“All of the books in the world contain no more information than is broadcast as video in a single large American city in a single year. Not all bits have equal value.” – Carl Sagan
Wise saying, wise man. Go watch a movie, maybe that will be less confusing than this box you are staring at! 😀
Anyway, I have been researching Ldap lately. Of course, in my spare time, coz all obligations about faculty have started once more. Reason of research is centralizing the database of student users at faculty. The whole idea is part of a bigger picture, which I think I’m still not aware of, but nevertheless I’m still climbing that hill :). Since there is a lot of good books about the subject I’m not going to start a lecture, and get you all bored 🙂 but I’m going to tell you about it in a few words. Again, I’m going to talk about problems I had (or the problem :)).
So, what is OpenLdap? OpenLdap is a open source solution for making active directories using Ldap protocol. In the beginning, it was only a protocol, but during the time it grew up to be the client-server aplication. So, to get it all straight, Ldap is a protocol, OpenLdap is a open source solution for building active directories using Ldap. OpenLdap consists of slapd and slurpd deamons, couple of tools for making entries in active directory, like ldapadd, ldapmodify, ldapdelete, slappasswd, and more. Now, I’m not going to get all “ldap dirty”, and that is the reason why I’m suggesting you to read the book called, “Mastering OpenLdap” from Matt Butcher. In a few words, it uses hierarchical database (hdb, bdb), to store entries if a way that schemes describe, can index fields for fast search and so on.
When you are all done with adding entries in your new Ldap directory, you will now and then have to erase some entries. I had to do that too, so don’t cry or do something silly, like punch monitor 😀 (Wait, what??? I’m not going to punch it, naaah, I don’t want to get my hands dirty, instead I’m gonna get an axe, and split it in half!! :):):)) Anyway, I had a problem when having my administrator password set, I couldn’t delete particular entry. The error was: Invalid credentials (49). I figured out that it was not the problem in DN of the entry. So, it was something with credentials, maybe password. That was the problem, for those who can’t wait the end of this mysterious story :D. To change pass you can preform couple of steps, that can be different. One of the ways is to use slappasswd, and generate SHA password, and insert it in /etc/ldap/slapd.conf, in the next form:
Then, I guess all will be settled, and you could delete your entries as much as you can 🙂 If this doesn’t fix your problem, than I have to say, you are all alone in this world of misery. Aaam just kidding… but you are 😀 Seriously, if you have any problems, feel free to comment, and I’ll try to help, if I find spare time. Bye!