python-ldap-dev — discussion among developers

Re: Removing person names in python-ldap's source files

[David L. <d...@ad...>]

Michael Ströder wrote:
> HI!
>
> inspired by a presentation the Subversion guys gave (as Google tech talk) 
> I'd like to remove all person names from the source code files. Instead 
> authors/contributors are all listed in README.
>
> I already removed *my* name from all the python modules it appeared in. Now 
> I'd like to ask for the permission, especially by David, to remove all other 
> person names from the files Modules/*.
>
>   

Hi, Michael - sorry for the delay, I have been vacationing.

Is the tech talk presentation online? It sounds like a good idea; please 
move my name out of source files.: you have my permission. The commit 
info is probably going to be sufficient :)

Also, I added python-ldap to ohloh (http://www.ohloh.net/projects/11988)

d


-- 
David Leonard                           d...@ad...
                                        Ph:+61 404 844 850

Re: adding binary attribute using python-ldap

[Michael S. <mi...@st...>]

Rahul Amaram wrote:
> Thanks for the response. I think I found the reason for the error. It seems
> to be necessary to append ";binary" to the attribute name while
> adding/modifying binary attributes.

Not for all, better to say for just a few. Sending JPEG picture data for 
attribute type 'jpegPhoto' works straight with this attribute type name.

> So for instance if I am
> adding/modifying userCertificate, I will have to use the attribute name
> "userCertificate;binary". Else you are likely to get an undefined attribute
> / binary transfer failed error.

Yes, for most attribute types which hold certificate data. This has historic 
reasons because without ;binary another LDAP-specific encoding could be 
transferred. There has never been such a encoding defined. But you MUST use 
;binary for attributes with syntax 'X.509 Certificate' (syntax OID 
1.3.6.1.4.1.1466.115.121.1.8).

See also section 2.1 of
http://www.ietf.org/rfc/rfc4523.txt

Ciao, Michael.

Re: adding binary attribute using python-ldap

[Rahul A. <ama...@gm...>]

Hi Michael,
Thanks for the response. I think I found the reason for the error. It seems
to be necessary to append ";binary" to the attribute name while
adding/modifying binary attributes. So for instance if I am
adding/modifying userCertificate, I will have to use the attribute name
"userCertificate;binary". Else you are likely to get an undefined attribute
/ binary transfer failed error.

Regards,
Rahul.

On Wed, 19 Mar 2008 19:01:25 +0100, Michael Ströder <mi...@st...>
wrote:
> Rahul Amaram wrote:
>> I was wondering if there is any way I can add binary data (such as
>> jpegPhoto and userCertificate) using python-ldap. I've googled but
>> coudn't find any solution. If there is no way of doing it, what is the
>> best alternative solution?
> 
> There's simply no difference. Note that normal strings are binary buffers
> in
> Python 2.x anyway. Since python-ldap does not treat Unicode objects
> differently at the moment any attribute value passed to a LDAPObject
> method
> is passed on in LDAP requests as is.
> 
> Ciao, Michael.

Re: adding binary attribute using python-ldap

[Michael S. <mi...@st...>]

Rahul Amaram wrote:
> I was wondering if there is any way I can add binary data (such as 
> jpegPhoto and userCertificate) using python-ldap. I've googled but 
> coudn't find any solution. If there is no way of doing it, what is the 
> best alternative solution?

There's simply no difference. Note that normal strings are binary buffers in 
Python 2.x anyway. Since python-ldap does not treat Unicode objects 
differently at the moment any attribute value passed to a LDAPObject method 
is passed on in LDAP requests as is.

Ciao, Michael.

adding binary attribute using python-ldap

[Rahul A. <ama...@gm...>]

Hi,
I was wondering if there is any way I can add binary data (such as 
jpegPhoto and userCertificate) using python-ldap. I've googled but 
coudn't find any solution. If there is no way of doing it, what is the 
best alternative solution?

Thanks and Regards,
Rahul.

-- 
http://rahul.amaram.name

Re: Local error in simple_bind_s() continued

[Leons P. <le...@ca...>]

Michael Ströder <mi...@st...> wrote on 03/03/2008 03:37:28 PM:

> Leons Petrazickis wrote:
> > l = ldap.initialize("ldap://bluepages.ibm.com:636/",trace_level=2);
>  > [..]
> > ldapsearch -h bluepages.ibm.com -x -b "ou=bluepages,o=ibm.com" -s sub
> > "(sn=leonsp)" cn tieline -d 1
>
> BTW: The connection parameters are not the same!
>
> You would have to test with
> ldapsearch -h bluepages.ibm.com -p 636 [..]
> and I doubt that will work because port 636 is normally used for
> LDAP tunneled within SSL.

