|
From: Joe L. <jl...@op...> - 2002-10-27 18:06:47
|
The python bit is out of the openldap-netinfo bridge's hand :) As for there not being a database, that is true. There are steps required to enabling that, and users are expected to use the Directory Services Admin app in the Application->Utilities folder to manage it. The settings as provided are a template that point to an as-yet-to-be-made backend link. Remember, security first. Second, by default, users are told to limit the LDAP exposure to explicit hosts (using the firewall components) -- one annoying trait is that by default the LDAP-enabled Netinfo is exposed without SSL-enabled connections. Again, its off by default and is generally managed through the GUI tools. If people want to use the LDAP server is the "normal" way, modifying slapd.conf to use different backends is simple. "we" fought hard to make sure various schemas were supported out of the box. On Sunday, October 27, 2002, at 07:39 AM, Jens Vagelpohl wrote: > clean or not, it does not work out of the box ;) the slapd.conf > points to a database that does not exist, at least on my own system. i > assume you have to make some explicit gesture to build that database > file. > > even if this database existed and some unsuspecting person started > using it i wonder what kind of security hole you open by not > explicitly disabling the serving of netinfo data... > > on my own system i have now switched to using the built-in OpenLDAP by > adjusting the slapd.conf (and commenting out the pieces pertaining to > the netinfo bridge) and use it without problems through python-ldap > compiled against my self-built python 2.1.3. > > jens > > On Saturday, Oct 26, 2002, at 14:20 US/Eastern, Joe Little wrote: > >> >> its an openldap to Netinfo bridge, done by Luke Howard (padl.com). In >> other words.. its as clean as you can get. Its compliant and works >> fine. I'm already using it as such in one case. Anybody can modify >> the schema to be what not and it won't break anything, since by >> default the system uses Netinfo and not LDAP and some steps are >> required to activate the LDAP bridge. >> >> Software update won't modify the slapd.conf to my knowledge. That is >> generated one time with a mkslapdconf command from the netinfo >> sources (during activation). Its similar to what a .deb or .rpm would >> do with the default slapd.conf -- not change it unless its not there. >> >> On Saturday, October 26, 2002, at 07:48 AM, Jens Vagelpohl wrote: >> >>> looking at the configuration files under /etc/openldap i suppose >>> this "built-in" ldap server is designed to serve NetInfo data >>> through LDAP. not sure what that is supposed to be good for on a >>> normal OS X > install. >>> >>> i'd be weary to try and use that server to serve out other stuff as >>> well. i'm not sure Software Update would recognize changes and not >>> just replace the files the next time there is an updated ldap >>> bundle. >>> >>> jens >>> >>> >>> On Saturday, Oct 26, 2002, at 03:22 US/Eastern, Michael Engelhart >>> wrote: >>> >>>> Hello Juergen, >>>> >>>> I just recently installed python-ldap on a stock Mac OS 10.2 >>>> powerbook using the stock python 2.2 distribution that is >>>> installed. >>>> >>>> first - in setup.py do change the first 2 lines to: >>>> >>>> library_dirs = /usr/lib >>>> include_dirs = /usr/include >>>> >>>> I believe you'll get that same gcc error message but after you run >>>> python setup.py build, do a: >>>> sudo python setup.py install >>>> >>>> and it should install the libraries fine. >>>> >>>> I am new to OpenLDAP so I'm having lots of trouble modifying >>>> entries and will be posting here soon but want to make sure my >>>> OpenLDAP configuration is setup correctly before I do that. >>>> >>>> BTW, for those who were asking, OpenLDAP v 2.1.0 is what is >>>> installed by default on Mac OS X v 10.2 There may have been some >>>> minor changes in the latest System update but it's at least 2.1.x >>>> >>>> Cheers >>>> Mike >>>> On Friday, October 25, 2002, at 07:38 AM, J. Scholtes wrote: >>>> >>>>> Hi. >>>>> I'm new to the list. In the list-archive I didn't find much about >>>>> macosx, so here is my post. >>>>> >>>>> I'm trying to set up ZOPE with the LDAPuserFolder on a >>>>> macosx-system and therefor I need python-ldap. But I#m not able to >>>>> compile it on MacOsX 10.2 >>>>> Is anyone on the List who did it successfull ? >>>>> >>>>> thanks >>>>> Juergen Scholtes >>>>> >>>>> >>>>> >>>>> >>>>> ------------------------------------------------------- >>>>> This sf.net email is sponsored by: Influence the future of >>>>> Java(TM) technology. Join the Java Community Process(SM) (JCP(SM)) >>>>> program now. >>>>> http://ads.sourceforge.net/cgi-bin/redirect.pl?sunm0004en >>>>> _______________________________________________ >>>>> Python-LDAP-dev mailing list >>>>> Pyt...@li... >>>>> https://lists.sourceforge.net/lists/listinfo/python-ldap-dev >>>>> >>>> >>>> >>>> >>>> ------------------------------------------------------- >>>> This SF.net email is sponsored by: ApacheCon, November 18-21 in >>>> Las Vegas (supported by COMDEX), the only Apache event to be >>>> fully supported by the ASF. http://www.apachecon.com >>>> _______________________________________________ >>>> Python-LDAP-dev mailing list >>>> Pyt...@li... >>>> https://lists.sourceforge.net/lists/listinfo/python-ldap-dev >>> >>> >>> >>> ------------------------------------------------------- >>> This SF.net email is sponsored by: ApacheCon, November 18-21 in >>> Las Vegas (supported by COMDEX), the only Apache event to be >>> fully supported by the ASF. http://www.apachecon.com >>> _______________________________________________ >>> Python-LDAP-dev mailing list >>> Pyt...@li... >>> https://lists.sourceforge.net/lists/listinfo/python-ldap-dev >> >> >> >> ------------------------------------------------------- >> This SF.net email is sponsored by: ApacheCon, November 18-21 in >> Las Vegas (supported by COMDEX), the only Apache event to be >> fully supported by the ASF. http://www.apachecon.com >> _______________________________________________ >> Python-LDAP-dev mailing list >> Pyt...@li... >> https://lists.sourceforge.net/lists/listinfo/python-ldap-dev > > > > ------------------------------------------------------- > This SF.net email is sponsored by: ApacheCon, November 18-21 in > Las Vegas (supported by COMDEX), the only Apache event to be > fully supported by the ASF. http://www.apachecon.com > _______________________________________________ > Python-LDAP-dev mailing list > Pyt...@li... > https://lists.sourceforge.net/lists/listinfo/python-ldap-dev |