Koozali.org: home of the SME Server

LDAP GURU

maaz

LDAP GURU
« on: June 03, 2003, 06:57:23 AM »
Hi Everyone,

I'm running SME 5.6.
I have changed my Dyndns.org hostname to a FQN (mydomain.com).
The change went well overall except My LDAP.
I needed to update my LDAP directory on the server-manager and
did'nt give me any errors on that level.

But when i checked my logs on the messages files, i have had the followings :

Jun  1 01:18:36 myhost e-smith[2975]: Running event handler: /etc/e-smith/events/
ldap-update/S80ldap-update
Jun  1 01:18:39 tuxam e-smith[2975]: failed to modify entry for uid=user1,
dc=mydomain,dc=com: No such object at /etc/e-smith/events/ldap-update/S80ldap-update lin
e 153.

And this go on for all users.



I checked line 153 and this is it:

my $dn = "uid=$key,$base";
    if (($event eq 'user-create') || ($event eq 'group-create'))


I also checked my ldap.com file:

#------------------------------------------------------------

#
# LDAP Defaults
#

# See ldap.conf(5) for details
# This file should be world readable.

#BASE   dc=OpenLDAP, dc=Org
#HOST   ldap.openldap.org

#HOST   ldap.openldap.org ldap-master.openldap.org:666
#PORT   389

BASE dc=mydomain,dc=com
HOST localhost
PORT 389

#SIZELIMIT      12
#TIMELIMIT      15
#DEREF          never

#------------------------------------------------------------

Now my problem is that i cannot connect to my ldap directory from e-mail
clients or webmail.

I having the following error message:

Error code 32: No such objet.
Verify that the Base DN is correct ant then try again, ...

I verified the Base DN and it's ok (dc=mydomain,dc=com).

Anyone could help??? Any LDAP GURU??


ThankX a lot.

andrew

Re: LDAP GURU
« Reply #1 on: June 03, 2003, 07:58:16 AM »
Hi, this took me ages to work out!! The problem is (I think) that the server (version 5.6) is unable to carry out any LDAP authentication. In order to get it working you need to update three files which are:
/etc/e-smith/events/actions/ldap-update
/etc/e-smith/events/actions/ldap-rebuild
/usr/lib/perl5/site_perl/esmith/util.pm
And also add a template in
/etc/e-smith/templates-custom/etc/openldap/slapd.conf

I worked this out by a previous contrib that is available at: http://www.star-support.com/downloads/mitel/contrib/ldap-authentication-0.1.0-00/LDAP%20Authentication%20for%20the%20SME%20server%20and%20gateway.htm

However this was written for <5.6 What we did (manually!!) was compare the contents of the two 'util.pm' files and add the differences from the rpm into the existing server-util.pm file. Once done, LDAP searches through webmail works.

Andrew.

m_aaz

Re: LDAP GURU
« Reply #2 on: June 03, 2003, 11:11:27 AM »
Hi Andrew,

Thanks for your help. I finally know what is my problem:

http://www.e-smith.org/bugs/index.php3?op=showBug&bugID=95.

It's a documented bugs. I'm leaving it for futur ref.

Updating the system will solve the problem.


ThankX Again.