That was indeed the problem. Thank you very much for all the assistance.

Regards,

Leons Petrazickis

Re: Missing method in ldap.cidict

[Michael S. <mi...@st...>]

James Andrewartha wrote:
> 
> The cidict class needs the following method for "attr in cidict" to work
> properly:
> 
>   def __contains__(self,key):
>     return self.has_key(key)
> 
> Otherwise it defaults to using the UserDict __contains__ which isn't
> case-insensitive.

Thanks for reporting it. It's already in the CVS but not in a release yet.

----------------------------
revision 1.11
date: 2007/12/26 11:49:25;  author: stroeder;  state: Exp;  lines: +5 -2
New method ldap.cidict.cidict.__contains__()
----------------------------

Ciao, Michael.

Missing method in ldap.cidict

[James A. <ja...@da...>]

Hi,

The cidict class needs the following method for "attr in cidict" to work
properly:

  def __contains__(self,key):
    return self.has_key(key)

Otherwise it defaults to using the UserDict __contains__ which isn't
case-insensitive.

Thanks,

James Andrewartha

Removing person names in python-ldap's source files

[Michael S. <mi...@st...>]

HI!

inspired by a presentation the Subversion guys gave (as Google tech talk) 
I'd like to remove all person names from the source code files. Instead 
authors/contributors are all listed in README.

I already removed *my* name from all the python modules it appeared in. Now 
I'd like to ask for the permission, especially by David, to remove all other 
person names from the files Modules/*.

Ciao, Michael.

Re: how to write filter argumnt for search function of LDAPObject class

[Michael S. <mi...@st...>]

Yang Cheng Fu wrote:
> 
> Thanks for your help.

Thanks for finding a bug in the docs.

Ciao, Michael.

RE: how to write filter argumnt for search function of LDAPObject class

[Yang C. F. <Che...@ga...>]

Hello Michael,

Thanks for your help.

-------
YANG ChengFu
Unix Administrator 
Gameloft -- Global Network Services (GNS)
* mailto:che...@ga...
* +86(10)8260-7783 ext.8221

-----Original Message-----
From: Michael Ströder [mailto:mi...@st...] 
Sent: Monday, March 10, 2008 4:11 PM
To: Yang Cheng Fu
Cc: pyt...@li...
Subject: Re: how to write filter argumnt for search function of LDAPObject class

Yang Cheng Fu wrote:
> 
> I am trying to access windows Active directory by using python-ldap, but 
> I do not know how to write filter argument for search function.

 From http://python-ldap.sourceforge.net/doc/python-ldap/ldap-objects.html:

--------------------------- snip ---------------------------
The filterstr argument is a string representation of the filter to apply in 
the search.

See Also:

RFC 4515, Lightweight Directory Access Protocol (LDAP): String 
Representation of Search Filters.
--------------------------- snip ---------------------------

> search(base, scope [,filterstr='(objectClass=*)' [, attrlist=None [, 
> attrsonly=0]]]).
> 
> For example: A filter sting which based on RFC4515 
> (http://www.faqs.org/rfcs/rfc4515.html) is 
> "(&(objectclass=organizationalUnit)(c=*))".

Yupp. That's exactly the string you have to pass to method search() and its 
derivates as argument filterstr.

> From the docs of 
> python-ldap, the forms of the argument, ('cn=fred*') and 
> ('objectClass=*') can be found.

Ouch! The example filterstr values on 
http://python-ldap.sourceforge.net/doc/python-ldap/ldap-example.html are 
simply typos. Sorry for that.

Ciao, Michael.

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Re: how to write filter argumnt for search function of LDAPObject class

[Michael S. <mi...@st...>]

Yang Cheng Fu wrote:
> 
> I am trying to access windows Active directory by using python-ldap, but 
> I do not know how to write filter argument for search function.

 From http://python-ldap.sourceforge.net/doc/python-ldap/ldap-objects.html:

--------------------------- snip ---------------------------
The filterstr argument is a string representation of the filter to apply in 
the search.

See Also:

RFC 4515, Lightweight Directory Access Protocol (LDAP): String 
Representation of Search Filters.
--------------------------- snip ---------------------------

> search(base, scope [,filterstr='(objectClass=*)' [, attrlist=None [, 
> attrsonly=0]]]).
> 
> For example: A filter sting which based on RFC4515 
> (http://www.faqs.org/rfcs/rfc4515.html) is 
> "(&(objectclass=organizationalUnit)(c=*))".

