Koozali.org: home of the SME Server

LDAP configuration problems

rod123

LDAP configuration problems
« on: January 27, 2005, 09:49:32 PM »
I've set up smeserver 6 and have been trying to access addresses for local users using Outlook Express.  LDAP service has been enabled in server-manager. I have setup directory service details in OE with address of smeserver using port 389, but cannot seem to find any entries for local users using various search criteria.
 
Is the setup as simple as implied in server-manager, or am I missing something here?

Thanks

Rod

Offline Tib

  • *
  • 571
  • +0/-0
    • http://www.tibors.net
LDAP configuration problems
« Reply #1 on: January 28, 2005, 10:42:25 AM »
Hello rod123,

In the Base DN area have you entered:
dc=local,dc=yourserver,dc=com,dc=au ... for example.

Base DN is Thunderbird ... Outlook something similar but I can't remember the exact term ... it's on the last tab when setting up the LDAP I think.

One thing I have noticed though with outlook ... it really bad at letting you view all the addresses in the LDAP's ... in the contacts search it won't let you use wildcards, you either have to use a,e,i,o,u all seperate to bring up all the people in ldap contacts or type in the persons name. I found Thunderbird heaps better ... especially when you put in the "Cotacts Sidebar" Extension, all the contacts just appear without doing anything.

If you have problems let me know ... I've got a fully working LDAP setup with Outlook at work and Thunderbird here at home using SME 6.0.1-01. I could do some screen shots for you to help setup.

Regards,

Tib

davejay

LDAP configuration problems
« Reply #2 on: January 30, 2005, 10:26:35 PM »
I could use some assistance, if you have some time.

I had a working 5.6 installation, but was not using LDAP. I recently upgraded to 6.0.1-01. Now my wife wants an address book she can access and update from the web, so LDAP seems appropriate.

However, I seem to have two problems:

1. in the "Directory" server-manager item, there is no server information shown (no display of "dn=[],dn=[]");

2. when I use the server information stored in slapd.conf ("cn=root,dn=[redacted],dn=[redacted]"), I can browse just fine provided I don't enter a password. If I enter a password, I get an "invalid credentials" error; If I don't enter a password, I can browse, but any attempt to update a record results in an "insufficient access" error.

Note that I'm using GQ on a local network box as an LDAP client, that I don't have any LDAP-related contribs installed, and that I can browser LDAP in webmail, but cannot add an entry (clicking add gives "failed to connect to the specified directory" error).

Thanks in advance for any assistance you can give.

davejay

LDAP configuration problems
« Reply #3 on: January 31, 2005, 05:12:44 AM »
Well, I changed the password in the slapd.conf file, and it seems to work now. Server-manager still doesn't show the server address, and I'm not sure where this password should normally come from/be configured from, but at least I can get it working in the short term.

Long term, however, here's my question: is it normal to have a manually-set, unique password for LDAP read/write access, or should all authenticated users be able to read/write?

Offline Tib

  • *
  • 571
  • +0/-0
    • http://www.tibors.net
LDAP configuration problems
« Reply #4 on: January 31, 2005, 05:48:55 AM »
Hello davejay,

Hmm ... I'm not quite sure what your trying to do there.

LDAP in SME is for either local addresses or global addresses neither of which can be updated over the net or within webmail.

Local address are updated automatically as soon as you add a new User in the server-manager.
As for global addresses you have to do manually ... I installed the addon form here ...
http://mirror.contribs.org/smeserver/contribs/hmuhammad/

Read the notes ... very important.

You can also add : sme-phpldapadmin-0.1-1MstSlp.noarch.rpm from:
http://vanhees.homeip.net/
not required though.

As for personal addresses you should be able to add/delete from webmail. But If you want to view your personal addresses from the server I haven't played arround with that yet.

Regards,

Tib

rod123

LDAP configuration problems
« Reply #5 on: January 31, 2005, 09:41:35 PM »
Thank you Tib for your suggestions and apologies for not replying sooner.  

I still have problems - possibly to do with the entries in search base of Outlook Express.  For example, if I put
dc=local, dc=dom1, dc=ac, dc=uk (for dom1.ac.uk)I always get the message 'The are no entries in the directory service that match your search criteria'

Ideas?

Offline Tib

  • *
  • 571
  • +0/-0
    • http://www.tibors.net
LDAP configuration problems
« Reply #6 on: February 02, 2005, 10:58:46 AM »
Hello Rod123,

Sorry for the delaid post ... been busy.

OK .. I setup outlook express with IMAP and LDAP ... this is the first time in years I've played in outlook express.

Anyway I got it going no probs ... First: when setting up the LDAP account under General fill in the server name ... I also checked the "check names against this server when sending" not sure if that is reqired but I did it anyway ... don't fill in the bit for account and pass.

