Re: Proxy Ldap Backend for Ipswich Imail

["Gerald (Jerry) Carter" <jerry@samba.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jim Flowers wrote:

| Yes, I mean that I can't find a way to configure
| the DomainName attribute on the ldap proxy server.  None
| of the objectclasses that I am aware of have a DomainName
| attribute as either required or optional.  I see that I
| could map it to something other attribute that I do have but
| I don't think that will help me with the 'real naming context'
| where the dn component DomainName=hisdomain.tld is rejected
| on startup of slapd.  No DomainName in any of my schemas.

Howard's suggestion about searching the subschemaSubentry
DN was what I was going to say as well.

| I did try it with: ldapsearch -x -b "ou=hisorg,dc=mydomain,dc=tld"
| with the same results, just picked the wrong one to report.  I
| don't know about the non-empty DN.  It seems to work OK with
| ldapsearch -b "" direct to the target server and with Net::LDAP
| in a script.  I can also see the info I want being
| returned in the slapd -d 1 trace.  I just can't get to use it:

Strange.  I seem to remember some servers (not sure which ones)
having a default search suffix to use if the client didn't give
one.  I can't remember where I ran into this though.  Could be
the case you're seeing with the IPsswitch server.

But based on your comments below I would work on defining
the DomainName attribute on the ldap proxy before I worried
about much more.






cheers, jerry
~ ----------------------------------------------------------------------
~ Hewlett-Packard            ------------------------- http://www.hp.com
~ SAMBA Team                 ---------------------- http://www.samba.org
~ GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~                            --John Cusack - "Grosse Point Blank" (1997)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/oRrTIR7qMdg1EfYRAiQLAJ9atYKPLgFdsjVGWMREip+FKT/VMgCeOzNN
fZINGbGizgzMe8hxCex9kxA=
=XOg2
-----END PGP SIGNATURE-----