Yupp. That's exactly the string you have to pass to method search() and its 
derivates as argument filterstr.

> From the docs of 
> python-ldap, the forms of the argument, ('cn=fred*') and 
> ('objectClass=*') can be found.

Ouch! The example filterstr values on 
http://python-ldap.sourceforge.net/doc/python-ldap/ldap-example.html are 
simply typos. Sorry for that.

Ciao, Michael.

RE: how to write filter argumnt for search function of LDAPObject class

[Yang C. F. <Che...@ga...>]

Hello Chaos,

 

Thanks a lot!

 

-------

YANG ChengFu

Unix Administrator 

Gameloft -- Global Network Services (GNS)

* mailto:che...@ga...

* +86(10)8260-7783 ext.8221

________________________________

From: Chaos Eternal [mailto:cha...@gm...] 
Sent: Monday, March 10, 2008 2:10 PM
To: Yang Cheng Fu
Cc: pyt...@li...
Subject: Re: how to write filter argumnt for search function of LDAPObject class

 

##here comes the translation:
 
I'm using python-ldap to access Windows Active Directory, but I don't know howto write the 'filter' parameter in the function search of LDAPObject. Based upon RFC4515, I want the filter paramter to be "(&(objectclass=organizationalUnit)(c=*))".

According to the manual, the proto-type of search function is:
 search(base, scope[,filterstr='(objectclass=*)'[, attrlist=None [, attrsonly=0]]])
and there are some example in the manual:
 ('cn=fred*')  and ('objectclass=*'), but i can't find a way to express "(&(objectclass=organizationalUnit)(c=*))",

Could anybody help me?

##end of translation



________________________________

From: Chaos Eternal [mailto:cha...@gm...] 
Sent: Monday, March 10, 2008 12:36 PM
To: Yang Cheng Fu
Cc: pyt...@li...
Subject: Re: how to write filter argumnt for search function of LDAPObject class

 

hi, 
please write your question in chinese, i can help you translate it.

On Mon, Mar 10, 2008 at 12:45 PM, Yang Cheng Fu <Che...@ga...> wrote:

Hi guys,

 

I am trying to access windows Active directory by using python-ldap, but I do not know how to write filter argument for search function.

search(base, scope [,filterstr='(objectClass=*)' [, attrlist=None [, attrsonly=0]]]).

 

For example: A filter sting which based on RFC4515 (http://www.faqs.org/rfcs/rfc4515.html) is "(&(objectclass=organizationalUnit)(c=*))". From the docs of python-ldap, the forms of the argument, ('cn=fred*') and ('objectClass=*') can be found. 

 

I'd like to know how to write the sting of "(&(objectclass=organizationalUnit)(c=*))" for search function. I am not sure where it is enough to answer my question, if you need more information, just ask.

 

Thanks a lot

-------

YANG ChengFu

Unix Administrator 

Gameloft -- Global Network Services (GNS)

* mailto:che...@ga...

* +86(10)8260-7783 ext.8221

 


-- 
This message has been scanned for viruses and 
dangerous content by MailScanner <http://www.mailscanner.info/> , and is 
believed to be clean. 
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Python-LDAP-dev mailing list
Pyt...@li...
https://lists.sourceforge.net/lists/listinfo/python-ldap-dev




-- 
Best Regards
Chaos Eternal 
-- 
This message has been scanned for viruses and 
dangerous content by MailScanner <http://www.mailscanner.info/> , and is 
believed to be clean. 


-- 
This message has been scanned for viruses and 
dangerous content by MailScanner <http://www.mailscanner.info/> , and is 
believed to be clean. 




-- 
Best Regards
Chaos Eternal 
-- 
This message has been scanned for viruses and 
dangerous content by MailScanner <http://www.mailscanner.info/> , and is 
believed to be clean. 


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Re: how to write filter argumnt for search function of LDAPObject class

[Chaos E. <cha...@gm...>]

##here comes the translation:

I'm using python-ldap to access Windows Active Directory, but I don't know
howto write the 'filter' parameter in the function search of LDAPObject.
Based upon RFC4515, I want the filter paramter to be
"(&(objectclass=organizationalUnit)(c=*))".

