perl.ldap

IO::Socket::SSL: Timeout (2 messages)

From: Andrej Ricnik-Bay, _V-IT-Systemhaus-Perl-LDAP von extern Hi *,

running this script from a Linux machine against our Active Directory

---------------------------< schnipp schnapp >--------------------------
#!/usr/bin/perl
use Net::LDAPS;

$ldap = Net::LDAP->new(
'ldaps://:636',
timeout => 1000,
verify => 'require',
capath => '/etc/ssl/certs/',
) || die "cant make initial connection: $@";

$result - $ldap->bind(
'',
password => '',
) || die $!;

$ldap->unbind();
exit;
---------------------------< schnipp schnapp >--------------------------

gives the following result:

cant make initial connection: IO::Socket::SSL: Timeout at ./x line 4,
line 253.

Any idea, why this might happen?
The same script from any Windows box in here works as expected.

versions:

- Novell SLES 10 (x86_64)
- Net::LDAP 0.36
- Net::SSLeay 1.32
- openssl 0.9.8a-18.23

TIA.

Bye.
Michael.

[PATCH] LDAP Content synchronisation (1 message)

From: Mathieu PARENT Hi,

This patch implements Intermediate Message and RFC 4533.

Notes:
- The only intrusive change is in lib/Net/LDAP/Search.pm
- Net::LDAP::Intermediate::SyncInfo is not enabled by default (see
lib/Net/LDAP/Intermediate.pm line 18) as there are decoding errors
within ASN (see my previous mail).

Waiting for feedback before (I hope) inclusion.

Regards

Mathieu Parent

---
MANIFEST | 5 +
lib/Net/LDAP/ASN.pm | 52 +++++++-
lib/Net/LDAP/Constant.pm | 46 ++++++-
lib/Net/LDAP/Control.pm | 15 ++-
lib/Net/LDAP/Control/SyncDone.pm | 152 +++++++++++++++++++++
lib/Net/LDAP/Control/SyncRequest.pm | 165 +++++++++++++++++++++++
lib/Net/LDAP/Control/SyncState.pm | 165 +++++++++++++++++++++++
lib/Net/LDAP/Intermediate.pm | 236 +++++++++++++++++++++++++++++++++
lib/Net/LDAP/Intermediate/SyncInfo.pm | 140 +++++++++++++++++++
lib/Net/LDAP/Search.pm | 14 ++-
10 files changed, 986 insertions(+), 4 deletions(-)
create mode 100644 lib/Net/LDAP/Control/SyncDone.pm
create mode 100644 lib/Net/LDAP/Control/SyncRequest.pm
create mode 100644 lib/Net/LDAP/Control/SyncState.pm
create mode 100644 lib/Net/LDAP/Intermediate.pm
create mode 100644 lib/Net/LDAP/Intermediate/SyncInfo.pm

diff --git a/MANIFEST b/MANIFEST
index 185ce57..161f716 100644
--- a/MANIFEST
+++ b/MANIFEST
@@ -60,6 +60,9 @@ lib/Net/LDAP/Control/PreRead.pm
lib/Net/LDAP/Control/ProxyAuth.pm
lib/Net/LDAP/Control/Sort.pm
lib/Net/LDAP/Control/SortResult.pm
+lib/Net/LDAP/Control/SyncDone.pm
+lib/Net/LDAP/Control/SyncRequest.pm
+lib/Net/LDAP/Control/SyncState.pm
lib/Net/LDAP/Control/VLV.pm
lib/Net/LDAP/Control/VLVResponse.pm
lib/Net/LDAP/DSML.pm
@@ -74,6 +77,8 @@ lib/Net/LDAP/FAQ.pod
lib/Net/LDAP/Filter.pm
lib/Net/LDAP/Filter.pod
lib/Net/LDAP/FilterMatch.pm
+lib/Net/LDAP/Intermediate.pm
+lib/Net/LDAP/Intermediate/SyncInfo.pm
lib/Net/LDAP/LDIF.pm
lib/Net/LDAP/LDIF.pod
lib/Net/LDAP/Message.pm
diff --git a/lib/Net/LDAP/ASN.pm b/lib/Net/LDAP/ASN.pm
index f894c13..82b7c17 100644
--- a/lib/Net/LDAP/ASN.pm
+++ b/lib/Net/LDAP/ASN.pm
@@ -1,7 +1,7 @@

package Net::LDAP::ASN;

-$VERSION = "0.06";
+$VERSION = "0.07";

use Convert::ASN1;

@@ -441,6 +441,56 @@ $asn->prepare(<error;
objectName LDAPDN,
attributes PartialAttributeList }

+ -- RFC-4533 LDAP Content Synchronization Operation
+
+ syncUUID ::= OCTET STRING -- (SIZE(16))
+
+ syncCookie ::= OCTET STRING
+
+ syncRequestValue ::= SEQUENCE {
+ mode ENUMERATED {
+ -- 0 unused
+ refreshOnly (1),
+ -- 2 reserved
+ refreshAndPersist (3)
+ }
+ cookie syncCookie OPTIONAL,
+ reloadHint BOOLEAN -- DEFAULT FALSE
+ }
+
+ syncStateValue ::= SEQUENCE {
+ state ENUMERATED {
+ present (0),
+ add (1),
+ modify (2),
+ delete (3)
+ }
+ entryUUID syncUUID,
+ cookie syncCookie OPTIONAL
+ }
+
+ syncDoneValue ::= SEQUENCE {
+ cookie syncCookie OPTIONAL,
+ refreshDeletes BOOLEAN -- DEFAULT FALSE
+ }
+
+ syncInfoValue ::= CHOICE {
+ newcookie [0] syncCookie,
+ refreshDelete [1] SEQUENCE {
+ refreshDeleteCookie syncCookie OPTIONAL,
+ refreshDeleteDone BOOLEAN -- DEFAULT TRUE
+ }
+ refreshPresent [2] SEQUENCE {
+ refreshDeletecookie syncCookie OPTIONAL,
+ refreshDeleteDone BOOLEAN -- DEFAULT TRUE
+ }
+ syncIdSet [3] SEQUENCE {
+ cookie syncCookie OPTIONAL,
+ refreshDeletes BOOLEAN, -- DEFAULT FALSE
+ syncUUIDs SET OF syncUUID
+ }
+ }
+
LDAP_ASN

1;
diff --git a/lib/Net/LDAP/Constant.pm b/lib/Net/LDAP/Constant.pm
index 6d84ab6..a9bebe9 100644
--- a/lib/Net/LDAP/Constant.pm
+++ b/lib/Net/LDAP/Constant.pm
@@ -4,7 +4,7 @@

package Net::LDAP::Constant;

-$VERSION = "0.06";
+$VERSION = "0.07";

use Carp;

@@ -481,6 +481,14 @@ The referral hop limit has been exceeded.

=item LDAP_CONTROL_ASSERTION (1.3.6.1.1.12)

+=item LDAP_CONTROL_SYNC (1.3.6.1.4.1.4203.1.9.1.1)
+
+=item LDAP_CONTROL_SYNC_STATE (1.3.6.1.4.1.4203.1.9.1.2)
+
+=item LDAP_CONTROL_SYNC_DONE (1.3.6.1.4.1.4203.1.9.1.3)
+
+=item LDAP_SYNC_INFO (1.3.6.1.4.1.4203.1.9.1.4)
+
=back

=head2 Control constants
@@ -523,6 +531,42 @@ The previous password was changed too recently.

The new password was used too recently.

+=item LDAP_SYNC_NONE (0) [LDAP_CONTROL_SYNC]
+
+=item LDAP_SYNC_REFRESH_ONLY (1) [LDAP_CONTROL_SYNC]
+
+=item LDAP_SYNC_RESERVED (2) [LDAP_CONTROL_SYNC]
+
+=item LDAP_SYNC_REFRESH_AND_PERSIST (3) [LDAP_CONTROL_SYNC]
+
+=item LDAP_SYNC_REFRESH_PRESENTS (0) [LDAP_SYNC_INFO]
+
+=item LDAP_SYNC_REFRESH_DELETES (1) [LDAP_SYNC_INFO]
+
+=item LDAP_TAG_SYNC_NEW_COOKIE (0x80) [LDAP_SYNC_INFO]
+
+=item LDAP_TAG_SYNC_REFRESH_DELETE (0xa1) [LDAP_SYNC_INFO]
+
+=item LDAP_TAG_SYNC_REFRESH_PRESENT (0xa2) [LDAP_SYNC_INFO]
+
+=item LDAP_TAG_SYNC_ID_SET (0xa3) [LDAP_SYNC_INFO]
+
+=item LDAP_TAG_SYNC_COOKIE (0x04) [LDAP_SYNC_INFO]
+
+=item LDAP_TAG_REFRESHDELETES (0x01) [LDAP_SYNC_INFO]
+
+=item LDAP_TAG_REFRESHDONE (0x01) [LDAP_SYNC_INFO]
+
+=item LDAP_TAG_RELOAD_HINT (0x01) [LDAP_CONTROL_SYNC]
+
+=item LDAP_SYNC_PRESENT (0) [LDAP_CONTROL_SYNC_STATE]
+
+=item LDAP_SYNC_ADD (1) [LDAP_CONTROL_SYNC_STATE]
+
+=item LDAP_SYNC_MODIFY (2) [LDAP_CONTROL_SYNC_STATE]
+
+=item LDAP_SYNC_DELETE (3) [LDAP_CONTROL_SYNC_STATE]
+
=back

=head2 Extension OIDs
diff --git a/lib/Net/LDAP/Control.pm b/lib/Net/LDAP/Control.pm
index 0cbbbef..c3b36e8 100644
--- a/lib/Net/LDAP/Control.pm
+++ b/lib/Net/LDAP/Control.pm
@@ -21,9 +21,12 @@ use Net::LDAP::Constant qw(
LDAP_CONTROL_PASSWORDPOLICY
LDAP_CONTROL_PREREAD
LDAP_CONTROL_POSTREAD
+ LDAP_CONTROL_SYNC
+ LDAP_CONTROL_SYNC_STATE
+ LDAP_CONTROL_SYNC_DONE
);

-$VERSION = "0.08";
+$VERSION = "0.09";

my %Pkg2Type = (

@@ -49,6 +52,10 @@ my %Pkg2Type = (
'Net::LDAP::Control::PreRead' => LDAP_CONTROL_PREREAD,

