mod_perl (again)
> >
> >
> >
> > Tim,
> >
> > I think this same question came up several months ago and
> > I think Graham stated the perl-ldap was NOT setup for use with
> > mod_perl.
> >
> > I would check the archive messages to confirm this information.
> >
> > Regards,
> >
> > Clif Harden           INTERNET:  c-h...@ti...
> >
> >
> >
> >
> >
> > >
> > >
> > > Just another request to see if anyone here has an idea why a script
> > > using Net::LDAP works fine from the command line but fails when run
> > > under Apache::Registry. Its seems to connect OK but then
> > the bind fails
> > > with
> > >
> > > Mesg 1: I/O Error Resource Temporaily unavailable
> > > or
> > > Mesg code 82 :  Transport endpoint is not connected
> > >
> > > This happens regardless of me trying an anonymous bind or
> > as root user.
> > > I've got a PHP4 script to connect to the LDAP server fine
> > running on the
> > > same Apache server. The perl script also runs OK on another
> > box running
> > > perl 5.6.0, apache 1.3.17 & Net::LDAP v0.22.
> > >
> > > The only fiddling I did to Net::LDAP was to edit line 603
> > of LDAP.pm to
> > > put IO::Select in quotes. This was to stop the error 'can't
> > call method
> > > "new" without a package or object reference' I was getting.
> > I think I
> > > saw this fix in the archives of this list a while back.
> > >
> > > Has anybody seen behaviour even remotely similar to this ?
> > I suspect it
> > > could be due to the machine set up itself, but where to
> > look or tune is
> > > beyond me !
> > >
> > > My environment:
> > > Solaris 2.6
> > > Apache 1.3.20
> > > mod_perl 1.25
> > > Perl 5.00503
> > > Net::LDAP v 0.23
> > >
> > > Thanks for any information you might have
> > >
> > > Tim Fulcher
> > >
> > >
> > >
> >
> >
> > --
> >
> >
> >
> 
> 
> 


-- 

RE: Net::LDAP failing under Apache mod_perl (again)

[Christian G. <cgi...@ti...>]

I maintain the Apache::AuthenLDAP and Apache::AuthzLDAP modules. I've
never had a problem related to Net::LDAP, which underlies my packages.

Regards,
Christian

> -----Original Message-----
> From: per...@li...
> [mailto:per...@li...]On Behalf Of Clif
> Harden
> Sent: Wednesday, June 27, 2001 8:51 AM
> To: ful...@dr...
> Cc: per...@li...; gb...@po...
> Subject: Re: Net::LDAP failing under Apache mod_perl (again)
>
>
>
> Tim,
>
> I think this same question came up several months ago and
> I think Graham stated the perl-ldap was NOT setup for use with
> mod_perl.
>
> I would check the archive messages to confirm this information.
>
> Regards,
>
> Clif Harden           INTERNET:  c-h...@ti...
>
>
>
>
>
> >
> >
> > Just another request to see if anyone here has an idea why a script
> > using Net::LDAP works fine from the command line but fails when run
> > under Apache::Registry. Its seems to connect OK but then
> the bind fails
> > with
> >
> > Mesg 1: I/O Error Resource Temporaily unavailable
> > or
> > Mesg code 82 :  Transport endpoint is not connected
> >
> > This happens regardless of me trying an anonymous bind or
> as root user.
> > I've got a PHP4 script to connect to the LDAP server fine
> running on the
> > same Apache server. The perl script also runs OK on another
> box running
> > perl 5.6.0, apache 1.3.17 & Net::LDAP v0.22.
> >
> > The only fiddling I did to Net::LDAP was to edit line 603
> of LDAP.pm to
> > put IO::Select in quotes. This was to stop the error 'can't
> call method
> > "new" without a package or object reference' I was getting.
> I think I
> > saw this fix in the archives of this list a while back.
> >
> > Has anybody seen behaviour even remotely similar to this ?
> I suspect it
> > could be due to the machine set up itself, but where to
> look or tune is
> > beyond me !
> >
> > My environment:
> > Solaris 2.6
> > Apache 1.3.20
> > mod_perl 1.25
> > Perl 5.00503
> > Net::LDAP v 0.23
> >
> > Thanks for any information you might have
> >
> > Tim Fulcher
> >
> >
> >
>
>
> --
>
>
>

Re: Net::LDAP failing under Apache mod_perl (again)

[Clif H. <cl...@di...>]

Tim,

I think this same question came up several months ago and 
I think Graham stated the perl-ldap was NOT setup for use with
mod_perl.  

