LinuxQuestions.org
Visit the LQ Articles and Editorials section
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 05-23-2006, 12:45 AM   #1
ronbenva
LQ Newbie
 
Registered: May 2006
Posts: 5

Rep: Reputation: 0
Integrating Cisco VPN3000 Concentrator with OpenLDAP


Hi Guys!

> Has anyone of you tried integrating Cisco VPN with >OpenLDAP for authorization?...

> I am having problems with it.. I have created my own >schemas. I am using fedora Core 4 with 2.6.11-1.1369_FC4
>version.

> My /etc/openldap/schema/new-attributes.schema

attributeType ( 1.2.840.113556.8000.795.2.1
NAME 'cVPN3000-Access-Hours'
EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributeType ( 1.2.840.113556.8000.795.2.3
NAME 'cVPN3000-Primary-DNS'
EQUALITY numericStringMatch
SUBSTR numericStringSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.36 )

>And the other schema >/etc/openldap/schema/new-object.schema I've created is:

objectClass (1.2.840.113556.1.8000.795.1.1
NAME 'cVPN3000-User-Authorization'
DESC 'Cisco Class Schema'
SUP inetOrgPerson
STRUCTURAL
MAY ( cVPN3000-Access-Hours $ cVPN3000-Primary-DNS ))

> I have included both of them in my >/etc/openldap/slapd.conf file:

include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema
include /etc/openldap/schema/new-attributes.schema
include /etc/openldap/schema/new-object.schema

database ldbm
suffix "dc=example,dc=com"
rootdn "cn=Manager,dc=example,dc=com"
rootpw {SSHA}1wzadtOsf7S2eHGY3wwUg1/jQC8JOqBK
directory /var/lib/ldap/example.com

>I have another file in /etc/openldap/schema.ldif that >looks like this:

dn: cVPN3000-Access-Hours,cn=Schema,cn=Configuration,ou=People,dc=example,dc=com
changetype: add
adminDisplayName: cVPN3000-Access-Hours
attributeID: 1.2.840.113556.1.8000.795.2.1
attributeSyntax: 2.5.5.3
cn: cVPN3000-Access-Hours
instanceType: 4
isSingleValued: TRUE
lDAPDisplayName: cVPN3000-Access-Hours
distinguishedName:
cn=cVPN3000-Access-Hours,cn=Schema,cn=Configuration,ou=People,dc=example,dc=com
objectCategory:
cn=Attribute-Schema,cn=Schema,cn=Configuration,ou=People,dc=example,dc=com
objectClass: attributeSchema
oMSyntax: 27
name: cVPN3000-Access-Hours
showInAdvancedViewOnly: TRUE

dn: cn=cVPN3000-Primary-DNS,cn=Schema,cn=Configuration,ou=People,dc=example,dc=com
changetype: add
adminDisplayName: cVPN3000-Primary-DNS
attributeID: 1.2.840.113556.1.8000.795.2.3
attributeSyntax: 2.5.5.3
cn: cVPN3000-Primary-DNS
instanceType: 4
isSingleValued: TRUE
lDAPDisplayName: cVPN3000-Primary-DNS
distinguishedName:
cn=cVPN3000-Primary-DNS,cn=Schema,cn=Configuration,ou=People,dc=example,dc=com
objectCategory:
cn=Attribute-Schema,cn=Schema,cn=Configuration,ou=People,dc=example,dc=com
objectClass: attributeSchema
oMSyntax: 27
name: cVPN3000-Primary-DNS
showInAdvancedViewOnly: TRUE

dn:
cn=cVPN3000-User-Authorization,cn=Schema,cn=Configuration,ou=People,dc=example,dc=com
adminDisplayName: cVPN3000-User-Authorization
adminDescription: Cisco Class Schema
cn: cVPN3000-User-Authorization
defaultObjectCategory:

cn=cVPN3000-User-Authorization,cn=Schema,cn=Configuration,ou=People,dc=example,dc=com
defaultSecurityDescriptor:
DA;;RPWPCRCCDCLCLOLORCWOWDSDDTDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)
(A;;RPLCLORC;;;AU)
governsID: 1.2.840.113556.1.8000.795.1.1
instanceType: 4
lDAPDisplayName: cVPN3000-User-Authorization

mustContain: cn
mayContain: cVPN3000-Access-Hours
mayContain: cVPN3000-Primary-DNS

distinguishedName:

cn=cVPN3000-User-Authorization,cn=Schema,cn=Configuration,ou=People,dc=example,dc=com
objectCategory:
cn=Class-Schema,cn=Schema,cn=Configuration,ou=People,dc=example,dc=com
objectClass: classSchema
objectClassCategory: 1
possSuperiors: organizationalUnit
name: cVPN3000-User-Authorization
rDNAttID: cn
showInAdvancedViewOnly: TRUE
subClassOf: top
systemOnly: FALSE

> And another ldif file for users in >/etc/openldap/users.ldif:

dn: cn=nald_enva,ou=People,dc=example,dc=com
changetype: add
cVPN3000-Access-Hours: Corporate_time
cVPN3000-Primary-DNS: 202.47.132.9
objectClass: cVPN3000-User-Authorization

> My /etc/openldap/example.com.ldif looks like this:

dn: dc=example,dc=com
dc: example
description: Root LDAP entry for example.com
objectClass: dcObject
objectClass: organizationalUnit
ou: rootobject

dn: ou=People,dc=example,dc=com
ou: People
description: All people in organisation
objectClass: organizationalUnit

> When I'm adding the ldif files to the ldap server, I was > getting an error:

adding new entry "cVPN3000-Access-Hours,cn=Schema,cn=Configuration,ou=People,dc=example,dc=com"
ldap_add: Invalid DN syntax (34)
additional info: invalid DN

>I guess because of what I have in >/etc/openldap/example.co.ldif where I only have dn: >ou=People,dc=example,dc=com...?

>In my schema.ldif file, I have >dn:cn=cVPN3000-User-Authorization,cn=Schema,cn=Configuration,ou=People,dc=example,dc=com
>.. How to I create this?... I think, there's something >wrong with the onjectClass and attributeTypes I have >created... I guess my question is... How to I create an >objectClass and attribuTypes that define what I have in >my ldif files... because I was having problems adding >these ldif files in the ldap server...

>I need you help guys,.. I appreciate any help or >information you'll give me.. I know I sound kinda stupid >but i was just a newbie to this and don't have background >on designing/creating schemas...
>
>I look forward to hear from you....thank you very much..

Regards,

Ronald
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Integrating Kaffeine with Firefox dudeman41465 Mandriva 7 02-13-2006 06:46 PM
pppoeconf doesn't detect access concentrator in debian-sarge LTF Linux - Networking 0 08-31-2004 09:16 AM
Integrating NTFS with fedora jedimastermopar Fedora 6 06-16-2004 10:23 AM
Bay Networks Remote Access Concentrator mutantjazz Linux - Hardware 0 01-12-2003 04:15 AM
Integrating RPM and APT? jeremy Linux - General 0 12-02-2000 07:33 PM


All times are GMT -5. The time now is 09:43 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration