Password Problems
I reconfigured the ldap administration process to run on port 5515, which is the standard port. I tried to solve the LDAP permissions problem but got stymied by the fact that LDAP wouldn't accept the administrator/password combination. This despite the facxt that I use the same combo to connect through Eclipse. And I managed to get my new subscription ID installed for MyEclipse. It seems our mail system eats their email.
Posted on Wed, 30 Apr 2008 Tags: ldap
LDAP Research
So I read the documentation to find how to configure the max number of results returned by ldap. It turns out that it was sizelimit and it is settable from the Sun LDAP console (under the configuration/performance tab.) I didn't need to up the limit, though, I revised the remove_attribute.pl script so that it queries LDAP for users one first letter at a time. With that problem solved I was able to move the aliases data into the alternateMailAddress attribute. I also tried to solve my other two LDAP problems: setting permissions on mailGroup and bringing up the sun LDAP console on doright, so far with no success.
Posted on Tue, 29 Apr 2008 Tags: ldap
Mish Mash
I revised the remedy scoping several times based on remarks by Greg and Steve. We held a meeting to discuss the PAR Rework PMP. I made some small changes and uploaded them to the wiki. I turned back to updating ldap by putting the aliases in mail alternate address where possible. There was a bug in the script that updates the aliases. I removed it. The show stopper, however, was the script that removes the existing alternate addresses. It chokes with the message "Admin limit exceeded." Trying to figure this out.
Posted on Mon, 28 Apr 2008 Tags: par remedy ldap
Another Report
I finished the Remedy upgrade scoping and sent it out for comments. I haven't gotten the comments incorporated yet. That will happen Monday. I worked some more on the ldap permissions problem. I found the distinguished name of the admin account, but didn't make any headway in setting the permissions for mailgroup.
Posted on Fri, 25 Apr 2008 Tags: remedy ldap
More Frustration
I turned my attention to updating ldap on doright today. First I deleted the entries I added from aliases in preparation for adding them back in as alternatemailaddress. Then I tried setting up a test mailgroup for Otto and ran into problems. First, I had to create the group, which took a little figuring out. Then I found that I didn't hhave permission to add attributes to it. That took some research to find out how to set permissions in ldap, which I did, but then ran into the problem that my account doesn't have the needed permission to set permissions. A chicken and egg problem.
So I turned my attention to writing the Remedy scoping, which is due tomorrow.
Posted on Thu, 24 Apr 2008 Tags: ldap remedy
Back to Coding
I had a meeting with Matt and Otto this morning. They want to put the mail alias information in the mailAlternateAddress field wher possible. So I revised the alias.pl script to do that and wrote a new script, remove_alternate.pl, to strip the alternate addresses that are currently in ldap.
Posted on Wed, 23 Apr 2008 Tags: ldap
More Documentation
I checked out the feasibility of Matt's proposed ldap/email solution and started to write the Remedy rework scoping.
Posted on Tue, 22 Apr 2008 Tags: remedy par
Documentarion
I spent the day writing the PAR Rework Project Management Plan
Posted on Mon, 21 Apr 2008 Tags: par
Updated
I was able to update ldap on doright by writing a new script that compares the mail fields on doright and slappy3 and ouputs an ldif file with the differences.
Posted on Thu, 17 Apr 2008 Tags: ldap
Frustrating
I tried to solve several ldap problems. The first was connect the Sun ldap client to ldap on doright. It turns out that the ldap admin server runs on a different port on ldap, 390. But even after that I had password problems logging in. The new certificate did not solve the problem of using the Mac mail app with ldaps. I found a url that claimed the problem was caused by a change in the ldap.conf file under Leopard. However, changing the value did not fix the problem. I also checked to see if various software could import vcf files with multiple vcard record. Both Outlook and Palm desktop under Windows failed. So that more or less rules out vcard as an export format from ldap.
Posted on Wed, 16 Apr 2008 Tags: ldap