'Net::LDAP::Control::PostRead' => LDAP_CONTROL_POSTREAD,
+
+ 'Net::LDAP::Control::SyncRequest' => LDAP_CONTROL_SYNC,
+ 'Net::LDAP::Control::SyncState' => LDAP_CONTROL_SYNC_STATE,
+ 'Net::LDAP::Control::SyncDone' => LDAP_CONTROL_SYNC_DONE,
#
#LDAP_CONTROL_PWEXPIRED
#LDAP_CONTROL_PWEXPIRING
@@ -294,10 +301,16 @@ L
L
L
L
+L
L
+L
+L
L
L
L
+L
+L
+L
L
L

diff --git a/lib/Net/LDAP/Control/SyncDone.pm b/lib/Net/LDAP/Control/SyncDone.pm
new file mode 100644
index 0000000..7fcb0d9
--- /dev/null
+++ b/lib/Net/LDAP/Control/SyncDone.pm
@@ -0,0 +1,152 @@
+# Copyright (c) 2008 Mathieu Parent . All
rights reserved.
+# This program is free software; you can redistribute it and/or
+# modify it under the same terms as Perl itself.
+
+package Net::LDAP::Control::SyncDone;
+
+use vars qw(@ISA $VERSION);
+use Net::LDAP::Control;
+
+@ISA = qw(Net::LDAP::Control);
+$VERSION = "0.01";
+
+use Net::LDAP::ASN qw(syncDoneValue);
+use strict;
+
+# use some kind of hack here:
+# - calling the control without args means: response,
+# - giving an argument: means: request
+sub init {
+ my($self) = @_;
+
+ delete $self->{asn};
+
+ unless (exists $self->{value}) {
+ $self->{asn} = {
+ cookie => $self->{cookie} || '',
+ refreshDeletes => $self->{refreshDeletes} || '0',
+ };
+ }
+
+ $self;
+}
+
+sub cookie {
+ my $self = shift;
+ $self->{asn} ||= $syncDoneValue->decode($self->{value});
+ if (@_) {
+ delete $self->{value};
+ return $self->{asn}{cookie} = shift || 0;
+ }
+ $self->{asn}{cookie};
+}
+
+sub refreshDeletes {
+ my $self = shift;
+ $self->{asn} ||= $syncDoneValue->decode($self->{value});
+ if (@_) {
+ delete $self->{value};
+ return $self->{asn}{refreshDeletes} = shift || 0;
+ }
+ $self->{asn}{refreshDeletes};
+}
+
+sub value {
+ my $self = shift;
+
+ exists $self->{value}
+ ? $self->{value}
+ : $self->{value} = $syncDoneValue->encode($self->{asn});
+}
+
+1;
+
+
+__END__
+
+=head1 NAME
+
+Net::LDAP::Control::SyncDone - LDAPv3 Sync Done control object
+
+=head1 SYNOPSIS
+
+ use Net::LDAP;
+ use Net::LDAP::Control::SyncRequest;
+ use Net::LDAP::Constant qw(
+ LDAP_SYNC_REFRESH_ONLY
+ LDAP_SYNC_REFRESH_AND_PERSIST
+ LDAP_SUCCESS );
+
+ $ldap = Net::LDAP->new( "ldap.mydomain.eg" );
+
+ $req = Net::LDAP::Control::SyncRequest->new( mode => LDAP_SYNC_REFRESH_ONLY );
+ my $mesg = $ldap->search(base=> 'dc=mydomain,dc='eg',
+ scope => 'sub',
+ control => [ $req ],
+ callback => \&searchCallback, # call for each entry
+ filter => "(objectClass=*)",
+ attrs => [ '*']);
+ sub searchCallback {
+ my $message = shift;
+ my $entry = shift;
+ my @controls = $message->control;
+
+ if($controls[0]->isa('Net::LDAP::Control::SyncState')) {
+ print "Received Sync State Control\n";
+ print $entry->dn()."\n";
+ print 'State: '.$controls[0]->state."\n".', entryUUID:
'.$controls[0]->entryUUID.', cookie: '.$controls[0]->cookie;
+ } elsif($controls[0]->isa('Net::LDAP::Control::SyncDone')) {
+ print "Received Sync Done Control\n";
+ print 'Cookie: '.$controls[0]->cookie.', refreshDeletes:
'.$controls[0]->refreshDeletes;
+ }
+ }
+
+=head1 DESCRIPTION
+
+C provides an interface for the creation and
+manipulation of objects that represent the C as described
+by RFC 4533.
+
+=head1 CONSTRUCTOR ARGUMENTS
+
+In addition to the constructor arguments described in
+L the following are provided.
+
+=over 4
+
+=item cookie
+
+=item refreshDeletes
+
+=back
+
+=head1 METHODS
+
+As with L each constructor argument
+described above is also avaliable as a method on the object which will
+return the current value for the attribute if called without an argument,
+and set a new value for the attribute if called with an argument.
+
+=head1 SEE ALSO
+
+L,
+L,
+L,
+L,
+http://www.ietf.org/rfc/rfc4533.txt
+
+=head1 AUTHOR
+
+Mathieu Parent Emath.parent@gmail.comE
+
+Please report any bugs, or post any suggestions, to the perl-ldap mailing list
+Eperl-ldap@perl.orgE
+
+=head1 COPYRIGHT
+
+Copyright (c) 2008 Mathieu Parent. All rights reserved. This program is
+free software; you can redistribute it and/or modify it under the same
+terms as Perl itself.
+
+=cut
+
diff --git a/lib/Net/LDAP/Control/SyncRequest.pm
b/lib/Net/LDAP/Control/SyncRequest.pm
new file mode 100644
index 0000000..b33868d
--- /dev/null
+++ b/lib/Net/LDAP/Control/SyncRequest.pm
@@ -0,0 +1,165 @@
+# Copyright (c) 2008 Mathieu Parent . All
rights reserved.
+# This program is free software; you can redistribute it and/or
+# modify it under the same terms as Perl itself.
+
+package Net::LDAP::Control::SyncRequest;
+
+use vars qw(@ISA $VERSION);
+use Net::LDAP::Control;
+
+@ISA = qw(Net::LDAP::Control);
+$VERSION = "0.01";
+
+use Net::LDAP::ASN qw(syncRequestValue);
+use strict;
+
+# use some kind of hack here:
+# - calling the control without args means: response,
+# - giving an argument: means: request
+sub init {
+ my($self) = @_;
+
+ delete $self->{asn};
+
+ unless (exists $self->{value}) {
+ $self->{asn} = {
+ mode => $self->{mode} || '1',
+ cookie => $self->{cookie} || '',
+ reloadHint => $self->{reloadHint} || '0',
+ };
+ }
+
+ $self;
+}
+
+sub mode {
+ my $self = shift;
+ $self->{asn} ||= $syncRequestValue->decode($self->{value});
+ if (@_) {
+ delete $self->{value};
+ return $self->{asn}{mode} = shift || 0;
+ }
+ $self->{asn}{mode};
+}
+
+sub cookie {
+ my $self = shift;
+ $self->{asn} ||= $syncRequestValue->decode($self->{value});
+ if (@_) {
+ delete $self->{value};
+ return $self->{asn}{cookie} = shift || 0;
+ }
+ $self->{asn}{cookie};
+}
+
+sub reloadHint {
+ my $self = shift;
+ $self->{asn} ||= $syncRequestValue->decode($self->{value});
+ if (@_) {
+ delete $self->{value};
+ return $self->{asn}{reloadHint} = shift || 0;
+ }
+ $self->{asn}{reloadHint};
+}
+
+sub value {
+ my $self = shift;
+
+ exists $self->{value}
+ ? $self->{value}
+ : $self->{value} = $syncRequestValue->encode($self->{asn});
+}
+
+1;
+
+
+__END__
+
+=head1 NAME
+
+Net::LDAP::Control::SyncRequest - LDAPv3 Sync Request control object
+
+=head1 SYNOPSIS
+
+ use Net::LDAP;
+ use Net::LDAP::Control::SyncRequest;
+ use Net::LDAP::Constant qw(
+ LDAP_SYNC_REFRESH_ONLY
+ LDAP_SYNC_REFRESH_AND_PERSIST
+ LDAP_SUCCESS );
+
+ $ldap = Net::LDAP->new( "ldap.mydomain.eg" );
+
+ $req = Net::LDAP::Control::SyncRequest->new( mode => LDAP_SYNC_REFRESH_ONLY );
+ my $mesg = $ldap->search(base=> 'dc=mydomain,dc='eg',
+ scope => 'sub',
+ control => [ $req ],
+ callback => \&searchCallback, # call for each entry
+ filter => "(objectClass=*)",
+ attrs => [ '*']);
+ sub searchCallback {
+ my $message = shift;
+ my $entry = shift;
+ my @controls = $message->control;
+
+ if($controls[0]->isa('Net::LDAP::Control::SyncState')) {
+ print "Received Sync State Control\n";
+ print $entry->dn()."\n";
+ print 'State: '.$controls[0]->state."\n".', entryUUID:
'.$controls[0]->entryUUID.', cookie: '.$controls[0]->cookie;
+ } elsif($controls[0]->isa('Net::LDAP::Control::SyncDone')) {
+ print "Received Sync Done Control\n";
+ print 'Cookie: '.$controls[0]->cookie.', refreshDeletes:
'.$controls[0]->refreshDeletes;
+ }
+ }
+
+=head1 DESCRIPTION
+
+C provides an interface for the creation and
+manipulation of objects that represent the C as described
+by RFC 4533.
+
+=head1 CONSTRUCTOR ARGUMENTS
+
+In addition to the constructor arguments described in
+L the following are provided.
+
+=over 4
+
+=item mode
+
+=item cookie
+
+=item reloadHint
+
+=back
+
+=head1 METHODS
+
+As with L each constructor argument
+described above is also avaliable as a method on the object which will
+return the current value for the attribute if called without an argument,
+and set a new value for the attribute if called with an argument.
+
+=head1 SEE ALSO
+
+L,
+L,
+L,
+L,
+http://www.ietf.org/rfc/rfc4533.txt
+
+=head1 AUTHOR
+
+Mathieu Parent Emath.parent@gmail.comE
+
+Please report any bugs, or post any suggestions, to the perl-ldap mailing list
+Eperl-ldap@perl.orgE
+
+=head1 COPYRIGHT
+
+Copyright (c) 2008 Mathieu Parent. All rights reserved. This program is
+free software; you can redistribute it and/or modify it under the same
+terms as Perl itself.
+
+=cut
+
diff --git a/lib/Net/LDAP/Control/SyncState.pm
b/lib/Net/LDAP/Control/SyncState.pm
new file mode 100644
index 0000000..b069e42
--- /dev/null
+++ b/lib/Net/LDAP/Control/SyncState.pm
@@ -0,0 +1,165 @@
+# Copyright (c) 2008 Mathieu Parent . All
rights reserved.
+# This program is free software; you can redistribute it and/or
+# modify it under the same terms as Perl itself.
+
+package Net::LDAP::Control::SyncState;
+
+use vars qw(@ISA $VERSION);
+use Net::LDAP::Control;
+
+@ISA = qw(Net::LDAP::Control);
+$VERSION = "0.01";
+
+use Net::LDAP::ASN qw(syncStateValue);
+use strict;
+
+# use some kind of hack here:
+# - calling the control without args means: response,
+# - giving an argument: means: request
+sub init {
+ my($self) = @_;
+
+ delete $self->{asn};
+
+ unless (exists $self->{value}) {
+ $self->{asn} = {
+ state => $self->{state} || '',
+ entryUUID => $self->{entryUUID} || '',
+ cookie => $self->{cookie} || '',
+ };
+ }
+
+ $self;
+}
+
+sub state {
+ my $self = shift;
+ $self->{asn} ||= $syncStateValue->decode($self->{value});
+ if (@_) {
+ delete $self->{value};
+ return $self->{asn}{state} = shift || 0;
+ }
+ $self->{asn}{state};
+}
+
+sub entryUUID {
+ my $self = shift;
+ $self->{asn} ||= $syncStateValue->decode($self->{value});
+ if (@_) {
+ delete $self->{value};
+ return $self->{asn}{entryUUID} = shift || 0;
+ }
+ $self->{asn}{entryUUID};
+}
+
+sub cookie {
+ my $self = shift;
+ $self->{asn} ||= $syncStateValue->decode($self->{value});
+ if (@_) {
+ delete $self->{value};
+ return $self->{asn}{cookie} = shift || 0;
+ }
+ $self->{asn}{cookie};
+}
+
+sub value {
+ my $self = shift;
+
+ exists $self->{value}
+ ? $self->{value}
+ : $self->{value} = $syncStateValue->encode($self->{asn});
+}
+
+1;
+
+
+__END__
+
+=head1 NAME
+
+Net::LDAP::Control::SyncState - LDAPv3 Sync State control object
+
+=head1 SYNOPSIS
+
+ use Net::LDAP;
+ use Net::LDAP::Control::SyncRequest;
+ use Net::LDAP::Constant qw(
+ LDAP_SYNC_REFRESH_ONLY
+ LDAP_SYNC_REFRESH_AND_PERSIST
+ LDAP_SUCCESS );
+
+ $ldap = Net::LDAP->new( "ldap.mydomain.eg" );
+
+ $req = Net::LDAP::Control::SyncRequest->new( mode => LDAP_SYNC_REFRESH_ONLY );
+ my $mesg = $ldap->search(base=> 'dc=mydomain,dc='eg',
+ scope => 'sub',
+ control => [ $req ],
+ callback => \&searchCallback, # call for each entry
+ filter => "(objectClass=*)",
+ attrs => [ '*']);
+ sub searchCallback {
+ my $message = shift;
+ my $entry = shift;
+ my @controls = $message->control;
+
+ if($controls[0]->isa('Net::LDAP::Control::SyncState')) {
+ print "Received Sync State Control\n";
+ print $entry->dn()."\n";
+ print 'State: '.$controls[0]->state."\n".', entryUUID:
'.$controls[0]->entryUUID.', cookie: '.$controls[0]->cookie;
+ } elsif($controls[0]->isa('Net::LDAP::Control::SyncDone')) {
+ print "Received Sync Done Control\n";
+ print 'Cookie: '.$controls[0]->cookie.', refreshDeletes:
'.$controls[0]->refreshDeletes;
+ }
+ }
+
+=head1 DESCRIPTION
+
+C provides an interface for the creation and
+manipulation of objects that represent the C as described
