[Date Prev][Date Next]
RE: search for a user by cn or uid
Thanks. I didn't know about slapcat. A cool tool with a cool name....
Anyway, the person entries WERE getting created - it turns out I had my ACLs
set incorrectly for the sub-tree my users were in and I wasn't giving read
access. Once I fixed that I was able to see them.
> -----Original Message-----
> From: email@example.com
> [mailto:firstname.lastname@example.org]On Behalf Of David Young
> Sent: Wednesday, May 02, 2001 5:15 PM
> To: email@example.com
> Subject: Re: search for a user by cn or uid
> Try doing a slapcat and see if you inetorgpersons are in the
> resulting ldif.
> It sounds like they probably didn't get created. I think you need to
> explicitly include /usr/local/etc/openldap/schema/inetorgperson.schema in
> your slapd.conf if you haven't checked that.
> ----- Original Message -----
> From: "David Parker" <firstname.lastname@example.org>
> To: <openldap-software@OpenLDAP.org>
> Sent: Wednesday, May 02, 2001 4:59 PM
> Subject: search for a user by cn or uid
> > When a user logs in to our application, we first search from a defined
> > in the directory with a filter like
> > (&(|(cn=<name>)(uid=<name>))(objectclass=inetorgperson))
> > This works with Netscape and Oracle Internet Directory, but I am having
> > difficulty with OpenLDAP 2.0.7.
> > I posted a query about indexing a custom attribute earlier today, and it
> > turned out to be my schema definition. In this case, I have
> cn,uid marked
> > for indexing in the slapd.conf, and I see the .dbb files in
> > var/openldap-ldbm, so it *looks* like the indexes are there.
> > But my search finds nothing. Further,
> > ldapsearch -b <my root> '(objectclass=*)'
> > doesn't return any of my inetorgperson entries, though they appear to be
> > created when I ran the ldif file. The search returns various
> other objects
> > created.
> > I am clearly doing something silly somewhere, but can't figure
> it out. Has
> > anybody seen this kind of behavior?
> > Thanks for any advice.
> > - DAP
> > -----------------------------------------------------------
> > David Parker - eBT International - (401) 752-4497
> > "If we become too serious we will lose our way."
> > - Shunryu Suzuki