[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Sync replication and "*Password" attributes



Hello.

15.12.2008 18:26, Aaron Richton ÐÐÑÐÑ:

> On Mon, 15 Dec 2008, Alexey Lobanov wrote:

>> group of Debian servers. Everything works fine except userPassword,
>> sambaLMPassword and sambaNTPassowrd attributes; the replicas (two of
>> two) just don't have those attributes in any downloaded entries.

> Are sambaLMPassword/sambaNTPassword visible on the slave cn=Subschema?
> (slapd -d config perhaps, too.)

The master and slave schemas are absolutely identical. Just rsynced. And
the attributes are present in schema, because I can add them manually
with an editor like Luma.

root@mail:/etc/ldap/schema# slapd -d config
.....
reading config file /etc/ldap/schema/samba.schema
........
line 185 (attributetype ( 1.3.6.1.4.1.7165.2.1.24 NAME 'sambaLMPassword'
DESC 'LanManager Password' EQUALITY caseIgnoreIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE ))

line 190 (attributetype ( 1.3.6.1.4.1.7165.2.1.25 NAME 'sambaNTPassword'
DESC 'MD4 hash of the unicode password' EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE ))

However, I am really surprised now. There is no "NAME 'userPassword'"
definition in schema files, neither in master nor in slaves. More
exactly, the definition in generic core.schema is commented out:

# system schema
#attributetype ( 2.5.4.35 NAME 'userPassword'
#       DESC 'RFC2256/2307: password of user'
#       EQUALITY octetStringMatch
#       SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{128} )

It looks like that this attribute definition is hardcoded in slapd. Correct?

Alexey