Skip to Content.
Sympa Menu

en - [sympa-users] LDAP Data Source Bind DN and TLS

Subject: The mailing list for listmasters using Sympa

List archive

Chronological Thread  
  • From: qt4x11 <address@concealed>
  • To: address@concealed
  • Subject: [sympa-users] LDAP Data Source Bind DN and TLS
  • Date: Tue, 12 Dec 2006 15:26:30 -0600

I've tried to set up a list with an LDAP Data source.  It works when the filter is simple.

LDAP query inclusion (include_ldap_query)
short name for this source :     ldap
remote host :     ldap.domain.com
remote password :    
remote user :    
suffix :     dc=domain,dc=com
search scope :     sub
connection timeout : 30    seconds
filter :     (uid=xxx)
extracted attribute :     mail
selection (if multiple) : all

If I try to use a filter that will return many results such as (department=department1) I get an error in my logs

Dec 12 14:29:59 sympadev2 task_manager[1652]: Ldap search failed : Sizelimit exceeded (searching on server ldap.domain.com ; suffix dc=domain,dc=com ; filter (department=department1) ; attrs: mail)
   
I have to bind with the server with a bind dn and password to get past the result limit for queries set on this server.

This ldapsearch works with our TLS ldap server
ldapsearch -x -ZZ -h ldap.domain.com -D "cn=sympa,ou=agents,dc=domain,dc=com" -w password "department=department1"

But when I try

LDAP query inclusion (include_ldap_query)
short name for this source :     ldap
remote host :     ldaps://ldap.domain.com
remote password :     xxxxxxxx
remote user :     cn=sympa,ou=agents,dc=domain,dc=com
suffix :     dc=domain,dc=com
search scope :     sub
connection timeout : 30    seconds
filter :     (department=department1)
extracted attribute :     mail
selection (if multiple) : all


I get an error
 ERROR (edit_list) - Syntax errors with the following parameters : filter


Can anyone tell me if I'm doing this wrong?  It seems like the filter worked the first time without the bind dn and ldaps://





Archive powered by MHonArc 2.6.19+.

Top of Page