+by RFC 4533.
+
+=head1 CONSTRUCTOR ARGUMENTS
+
+In addition to the constructor arguments described in
+L the following are provided.
+
+=over 4
+
+=item state
+
+=item entryUIID
+
+=item cookie
+
+=back
+
+=head1 METHODS
+
+As with L each constructor argument
+described above is also avaliable as a method on the object which will
+return the current value for the attribute if called without an argument,
+and set a new value for the attribute if called with an argument.
+
+=head1 SEE ALSO
+
+L,
+L,
+L,
+L,
+http://www.ietf.org/rfc/rfc4533.txt
+
+=head1 AUTHOR
+
+Mathieu Parent Emath.parent@gmail.comE
+
+Please report any bugs, or post any suggestions, to the perl-ldap mailing list
+Eperl-ldap@perl.orgE
+
+=head1 COPYRIGHT
+
+Copyright (c) 2008 Mathieu Parent. All rights reserved. This program is
+free software; you can redistribute it and/or modify it under the same
+terms as Perl itself.
+
+=cut
+
diff --git a/lib/Net/LDAP/Intermediate.pm b/lib/Net/LDAP/Intermediate.pm
new file mode 100644
index 0000000..b95b849
--- /dev/null
+++ b/lib/Net/LDAP/Intermediate.pm
@@ -0,0 +1,236 @@
+# Copyright (c) 2008 Mathieu Parent . All
rights reserved.
+# This program is free software; you can redistribute it and/or
+# modify it under the same terms as Perl itself.
+
+package Net::LDAP::Intermediate;
+
+use vars qw($VERSION);
+use strict;
+
+use Net::LDAP::Constant qw(
+ LDAP_SYNC_INFO
+);
+
+$VERSION = "0.01";
+
+my %Class2ResponseName = (
+
+ #'Net::LDAP::Intermediate::SyncInfo' => LDAP_SYNC_INFO, #disabled
as decoding doesn't work
+);
+
+my %ResponseName2Class = reverse %Class2ResponseName;
+
+sub register {
+ my($class,$responseName) = @_;
+
+ require Carp and Carp::croak("$responseName is already registered
to $ResponseName2Class{$responseName}")
+ if exists $ResponseName2Class{$responseName} and
$ResponseName2Class{$responseName} ne $class;
+
+ require Carp and Carp::croak("$class is already registered to
$Class2ResponseName{$class}")
+ if exists $Class2ResponseName{$class} and
$Class2ResponseName{$class} ne $responseName;
+
+ $ResponseName2Class{$responseName} = $class;
+ $Class2ResponseName{$class} = $responseName;
+}
+
+sub new {
+ my $self = shift;
+ my $class = ref($self) || $self;
+ my $responseName = (@_ & 1) ? shift : undef;
+ my %args = @_;
+
+ $args{'responseName'} ||= $responseName || $Class2ResponseName{$class} || '';
+
+ unless ($args{responseName} =~ /^\d+(?:\.\d+)+$/) {
+ $args{error} = 'Invalid responseName';
+ return bless \%args;
+ }
+
+ if ($class eq __PACKAGE__ and exists
$ResponseName2Class{$args{responseName}}) {
+ $class = $ResponseName2Class{$args{responseName}};
+ eval "require $class" or die $@;
+ }
+
+ delete $args{error};
+
+ bless(\%args, $class)->init;
+}
+
+
+sub from_asn {
+ my $self = shift;
+ my $asn = shift;
+ my $class = ref($self) || $self;
+
+ if ($class eq __PACKAGE__ and exists
$ResponseName2Class{$asn->{responseName}}) {
+ $class = $ResponseName2Class{$asn->{responseName}};
+ eval "require $class" or die $@;
+ }
+
+ delete $asn->{error};
+
+ bless($asn, $class)->init;
+}
+
+sub to_asn {
+ my $self = shift;
+ $self->responseValue; # Ensure value is there
+ $self;
+}
+
+sub responseName { shift->{responseName} }
+
+sub responseValue {
+ my $self = shift;
+ $self->{responseValue} = shift if @_;
+ $self->{responseValue} || undef
+}
+
+sub valid { ! exists shift->{error} }
+sub error { shift->{error} }
+sub init { shift }
+
+1;
+
+__END__
+
+
+=head1 NAME
+
+Net::LDAP::Intermediate - LDAPv3 intermediate response object base class
+
+=head1 SYNOPSIS
+
+ use Net::LDAP::Intermediate;
+
+=head1 DESCRIPTION
+
+C is a base-class for LDAPv3 intermediate
response objects.
+
+=cut
+
+##
+## Need more blurb in here about intermediate responses
+##
+
+=head1 CONSTRUCTORS
+
+=over 4
+
+=item new ( ARGS )
+
+ARGS is a list of name/value pairs, valid arguments are:
+
+=over 4
+
+=item responseName
+
+A dotted-decimal representation of an OBJECT IDENTIFIER which
+uniquely identifies the intermediate response. This prevents conflicts between
+intermediate response names.
+
+=item responseValue
+
+Optional information associated with the intermediate response. It's
format is specific
+to the particular intermediate response.
+
+=back
+
+=item from_asn ( ASN )
+
+ASN is a HASH reference, normally extracted from a PDU. It will contain
+a C element and optionally C element. On
+return ASN will be blessed into a package. If C is a registered
+OID, then ASN will be blessed into the registered package, if not then ASN
+will be blessed into Net::LDAP::Intermediate.
+
+This constructor is used internally by Net::LDAP and assumes that HASH
+passed contains a valid intermediate response. It should be used with
B.
+
+=back
+
+=head1 METHODS
+
+In addition to the methods listed below, each of the named parameters
+to C is also avaliable as a method. C will return the OID of
+the intermediate response object. C is set/get methods and will
+return the current value for each attribute if called without arguments,
+but may also be called with arguments to set new values.
+
+=over 4
+
+=item error ()
+
+If there has been an error returns a description of the error,
otherwise it will
+return C
+
+=item init ()
+
+C will be called as the last step in both contructors. What it
does will depend
+on the sub-class. It must always return the object.
+
+=item register ( OID )
+
+C is provided for sub-class implementors. It should be
called as a class method
+on a sub-class of Net::LDAP::Intermediate with the OID that the class
will handle. Net::LDAP::Intermediate
+will remember this class and OID pair and use it in the following
+situations.
+
+=over 4
+
+=item *
+
+C is called as a class method on the Net::LDAP::Intermediate
package and OID is passed
+as the responseName. The returned object will be blessed into the
package that registered
+the OID.
+
+=item *
+
+C is called as a class method on a registered package and the
C is not
+specified. The C will be set to the OID registered by
that package.
+
+=item *
+
+C is called to construct an object from ASN. The returned
object will be
+blessed into the package which was registered to handle the OID in the ASN.
+
+=back
+
+=item ( to_asn )
+
+Returns a structure suitable for passing to Convert::ASN1 for
+encoding. This method will be called by L when the
+intermediate response is used.
+
+The base class implementation of this method will call the
C method
+without arguments to allow a sub-class to encode it's value. Sub-classes
+should not need to override this method.
+
+=item valid ()
+
+Returns true if the object is valid and can be encoded. The default
implementation
+for this method is to return TRUE if there is no error, but
sub-classes may override that.
+
+=back
+
+=head1 SEE ALSO
+
+L
+L
+L
+L
+
+=head1 AUTHOR
+
+Mathieu Parent Emath.parent@gmail.comE
+
+Please report any bugs, or post any suggestions, to the perl-ldap mailing list
+Eperl-ldap@perl.orgE
+
+=head1 COPYRIGHT
+
+Copyright (c) 2008 Mathieu Parent. All rights reserved. This program is
+free software; you can redistribute it and/or modify it under the same
+terms as Perl itself.
+
+=cut
diff --git a/lib/Net/LDAP/Intermediate/SyncInfo.pm
b/lib/Net/LDAP/Intermediate/SyncInfo.pm
new file mode 100644
index 0000000..ed8205a
--- /dev/null
+++ b/lib/Net/LDAP/Intermediate/SyncInfo.pm
@@ -0,0 +1,140 @@
+# Copyright (c) 2008 Mathieu Parent . All
rights reserved.
+# This program is free software; you can redistribute it and/or
+# modify it under the same terms as Perl itself.
+
+package Net::LDAP::Intermediate::SyncInfo;
+
+use vars qw(@ISA $VERSION);
+use Net::LDAP::Intermediate;
+
+@ISA = qw(Net::LDAP::Intermediate);
+$VERSION = "0.01";
+
+use Net::LDAP::ASN qw(syncInfoValue);
+use strict;
+
+# use some kind of hack here:
+# - calling the control without args means: response,
+# - giving an argument: means: request
+sub init {
+ my($self) = @_;
+
+ delete $self->{asn};
+
+ unless (exists $self->{responseValue}) {
+ $self->{asn} = {
+ newcookie => $self->{newcookie} || '',
+ };
+ }
+
+ $self;
+}
+
+sub newcookie {
+ my $self = shift;
+ $self->{asn} ||= $syncInfoValue->decode($self->{responseValue});
+ if (@_) {
+ delete $self->{responseValue};
+ return $self->{asn}{newcookie} = shift || 0;
+ }
+ $self->{asn}{cookie};
+}
+
+sub responseValue {
+ my $self = shift;
+
+ exists $self->{responseValue}
+ ? $self->{responseValue}
+ : $self->{responseValue} = $syncInfoValue->encode($self->{asn});
+}
+
+1;
+
+
+__END__
+
+=head1 NAME
+
+Net::LDAP::Intermediate::SyncInfo - LDAPv3 Sync Info Message object
+
+=head1 SYNOPSIS
+
+ use Net::LDAP;
+ use Net::LDAP::Control::SyncRequest;
+ use Net::LDAP::Constant qw(
+ LDAP_SYNC_REFRESH_ONLY
+ LDAP_SYNC_REFRESH_AND_PERSIST
+ LDAP_SUCCESS );
+
+ $ldap = Net::LDAP->new( "ldap.mydomain.eg" );
+
+ $req = Net::LDAP::Control::SyncRequest->new( mode => LDAP_SYNC_REFRESH_ONLY );
+ my $mesg = $ldap->search(base=> 'dc=mydomain,dc='eg',
+ scope => 'sub',
+ control => [ $req ],
+ callback => \&searchCallback, # call for each entry
+ filter => "(objectClass=*)",
+ attrs => [ '*']);
+ sub searchCallback {
+ my $message = shift;
+ my $entry = shift;
+ my @controls = $message->control;
+
+ if($controls[0]->isa('Net::LDAP::Control::SyncState')) {
+ print "Received Sync State Control\n";
+ print $entry->dn()."\n";
+ print 'State: '.$controls[0]->state."\n".', entryUUID:
'.$controls[0]->entryUUID.', cookie: '.$controls[0]->cookie;
+ } elsif($controls[0]->isa('Net::LDAP::Control::SyncDone')) {
+ print "Received Sync Done Control\n";
+ print 'Cookie: '.$controls[0]->cookie.', refreshDeletes:
'.$controls[0]->refreshDeletes;
+ }
+ }
+
+=head1 DESCRIPTION
+
+C provides an interface for the creation and
+manipulation of objects that represent the C as described
+by RFC 4533.
+
+=head1 CONSTRUCTOR ARGUMENTS
+
+In addition to the constructor arguments described in
+L the following are provided.
+
+=over 4
+
+=item TODO
+
+=back
+
+=head1 METHODS
+
+As with L each constructor argument
+described above is also avaliable as a method on the object which will
+return the current value for the attribute if called without an argument,
+and set a new value for the attribute if called with an argument.
+
+=head1 SEE ALSO
+
+L,
+L,
+L,
+L,
+L,
+http://www.ietf.org/rfc/rfc4533.txt
+
+=head1 AUTHOR
+
+Mathieu Parent Emath.parent@gmail.comE
+
+Please report any bugs, or post any suggestions, to the perl-ldap mailing list
+Eperl-ldap@perl.orgE
+
+=head1 COPYRIGHT
+
+Copyright (c) 2008 Mathieu Parent. All rights reserved. This program is
+free software; you can redistribute it and/or modify it under the same
+terms as Perl itself.
+
+=cut
+
diff --git a/lib/Net/LDAP/Search.pm b/lib/Net/LDAP/Search.pm
index ed1617b..d8c3568 100644
--- a/lib/Net/LDAP/Search.pm
+++ b/lib/Net/LDAP/Search.pm
@@ -8,11 +8,12 @@ use strict;
use vars qw(@ISA $VERSION);
use Net::LDAP::Message;
use Net::LDAP::Entry;
+use Net::LDAP::Intermediate;
use Net::LDAP::Filter;
use Net::LDAP::Constant qw(LDAP_SUCCESS LDAP_DECODING_ERROR);

