michael(a)stroeder.com wrote:
> Full_Name: Michael Ströder
> Version: HEAD/RE24
> OS: Linux
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (84.163.97.30)
>
>
> I'm trying to run current RE24 and HEAD with BDB 4.7.25p1. It hangs in test-001
> and it hangs in a LDAP conn (probably when doing a bind). Is that combination
> really
> stable?
>
> It works with very same build scripts/configuration with 4.6.21+patches.
>
> Further information (bt full, log, BDB build script) is in this archived mailing
> list posting:
>
> http://www.openldap.org/lists/openldap-devel/200809/msg00075.html
I was unable to reproduce the problem on my multi-core machines, but I do see
it on a single-core machine. I've sent a backtrace and other debug info to the
Oracle folks, will see what they have to say.
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
Full_Name: Michael Ströder
Version: HEAD/RE24
OS: Linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (84.163.97.30)
I'm trying to run current RE24 and HEAD with BDB 4.7.25p1. It hangs in test-001
and it hangs in a LDAP conn (probably when doing a bind). Is that combination
really
stable?
It works with very same build scripts/configuration with 4.6.21+patches.
Further information (bt full, log, BDB build script) is in this archived mailing
list posting:
http://www.openldap.org/lists/openldap-devel/200809/msg00075.html
Gavin Henry wrote:
> Again, thanks. Sets have been documentated for quite some time now:
>
> http://www.openldap.org/doc/admin24/access-control.html#Sets%20-%20Granting…
Right; they're not documented in the slapd.access(5) man page, yet.
p.
Ing. Pierangelo Masarati
OpenLDAP Core Team
SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office: +39 02 23998309
Mobile: +39 333 4963172
Fax: +39 0382 476497
Email: ando(a)sys-net.it
-----------------------------------
----- ando(a)sys-net.it wrote:
> ghenry(a)OpenLDAP.org wrote:
>
> > Too tired today :-( For some reason I was talking about
> slapo-unique, as I'm
> > writing that up just now.
>
> Just to avoid (or increase :) confusion when you'll be back from
> relax,
> I don't recall working at slapo-unique recently. AFAIK, the old and
> the
> new config statements live together in perfect harmony, although
> unique_uri is preferable as it is more expressive.
OK, thanks.
> I have added a restrict=<uri> parameter to slapo-constraint, which
> allows to optionally restrict the entries the constraint would apply
> to.
> I have also allowed the <attr> to actually be an attribute list, in
> case
> one needs to apply the same constraint to more than one. Finally, the
>
> "set" type is now available. It uses the ACL sets' syntax, which,
> AFAIK, is still undocumented.
Again, thanks. Sets have been documentated for quite some time now:
http://www.openldap.org/doc/admin24/access-control.html#Sets%20-%20Granting…
--
Kind Regards,
Gavin Henry.
OpenLDAP Engineering Team.
E ghenry(a)OpenLDAP.org
Community developed LDAP software.
http://www.openldap.org/project/
ghenry(a)OpenLDAP.org wrote:
> Too tired today :-( For some reason I was talking about slapo-unique, as I'm
> writing that up just now.
Just to avoid (or increase :) confusion when you'll be back from relax,
I don't recall working at slapo-unique recently. AFAIK, the old and the
new config statements live together in perfect harmony, although
unique_uri is preferable as it is more expressive.
I have added a restrict=<uri> parameter to slapo-constraint, which
allows to optionally restrict the entries the constraint would apply to.
I have also allowed the <attr> to actually be an attribute list, in case
one needs to apply the same constraint to more than one. Finally, the
"set" type is now available. It uses the ACL sets' syntax, which,
AFAIK, is still undocumented.
p.
Ing. Pierangelo Masarati
OpenLDAP Core Team
SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office: +39 02 23998309
Mobile: +39 333 4963172
Fax: +39 0382 476497
Email: ando(a)sys-net.it
-----------------------------------
----- ando(a)sys-net.it wrote:
> Gavin Henry wrote:
>
> >> A note should already be in HEAD's slapo-translucent(5).
> >
> > Yeah, I saw that. I was reading the code and if I understand
> correctly, old
> > config directives will still work as long as the new URI directive
> isn't present?
>
> Not sure what you mean there. The uri directive, afaik, is related to
>
> the captive database, and (relatively) transparent to the overlay. If
>
> you use translucent on a local instance of back-sql, there would be no
>
> uri directive at all.
Too tired today :-( For some reason I was talking about slapo-unique, as I'm
writing that up just now.
Sorry for the confusion.
--
Kind Regards,
Gavin Henry.
OpenLDAP Engineering Team.
E ghenry(a)OpenLDAP.org
Community developed LDAP software.
http://www.openldap.org/project/
Gavin Henry wrote:
>> A note should already be in HEAD's slapo-translucent(5).
>
> Yeah, I saw that. I was reading the code and if I understand correctly, old
> config directives will still work as long as the new URI directive isn't present?
Not sure what you mean there. The uri directive, afaik, is related to
the captive database, and (relatively) transparent to the overlay. If
you use translucent on a local instance of back-sql, there would be no
uri directive at all.
p.
Ing. Pierangelo Masarati
OpenLDAP Core Team
SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office: +39 02 23998309
Mobile: +39 333 4963172
Fax: +39 0382 476497
Email: ando(a)sys-net.it
-----------------------------------
----- "Pierangelo Masarati" <ando(a)sys-net.it> wrote:
> Gavin Henry wrote:
> > ----- ando(a)sys-net.it wrote:
> >
> >> RFC 3062 password modification extended operation on locally stored
>
> >> credentials is now in HEAD; please test and report.
> >>
> >
> > I'll hold back adding a note in the Admin Guide about this. I think
> it's best placed in the man page anyway.
>
> A note should already be in HEAD's slapo-translucent(5).
Yeah, I saw that. I was reading the code and if I understand correctly, old
config directives will still work as long as the new URI directive isn't present?
My reason for asking is that I thought I might need to update the Upgrading section
of the Admin Guide?
> Perhaps we want the config statements sorted differently (e.g. lexicographically)?
Doesn't bother me.
Thanks.
--
Kind Regards,
Gavin Henry.
OpenLDAP Engineering Team.
E ghenry(a)OpenLDAP.org
Community developed LDAP software.
http://www.openldap.org/project/
Gavin Henry wrote:
> ----- ando(a)sys-net.it wrote:
>
>> RFC 3062 password modification extended operation on locally stored
>> credentials is now in HEAD; please test and report.
>>
>
> I'll hold back adding a note in the Admin Guide about this. I think it's best placed in the man page anyway.
A note should already be in HEAD's slapo-translucent(5). Perhaps we
want the config statements sorted differently (e.g. lexicographically)?
p.
Ing. Pierangelo Masarati
OpenLDAP Core Team
SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office: +39 02 23998309
Mobile: +39 333 4963172
Fax: +39 0382 476497
Email: ando(a)sys-net.it
-----------------------------------
----- ando(a)sys-net.it wrote:
> RFC 3062 password modification extended operation on locally stored
> credentials is now in HEAD; please test and report.
>
I'll hold back adding a note in the Admin Guide about this. I think it's best placed in the man page anyway.
Thanks.
--
Kind Regards,
Gavin Henry.
OpenLDAP Engineering Team.
E ghenry(a)OpenLDAP.org
Community developed LDAP software.
http://www.openldap.org/project/