Netscape Roaming Profile for OpenLDAP v2

[Hugo.van.der.Kooij@caiw.nl]

Hi,

The following Schema file (ns-mcd-li.schema) will allow you to use
OpenLDAP for NetScape Roaming Profiles:

--------B<--------B<--------
attributetype ( 2.16.840.1.113730.3.1.55
        NAME 'aci'
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 )

attributetype ( 2.16.840.1.113730.3.1.70
        NAME 'serverRoot'
        EQUALITY caseIgnoreMatch
        ORDERING caseIgnoreOrderingMatch
        SUBSTR caseIgnoreMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 2.16.840.1.113730.3.1.76
        NAME 'serverHostName'
        EQUALITY caseIgnoreMatch
        ORDERING caseIgnoreOrderingMatch
        SUBSTR caseIgnoreMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 2.16.840.1.113730.3.1.280
        NAME 'nsServerPort'
        EQUALITY caseIgnoreMatch
        ORDERING caseIgnoreOrderingMatch
        SUBSTR caseIgnoreMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 2.16.840.1.113730.3.1.399
        NAME 'nsLIPtrURL'
        EQUALITY caseExactMatch
        ORDERING caseExactOrderingMatch
        SUBSTR caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 2.16.840.1.113730.3.1.400
        NAME 'nsLIPrefs'
        EQUALITY caseExactMatch
        ORDERING caseExactOrderingMatch
        SUBSTR caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 2.16.840.1.113730.3.1.401
        NAME 'nsLIProfileName'
        EQUALITY caseIgnoreMatch
        ORDERING caseIgnoreOrderingMatch
        SUBSTR caseIgnoreMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 2.16.840.1.113730.3.1.402
        NAME 'nsLIData'
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 )

attributetype ( 2.16.840.1.113730.3.1.403
        NAME 'nsLIElementType'
        EQUALITY caseIgnoreMatch
        ORDERING caseIgnoreOrderingMatch
        SUBSTR caseIgnoreMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 2.16.840.1.113730.3.1.404
        NAME 'nsLIServerType'
        EQUALITY caseIgnoreMatch
        ORDERING caseIgnoreOrderingMatch
        SUBSTR caseIgnoreMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

objectclass ( 2.16.840.1.113730.3.2.74
        NAME 'nsLiPtr'
        SUP top
        MUST objectClass
        MAY ( aci $ nsLIPtrURL $ owner ) )

objectclass ( 2.16.840.1.113730.3.2.75
        NAME 'nsLiProfile'
        SUP top
        MUST ( objectClass $ nsLIProfileName )
        MAY ( aci $ nsLIPrefs $ owner $ uid ) )

objectclass ( 2.16.840.1.113730.3.2.76
        NAME 'nsLiProfileElement'
        SUP top
        MUST ( objectClass $ nsLiElementType )
        MAY ( aci $ owner $ nsLIData ) )

objectclass ( 2.16.840.1.113730.3.2.77
        NAME 'nsLiServer'
        SUP top
        MUST ( objectClass $ serverHostName )
        MAY ( aci $ cn $ description $ nsLIServerType $ nsServerPort $ serverRoot ) )
--------B<--------B<--------

The schema is accepted. A password is set but apparerently netscape is
unwilling to store any data into the database. (I have it working on
OpenLDAP 1.2.11) At present my last guess was a password issue but the
password is accepted while another text is not acceptable as password

The security is defined in slapd.conf as:

lastmod on
access to dn=".*,ou=Roaming,dc=vanderkooij,dc=org"
        by dnattr=owner write
access to attr=userpassword
        by self write
        by anonymous auth
        by dn="cn=Manager,dc=vanderkooij,dc=org" write
        by * none
access to *
        by self write
        by anonymous auth


I would welcome any remark that would help me out.

Hugo.

-- 
Hugo van der Kooij; Oranje Nassaustraat 16; 3155 VJ  Maasland
hvdkooij@caiw.nl	http://home.kabelfoon.nl/~hvdkooij/
--------------------------------------------------------------
Quoting this tagline is illegal! (http://www.dtcc.edu/cs/rfc1855.html)