@ISA = qw(Net::LDAP::Message);
-$VERSION = "0.11";
+$VERSION = "0.12";

sub first_entry { # compat
@@ -63,6 +64,17 @@ sub decode {

return $self;
}
+ elsif ($data = delete $result->{protocolOp}{intermediateResponse}) {
+
+ my $intermediate = Net::LDAP::Intermediate->from_asn($data);
+
+ push(@{$self->{'intermediate'} ||= []}, [$intermediate]);
+
+ $self->{callback}->($self, $intermediate)
+ if (defined $self->{callback});
+
+ return $self;
+ }

$self->set_error(LDAP_DECODING_ERROR, "LDAP decode error");
return;
--
1.5.6

Questions to sync() and resultCode/Code (3 messages)

From: Daniel Stutz, Graham Barr Hi all,

I wonder if the condition for the sync() calls in LDAP::Extension is
correct. It checks for the existence of $self->{Code}. Shouldn't that be
$self->{resultCode} ?

In general, I am not sure, if calling sync() based on the existence of
resultCode is correct when sending messages asynchronously. When you
send a request message you want to know if the encoding and sending has
succeeded. You don't want to wait for the response message.
Can you help me to understand the reason for the reuse of the request
message object for holding the response message?

Thank you.

Kind regards,
Daniel

ExtendedResponse wrong definition? (6 messages)

From: Daniel Stutz, Chris Ridd, Graham Barr Hi all,

according to RFC 4511 an ExtendedResponse has the following format:
ExtendedResponse ::= [APPLICATION 24] SEQUENCE {
COMPONENTS OF LDAPResult,
responseName [10] LDAPOID OPTIONAL,
responseValue [11] OCTET STRING OPTIONAL }

RFC 4511 obsoletes RFC 2251 where the ExtendedResponse was defined as:
ExtendedResponse ::= [APPLICATION 24] SEQUENCE {
COMPONENTS OF LDAPResult,
responseName [10] LDAPOID OPTIONAL,
response [11] OCTET STRING OPTIONAL }

The obsolete structure is still used in LDAP::ASN.pm and in
Net::LDAP::Extension the attribute as well as the accessor is also
called "response".

Kind regards,

Daniel

Handling IntermediateResponse messages (2 messages)

From: Daniel Stutz, Graham Barr Hi all,

Message::decode calls LDAP::_forgetmesg
as far as I understand the architecture of Net::LDAP this should not be
done for IntermediateResponse messages. Is that correct?

Thank you.

Kind regards,
Daniel

--- Message.pm.orig 2008-07-16 10:01:18.000000000 +0200
+++ Message.pm 2008-07-16 10:02:01.000000000 +0200
@@ -143,7 +143,9 @@

# tell our LDAP client to forget us as this message has now completed
# all communications with the server
- $self->parent->_forgetmesg($self);
+ unless( $result->{protocolOp}{intermediateResponse} ){
+ $self->parent->_forgetmesg($self);
+ }

$self->{callback}->($self)
if (defined $self->{callback});

Force the new AD user to change password - pwdLastSet (4 messages)

From: A. Farber, Alexander Farber, Miller, Don C., Markus Moeller Hello,

does anybody please know how set the checkbox
"User must change password at next logon" for
a new user in Active directory?