I would check the archive messages to confirm this information.

Regards,

Clif Harden           INTERNET:  c-h...@ti...





> 
> 
> Just another request to see if anyone here has an idea why a script
> using Net::LDAP works fine from the command line but fails when run
> under Apache::Registry. Its seems to connect OK but then the bind fails
> with
> 
> Mesg 1: I/O Error Resource Temporaily unavailable
> or
> Mesg code 82 :  Transport endpoint is not connected
> 
> This happens regardless of me trying an anonymous bind or as root user.
> I've got a PHP4 script to connect to the LDAP server fine running on the
> same Apache server. The perl script also runs OK on another box running
> perl 5.6.0, apache 1.3.17 & Net::LDAP v0.22.
> 
> The only fiddling I did to Net::LDAP was to edit line 603 of LDAP.pm to
> put IO::Select in quotes. This was to stop the error 'can't call method
> "new" without a package or object reference' I was getting. I think I
> saw this fix in the archives of this list a while back.
> 
> Has anybody seen behaviour even remotely similar to this ? I suspect it
> could be due to the machine set up itself, but where to look or tune is
> beyond me !
> 
> My environment:
> Solaris 2.6
> Apache 1.3.20
> mod_perl 1.25
> Perl 5.00503
> Net::LDAP v 0.23
> 
> Thanks for any information you might have
> 
> Tim Fulcher
> 
> 
> 


-- 

Re: Net::LDAP failing under Apache mod_perl (again)

[Chris R. <chr...@me...>]

tim fulcher <ful...@dr...> wrote:
> 
> Just another request to see if anyone here has an idea why a script
> using Net::LDAP works fine from the command line but fails when run
> under Apache::Registry. Its seems to connect OK but then the bind fails
> with
> 
> Mesg 1: I/O Error Resource Temporaily unavailable
> or
> Mesg code 82 :  Transport endpoint is not connected
> 
> This happens regardless of me trying an anonymous bind or as root user.
> I've got a PHP4 script to connect to the LDAP server fine running on the
> same Apache server. The perl script also runs OK on another box running
> perl 5.6.0, apache 1.3.17 & Net::LDAP v0.22.
> 
> The only fiddling I did to Net::LDAP was to edit line 603 of LDAP.pm to
> put IO::Select in quotes. This was to stop the error 'can't call method
> "new" without a package or object reference' I was getting. I think I
> saw this fix in the archives of this list a while back.
> 
> Has anybody seen behaviour even remotely similar to this ? I suspect it
> could be due to the machine set up itself, but where to look or tune is
> beyond me !
> 
> My environment:
> Solaris 2.6
> Apache 1.3.20
> mod_perl 1.25
> Perl 5.00503
> Net::LDAP v 0.23
> 
> Thanks for any information you might have
> 
> Tim Fulcher
> 
> 

I haven't done it recently, but last time I tried it worked OK. Have you
taken a look at the existing mod_perl extensions that use Net::LDAP? For
instance Apache::AuthNetLDAP (available from CPAN), written by a member of
this list, to see if they have any clues/they work?

Cheers,

Chris

Net::LDAP failing under Apache mod_perl (again)

[tim f. <ful...@dr...>]

Just another request to see if anyone here has an idea why a script
using Net::LDAP works fine from the command line but fails when run
under Apache::Registry. Its seems to connect OK but then the bind fails
with

Mesg 1: I/O Error Resource Temporaily unavailable
or
Mesg code 82 :  Transport endpoint is not connected

This happens regardless of me trying an anonymous bind or as root user.
I've got a PHP4 script to connect to the LDAP server fine running on the
same Apache server. The perl script also runs OK on another box running
perl 5.6.0, apache 1.3.17 & Net::LDAP v0.22.

The only fiddling I did to Net::LDAP was to edit line 603 of LDAP.pm to
put IO::Select in quotes. This was to stop the error 'can't call method
"new" without a package or object reference' I was getting. I think I
saw this fix in the archives of this list a while back.

Has anybody seen behaviour even remotely similar to this ? I suspect it
could be due to the machine set up itself, but where to look or tune is
beyond me !

