[imp] LDAP - GWIA
Craig White
craigwhite@azapple.com
Mon, 25 Jun 2001 09:59:11 -0700
"John McCoy, Jr." wrote:
>
> Not sure if this will help, but I was getting to many results errors (in IMP
> 2.2.4) too; until I grabbed all relevant LDAP files from CVS, now 2.2.5
> release.
>
> HTH
>
> ************************
> John McCoy, Jr
> Central Systems Administrator
> Mills College, Oakland, CA
> 510-430-3321
> jmccoy@mills.edu
> ************************
>
> -----Original Message-----
> From: root@azapple.com [mailto:root@azapple.com]On Behalf Of Craig White
> Sent: Sunday, June 24, 2001 6:50 PM
> To: imp@lists.horde.org
> Subject: Re: [imp] LDAP - GWIA
>
> Cliff Green wrote:
> >
> > On Sun, 24 Jun 2001, Craig White wrote:
> >
> > CW> Which I guess gets me back to my original question...
> > CW>
> > CW> If I can query the Novell/GWIA LDAP with...
> > CW>
> > CW> ldapsearch -x -b "dc=aidssc,dc=org" -h host_ip "(objectclass=*) -v -P
> 2
> > CW>
> > CW> and it returns a stream of data that includes a sample like...
> > CW>
> > CW> (please ignore real data)
> > CW> # YCB,ASC,ASCDOM,dc=aidssc,dc=org
> > CW> dn: cn=YCB,ou=ASC,ou=ASCDOM,dc=aidssc,dc=org
> > CW> sn: Benson
> > CW> givenname: Yvonne
> > CW> telephonenumber: 222
> > CW> objectclass: person
> > CW> cn:: WXZvbm5lIEJlbnNvbiA=
> > CW> mail: YCB@aidssc.org
> >
> > Pardon the questions, but the above return is interesting...
> >
> > Is this a complete entry for this person? The reason I ask is that it
> > shows two different cn values, one consisting of initials, and one of a
> > base64 representation of a (presumably) binary value. That's odd.
> >
> > Are the ou values consistent across the organization? That is, does
> > everyone have ou=ASC, ou=ASCDOM? Also, strange as this may sound, are
> > other objects besides people being stored in the directory (ie, like
> > equipment, groups, etc.). If so, then expanding the basedn may help weed
> > out the stuff you don't want.
> >
> > CW> and my imp/config/ldap.php3 - includes...
> > CW>
> > CW> $LDAPServers['aidssc'] = new LDAPServer('aidssc',
> > CW> 'AIDSSC',
> > CW> '192.168.1.2',
> > CW> 'dc=aidssc,dc=org',
> > ^^^^^^^^^^^^^^^^^^
> >
> > What happens when this is 'ou=ASCDOM,dc=aidssc,dc=org' ? I know this may
> > be too restrictive, but just for testing purposes...
> >
> -------------
> I am not familiar enough with ldap to tell whether the base64 code as a
> cn property is odd or not, but it is typical of the entire listing. Note
> that this cn line always has 2 '::' (colon's) instead of just one - this
> may be significant but I don't know.
>
> Yes, the ou values are consistent across the organization.
>
> Yes, - if I obtain the entire listing from ...
>
> ldapsearch -x -b "ou=ASC,ou=ASCDOM,dc=aidssc,dc=org" -h 192.168.1.2
> "(objectclass=*)" -P 2
> I get only objectclass=alias and objectclass=person records (203)
>
> ldapsearch -x -b "ou=ASCDOM,dc=aidssc,dc=org" -h 192.168.1.2
> "(objectclass=*)" -P 2
> I get objectclass=alias, objectclass=person and objectclass=organization
> unit records (207)
>
> ldapsearch -x -b "dc=aidssc,dc=org" -h 192.168.1.2 "(objectclass=*)" -P
> 2
> I get objectclass=alias, objectclass=person and objectclass=organization
> unit records - same as above (207)
>
> an alias record looks like this...
> (again - real data - please ignore)
> # Yvonne,ASC,ASCDOM,dc=aidssc,dc=org
> dn: cn=Yvonne,ou=ASC,ou=ASCDOM,dc=aidssc,dc=org
> objectclass: alias
> mail: Yvonne@aidssc.org
> GWIA creates these alias records when you create email aliases.
>
> If I change the line per your suggestion in imp/config/ldap.php3'
> 'ou=ASC,ou=ASCDOM,dc=aidssc,dc=org
> or
> 'ou=ASCDOM,dc=aidssc,dc=org'
> or
> 'dc=aidssc,dc=org'
>
> the result is the same ... too many results to display
>
> but I am neither restarting php, apache nor logging out (i.e. ending
> horde/imp/phpsession) with each subsequent change to ldap config file in
> imp. I am however closing the contacts window before I make the change
> to imp/config/ldap.php3 and then re-opening contacts window in imp to
> check whether it works. That was sufficient enough to make it work for
> me on my home test (without Novell/GWIA but rather openldap server.
>
> Those were very good questions and even though I think I went through it
> all, it forced me to look it all through again and that is a good thing.
>
> Thanks but still stumped...
>
> Craig
>
-----------
I just checked - it is version 2.2.5 that's installed.
Craig