Roaming (was: LDAP and e-mail)

[Joerg Paysen <paysen@itm.mu-luebeck.de>]

Hi,

in a posting to 'openldap-general@openldap.org' David E. Storey
wrote that you has authentication problems with openldap and
Communicator v4.5. With the following configuration I don't have
authentication problems, and it seems that Communicator can read and
write to my ldap directory. ( The database is very much bigger and
there is a lot of traffic between Communicator and ldap.) But when I
delete my bookmarks.html on disk and start Communicator again the
bookmarks are not, as I thought Roaming should work, updated. So I don't
think that I have not understood how Communicator Roaming works...
 
Any hints ?

This is the openldap configuration as it seems to works for me:

Apply to slapd.at.conf the following lines:

attribute       nsLIPtrURL                              ces
attribute       nsLIPrefs                               ces
attribute       nsLIProfileName                         cis
attribute       nsLIData                                bin
attribute       nsLIElementType                         cis
attribute       nsLIServerType                          cis
attribute       nsLIVersion     nsLIVersion-oid         integer




Apply to slapd.oc.conf the following lines:
 
objectclass nsLIPtr
        requires
                objectclass
        allows
                nsliptrurl,
                owner

objectclass nsLIProfile
        requires
                objectclass,
                nsliprofilename
        allows
                nsliprefs,
                uid,
                owner

objectclass nsLIProfileElement
        requires
                objectclass,
                nslielementtype
        allows
                owner,
                nslidata,
                nsliversion

objectclass nsLIServer
        requires
                objectclass,
                serverhostname
        allows
                description,
                cn,
                nsserverport,
                nsliservertype,
                serverroot



This is my slapd.conf:

include         /usr/local/ldap/etc/ldap/slapd.at.conf
include         /usr/local/ldap/etc/ldap/slapd.oc.conf
schemacheck     on
referral        ldap://ldap.itd.umich.edu

database        ldbm
suffix          "o=myOrg,c=DE"
directory       /usr/tmp
rootdn          "cn=myName,o=myOrg,c=DE"
rootpw          secret
access to *
        by dn="cn=.*,ou=People,o=myOrg,c=DE"  write
        by *                                  none




This is my ldif:

dn: o=myOrg,c=DE
o: myOrg
objectclass: organization

dn: cn=myName,ou=People,o=myOrg,c=DE
cn: myName
sn: myName
userpassword: myPassword
objectclass: top
objectclass: person

dn: nsLIProfileName=myName,ou=Roaming,o=myOrg,c=DE
changetype: add
objectclass: top
uid: myName
owner: uid=myName,ou=People,o=myOrg,c=DE
objectclass: top
objectclass: nsLIProfile




How I call ldap from Coomunicator:

Address: ldap://myHost/nsLIProfileName=$USERID,ou=ROAMING,o=myOrg,c=DE

User DN: cn=$USERID,o=myOrg,c=DE