My environment:
Solaris 2.6
Apache 1.3.20
mod_perl 1.25
Perl 5.00503
Net::LDAP v 0.23

Thanks for any information you might have

Tim Fulcher

RE: FW: Net::LDAPS and verifying the CA certificate

[Chris R. <chr...@me...>]

Christian Gilmore <cgi...@ti...> wrote:
>> What is in the 'die' message?
> 
> IO::Socket::SSL: Timeout  ...propagated at ./test_ldaps.pl line 61.

If it dies relatively quickly than that might suggest that the timeout
error is bogus. Maybe that's something Net_SSLeay throws if the cert
verification fails.

> I'm having trouble with openssl verifying the cert. I'll dig deeper on
> this front.

OK. That's quite likely the core of the problem.

Cheers,

Chris

Re: FW: Net::LDAPS and verifying the CA certificate

[Christopher A B. <ca...@tc...>]

As Christian Gilmore once put it so eloquently:

> > What is in the 'die' message?
> 
> IO::Socket::SSL: Timeout  ...propagated at ./test_ldaps.pl line 61.
[...]
> > Otherwise, can you try and make sure that there's no
> > underlying OpenSSL
> > problem?
> 
> I'm having trouble with openssl verifying the cert. I'll dig deeper on
> this front.

I got the same message when trying to connect to a server with an
expired cert...

%%  Christopher A. Bongaarts  %%  ca...@tc...       %%
%%  Internet Services         %%  http://umn.edu/~cab  %%
%%  University of Minnesota   %%  +1 (612) 625-1809    %%

RE: FW: Net::LDAPS and verifying the CA certificate

[Christian G. <cgi...@ti...>]

> What is in the 'die' message?

IO::Socket::SSL: Timeout  ...propagated at ./test_ldaps.pl line 61.

> Since you only usually want to set one of cafile or capath, I
> think you
> have to simply set the other one to an empty string. (It
> looks like you're
> using capath, so set cafile to '')

Just tried that. Same result.

> Are you connecting to the right host, ie bluepages.ibm.com? I can't
> remember if OpenSSL checks that itself.

Yes. Here's my connect line:

  my $ldap = Net::LDAPS->new('bluepages.ibm.com',
                             port => 636,
                             verify => 'require',
                             capath =>
'/opt/apache/w3-dev.tivoli.com/443/conf/ssl.crt',
                             cafile => '',
                             debug => 15,
                             onerror => 'die')
    or die;

> Otherwise, can you try and make sure that there's no
> underlying OpenSSL
> problem?

I'm having trouble with openssl verifying the cert. I'll dig deeper on
this front.

Thanks,
Christian

Working Referral Example?

[Jim D. <ji...@du...>]

I have attempted to use the Net::LDAP::Reference POD example, but keep
coming up with an empty/null "$opt" variable. Does anyone have any
working example of handling referral objects and following referrals?

Thanks.

ldifsort.pl

[Kartik S. <kar...@ya...>]

Here's another tool I'd like to contribute to Net::LDAP. Attached to
this message is ldifsort.pl, which sorts LDIF files by a specified key
attribute. It's pretty fast -- orders of magnitude faster than
server-side sorting in many cases. For example, it can sort a 300MB LDIF
file (with approximately 160K entries) in about 3 minutes.

Examples:

To sort an LDIF file of people entries by cn:

ldifsort.pl -k cn people.ldif > people.sorted.ldif

To sort an LDIF file containing multiple types of entries by dn:

ldifsort.pl -k dn entries.ldif > entries.sorted.ldif


Any feedback is appreciated.

Regards,

        -Kartik

Novell LDAP Groups?

[Kade P. C. <kc...@si...>]

Anyone out there using perl-ldap and Novell's LDAP server. I am having
some small problems. I am trying to create users and then add them to the
group that I want to. I am not getting the syntax correct and the LDAP
server is complaining. If anyone has used groups before please email me.
Thanks for your help. 


Kade P. Cole
Assistant Manager-OIT  

Re: Installing LDAP on NT

[Chris R. <chr...@me...>]

"Bailey, Nicholas" <Nic...@kb...> wrote:
> I have installed LDAP on Solaris with no problems but I am unclear as to
> how you would install this on NT
> 
> Any clues would be greatly appreciated.
> 
> Thanks
> 
> Nick Bailey
> 

Here is a script (which Graham wrote) which should install Net::LDAP on a
system which cannot run make. 

Cheers,

Chris

Installing LDAP on NT

[Bailey, N. <Nic...@kb...>]

I have installed LDAP on Solaris with no problems but I am unclear as to how
you would install this on NT

Any clues would be greatly appreciated.

Thanks

Nick Bailey