According to the manual, the proto-type of search function is:
 search(base, scope[,filterstr='(objectclass=*)'[, attrlist=None [,
attrsonly=0]]])
and there are some example in the manual:
 ('cn=fred*')  and ('objectclass=*'), but i can't find a way to express
"(&(objectclass=organizationalUnit)(c=*))",

Could anybody help me?

##end of translation


2008/3/10 Yang Cheng Fu <Che...@ga...>:

>  我在用python-ldap来访问Windows Active directory, 但是不知道LDAPObject的search函数中的
> filter参数怎么写。我要写的参数是
>
> "(&(objectclass=organizationalUnit)(c=*))"(基于RFC4515)
>
>
>
> search函数的格式如下：
>
> search(base, scope [,filterstr='(objectClass=*)' [, attrlist=None [,
> attrsonly=0]]]).
>
>
>
> 从python-ldap的文档中可以找到 ('cn=fred*')与('objectClass=*'),但是没有
> "(&(objectclass=organizationalUnit)(c=*))"的写法。
>
>
>
> 我是想知道filter, "(&(objectclass=organizationalUnit)(c=*))", 在search函数中怎么写？
>
>
>
> I am not sure where it is enough to answer my question, if you need more
> information, just ask.
>
>
>
> Thanks a lot
>
>
>
> *-------*
>
> *YANG ChengFu*
>
> *Unix Administrator *
>
> *Gameloft** **-- Global Network Services (GNS)*
>
> **** **mailto:che...@ga... <che...@ga...>*
>
> *(* +86(10)8260-7783 ext.8221
>   ------------------------------
>
> *From:* Chaos Eternal [mailto:cha...@gm...]
> *Sent:* Monday, March 10, 2008 12:36 PM
> *To:* Yang Cheng Fu
> *Cc:* pyt...@li...
> *Subject:* Re: how to write filter argumnt for search function of
> LDAPObject class
>
>
>
> hi,
> please write your question in chinese, i can help you translate it.
>
> On Mon, Mar 10, 2008 at 12:45 PM, Yang Cheng Fu <Che...@ga...>
> wrote:
>
> Hi guys,
>
>
>
> I am trying to access windows Active directory by using python-ldap, but I
> do not know how to write filter argument for search function.
>
> search(base, scope [,filterstr='(objectClass=*)' [, attrlist=None [,
> attrsonly=0]]]).
>
>
>
> For example: A filter sting which based on RFC4515 (
> http://www.faqs.org/rfcs/rfc4515.html) is
> "(&(objectclass=organizationalUnit)(c=*))". From the docs of python-ldap,
> the forms of the argument, ('cn=fred*') and ('objectClass=*') can be found.
>
>
>
> I'd like to know how to write the sting of"(&(objectclass=organizationalUnit)(c=*))"for search function. I am not sure where it is enough to answer my question,
> if you need more information, just ask.
>
>
>
> Thanks a lot
>
> *-------*
>
> *YANG ChengFu*
>
> *Unix Administrator *
>
> *Gameloft** **-- Global Network Services (GNS)*
>
> **** **mailto:che...@ga... <che...@ga...>*
>
> *(* +86(10)8260-7783 ext.8221
>
>
>
>
> --
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean.
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> Python-LDAP-dev mailing list
> Pyt...@li...
> https://lists.sourceforge.net/lists/listinfo/python-ldap-dev
>
>
>
>
> --
> Best Regards
> Chaos Eternal
> --
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean.
>
> --
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean.
>



-- 
Best Regards
Chaos Eternal

RE: how to write filter argumnt for search function of LDAPObject class

[Yang C. F. <Che...@ga...>]

我在用python-ldap来访问Windows Active directory, 但是不知道LDAPObject的search函数中的filter参数怎么写。我要写的参数是

"(&(objectclass=organizationalUnit)(c=*))"(基于RFC4515)

 

search函数的格式如下：

search(base, scope [,filterstr='(objectClass=*)' [, attrlist=None [, attrsonly=0]]]).

 

从python-ldap的文档中可以找到 ('cn=fred*')与('objectClass=*'),但是没有"(&(objectclass=organizationalUnit)(c=*))"的写法。

 

我是想知道filter, "(&(objectclass=organizationalUnit)(c=*))", 在search函数中怎么写？

 

I am not sure where it is enough to answer my question, if you need more information, just ask.

 

Thanks a lot

 

-------

YANG ChengFu

Unix Administrator 

Gameloft -- Global Network Services (GNS)

* mailto:che...@ga...

