[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: OpenLDAP schema for Heimdal



Love Hörnquist Åstrand wrote:
> Howard Chu <hyc@highlandsun.com> writes:
> 
> 
>>>The version on that link is defective, you need to add
>>>    EQUALITY generalizedTimeMatch
>>>matching rules to the krb5ValidStart, krb5ValidEnd, and
>>>krb5PasswordEnd definitions. (You cannot use the
>>>generalizedTimeOrderingMatch ORDERING matching rule without also
>>>defining the correct EQUALITY matching rule.)
>>
>>I should say, without *first* defining the EQUALITY rule.

> Thanks, how about this then:
> 
> http://people.su.se/~lha/patches/heimdal/hdb.schema (version 1.2) ?
> 
> Love
> 
That looks fine. You can also use
http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/schema/Attic/krb5-kdc.schema
rev 1.8 is correct.

-- 
   -- Howard Chu
   Chief Architect, Symas Corp.       Director, Highland Sun
   http://www.symas.com               http://highlandsun.com/hyc
   Symas: Premier OpenSource Development and Support