openldap-bugs

openldap-bugs@openldap.org

1 participants
20967 discussions

Re: (ITS#7559) error in configuring openldap
by quanah＠zimbra.com 02 Apr '13

02 Apr '13

--On Wednesday, April 03, 2013 12:07 AM +0000 amanbista(a)gmail.com wrote: > Full_Name: amanbista > Version: 2.4.34 > OS: redhat linux 6.4 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (70.122.251.187) Please stop filing ITSes. Please use the mailing list as you have already been advised. These are not bug reports. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#7559) error in configuring openldap
by amanbista＠gmail.com 02 Apr '13

02 Apr '13

Full_Name: amanbista Version: 2.4.34 OS: redhat linux 6.4 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (70.122.251.187) i configured a new openldap server and this is the slapd.conf that i used, but i am getting error when i execute slaptest . can you please review this slapd.conf and let me know if there is an issue ? also can you provide the required documentation for creating this file ? # # See slapd.conf(5) for details on configuration options. # This file should NOT be world readable. # include %SYSCONFDIR%/schema/core.schema # Define global ACLs to disable default read access. # Do not enable referrals until AFTER you have a working directory # service AND an understanding of referrals. #referral ldap://root.openldap.org pidfile %LOCALSTATEDIR%/run/slapd.pid argsfile %LOCALSTATEDIR%/run/slapd.args # Load dynamic backend modules: # modulepath %MODULEDIR% # moduleload back_bdb.la # moduleload back_hdb.la # moduleload back_ldap.la # Sample security restrictions # Require integrity protection (prevent hijacking) # Require 112-bit (3DES or better) encryption for updates # Require 63-bit encryption for simple bind # security ssf=1 update_ssf=112 simple_bind=64 # Sample access control policy: # Root DSE: allow anyone to read it # Subschema (sub)entry DSE: allow anyone to read it # Other DSEs: # Allow self write access # Allow authenticated users read access # Allow anonymous users to authenticate # Directives needed to implement policy: # access to dn.base="" by * read # access to dn.base="cn=Subschema" by * read # access to * # by self write # by users read # by anonymous auth # # if no access controls are present, the default policy # allows anyone and everyone to read anything but restricts # updates to rootdn. (e.g., "access to * by * read") # # rootdn can always read and write EVERYTHING! ####################################################################### # BDB database definitions ####################################################################### database bdb suffix "dc=stjoe,dc=org" rootdn "cn=Manager,dc=stjoe,dc=org" # Cleartext passwords, especially for the rootdn, should # be avoid. See slappasswd(8) and slapd.conf(5) for details. # Use of strong authentication encouraged. rootpw {SSHA}BcjI7JYzETfKUEYSnrOn7EVPHcF7BhAK # The database directory MUST exist prior to running slapd AND # should only be accessible by the slapd and slap tools. # Mode 700 recommended. directory %LOCALSTATEDIR%/openldap-data # Indices to maintain index objectClass eq

1 0

Re: (ITS#7558) error in configuring openldap
by quanah＠zimbra.com 02 Apr '13

02 Apr '13

--On Tuesday, April 02, 2013 11:48 PM +0000 amanbista(a)gmail.com wrote: > [root@scrdcvcortst05 openldap]# ldapsearch > SASL/GSSAPI authentication started > ldap_sasl_interactive_bind_s: Local error (-2) > additional info: SASL(-1): generic failure: GSSAPI Error: > Unspecified GSS failure. Minor code may provide more information > (Credentials cache file '/tmp/krb5cc_0' not found) The ITS system is for reporting bugs. You have failed to show the existence of any bug here. Again, please go read the manual pages on how to use ldapsearch. If you are not able to comprehend them, then use the openldap-technical(a)openldap.org list to ask for assistance. This ITS will be closed. Please stop filing new ones until you have an actual bug to report. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#7558) error in configuring openldap
by amanbista＠gmail.com 02 Apr '13