* +86(10)8260-7783 ext.8221

________________________________

From: Chaos Eternal [mailto:cha...@gm...] 
Sent: Monday, March 10, 2008 12:36 PM
To: Yang Cheng Fu
Cc: pyt...@li...
Subject: Re: how to write filter argumnt for search function of LDAPObject class

 

hi, 
please write your question in chinese, i can help you translate it.

On Mon, Mar 10, 2008 at 12:45 PM, Yang Cheng Fu <Che...@ga...> wrote:

Hi guys,

 

I am trying to access windows Active directory by using python-ldap, but I do not know how to write filter argument for search function.

search(base, scope [,filterstr='(objectClass=*)' [, attrlist=None [, attrsonly=0]]]).

 

For example: A filter sting which based on RFC4515 (http://www.faqs.org/rfcs/rfc4515.html) is "(&(objectclass=organizationalUnit)(c=*))". From the docs of python-ldap, the forms of the argument, ('cn=fred*') and ('objectClass=*') can be found. 

 

I'd like to know how to write the sting of "(&(objectclass=organizationalUnit)(c=*))" for search function. I am not sure where it is enough to answer my question, if you need more information, just ask.

 

Thanks a lot

-------

YANG ChengFu

Unix Administrator 

Gameloft -- Global Network Services (GNS)

* mailto:che...@ga...

* +86(10)8260-7783 ext.8221

 


-- 
This message has been scanned for viruses and 
dangerous content by MailScanner <http://www.mailscanner.info/> , and is 
believed to be clean. 
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Python-LDAP-dev mailing list
Pyt...@li...
https://lists.sourceforge.net/lists/listinfo/python-ldap-dev




-- 
Best Regards
Chaos Eternal 
-- 
This message has been scanned for viruses and 
dangerous content by MailScanner <http://www.mailscanner.info/> , and is 
believed to be clean. 


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Re: how to write filter argumnt for search function of LDAPObject class

[Chaos E. <cha...@gm...>]

hi,
please write your question in chinese, i can help you translate it.

On Mon, Mar 10, 2008 at 12:45 PM, Yang Cheng Fu <Che...@ga...>
wrote:

>  Hi guys,
>
>
>
> I am trying to access windows Active directory by using python-ldap, but I
> do not know how to write filter argument for search function.
>
> search(base, scope [,filterstr='(objectClass=*)' [, attrlist=None [,
> attrsonly=0]]]).
>
>
>
> For example: A filter sting which based on RFC4515 (
> http://www.faqs.org/rfcs/rfc4515.html) is
> "(&(objectclass=organizationalUnit)(c=*))". From the docs of python-ldap,
> the forms of the argument, ('cn=fred*') and ('objectClass=*') can be found.
>
>
>
> I'd like to know how to write the sting of"(&(objectclass=organizationalUnit)(c=*))"for search function. I am not sure where it is enough to answer my question,
> if you need more information, just ask.
>
>
>
> Thanks a lot
>
> *-------*
>
> *YANG ChengFu*
>
> *Unix Administrator *
>
> *Gameloft** **-- Global Network Services (GNS)*
>
> **** **mailto:che...@ga... <che...@ga...>*
>
> *(* +86(10)8260-7783 ext.8221
>
>
>
> --
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean.
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> Python-LDAP-dev mailing list
> Pyt...@li...
> https://lists.sourceforge.net/lists/listinfo/python-ldap-dev
>
>


-- 
Best Regards
Chaos Eternal

how to write filter argumnt for search function of LDAPObject class

[Yang C. F. <Che...@ga...>]

Hi guys,

 

I am trying to access windows Active directory by using python-ldap, but I do not know how to write filter argument for search function.

search(base, scope [,filterstr='(objectClass=*)' [, attrlist=None [, attrsonly=0]]]).

 

For example: A filter sting which based on RFC4515 (http://www.faqs.org/rfcs/rfc4515.html) is "(&(objectclass=organizationalUnit)(c=*))". From the docs of python-ldap, the forms of the argument, ('cn=fred*') and ('objectClass=*') can be found. 

 

I’d like to know how to write the sting of "(&(objectclass=organizationalUnit)(c=*))" for search function. I am not sure where it is enough to answer my question, if you need more information, just ask.

 

Thanks a lot

-------

YANG ChengFu

Unix Administrator 

Gameloft -- Global Network Services (GNS)

* mailto:che...@ga...

* +86(10)8260-7783 ext.8221

 


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Re: Local error in simple_bind_s() continued

[Michael S. <mi...@st...>]

Leons Petrazickis wrote:
> l = ldap.initialize("ldap://bluepages.ibm.com:636/",trace_level=2);
 > [..]
> ldapsearch -h bluepages.ibm.com -x -b "ou=bluepages,o=ibm.com" -s sub
> "(sn=leonsp)" cn tieline -d 1

BTW: The connection parameters are not the same!

