On Wed, 2007-11-28 at 12:20 +0100, Ralf Haferkamp wrote: > On Mittwoch, 28. November 2007, Andrew Bartlett wrote: > [..] > > > Looking at the configuration, it seems this can only currently be > > > configured once - ie, for memberOf. Am I missing how to configure it to > > > also handle an arbitrary number of other attributes? Ideally I would > > > process the AD schema into a configuration file with these details. > I think you can just create multiple instances of the "memberof" Overlay. Like > this: > > overlay memberof > memberof-group-oc group > memberof-member-ad member > memberof-memberof-ad memberof > overlay memberof > memberof-group-oc another-oc > memberof-member-ad another-member > memberof-memberof-ad another-memberof I'll try this out. BTW, must the memberof-group-oc be unique? Could I set it to 'top' in all cases, to just key off the attribute? This should simplify the generation from the AD schema. > > To start with this module I've decided to just deal with memberOf. > > However, I can't get the module to start, because while it allows > > configuration of different schema in theory, it relies on the default > > schema to exist in practice: > > > > [abartlet@naomi source]$ /usr/local/sbin/slaptest > > -f /home/data/samba/samba4/clean/source/st/dc/private/ldap/slapd.conf > > back-bdb/back-hdb monitor: "olmBDBAttributes" previously defined > > "1.3.6.1.4.1.4203.666.1.55.0.1.1" > > back-bdb/back-hdb monitor: "olmBDBObjectClasses" previously defined > > "1.3.6.1.4.1.4203.666.3.16.0.1.1" > > memberof_db_init: unable to find objectClass="groupOfNames" > > slaptest: bad configuration file! > > > > The problem is that groupOfNames doesn't exist in the AD-like schema I'm > > loading. This is with current CVS OpenLDAP. > > Yeah, the memberof-Overlay needed the "groupOfNames" objectclass and > the "member" Attributetype to initialize correctly. I just committed a change > to HEAD to change that. This should fix your problem. Please test. Sorry about the delay in getting back to you. While I have other issues (probably related to configuration and what things I'm trying to do), I no longer have this error. Thanks! Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Red Hat Inc.
Attachment:
signature.asc
Description: This is a digitally signed message part