Second: under the Advanced tab fill in the search base "dc=local,dc=yourdomain,dc=net" or dc=com or dc=com,dc=au etc ... depends on your domain setup leave out the "" but don't leave a space between the dc=XXX and the next dc.

now to see if I could view the people I opened the address book ... clicked on "find people"  look in "whatever you named your LDAP" then click on "advanced" ... in Define Criteria choose "email" then "contains" and put "@" then click add. This will find all people with @ in there e-mail address. In other words everyone :) ... now click "find now" ... you should get a list of people.

If by any chance nothing comes up ... check all your settings.

Ohh and I'm assuming that you have the LDAP part of things setup properly on your server side ... turned on etc.

Regards,

Tib.

Offline Tib

  • *
  • 571
  • +0/-0
    • http://www.tibors.net
LDAP configuration problems
« Reply #7 on: February 02, 2005, 11:17:18 AM »
Me again,

I personally would leave outlook and outlook express alone ... there not very user friendly with LDAP addresses.

Setup Thunderbird and put the "contacs side bar" addon in ... you'll love it. With the contacts side bar you can choose from local or global contacts as well as your normal contacs from one spot right click on the person and e-mail away.

Thunderbird has a much more user friendly setup about it ... also with IMAP thunderbird puts the sent e-mail in the imap folders not your local folders so if you view your mail in webmail you can view all your sent mail as well.

Thats one thing I have not been able to work out in outlook it always puts the sent mail in the personal folders sent mail and not the imap sent mail a right pain in the B.

The only feature thunderbird lacks "for the moment" is the group meetings function. There is a sort of meetings as well but not as easy to setup ... ohh and Thunderbird has a cool calendar as well ... and there are people that have got holidays all setup for the calendar for a lot of countries.

Regards,

Tib

mbachmann

LDAP configuration problems
« Reply #8 on: February 02, 2005, 11:53:21 AM »
The contacts sidebar is neat, especially the automatically populate ldap adressebooks feature. But where is the calendar you are talking about?

Offline Tib

  • *
  • 571
  • +0/-0
    • http://www.tibors.net
LDAP configuration problems
« Reply #9 on: February 02, 2005, 11:58:57 AM »
Hello mbachmann,

It's the "Mozilla calendar 0.8.3" addon in extentions

Regards,

Tib

Offline Tib

  • *
  • 571
  • +0/-0
    • http://www.tibors.net
LDAP configuration problems
« Reply #10 on: February 02, 2005, 12:05:56 PM »
hmm looks like they took it off

here is a link to it anyway.

http://ftp.mozilla.org/pub/mozilla.org/calendar/xpi/windows/calendar_windows_20050111.xpi

download it then click on tools .... extentions ... install and navigate to the downloaded file and presto after you have restarted thunderbird you have a caledar.

and here are the holiday files :

http://www.mozilla.org/projects/calendar/holidays.html

Regards,

Tib

rod123

LDAP configuration problems
« Reply #11 on: February 04, 2005, 12:19:54 AM »
Thanks again tib for your very detailed and thoughtful reply and for trying OE.  I've tried what you suggested and still cannot find any address entries. This response is almost instantanious.  If the server name is wrong it takes 10 secs of so to get nothing.

I'm just wondering if I haven't enabled the smeserver correctly.  I cannot find any specific way to enable/ disable the LDAP server in server-manager; in the Directory  Change LDAP directory settings I've enabled access to local directories only and it makes reference to 'the server root parameter below', which does not appear to exist.

It's in server only mode.  Any more thoughts please?

Offline Tib

  • *
  • 571
  • +0/-0
    • http://www.tibors.net
LDAP configuration problems
« Reply #12 on: February 04, 2005, 02:20:08 AM »
Hello rod123,

I'm not sure how to turn LDAP on normally ... but I installed the contribs form this link:
http://mirror.contribs.org/smeserver/contribs/hmuhammad/

With this contrib you can turn LDAP on/off and also setup global LDAP ... just read the comments carefully.

Just download files ...
e-smith-ldap-4.10.0-04.noarch.rpm
smeserver-ldap-contacts-0.3.1-01hm.noarch.rpm
smeserver-ldap-contacts-0.3.1-01hm.install.sh
install using ...
smeserver-ldap-contacts-0.3.1-01hm.install.sh

Regards,

Tib

mbachmann

LDAP configuration problems
« Reply #13 on: February 07, 2005, 08:50:16 AM »
They reannounced the Mozilla Sunbird Calender here today: http://www.mozilla.org/projects/calendar/sunbird.html

Madmax

Another ldap problem
« Reply #14 on: February 11, 2005, 09:58:36 AM »
Hi all, this is my first post.

I am running a mailserver on sme v6.01 and am having a strange problem with ldap. I installed the contribs from the link:
http://mirror.contribs.org/smeserver/contribs/hmuhammad/

I have pointed it to a tab delimited text file with about 1000 entries in a writable ibay, but for some reason, random entries (about 1/3) cannot be found. There is no pattern to these entries (i.e. email addresses are normal). I have checked the text file and it is formatted correctly.

I also noticed that even with the sample file that the author provided "SampleLuminaries.txt" two of the entries can't be found (Micky and Minnie Mouse I believe).

Any ideas? :-?