You would have to test with
ldapsearch -h bluepages.ibm.com -p 636 [..]
and I doubt that will work because port 636 is normally used for 
LDAP tunneled within SSL.

Ciao, Michael.

Re: Local error in simple_bind_s() continued

[Michael S. <mi...@st...>]

Leons Petrazickis wrote:
> 
> I just installed Suse Linux Enterprise Desktop 10. It comes with OpenLDAP
> 2.3.19 and Python 2.4. On top of that, I built the latest CVS checkout of
> python-ldap.

Could you please try to install Ralf Haferkamp's recent OpenLDAP 
RPMs for SLE 10 from here and rebuild python-ldap:

http://download.opensuse.org/repositories/OpenLDAP/SLE_10/i586/openldap2-client-2.3.41-2.1.i586.rpm
http://download.opensuse.org/repositories/OpenLDAP/SLE_10/i586/openldap2-devel-2.3.41-2.1.i586.rpm

> I am getting the same error as with Ubuntu. OpenLDAP works, but python-ldap
> crashes. Previous thread:
> <http://sourceforge.net/mailarchive/forum.php?thread_name=OFB4CEB31F.56A5A98B-ON852573B1.00808384-852573B1.0081B67C%40ca.ibm.com&forum_name=python-ldap-dev

Hmm, frankly I have no idea.

> import ldap;
> ldap.set_option(ldap.OPT_DEBUG_LEVEL,4095);
> l = ldap.initialize("ldap://bluepages.ibm.com:636/",trace_level=2);
> l.simple_bind_s();
> 
> This is the output:

You're setting trace_level=2 but there are no python-ldap debug 
messages in your output at all.

> The host is running Tivoli Directory Server 5.2.

I'm pretty sure I've already accessed this LDAP server with 
web2ldap, hence python-ldap worked. Don't remember the versions 
though.

Ciao, Michael.

Local error in simple_bind_s() continued

[Leons P. <le...@ca...>]

Hello,

I just installed Suse Linux Enterprise Desktop 10. It comes with OpenLDAP
2.3.19 and Python 2.4. On top of that, I built the latest CVS checkout of
python-ldap.

I am getting the same error as with Ubuntu. OpenLDAP works, but python-ldap
crashes. Previous thread:
<http://sourceforge.net/mailarchive/forum.php?thread_name=OFB4CEB31F.56A5A98B-ON852573B1.00808384-852573B1.0081B67C%40ca.ibm.com&forum_name=python-ldap-dev
>

This script crashes:

import ldap;
ldap.set_option(ldap.OPT_DEBUG_LEVEL,4095);
l = ldap.initialize("ldap://bluepages.ibm.com:636/",trace_level=2);
l.simple_bind_s();


This is the output:

ldap_create
ldap_url_parse_ext(ldap://bluepages.ibm.com:636/)
*** ldap://bluepages.ibm.com:636/ - SimpleLDAPObject.set_option ((17,
3),{})
*** ldap://bluepages.ibm.com:636/ - SimpleLDAPObject.simple_bind (('', '',
None, None),{})
ldap_sasl_bind
ldap_send_initial_request
ldap_new_connection 1 1 0
ldap_int_open_connection
ldap_connect_to_host: TCP bluepages.ibm.com:636
ldap_new_socket: 3
ldap_prepare_socket: 3
ldap_connect_to_host: Trying 9.17.186.253:636
ldap_connect_timeout: fd: 3 tm: -1 async: 0
ldap_open_defconn: successful
ldap_send_server_request
=> result: 1
*** ldap://bluepages.ibm.com:636/ - SimpleLDAPObject.result3 ((1, 1,
-1),{})
ldap_result ld 0x805a3d0 msgid 1
ldap_chkResponseList ld 0x805a3d0 msgid 1 all 1
ldap_chkResponseList returns ld 0x805a3d0 NULL
wait4msg ld 0x805a3d0 msgid 1 (infinite timeout)
wait4msg continue ld 0x805a3d0 msgid 1 all 1
** ld 0x805a3d0 Connections:
* host: bluepages.ibm.com  port: 636  (default)
  refcnt: 2  status: Connected
  last used: Mon Mar  3 09:04:02 2008