02 Apr '13

Full_Name: amanbista Version: 2.4.34 OS: redhat linux 6.4 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (70.122.251.187) root@scrdcvcortst05 openldap]# slaptest bdb_db_open: warning - no DB_CONFIG file found in directory /var/lib/ldap: (2). Expect poor performance for suffix "dc=my-domain,dc=com". config file testing succeeded [root@scrdcvcortst05 openldap]# ldapsearch SASL/GSSAPI authentication started ldap_sasl_interactive_bind_s: Local error (-2) additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Credentials cache file '/tmp/krb5cc_0' not found)

1 0

Re: (ITS#7557) error in configuring openldap
by quanah＠zimbra.com 02 Apr '13

02 Apr '13

--On Tuesday, April 02, 2013 10:48 PM +0000 amanbista(a)gmail.com wrote: > Full_Name: amanbista > Version: 2.3.34 > OS: redhat linux 6.4 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (70.122.251.187) I suggest you read the manual page for ldapsearch so you understand how it works. I would also note that the OpenLDAP 2.3 series has not been supported for years. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#7557) error in configuring openldap
by amanbista＠gmail.com 02 Apr '13

02 Apr '13

Full_Name: amanbista Version: 2.3.34 OS: redhat linux 6.4 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (70.122.251.187) root@scrdcvcortst05 openldap]# slaptest bdb_db_open: warning - no DB_CONFIG file found in directory /var/lib/ldap: (2). Expect poor performance for suffix "dc=my-domain,dc=com". config file testing succeeded [root@scrdcvcortst05 openldap]# ldapsearch SASL/GSSAPI authentication started ldap_sasl_interactive_bind_s: Local error (-2) additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Credentials cache file '/tmp/krb5cc_0' not found)

1 0

Re: (ITS#7556) MDB_PREV skipping large chunks of databse
by dw＠botanicus.net 01 Apr '13

01 Apr '13

--089e0122814257375004d955a1e6 Content-Type: text/plain; charset=ISO-8859-1 It's worth note this was found after applying Howard's most recent patch for my previous MDB_LAST issue. Sorry for being a pain. :) --089e0122814257375004d955a1e6 Content-Type: text/html; charset=ISO-8859-1 <div dir="ltr">It's worth note this was found after applying Howard's most recent patch for my previous MDB_LAST issue. Sorry for being a pain. :)<br></div> --089e0122814257375004d955a1e6--

1 0

(ITS#7556) MDB_PREV skipping large chunks of databse
by dw＠botanicus.net 01 Apr '13

01 Apr '13

Full_Name: David Wilson Version: MDB 7aae15739b2c77bb601c98b112c804f51778a33b OS: OS X URL: http://codepad.org/KCeSzRr6 Submission from: (NULL) (92.41.251.234) Per demo at http://codepad.org/KCeSzRr6 , something seems to be broken with reverse cursor iteration. Iteration mostly succeeds before skipping most of the middle of the database and continuing with the starting keys (as best I can read it).

1 0

Re: (ITS#7555) SizeLimit Exceeded Error
by masarati＠aero.polimi.it 01 Apr '13

01 Apr '13

> Full_Name: sandeep kumawat > Version: 2.4 > OS: Cent OS 5.6 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (103.245.47.20) > > > When doing a page search for user on ldap, SizeLimit Exceeded Error is > thrown. > > There are about 1500 users in ldap and we are using ldap_search_init_page > API > with 10th param (TotalSizeLimit) set to 500. > > Could you pls let us know what can be issue here. The ITS is to notify bugs in OpenLDAP software. There is no ldap_search_init_page() in OpenLDAP's API. The answer to your question is in slapd.conf(5) in the discussion of the "limits" parameter. This ITS will be closed. -- Pierangelo Masarati Associate Professor Dipartimento di Scienze e Tecnologie Aerospaziali Politecnico di Milano

1 0

(ITS#7555) SizeLimit Exceeded Error
by sandeep_kumawat＠mcafee.com 01 Apr '13

01 Apr '13

Full_Name: sandeep kumawat Version: 2.4 OS: Cent OS 5.6 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (103.245.47.20) When doing a page search for user on ldap, SizeLimit Exceeded Error is thrown. There are about 1500 users in ldap and we are using ldap_search_init_page API with 10th param (TotalSizeLimit) set to 500. Could you pls let us know what can be issue here. Thanks

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs