HI!
Maybe some of you are using MIT Kerberos with LDAP backend.
For creating a decent web2ldap search form template for the Kerberos schema
I'd like to know which kind of searches you usually do when looking into your
backend via LDAP.
Which attributes are you usually using in the search?
Which
HI!
I'm looking closer at the attribute type descriptions in kerberos.schema
(schema file for OpenLDAP shipped by openSUSE package
krb5-plugin-kdb-ldap-1.13-154.2.x86_64).
For some attribute types with IA5Syntax there's defined:
SUBSTR caseExactSubstringsMatch
IMHO this is wrong. It has
On 02/03/2015 10:00 PM, Paul B. Henson wrote:
> Hmm, that's a bummer, I was just about to avail of rename_principal
> functionality with an LDAP backend as part of a realm rename we have coming
> up :(. I was planning to rename everything and then rename it back in order
> to hardcode the correct s
> From: Michael Ströder
> Sent: Wednesday, February 04, 2015 3:25 AM
>
> Maybe some of you are using MIT Kerberos with LDAP backend.
>
> For creating a decent web2ldap search form template for the Kerberos
schema
> I'd like to know which kind of searches you usually do when looking into
your
> ba
I use LDAP to store additional stuff about users, so the krb stuff is a
subtype (can't remember what the real term is) of my main record type. I
rarely search on the krb fields.
Chris
On Feb 4, 2015 12:09 PM, "Paul B. Henson" wrote:
> > From: Michael Ströder
> > Sent: Wednesday, February 04, 2
ldapsearch -x -H [ ldap://host.fqdn.name:389 | ldaps://host.fqdn.name:636 ]
-D "bind account from your config" -w [that account's password] -b [search
base like ou=People,dc=example,dc=com from your conf]
"(&(objectclass=person)(uid=[your username]))
You can add -LLL after the -x to enable console