** ld 0x805a3d0 Outstanding Requests:
 * msgid 1,  origid 1, status InProgress
   outstanding referrals 0, parent count 0
** ld 0x805a3d0 Response Queue:
   Empty
ldap_chkResponseList ld 0x805a3d0 msgid 1 all 1
ldap_chkResponseList returns ld 0x805a3d0 NULL
ldap_int_select
read1msg: ld 0x805a3d0 msgid 1 all 1
ldap_err2string
=> LDAPError - LOCAL_ERROR: {'desc': 'Local error'}
Traceback (most recent call last):
  File "test.py", line 6, in ?
    l.simple_bind_s();
  File "/usr/lib/python2.4/site-packages/ldap/ldapobject.py", line 176, in
simple_bind_s
    return self.result(msgid,all=1,timeout=self.timeout)
  File "/usr/lib/python2.4/site-packages/ldap/ldapobject.py", line 405, in
result
    res_type,res_data,res_msgid = self.result2(msgid,all,timeout)
  File "/usr/lib/python2.4/site-packages/ldap/ldapobject.py", line 409, in
result2
    res_type, res_data, res_msgid, srv_ctrls =
self.result3(msgid,all,timeout)
  File "/usr/lib/python2.4/site-packages/ldap/ldapobject.py", line 415, in
result3
    rtype, rdata, rmsgid, serverctrls =
self._ldap_call(self._l.result3,msgid,all,timeout)
  File "/usr/lib/python2.4/site-packages/ldap/ldapobject.py", line 94, in
_ldap_call
    result = func(*args,**kwargs)
ldap.LOCAL_ERROR: {'desc': 'Local error'}
ldap_free_request (origid 1, msgid 1)
ldap_free_connection 1 1
ldap_send_unbind
ldap_free_connection: actually freed


But this command works:

ldapsearch -h bluepages.ibm.com -x -b "ou=bluepages,o=ibm.com" -s sub
"(sn=leonsp)" cn tieline -d 1


This is some of the output:

ldap_create
ldap_url_parse_ext(ldap://bluepages.ibm.com)
ldap_bind
ldap_simple_bind
ldap_sasl_bind
ldap_send_initial_request
ldap_new_connection 1 1 0
ldap_int_open_connection
ldap_connect_to_host: TCP bluepages.ibm.com:389
ldap_new_socket: 3
ldap_prepare_socket: 3
ldap_connect_to_host: Trying 9.17.186.253:389
ldap_connect_timeout: fd: 3 tm: -1 async: 0
ldap_open_defconn: successful
ldap_send_server_request
ber_scanf fmt ({it) ber:
ber_scanf fmt ({i) ber:
ber_flush: 14 bytes to sd 3
ldap_result ld 0x80570a8 msgid 1
ldap_chkResponseList ld 0x80570a8 msgid 1 all 1
ldap_chkResponseList returns ld 0x80570a8 NULL
wait4msg ld 0x80570a8 msgid 1 (infinite timeout)
wait4msg continue ld 0x80570a8 msgid 1 all 1
** ld 0x80570a8 Connections:
* host: bluepages.ibm.com  port: 389  (default)
  refcnt: 2  status: Connected
  last used: Mon Mar  3 09:16:27 2008

** ld 0x80570a8 Outstanding Requests:
 * msgid 1,  origid 1, status InProgress
   outstanding referrals 0, parent count 0
** ld 0x80570a8 Response Queue:
   Empty
ldap_chkResponseList ld 0x80570a8 msgid 1 all 1
ldap_chkResponseList returns ld 0x80570a8 NULL

### CRASH HAPPENS HERE IN python-ldap ###

ldap_int_select
read1msg: ld 0x80570a8 msgid 1 all 1
ber_get_next
ber_get_next: tag 0x30 len 16 contents:
read1msg: ld 0x80570a8 msgid 1 message type bind
ber_scanf fmt ({eaa) ber:
read1msg: ld 0x80570a8 0 new referrals
read1msg:  mark request completed, ld 0x80570a8 msgid 1
request done: ld 0x80570a8 msgid 1
res_errno: 0, res_error: <>, res_matched: <>
ldap_free_request (origid 1, msgid 1)
ldap_free_connection 0 1
ldap_free_connection: refcnt 1
ldap_parse_result
ber_scanf fmt ({iaa) ber:
ber_scanf fmt (}) ber:
ldap_msgfree

### SNIP ###


The host is running Tivoli Directory Server 5.2. I do not control the host,
but I can install any distro on the client.

What can I do to help resolve this issue? Is there further debugging
information that I could provide?