In VBScript it is done by: obj.Put "pwdLastSet", 0
but I can't find the Net::LDAP counterpart for that (and
I can't use Win32::OLE because my script runs on Linux)

After reading http://support.microsoft.com/kb/305144
I've tried setting 0x800000 bit in userAccountControl -
but it doesn't work (the user is created fine though):

use constant NORMAL_ACCOUNT => 0x200;
use constant PASSWORD_EXPIRED => 0x800000;

$result = $ldap->add($dn,
attr => [
objectClass => 'user',
#objectClass => [qw(top person organizationalPerson
user)],
sAMAccountName => $uid,
userPrincipalName => $uid . '@' . DOMAIN,
givenName => $first,
sn => $last,
displayName => $fullname,
description => $fullname,
mail => $mail,
l => $city,
physicalDeliveryOfficeName => $city,
company => $company,
]
);
$result->code && die 'Failed to add entry: ', $result->error;

$charmap = Unicode::Map8->new('latin1') or die $!;
$unipwd = $charmap->tou('"' . $password . '"')->byteswap()->utf16();

$result = $ldap->modify($dn, add => { unicodePwd => $unipwd } );
$result->code && die 'Failed to modify entry: ', $result->error;

$result = $ldap->modify($dn, replace => { userAccountControl =>
NORMAL_ACCOUNT | PASSWORD_EXPIRED } );
$result->code && die 'Failed to modify entry: ', $result->error;

Any hints please?
Alex

PS: I'm so happy I can work with Perl after I've finally
enabled LDAP/SSL in our domain controllers...

Net::LDAP->new, lists and arrays (4 messages)

From: Manuel Vacelet, Chris Ridd, Christopher A Bongaarts Hello,

My question is probably more related to my own understanding of perl
than Net::LDAP module but it causes some headaches to me :)

The following code just works fine:
1 use strict;
2 use warnings;
3 use Net::LDAP;
4 my @servers =
['ldap://ldap5.example.com','ldap://ldap-fallback-eu.example.com','ldap://ldap.example.com','ldap://ldap2.example.com'];
5 my $ldap = Net::LDAP->new(@servers) or die "Unable to connect to
ldap server: $@\n";

But, if I change [] by () in the servers array affectation L4, I get an error:
Unable to connect to ldap server: IO::Socket::INET: Bad hostname ''

I googled at bit but faild to find an explanation for the difference
between the list and the array definition. (The funniest part comes
when it works when the list contains an odd number of elements).

My very problem is that the list of available ldap server comes from a
configuration variable (a scalar) I split for Net::LDAP->new.

Thanks for your help,
-- Manuel

decode error 30<=>73 0 8 at Convert/ASN1/_decode.pm line 106. (9 messages)

From: Daniel Stutz, Graham Barr, Chris Ridd Hi all,

I am trying to implement an Net::LDAP::Extension and hit the wall, when
the first LDAPResponse from the server arrives.
ASN1::_decode returns an error, when it is called on that LDAPResponse,
which should contain an ExtendedResponse.

I extended Net::LDAP to write the pdu to a file before it calls
LDAPResponse->decode on it.
The pdu is attached. As well as the ASN1 extracted from Net::LDAP::ASN
and a small scrip, that also can't parse the pdu.

Kind regards,
Daniel

Making a perl code compliant with new and old versions of Perl-LDAP (1 message)

From: Clément OUDOT Hello,

I belong to the LemonLDAP::NG[1] community, which open source software is
a websso for Apache using mod_perl and of course Net::LDAP (we are doing
authentication and authorization trough LDAP).

I recently added the password policy support to our authentication portal,
so a user can know if its account is locked or its password expired.

The problem is that it only works if we have perl-ldap >= 0.35, and the
major Linux distributions still provide perl-ldap 0.34.

So we protect calls to password policy module with eval functions, and we
face a problem when exporting the constants. The source code is:
http://svn.forge.objectweb.org/cgi-bin/viewcvs.cgi/lemonldap/trunk/modules/lemonldap-ng-portal/lib/Lemonldap/NG/Portal/AuthLDAP.pm?rev=333&view=markup

The pb is exporting constants is done when compiling, and not when running
the code. So in the actual code, the constants are not exported (we need
to remove the eval or use {} around eval arguments). But this will raise
errors for people with perl-ldap library <= 0.34.

Did you have any suggestions to resolve this pb?

Thanks for your help!

Clement OUDOT.

[1] http://wiki.lemonldap.objectweb.org/xwiki/bin/view/NG/Presentation

Net::LDAP :: Admin limit on AD (Work around) (9 messages)

From: Vartak, Yash V, Chris Ridd, Justin Alcorn, Kurt Zeilenga Dist,

I am using Net::LDAP to generate reports out of Microsoft Active
Directory, here my LDAP filter is expected to return roughly around
12,000 - 13,000 records.

But due to Admin limits on Active Directory the number of entries
returned are restricted to 1000, due to security reasons it's not
possible to increase admin limit on AD.

What could be work around for this particular problem? So that the
search returns full 12000 + records and I can process all of them later,
instead of present 1000

Yash Vartak
System Engineer
Neptune Orient Lines Ltd
Company Registration Number: 196800632D
Direct Tel: (65) 6371 4483
Fax: (65) 6371 6161
e-mail: Yash_Vartak@apl.com
Website: http://www.nol.com.sg

This message is intended for the recipient(s) named above. It may
contain confidential or privileged information. If you are not the
intended recipient, please notify the sender immediately by replying to
this message and then delete it from your system. Do not copy, use or
circulate this communication. Thank you.

LDAP-Code (1 message)

From: dakin999 I am looking for any generic perl code that is doing some thing like
following. Any code help will be really helpful.

1. Reads from a database(oracle) following columns:
Customer_No, Fname, Lname, Password.

2. Encrypts the password in SHA1_Base64 format.

3. Use the perl-ldap add object to create a ldif record with the same
columns (as in step 1, but password in the SHA1_Base64 encrypted
string).

4. Create a CSV file with same columns as in step 1, exculding the
password.

5. Add the ldif data into SUN LDAP directory.

Thanks in advance.

LDAP Content Synchronization Operation (rfc4533) (3 messages)

From: Mathieu PARENT, Graham Barr Hi,

I have implemented LDAP Content Synchronization Operation (rfc4533) in
perl-ldap (See the attached patch). This is used by the OpenLDAP
server and provide features similar to Persistent Searches in a more
consistent way.

This is my first try in this code, any feedback is welcome.
I don't know how to handle the Sync Info Message which is an LDAP
Intermediate Response Message (see 2.5 in RFC). perl-ldap doesn't
seems to support intermediate responses in response to LDAP::Search.
What is the way to correct this ?

thanks

Mathieu Parent

Net::LDAP::Search documentation for "entry" (1 message)

From: Richard Burkert This E-mail, including any attachments, may be intended solely for the personal
and confidential use of the sender and recipient(s) named above. This message
may include advisory, consultative and/or deliberative material and, as such,
would be privileged and confidential and not a public document. Any Information
in this e-mail identifying a client of the Department of Human Services is
confidential. If you have received this e-mail in error, you must not review,
transmit, convert to hard copy, copy, use or disseminate this e-mail or any
attachments to it and you must delete this message. You are requested to notify
the sender by return e-mail.

Check connection (4 messages)

From: Young, Darren, Clément OUDOT, Vartak, Yash V Is there any way to check to see if a Net::LDAP object is
connected/bound to a server?

As in:

$ldap = Net::LDAP->new($server);
$mesg = $ldap->bind($stuff);

if ( $ldap->is_connected($possibly_some_server) ) {
print("Connected\n");
}

if ( $mesg->is_bound($possibly_with_a_dn) ) {
Print("Bound\n");
}

etc, etc...

Problem with DN (4 messages)

From: Zumwalt, Robert, Andrej Ricnik-Bay, Chris Ridd I am getting a error:

Using the following DN:

DISPLAYNAME=Name
1,MAIL=dev_05272008_1601_1@blah.com,OU=OSS_8781150020001601_200805281457
19695574,O=blah.com,O=consumer,O=site

I believe the problem lies in the space in the displayname, as names
without a space are added just fine, however after reading over
Net::LDAP::Utils and RFC 2253 it only states that leading and trailing
spaces have to be converted to a \20. So in my attempts to fix this I
have changed "DISPLAYNAME=Name 1" to:

DISPLAYNAME='Name 1'

DISPLAYNAME=Name\201

DISPLAYNAME=Name\ 1

Yet nothing I have tried so far has helped...

Thoughts or suggestions?

Robert Zumwalt

E-MAIL CONFIDENTIALITY NOTICE:

The contents of this e-mail message and
any attachments are intended solely for the
addressee(s) and may contain confidential
and/or legally privileged information. If you
are not the intended recipient of this message
or if this message has been addressed to you
in error, please immediately alert the sender
by reply e-mail and then delete this message
and any attachments. If you are not the
intended recipient, you are notified that
any use, dissemination, distribution, copying,
or storage of this message or any attachment
is strictly prohibited.

Using ldifdiff.pl and ldapmodify to syncronise LDAP directories (1 message)

From: Nicholas Piper Dear list,

I'm trying to cause a 'slave' LDAP directory (in this case, the
Embedded LDAP server in WebLogic 8.1sp5) to become the same as a
'primary' directory (also in WL 8.1sp5).

The approach taken so far is to perform an ldapsearch on both, then
use ldifdiff.pl (from the LDAP perl's contrib directory) and finally
use ldapmodify (testing with OpenLDAP's, but will be using HP-UX's) to
import the changes.

We use ldifsort.pl before ldifdiff.pl, as per the recommendation in
ldifdiff.pl.

Our problem is that this process creates an LDIF file which contains
actions we need to be performed in a particular order, but they are
not in that order yet. For example, the output of ldifdiff.pl might
be:

dn: ou=EPredicate,ou=newrealm,dc=examples
changetype: add
objectclass: organizationalUnit
objectclass: top
ou: EPredicate

dn: ou=newrealm,dc=examples
changetype: add
objectClass: organizationalUnit
objectClass: top
ou: newrealm

but in order for ldapmodify to be successful, the file would need to
be:

dn: ou=newrealm,dc=examples
changetype: add
objectClass: organizationalUnit
objectClass: top
ou: newrealm

dn: ou=EPredicate,ou=newrealm,dc=examples
changetype: add
objectclass: organizationalUnit
objectclass: top
ou: EPredicate

A similar problem happens with delete, which need to be depth-first.

Is there a straight forward way to order the file so the adds are
depth-last, and then the deletes are depth-first? I would expect this
to be a common problem, so it's possible that I'm misunderstanding
some part.

Any advice gratefully received!

Thank you,

Nick

Wild cards in LDAP filters fail for AD esp * (2 messages)

From: Clément OUDOT, Vartak, Yash V Dist,

While working with Net::LDAP and AD I noticed that wild card

filter

((objectclass=user)(l=yokohama)(deptment=marketing)(c=jp)(!(memberOF:
CN=JAP_EMP_Mktg_SEC,OU=Users&Groups,OU=JAP,DC=ALNIPPOE,DC=com)))

returns me right results

how ever below filter fails

((objectclass=user)(l=yokohama)(deptment=marketing)(c=jp)(!(memberOF:
*JAP_EMP_Mktg*)))

Fails

The wild cards work well with other directories , except for Active
Directory , have others noticed this?

