[asterisk-bugs] [Asterisk 0013861]: ERROR[23999]: res_config_ldap.c:1292 update_ldap: Couldn't modify ... Undefined attribute type

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=13861 
====================================================================== 
Reported By:                scramatte
Assigned To:                blitzrage
====================================================================== 
Project:                    Asterisk
Issue ID:                   13861
Category:                   Resources/res_config_ldap
Reproducibility:            have not tried
Severity:                   minor
Priority:                   normal
Status:                     acknowledged
Asterisk Version:           1.6.0.1 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             2008-11-07 11:24 CST
Last Modified:              2009-01-10 11:27 CST
====================================================================== 
Summary:                    ERROR[23999]: res_config_ldap.c:1292 update_ldap:
Couldn't modify   ...  Undefined attribute type
Description: 
my Asterisk return me this error on SIP register :

ERROR[23999]: res_config_ldap.c:1292 update_ldap: Couldn't modify
dn:cn=200,ou=Telephony,dc=example,dc=com because Undefined attribute type

In spite of this message I can call and receive calls.

I haven't got more details ... 
I've run Asterisk  with  -vvvvvvvvvvvvvvvvgc    


====================================================================== 

---------------------------------------------------------------------- 
 (0097430) jcovert (reporter) - 2009-01-10 11:27
 http://bugs.digium.com/view.php?id=13861#c97430 
---------------------------------------------------------------------- 
Yes, Leif, that works!  Thank you.

I should also write some notes in the wiki, and will do so, but am
documenting it here for anyone else who wants to verify Leif's change. 
Once these changes are made, this is a barebones setup to do the sip setup
for a sip user or friend who registers dynamically:

dn: cn=<the SIP username>,ou=sippeers,dc=<your-domain>,dc=<your-tld>
objectClass: AsteriskSIPUser
cn: <same as above.  this is what would appear as [incoming-username]>
AstAccountCallerID: This is the CallerID Name <123456789>
AstAccountHost: dynamic
AstAccountContext: default
AstAccountRealmedPassword: {MD5}xxxxxxx

where xxxxxxx is created with

echo -n "SIPUSER:<your-domain>.<your-tld>:plaintext-password" | md5sum

and this is the "minimum" change to res_ldap.conf, in [_general]

url=ldaps://ldap.your.server    (can use either ldap or ldaps)
protocol=3
basedn="dc=<your-domain>,dc=<your-tld>"
pass=the-password-for-the-user-below
user=cn=<asterisk-administrative-username>,dc=<your-domain>,dc=<your-tld>

res_ldap.conf should be chmod 600 because it contains the plaintext ldap
password to an account with WRITE access to the asterisk config.  This
might be a bigger password exposure than SIP and IAX plaintext passwords.
(I wonder if there should be a comment to that effect in the file, and if
make samples should do it?)

The asterisk administrative user is created this way:

dn: <asterisk-administrative-username>,dc=<your-domain>,dc=<your-tld>
objectclass: organizationalRole
cn: <same as above>
userPassword: {SSHA}yyyyyyy

where yyyyyy is the output of slappasswd -s plaintext-password 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-01-10 11:27 jcovert        Note Added: 0097430                          
======================================================================