Regards,

Leons Petrazickis
http://lpetr.org/blog/

Re: Commiting multiple objects

[Michael S. <mi...@st...>]

Ron Teitelbaum wrote:
> 
> I have to commit multiple objects.  Can I use the modlist to store and 
> commit multiple objects at once.

No. LDAP has no support for transactions over multiple entries. 
Only write operations to single entries are guaranteed to be 
atomar. Hence python-ldap does not contain any API for such 
transactions.

Ciao, Michael.

Commiting multiple objects

[Ron T. <Ro...@US...>]

Hello,

 

I have to commit multiple objects.  Can I use the modlist to store and
commit multiple objects at once.  If so is it possible to order the objects
so that they commit a subtree before the leaves?  

 

Thanks for your help!

 

Ron Teitelbaum

 

 

Re: [Freeipa-devel] [Fwd: OT: PyKerberos]

[Torsten K. <pyt...@tk...>]

Hi Guido,

> > [...]
> > decided to wrap some functions on my own. The result is a branch of
> > Apple's PyKerberos, enriched by a kadm5 module, which provides
> > basic methods to connect to a remote kerberos admin server and
> > maintain principals. [...]
> That's great news. I also added some more stuff to pykerberos like
> user password changing:
>  http://trac.macosforge.org/projects/calendarserver/ticket/256 
> and very basic GSSWrap/Unwrap support (just enough to talk to
> dovecot). Some of this has already been merged on the more-kerberos
> branch of pykerberos's SVN but things move slowly there. 
> We already have a packages in Debian that has these patches and I
> could a add yours too if that makes sense.

That's a great idea! I'd appreciate too, if some C-regulars would take a
look at the code, since this is my first (and probably last ;o) ever
project written in C.

> > If someone wants to use and/or extend this code, you can check it
> > out at:
> > 
> > http://svn.kmrc.de/projects/devel/PyKerberos/trunk
> The server doesn't answer - not even to a ping.

It should now! We had a defective UPS that pulled down our uplink media
transceiver. ;o(

If you still encounter problems, please let me know.

Regards,
Torsten
-- 
The person who's taking you to lunch has no intention of paying.

Re: A quick question

[Michael S. <mi...@st...>]

Roland,

Roland Hedberg wrote:
> 
> Is there a simple way to map a dictionary containing a attribute schema
> information for an attribute into a ldap.schema.attributeType instance ?

I'm not sure I fully understand what you want.

But did you already have a closer look at module ldap.schema and
the examples in Demo/schema*.py? Basically the whole schema
information is stored in various dictionaries of an instance of
ldap.schema.subentry.SubSchema.
             ^^^^^^^^
(Kind of a misnomer...)

Or are you asking about how to handle the name alias issues for
attribute types? Then you might want to look at class
ldap.schema.models.Entry. You can initialize it with a dictionary
e.g. retrieved by a search and access the attribute value lists by
the various aliases and by OID.

Ciao, Michael.

P.S.: I'd like to rather discuss those things on the 
python-ldap-dev mailing list (Cc:-ed) so others could benefit from 
such a discussion as well.

Re: Problem with python-ldap !!!

[Michael S. <mi...@st...>]

Philippe Bouige wrote:
> 
>     I work with sun/solaris and I try compute python-ldap with
>     open-ldpa and I have this error !!! How to do ?

Sorry, I refuse to answer further direct e-mails not coming from 
my customers. Please post further questions on the python-ldap-dev 
mailing list (Cc:-ed) so that other subscribers on the list can 
answer and learn as well.

> include_dirs: /usr/local/include /usr/include
> library_dirs: /usr/local/lib /usr/lib
 > [..]
> build/temp.solaris-2.9-sun4u-2.4/Modules/constants.o 
> Modules/constants.c: In function `LDAPinit_constants': 
> Modules/constants.c:126: error: `LDAP_MOD_INCREMENT' undeclared
>  (first use in this function) Modules/constants.c:126: error:
> (Each undeclared identifier is reported only once 
> Modules/constants.c:126: error: for each function it appears
> in.) Modules/constants.c:208: error: `LDAP_AVA_NULL' undeclared
> (first use in this function) error: command '/local/bin//gcc'
> failed with exit status 1

Probably you're actually trying to build with the LDAP libs 
pre-installed with Solaris. That won't work. You have to edit the 
parameters above to reflect the position of your local OpenLDAP 
2.3.x or 2.4.x installation and avoid lib conflicts by other means.

Ciao, Michael.