LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (http://www.linuxquestions.org/questions/linux-software-2/)
-   -   ldap adressbook thunderbird ok outlook error (34) (http://www.linuxquestions.org/questions/linux-software-2/ldap-adressbook-thunderbird-ok-outlook-error-34-a-771084/)

gianabrother 11-23-2009 05:37 PM

ldap adressbook thunderbird ok outlook error (34)
 
im having a openldap to auth unix and windows users in our network.
everything is working fine, just the adressbook of outlook (office 2k3) is driving me nuts.

i test addressbook from thunderbird, erverthing fine.
also outlook express, jsut ms-outlook 2003 address book is not working
if i add a directory ldap.locomotion.local and with AUTH username and password it gives me an "Unknown DN Syntax (34)"
i also test cn=username,dc=locomotion,dc=local but then i
got unknown username or password on the ldap server side.
Code:


slapd.conf
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include                /etc/openldap/schema/core.schema
include                /etc/openldap/schema/cosine.schema
include                /etc/openldap/schema/inetorgperson.schema
include                /etc/openldap/schema/nis.schema
include                /etc/openldap/schema/samba3.schema

# Define global ACLs to disable default read access.

# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral        ldap://root.openldap.org

pidfile                /var/run/slapd/slapd.pid
argsfile        /var/run/slapd/slapd.args
loglevel        512

# Load dynamic backend modules:
# modulepath        /usr/lib/openldap/modules
# moduleload        back_ldap.la
# moduleload        back_meta.la
# moduleload        back_monitor.la
# moduleload        back_perl.la

# Sample security restrictions
#        Require integrity protection (prevent hijacking)
#        Require 112-bit (3DES or better) encryption for updates
#        Require 63-bit encryption for simple bind
# security ssf=1 update_ssf=112 simple_bind=64

allow        bind_v2

# Sample access control policy:
#      Root DSE: allow anyone to read it
#      Subschema (sub)entry DSE: allow anyone to read it
#      Other DSEs:
#              Allow self write access to user password
#              Allow anonymous users to authenticate
#              Allow read access to everything else
#      Directives needed to implement policy:
# access to dn.base=""
#        by * read

# if no access controls are present, the default policy
# allows anyone and everyone to read anything but restricts
# updates to rootdn.  (e.g., "access to * by * read")
#
# rootdn can always read and write EVERYTHING!

#access to attr=userPassword,sambaNTPassword,sambaLMPassword,mail
#access to dn.base="dc=locomotion,dc=local" attr=sambaLMPassword
#        by dn="cn=Manager,dc=locomotion,dc=local" write
#        by self write
#        by * read
#auth

#access to dn.base="ou=People,dc=locomotion,dc=local"
#        by * read
#        by * auth

access to attrs=userPassword
        by self write
        by users auth
        by anonymous auth
access to * by * read

#access to dn.base="cn=vpn,ou=Group,dc=locomotion,dc=local"
#        by dn="uid=vpnread,ou=People,dc=locomotion,dc=local" read

#access to dn.base="dc=locomotion,dc=local"
#        by * read
#        by * auth

#access to dn.base=""
#        by self write
#        by * read


#######################################################################
# BDB database definitions
#######################################################################

database        ldbm
suffix          "dc=locomotion,dc=local"
rootdn          "cn=Manager,dc=locomotion,dc=local"
rootpw          {MD5}.hidden.
# replication
#replogfile      /var/lib/ldap/master.replog
#replica        host=linuxmeta.locomotion.local:389
#  binddn="cn=Manager,dc=locomotion,dc=local"
#  bindmethod=simple
#  credentials=".hidden."

# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
# password settings for compatibility

#password-hash  {crypt}
#password-crypt-salt-format      "$1$%.8s"

# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd/tools. Mode 700 recommended.
directory      /var/lib/ldap

## Indices to maintain
index  objectclass            eq
index  mail,givenname          eq
index  cn                      pres,sub,eq
index  sn                      pres,sub,eq

## required to support pdb_getsampwnam
index  uid                    pres,sub,eq

## required to support pdb_getsambapwrid()
index  displayName            pres,sub,eq

## uncomment these if you are storing posixAccount and
## posixGroup entries in the directory as well
index  uidNumber              eq
index  gidNumber              eq
index  memberUid              eq

index  sambaSID                eq
index  sambaPrimaryGroupSID    eq
index  sambaDomainName        eq
index  default                sub

here is a sample user:
Code:

dn: uid=benjamin,ou=People,dc=locomotion,dc=local
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
cn: benjamin
sn: benjamin
givenName: benjamin
uid: benjamin
uidNumber: 1174
gidNumber: 513
loginShell: /sbin/nologin
gecos: System User
structuralObjectClass: inetOrgPerson
entryUUID: dbc831dc-6a2d-102e-924d-8f2902344e26
creatorsName: cn=Manager,dc=locomotion,dc=local
createTimestamp: 20091120143639Z
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
displayName: benjamin
sambaSID: S-1-5-21-3536280432-4137998717-326857605-3348
sambaPrimaryGroupSID: S-1-5-21-3536280432-4137998717-326857605-513
sambaProfilePath: \\san\profiles\benjamin
sambaHomeDrive: X:
sambaHomePath: \\hera\people\benjamin
homeDirectory: /dev/null
sambaLMPassword: .hidden.
sambaAcctFlags: [U]
sambaNTPassword: .hidden
userPassword:: .hidden.
shadowLastChange: 14568
shadowMax: 1000
sambaPwdCanChange: 1258730495
sambaPwdMustChange: 9223372036854775807
sambaPasswordHistory: 00000000000000000000000000000000000000000000000000000000
 00000000
sambaPwdLastSet: 1258730495
entryCSN: 20091120152135Z#000001#00#000000
modifiersName: cn=Manager,dc=locomotion,dc=local
modifyTimestamp: 20091120152135Z

i also test it form outlook without AUTH - it does not work
i restart outlook everytime i do a config change.

how can i get adressbook entrys from ldap?


All times are GMT -5. The time now is 05:52 AM.