Yash Vartak
System Engineer
Neptune Orient Lines Ltd
Company Registration Number: 196800632D
Direct Tel: (65) 6371 4483
Fax: (65) 6371 6161
e-mail: Yash_Vartak@apl.com
Website: http://www.nol.com.sg

This message is intended for the recipient(s) named above. It may
contain confidential or privileged information. If you are not the
intended recipient, please notify the sender immediately by replying to
this message and then delete it from your system. Do not copy, use or
circulate this communication. Thank you.

Net::Ldap and successful creation of user despite an "insufficient access" error (3 messages)

From: Cyril Cheneson, Miller, Don C. Hi all,

I m using Net::LDAP to connect to a LDAP server and create/modify users.
I have a predefined LDAP user I m using to bind with and then
create/modify accounts.
My slapd.conf has the following:

access to attrs=userPassword,shadowLastChange
by dn="cn=admin,dc=mydomain,dc=com" write
by dn="uid=cyril,ou=People,dc=mydomain,dc=com" write
by anonymous auth
by self write
by * none

access to dn.base="" by * read

# The admin dn has full write access, everyone else
# can read everything.
access to *
by dn="cn=admin,dc=mydomain,dc=com" write
by dn="uid=cyril,ou=People,dc=mydomain,dc=com" write
by * read

So if I understood well, the dn
"uid=cyril,ou=People,dc=mydomain,dc=com" has write access(and there
for delete, and read)
to everything, just like the admin.

But when I try to create a user (being binded with
"uid=cyril,ou=People,dc=mydomain,dc=com"), I got an "insufficient
access" error (50) from Net::LDAP (from $resp->error and $resp->code
)but the user is created.

Has anyone seen this behavior as well?

Should I rely on another value to check if the action has been
performed successfully?

I have also tried with the LDAP admin account and no error has been thrown.

Thanks for your help

Cyril
--
----------------------------------
Cyril

"We will encourage you to develop the three great virtues of a programmer:
laziness, impatience, and hubris."
-- Larry Wall, creator of the Perl programming language

Need help on Authenticating users. (3 messages)

From: Srinivas N, Peter Marschall Hi,

I have been working with LDAP server configurations from some time and
now I want to integrate the LDAP in my project.

I want to use LDAP to authenticate the users when they login to my portal.

I found Net::LDAP as a good perl module that can be used to serve my purpose.

I was successful in executing search statements and here is the code

#! /usr/bin/perl

use Net::LDAP;

$ldap = Net::LDAP->new ( "" ) or die "Connection Failed $@";

$mesg = $ldap->bind ( "",
password => "",
version => 3 );

$base = "dc=example,dc=com";

$mesg = $ldap->search ( # perform a search
base => $base,
filter => "(objectclass=*)"
);

$mesg->code && die $mesg->error;

foreach $entry ($mesg->all_entries) { $entry->dump; }

for the above code I got the following correct output:

------------------------------------------------------------------------
dn:dc=example,dc=com

dc: example
description: Root LDAP entry for example.com
objectClass: dcObject
organizationalUnit
ou: rootobject
------------------------------------------------------------------------

dn:ou=People,dc=example,dc=com

ou: People
description: All people in organisation
objectClass: organizationalUnit
------------------------------------------------------------------------
dn:uid=srinivas,ou=People,dc=example,dc=com

uid: srinivas
cn: srinivas
objectClass: account
posixAccount
top
shadowAccount
userPassword: {crypt}$1$zYwJ/asE$DsYRb6CXjzJihNyTV2lC9.
shadowLastChange: 13986
shadowMax: 99999
shadowWarning: 7
loginShell: /bin/bash
uidNumber: 503
gidNumber: 100
homeDirectory: /home/srinivas

now when I am trying to execute compare function whose code is

$mesg = $ldap->compare( $base,
attr => "uid",
value => "srinivas"
);

$mesg->code && die $mesg->error;

foreach $entry ($mesg->all_entries) { $entry->dump; }

I am getting following error when I execute the above script

No such attribute at ldap_compare.pl line 34, line 259.

Can any one suggest whether there are any additional attributed that
are to be added or any other why that I can compare my username and
password for authentication.

Can you tell me how to authenticate users with this module with
username and password from a CGI page.

Any suggestion will be helpful.

Thanks in Advance.
Srinivas.

Strange unpredictable problem (2 messages)

From: Peter Marschall, MickB Hello everybody,

I encounter a little problem with a script using the Net-LDAP module. I
post here because I believe Net-LDAP is the root of this annoyance,
although I could be wrong of course. I've probably made a mistake so
your help may be very useful ;).
Here's more details :

- script's goal : connection to a list of AD's servers to extract
the 'lastLogon' attribute of all users
- problem : script is sometime hanging so I must kill it, frequency
and server are unpredictables.
- context : the following script is running under Windows with
ActivePerl 5.8.8.822, using Net-LDAP 0.34 provided by ActivePerl itself.
This is mandatory, no possibility to test or use under a Linux distribution.
- others usefuls informations : problem occurs under Windows 2000
SP4 and Server 2003. However, I noticed problem appears a lot more under
Windows 2000 than under Server 2003

What I've tried and noticed :
- tried Net-LDAP 0.35 : no change
- perl's CPU usage when problem occurs : 0%. It seems to wait for
something...
- 'netstat' command always shows connection to AD's server is
established when it's hanging.
- 'netstat' has allowed me to see it's not a particular server
which is causing this trouble.

Here's my source sample :

eval {

my ($page,$flag,$ldap);

$page = Net::LDAP::Control::Paged->new( size => 1000 );
$flag = 1;

# 1- connection
$ldap = Net::LDAP->new( $serveur,
scheme => 'ldap',
timeout => 5,
onerror => 'die',
version => 3,
port => 389,
debug => 0 );

if ( ! defined($ldap) ) { die("connection to server failed\n"); }

$ldap->bind( user@adouest.edf.fr,
password => XXXX
);

# 2- treatment
while( $flag ) {

my ($request,$cookie,$resp);

$request = $ldap->search( base => 'DC=ADOUEST,DC=EDF,DC=FR'
scope => 'sub',
deref => 'never',
sizelimit => 0,
timelimit => 300,
typesonly => 0,
filter => '(&
(objectclass=top)(objectclass=person)(objectclass=organizationalPerson)(objectclass=user)(!
(objectclass=computer) ))',
attrs => [ 'lastLogon' ],
control => [ $page ]
);

foreach my $entry ( \($request->entries()) ) {

my $dn;

# DN
$dn = $$entry->dn();

if ( defined($user{$dn}) && $$entry->exists('lastLogon') ) {

my $date =
&ConvertTime($$entry->get_value('lastLogon', alloptions => 0, asref =>
0));
if ( defined($user{$dn}{'lastLogon'}) ) {

if ( $user{$dn}{'lastLogon'} < $date ) {
$user{$dn}{'lastLogon'} = $date; }

} else {

$user{$dn}{'lastLogon'} = $date;

}

}

}

($resp) = $request->control(LDAP_CONTROL_PAGED);
$cookie = $resp->cookie() or $flag = 0;
$page->cookie($cookie);

}

# 3- end
die('success');

};
if ( $@ ) {

print 'status : ' . $@ . "\n";

# deconnection
if ( defined($ldap) ) {

eval {

$ldap->unbind();
$ldap->disconnect();

};

}

}

}

Las note : i remarked this on Net::LDAP::Paged doc page :

if ($cookie) {
# We had an abnormal exit, so let the server know we do not want any more
$page->cookie($cookie);
$page->size(0);
$ldap->search( @args );
}

was added just after the loop. I judged this unnecessary because I'm using the 'die' method on error. But I may be wrong...

Anyway, any help would be greatly appreciated.

Thanks.

Mickaël

release of perl-ldap-0.36 and Authen-SASL-2.11 (4 messages)

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

[PATCH] Fix SASL/GSSAPI behaviour when talking to round-robin server (1 message)

PHA+RnJvbTogRG9taW5pYyBIYXJncmVhdmVzCgpUaGUgYXR0YWNoZWQgcGF0Y2ggYWdhaW5zdCAwLjM1IGZpeGVzIGFuIG9ic2N1cmUgcHJvYmxlbSB3aXRoIE5ldDo6TERBUDxici8+d2hlbiB0YWxraW5nIHRvIGEgcm91bmQtcm9iaW4gTERBUCBzZXJ2ZXIocykgdXNpbmcgU0FTTC9HU1NBUEk8YnIvPmF1dGhlbnRpY2F0aW9uLjxici8+PGJyLz5XaXRob3V0IGl0LCB0aGUgU0FTTCBsYXllciBpcyBwYXNzZWQgdGhlIHJvdW5kLXJvYmluIG5hbWUsIGJ1dCBpZiwgd2hlbjxici8+dGhlIFNBU0wvR1NTQVBJIGxheWVyIGF0dGVtcHRzIHRvIGNhbm9uaWNhbGlzZSB0aGUgYWRkcmVzcywgaXQgcmVzb2x2ZXM8YnIvPnRvIGEgZGlmZmVyZW50IGhvc3QgdG8gdGhlIG9uZSBJTzo6U29ja2V0IHVzZWQgZm9yIGl0cyBjb25uZWN0aW9uLCBhPGJyLz5zZXJ2aWNlIHRpY2tldCBmb3IgYSBjb25mbGljdGluZyBzZXJ2ZXIgd2lsbCBiZSByZXF1ZXN0ZWQsIGFuZDxici8+YXV0aGVudGljYXRpb24gd2lsbCBmYWlsLjxici8+PGJyLz5UaGUgcGF0Y2hlZCB2ZXJzaW9uIGhhcyBiZWVuIHRlc3RlZCB3aXRoIFNBU0wgR1NTQVBJIGJpbmRzIHRvPGJyLz5yb3VuZC1yb2JpbiBhbmQgbm9uIHJvdW5kLXJvYmluIGFkZHJlc3Nlcy48YnIvPjxici8+UGxlYXNlIGNvbnNpZGVyIHRoaXMgZm9yIGluY2x1c2lvbiBpbiB0aGUgbmV4dCBOZXQ6OkxEQVAgcmVsZWFzZS48YnIvPjxici8+VGhhbmtzLDxici8+RG9taW5pYzxici8+PGJyLz4tLSA8YnIvPkRvbWluaWMgSGFyZ3JlYXZlcywgU3lzdGVtcyBEZXZlbG9wbWVudCBhbmQgU3VwcG9ydCBUZWFtPGJyLz5Db21wdXRpbmcgU2VydmljZXMsIFVuaXZlcnNpdHkgb2YgT3hmb3JkPGJyLz48YnIvPjwvcD4=

Unicode password settings for Active Directory (2 messages)

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

Critical Bug in Net::LDAP v0.35 (6 messages)

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

moddn (3 messages)

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

Fwd: [rt.cpan.org #34689] suggestion for the position of CR character in Net::LDAP::LDIF entry (6 messages)

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

LDAP Client (4 messages)

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

LDAP_CONTROL_PAGED and SunOne (8 messages)

PHA+RnJvbTogQ2FybCBTdGVmYW4gR3LDuHR0ZXIsIENsw6ltZW50IE9VRE9ULCBSaWNrIFNhbmRlcnMsIE1hcnRpbiBGYWJpYW5pCgpIZWxsbyE8YnIvPjxici8+SSBhbSBhY3R1YWxseSB0cnlpbmcgdG8gbWFrZSBhIHNjcmlwdCB0aGF0IHNob3VsZCBicm93c2UgdGhyb3VnaCBhYm91dCAgPGJyLz4xNTAuMDAwIG9iamVjdHMgYW5kIGNvbXBhcmUgdGhlIGRhdGEgd2l0aCBhbm90aGVyIChPcmFjbGUgYmFzZWQpIHN5c3RlbS4gIDxici8+SWYgSSBsaW1pdCB0aGUgc2VhcmNoIHRvIGUuZyA1MDAwIGl0IHdvcmtzIGZpbmUgKHRha2VzIGFib3V0IDIwLTMwICA8YnIvPnNlY29uZHMpLCBidXQgd2l0aG91dCB0aGUgbGltaXQgaXQgaXMgdXNpbmcgaHVnZSBhbW91bnRzIG9mIG1lbW9yeSBhbmQgIDxici8+dGFrZXMgbWFueSwgbWFueSBob3Vycy4gVGhlcmVmb3JlLCBJIHdvdWxkIGxpa2UgdG8gcmV3cml0ZSBpdCB0byB1c2UgcGFnZWQgIDxici8+cmVzdWx0cy4gSSBjYW4mIzM5O3QgZ2V0IGl0IHRvIHdvcmssIHRob3VnaC4uLjxici8+PGJyLz5JJiMzOTt2ZSBiZWVuIHRyeWluZyB0byBtb2RpZnkgc2V2ZXJhbCBleGFtcGxlcyBJIGZvdW5kIGJ5IGdvb2dsaW5nLCBidXQgSSAgPGJyLz5hbGx3YXlzIHNlZW0gdG8gZ2V0IGFsbCByZXN1bHRzIG9uIHRoZSBmaXJzdCBwYWdlLiBJbiB0aGUgYmVsb3cgZXhhbXBsZSAoSSAgPGJyLz5hbSB0cnlpbmcgYSBtb3JlIGxpbWl0ZWQgc2VhcmNoIGhlcmUgdGhhbiBJIHdpbGwgZG8gaW4gdGhlIHJlYWwgc2NyaXB0LCAgPGJyLz5qdXN0IHRvIHByb3ZlIHRoZSBjb25jZXB0IHRvIG15c2VsZikgSSYjMzk7bSBnZXR0aW5nIGFsbCAyMDcgdXNlcnMgaW4gdGhlICA8YnIvPmZpcnN0IHBhZ2UuPGJyLz48YnIvPkFtIEkgbWlzc2luZyBzb21ldGhpbmcgb2J2aW91cyBoZXJlPyBDb3VsZCBpdCBiZSB0aGF0IFN1bk9uZSBkaXJlY3RvcnkgIDxici8+ZG9lc24mIzM5O3Qgc3VwcG9ydCBwYWdlZCBjb250cm9scz88YnIvPjxici8+PGJyLz48YnIvPi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTxici8+PGJyLz4jIS91c3IvYmluL3Blcmw8YnIvPjxici8+dXNlIERhdGE6OkR1bXBlcjs8YnIvPnVzZSBOZXQ6OkxEQVA7PGJyLz51c2UgTmV0OjpMREFQOjpDb250cm9sOjpQYWdlZDs8YnIvPnVzZSBOZXQ6OkxEQVA6OkNvbnN0YW50IHF3KCBMREFQX0NPTlRST0xfUEFHRUQgKTs8YnIvPjxici8+JGxkYXAgPSBOZXQ6OkxEQVAtJmd0O25ldyggJnF1b3Q7bGRhcGhvc3QmcXVvdDssIHBvcnQ9Jmd0OzEwOTk5ICk7PGJyLz4kc2VhcmNoID0gJGxkYXAtJmd0O2JpbmQoJiMzOTt1c2VybmFtZSYjMzk7LCBwYXNzd29yZCA9Jmd0OyAmIzM5O3Bhc3N3b3JkJiMzOTspOzxici8+PGJyLz4kcGFnZSA9IE5ldDo6TERBUDo6Q29udHJvbDo6UGFnZWQtJmd0O25ldyggc2l6ZSA9Jmd0OyAzMCApOzxici8+PGJyLz5AYXJncyA9ICggYmFzZSAgICAgPSZndDsgJnF1b3Q7b3U9dXNlcnMsbz1Ccm9hZGJhbmQsbz1ubyZxdW90Oyw8YnIvPiAgICAgICAgICAgIHNjb3BlICAgID0mZ3Q7ICZxdW90O3N1YnRyZWUmcXVvdDssPGJyLz4gICAgICAgICAgICBmaWx0ZXIgICA9Jmd0OyAmcXVvdDsob2JqZWN0Q2xhc3M9dG9wKSZxdW90Oyw8YnIvPiAgICAgICAgICAgIGNhbGxiYWNrID0mZ3Q7IFwmYW1wO3Byb2Nlc3NfZW50cnksICMgQ2FsbCB0aGlzIHN1YiBmb3IgZWFjaCBlbnRyeTxici8+ICAgICAgICAgICAgY29udHJvbCAgPSZndDsgWyAkcGFnZSBdLDxici8+KTs8YnIvPjxici8+ICBteSAkY29va2llOzxici8+ICB3aGlsZSgxKSB7PGJyLz4gICAgIyBQZXJmb3JtIHNlYXJjaDxici8+ICAgIG15ICRtZXNnID0gJGxkYXAtJmd0O3NlYXJjaCggQGFyZ3MgKTs8YnIvPiAgICBwcmludCBEdW1wZXIoJG1lc2cpOzxici8+PGJyLz4gICAgIyBPbmx5IGNvbnRpbnVlIG9uIExEQVBfU1VDQ0VTUzxici8+ICAgICRtZXNnLSZndDtjb2RlIGFuZCBsYXN0Ozxici8+PGJyLz4gICAgIyBHZXQgY29va2llIGZyb20gcGFnZWQgY29udHJvbDxici8+ICAgIG15KCRyZXNwKSAgPSAkbWVzZy0mZ3Q7Y29udHJvbCggTERBUF9DT05UUk9MX1BBR0VEICkgb3IgbGFzdDs8YnIvPiAgICAkY29va2llICAgID0gJHJlc3AtJmd0O2Nvb2tpZSBvciBsYXN0Ozxici8+PGJyLz4gICAgIyBTZXQgY29va2llIGluIHBhZ2VkIGNvbnRyb2w8YnIvPiAgICAkcGFnZS0mZ3Q7Y29va2llKCRjb29raWUpOzxici8+ICB9PGJyLz48YnIvPiAgaWYgKCRjb29raWUpIHs8YnIvPiAgICAjIFdlIGhhZCBhbiBhYm5vcm1hbCBleGl0LCBzbyBsZXQgdGhlIHNlcnZlciBrbm93IHdlIGRvIG5vdCB3YW50IGFueSAgPGJyLz5tb3JlPGJyLz4gICAgJHBhZ2UtJmd0O2Nvb2tpZSgkY29va2llKTs8YnIvPiAgICAkcGFnZS0mZ3Q7c2l6ZSgwKTs8YnIvPiAgICAkbGRhcC0mZ3Q7c2VhcmNoKCBAYXJncyApOzxici8+ICB9PGJyLz4kbGRhcC0mZ3Q7dW5iaW5kOzxici8+PGJyLz5zdWIgcHJvY2Vzc19lbnRyeSB7ICRqZWplKysgYW5kIHByaW50ICRqZWplIC4gJnF1b3Q7XG4mcXVvdDsgfTxici8+PGJyLz48YnIvPi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTxici8+PGJyLz48YnIvPjxici8+SGVyZSYjMzk7cyBzb21lIGVudmlyb25tZW50IGluZm86PGJyLz5PUzogU29sYXJpcyAxMCAoNjQgYml0LCBTcGFyYyk8YnIvPlBlcmwgdmVyc2lvbjogNS44LjQ8YnIvPk5ldDo6TERBUCB2ZXJzaW9uOiAwLjM0PGJyLz5OZXQ6OkxEQVA6OkNvbnRyb2wgdmVyc2lvbjogMC4wNjxici8+TmV0OjpMREFQOjpDb250cm9sOjpQYWdlZCB2ZXJzaW9uOiAwLjAyPGJyLz48YnIvPjxici8+PGJyLz5JIHdvdWxkIGJlIHZlcnkgZ3JhdGVmdWwgZm9yIGFueSBoZWxwLCBhcyBJIGhhdmUgYWxscmVhZHkgc3BlbnQgcXVpdGUgYSAgPGJyLz5mZXcgaG91cnMgb24gdGhpcy48YnIvPjwvcD4=

Fwd: CPAN Upload: G/GB/GBARR/perl-ldap-0.35.tar.gz (1 message)

PHA+RnJvbTogR3JhaGFtIEJhcnIKCnBlcmwtbGRhcC0wLjM1IHNob3VsZCBiZSBvbiBhIG1pcnJvciBzb29uLjxici8+PGJyLz5CZWdpbiBmb3J3YXJkZWQgbWVzc2FnZTo8YnIvPiZndDsgICBmaWxlOiAkQ1BBTi9hdXRob3JzL2lkL0cvR0IvR0JBUlIvcGVybC1sZGFwLTAuMzUudGFyLmd6PGJyLz4mZ3Q7ICAgc2l6ZTogMjQ3OTgwIGJ5dGVzPGJyLz4mZ3Q7ICAgIG1kNTogODZmYzVkZWYwMmNhMjUyZjAzOGZkZTExMzVhNDU3NmQ8YnIvPjwvcD4=

Shuffled value with Net::LDAP::Entry->get_value() (2 messages)

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

Authen::SASL DIGEST-MD5 verification bug (5 messages)

From: Phil Pennock, Graham Barr

Re: [rt.cpan.org #34374] incorrect behavior when updating an attribute (1 message)

From: Graham Barr On Mar 23, 2008, at 3:35 PM, Mark Fuller via RT wrote:
> I have noticed odd (and incorrect) behavior when updating an attribute
> which is not defined as multi-value.
>
> The following example works, but it sets the attribute to the second
> value. This is arbitrary. Worse, it shouldn't work because the
> attribute
> is not defined as multi-value.
>
> $ldap_mesg = $ldap_conn->modify($dn,
> changes => [
> replace => [ 'attr_name' => ['val_1',
> 'val2'] ]
> ]);
>
> However, if you add a third value it will error with code 65. This is
> the expected behavior. But, it should do that with two values.
>
> This is using Sun Directory Server v5. I'm running Net::LDAP .34 on
> Win
> XP Pro.

what do you see, in both cases, if you turn on debugging with
$ldap_conn->debug(15); just before you call to modify ?

Graham.

perl-ldap 0.35? (11 messages)

From: Graham Barr, Chris Ridd, Clément OUDOT, Marc Chantreux Hi!

I'd like to ask, are there any plans to release new version from svn
repository? There are many (for me mandatory) changes, which would be
good to have by simple package upgrade...

Gergely Santa

--
===============================================
Gergely Sánta TEMPEST a.s.
Senior Developer IT Services
+421907 668631 Plynarenska 7/B
Gergely_Santa@tempest.sk Bratislava
================================================

Net::LDAP::LDIF Options wrap (2 messages)

From: Peter Marschall, Hugo Connery Hi,

Firstly, thanks for Net::LDAP.

I am using Net::LDAP::LDIF to dump that entries received by calls
to Net::LDAP::search and wish to disable wrapping (so that I can
easily modify output using awk).

I'm running Centos 5.1 with Perl 5.8.8. The perldoc Net::LDAP page lists
Net::LDAP as v5.8.8 with date 2007-02-11

perldoc Net::LDAP::LDIF says:

wrap => 78
Number of columns where output line wrapping shall occur.

Default is 78. Setting it to 40 or lower inhibits wrapping.

I have not been able to disable wrapping and have caused a crash:

Test Cases (where wrap is set at Net::LDAP::LDIF->new(io, mode, wrap=>N)

wrap => 78 (default) behaves as expected:

dn: CN=Jens Schaarup Sørensen,OU=Employees,OU=User Accounts,DC=er,DC=dtu,DC=d
k

wrap => 50 (custom) behaves as expected:

dn: CN=Jens Schaarup Sørensen,OU=Employees,OU=Use
r Accounts,DC=er,DC=dtu,DC=dk

wrap => 40 (custom) disagrees with perldoc Net::LDAP::LDIF (does not disable wrap)

dn: CN=Jens Schaarup Sørensen,OU=Employ
ees,OU=User Accounts,DC=er,DC=dtu,DC=dk

wrap => 1 (custom) causes a crash:

Illegal division by zero at /usr/lib/perl5/site_perl/5.8.8/Net/LDAP/LDIF.pm
line 391, <SCT> line 1.

Setting wrap to something very large does the equivalent of disabling.

Thanks again for Net::LDAP.

Regards,
--
Hugo Connery
IT Administrator, DTU Environment
http://www.env.dtu.dk

ports (4 messages)

From: Zumwalt, Robert, Quanah Gibson-Mount, Gerry Smyth Is there a way to designate a separate read port from write port? Or do
I need to create 2 separate connections if I want to perform this type
of action?

Robert Zumwalt

E-MAIL CONFIDENTIALITY NOTICE:

The contents of this e-mail message and
any attachments are intended solely for the
addressee(s) and may contain confidential
and/or legally privileged information. If you
are not the intended recipient of this message
or if this message has been addressed to you
in error, please immediately alert the sender
by reply e-mail and then delete this message
and any attachments. If you are not the
intended recipient, you are notified that
any use, dissemination, distribution, copying,
or storage of this message or any attachment
is strictly prohibited.

Password Policy Control (5 messages)

From: Clément OUDOT, Chris Ridd Hello,

I'm using Net::LDAP for several years (scripts, LemonLDAP::NG project)
and I try now to use Password Policy (with overlay ppolicy in OpenLDAP).

As I see, no control module has been implemented to deals with Password
Policy control response. So I propose myself to write one (on the model
of the VLVresponse for example).

Can you give me some advice on how to write this kind of module (main
coding rules), as my goal is to contribute it to the perl-ldap project ?
Or maybe someone on this list has already done the work ?

Regards,

--
Clement OUDOT
http://www.ohloh.net/accounts/15526

Setting security options when using ldap with sasl (4 messages)

From: Markus Moeller How can I set SASL security options ? I want to use ldap with SASL/GSSAPI
and control the maxssf security setting.
Is this part of Net::LDAP or Authen::SASL ?

Thank you
Markus

Connection dropping? (3 messages)

From: Zumwalt, Robert, Chris Ridd I have a module which makes several sequential calls to the LDAP server
and after the first 10-15 calls my connection seems to be getting
dropped.

Is there a method in net::ldap which allows me to check the state of the
connection to see if it is still good before attempting to reuse it?

Thank you

Robert Zumwalt

E-MAIL CONFIDENTIALITY NOTICE:

The contents of this e-mail message and
any attachments are intended solely for the
addressee(s) and may contain confidential
and/or legally privileged information. If you
are not the intended recipient of this message
or if this message has been addressed to you
in error, please immediately alert the sender
by reply e-mail and then delete this message
and any attachments. If you are not the
intended recipient, you are notified that
any use, dissemination, distribution, copying,
or storage of this message or any attachment
is strictly prohibited.

Problem with array of hosts in Net:LDAP(S)->new (3 messages)

From: Markus Moeller, Peter Marschall I am new to LDAP.pm and like to query several ldap servers for
redundancy/failover. The documentation says that the host can be an array:

"HOST may also be a reference to an array of hosts, host-port pairs or URIs
to try. Each will be tried in order until a connection is made. Only when
all have failed will the result of undef be returned."

When I use the below perl script with 192.168.1.12 being the good ldap
server and 192.168.1.18 a bad ldap server (e.g. switched off). I get
./ldap_query.pl
IO::Socket::SSL: connect: timeout at ./ldap_query.pl line 4, line
228.

an error. But I would expect the same result as with
$ldap = Net::LDAPS->new( '192.168.1.12', timeout => 2, version => 3) or die
"$@";

./ldap_query.pl
MM Result: 500

only delayed by max 2 seconds.

What is wrong in my script as I don't get a syntax error or similar ?

Thank you
Markus

#!/usr/bin/perl
use Net::LDAPS;

$ldap = Net::LDAPS->new( '192.168.1.18 192.168.1.12', timeout => 2, version
=> 3) or die "$@";

$mesg = $ldap->bind('cn=ldap user,cn=users,dc=win2003r2,dc=home', password
=> 'TestPass!') ;

$mesg = $ldap->search( # perform a search
base => "dc=win2003r2,dc=home",
filter => "(samaccountname=mm)",
attrs => ["employeeid"]
);

$mesg->code && die $mesg->error;

foreach $entry ($mesg->entries) {
$ref=$entry->get_value('employeeid');print "MM Result: $ref\n"; }

$mesg = $ldap->unbind; # take down session

Reading all elements (11 messages)

From: info, Michael Alan Dorman, Justin Alcorn Hi everybody,

i tried to get all elements of my ldap by using the source code:
<---
#!/usr/bin/perl

use strict;
use DBI;
use Net::SMTP;
use Net::LDAP;
use Net::LDAP::LDIF;
use Net::LDAP::Control::Paged;
use Net::LDAP::Constant qw(LDAP_CONTROL_PAGED);

my $ad_ldap_dn =
"cn=myuserid,ou=benutzerkonten,dc=my,dc=domain,dc=com";
my $ad_ldap_password = "MySecretPassword";
my $ad_ldap_server = "my.domain.com";
my $item;

my $ad_ldap = Net::LDAP->new($ad_ldap_server, version => 3) or die
"unable to connect to ad ldap: $@";
my $result = $ad_ldap->bind($ad_ldap_dn, password => $ad_ldap_password);

my $page = Net::LDAP::Control::Paged->new(size => 1000);
my $cookie;

my @args = ( base => "ou=benutzerkonten,dc=my,dc=domain,dc=com",
scope => 'sub',
attrs => ['cn', 'sn', 'givenname', 'department','objectClass'],
filter => "(cn=*)",
control => [ $page ]
);

while (my $ad_search = $ad_ldap->search(@args)) {
while (my $ad_user = $ad_search->shift_entry) {
foreach $item ($ad_user)
{
my $personalnummer = "";
my $koe = "";
my $vorname = "";
my $nachname = "";
my $objectClass = "";
$personalnummer = $item->get_value ( 'cn' );
$koe = $item->get_value ( 'department' );
$vorname = $item->get_value ( 'givenname' );
$nachname = $item->get_value ( 'sn' );
$objectClass = $item->get_value ( 'objectClass' );

if ( ($vorname eq "Jochen") || $nachname eq "Wirth" ||
$nachname eq "Zinkel" )
{
print $vorname.", ".$nachname." (".$personalnummer.") - $koe
Klasse: $objectClass gefunden...\n";
}
}
my ($resp) = $ad_search->control(LDAP_CONTROL_PAGED);
$cookie = $resp->cookie or last;
$page->cookie($cookie);
}
if (!$cookie)
{
last;
}
}

$ad_ldap->unbind();
<---

but still there are some datasets missing :(

I changed the filter to:
- filter => "(cn=*)",
- filter => "(sn=*)",
- filter => "($objectClass=*)",

Using the filter i got
- 6282
- 6394
- 6289
elements...

But this are still not all elements...

Is there a easy way to get all ldap elements?

Thanks for help
Andy