Full_Name: Quanah Gibson-Mount
Version: HEAD
OS: N/A
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (47.208.148.239)
The dsaschema contrib module needs updating so that it support cn=config
--On Wednesday, March 28, 2018 1:14 AM +0100 Howard Chu <hyc(a)symas.com>
wrote:
> That's because memberOf is an operational attribute, so objectclass
> requirements don't apply. If you want to use some other attribute, make
> sure the schema allows it in the relevant entries, or use an operational
> attribute.
>
> Not a bug. Closing this ITS.
For historical purposes, it is a bit more complex than this.
It is not possible to include an operational attribute via the normal
schema methods. This depends on the "dsaschema" contrib overlay. That
contrib overlay requires development to support cn=config.
The alternative to using an operational attribute is to have a custom
objectClass where the custom attribute desired is defined as an optional
("MAY") attribute.
--Quanah
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>
quanah(a)openldap.org wrote:
> Full_Name: Quanah Gibson-Mount
> Version: 2.4.45
> OS: Linux
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (47.208.148.239)
>
>
> Per the slapo-memberof man page, you can define a different attribute than
> "memberOf" to hold the group membership information for an entry.
>
> However, this fails due to the fact that when a different attribute is used,
> slapd applies objectClass rule requirements to the entry. slapd does *not* do
> this when the default value of "memberOf" is used.
That's because memberOf is an operational attribute, so objectclass
requirements don't apply. If you want to use some other attribute, make sure
the schema allows it in the relevant entries, or use an operational attribute.
Not a bug. Closing this ITS.
>
> Example config:
>
> overlay memberof
> memberof-group-oc groupofuniquenames
> memberof-member-ad uniquemember
> memberof-memberof-ad ismemberof
>
> Example schema:
>
> attributetype ( 2.15.930.3.234225.3.1
> NAME 'isMemberOf'
> DESC 'Sun defined attribute type'
> EQUALITY distinguishedNameMatch
> SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
> X-ORIGIN 'Sun Directory Server' )
>
> Create a group:
>
> dn: cn=mygroup,dc=example,dc=com
> objectClass: top
> objectClass: groupOfUniqueNames
> cn: mygroup
> uniqueMember: cn=La Valko,ou=Peons,dc=example,dc=com
>
> Group creates OK, but:
>
> slapd[5149]: Entry (cn=La Valko,ou=Peons,dc=example,dc=com), attribute
> 'isMemberOf' not allowed
> slapd[5149]: entry failed schema check: attribute 'isMemberOf' not allowed
> slapd[5149]: conn=1000 op=19: memberof_value_modify DN="cn=la
> valko,ou=peons,dc=example,dc=com" add isMemberOf="cn=mygroup,dc=example,dc=com"
> failed err=65
>
>
>
>
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
Full_Name: Quanah Gibson-Mount
Version: 2.4.45
OS: Linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (47.208.148.239)
Per the slapo-memberof man page, you can define a different attribute than
"memberOf" to hold the group membership information for an entry.
However, this fails due to the fact that when a different attribute is used,
slapd applies objectClass rule requirements to the entry. slapd does *not* do
this when the default value of "memberOf" is used.
Example config:
overlay memberof
memberof-group-oc groupofuniquenames
memberof-member-ad uniquemember
memberof-memberof-ad ismemberof
Example schema:
attributetype ( 2.15.930.3.234225.3.1
NAME 'isMemberOf'
DESC 'Sun defined attribute type'
EQUALITY distinguishedNameMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
X-ORIGIN 'Sun Directory Server' )
Create a group:
dn: cn=mygroup,dc=example,dc=com
objectClass: top
objectClass: groupOfUniqueNames
cn: mygroup
uniqueMember: cn=La Valko,ou=Peons,dc=example,dc=com
Group creates OK, but:
slapd[5149]: Entry (cn=La Valko,ou=Peons,dc=example,dc=com), attribute
'isMemberOf' not allowed
slapd[5149]: entry failed schema check: attribute 'isMemberOf' not allowed
slapd[5149]: conn=1000 op=19: memberof_value_modify DN="cn=la
valko,ou=peons,dc=example,dc=com" add isMemberOf="cn=mygroup,dc=example,dc=com"
failed err=65
luca.foppiano(a)inria.fr wrote:
> Full_Name: Luca Foppiano
> Version: 2.4
> OS: linux
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (37.169.254.52)
>
>
> Dear OpenLDAP team,
> I'm using one of your component (LMDB) via a java JNDI bindings
> implementation (https://github.com/deephacks/lmdbjni) and I'm having an issue
> when I deploy my LMDB file on a tempfs filesystem in RAM.
The ITS is for bug reports, not for help requests. Use the -technical mailing
list. Closing this ITS.
>
> The issue do not occur when the LMDB files are stored on a "normal" filesystem.
> When the data is in the tempfs ramdisk all the allocated memory ends up being in
> the Dirty area (it has not been written back to the Filesytem).
>
> Here an example using the ramdisk:
>
> 7ce320000000-7cfc20000000 r--s 00000000 00:26 2459
> /ramfs/nerd/data/db/db-en/entityEmbeddings/data.mdb
> Size: 104857600 kB
> Rss: 1255680 kB
> Pss: 1255680 kB
> Shared_Clean: 0 kB
> Shared_Dirty: 0 kB
> Private_Clean: 0 kB
> Private_Dirty: 1255680 kB <---
> Referenced: 1255680 kB
> Anonymous: 0 kB
> AnonHugePages: 0 kB
> Shared_Hugetlb: 0 kB
> Private_Hugetlb: 0 kB
> Swap: 0 kB
> SwapPss: 0 kB
> KernelPageSize: 4 kB
> MMUPageSize: 4 kB
> Locked: 0 kB
> VmFlags: rd sh mr mw me ms sd
>
> and here an example without:
>
> 7ca4fc000000-7cbdfc000000 r--s 00000000 fd:00 11154951
> /data/workspace/shared/nerd-data/db/db-en/entityEmbeddings/data.mdb
> Size: 104857600 kB
> Rss: 838124 kB
> Pss: 838124 kB
> Shared_Clean: 0 kB
> Shared_Dirty: 0 kB
> Private_Clean: 838124 kB <----
> Private_Dirty: 0 kB
> Referenced: 764872 kB
> Anonymous: 0 kB
> AnonHugePages: 0 kB
> ShmemPmdMapped: 0 kB
> Shared_Hugetlb: 0 kB
> Private_Hugetlb: 0 kB
> Swap: 0 kB
> SwapPss: 0 kB
> KernelPageSize: 4 kB
> MMUPageSize: 4 kB
> Locked: 0 kB
> VmFlags: rd sh mr mw me ms sd
>
>
> According to my understanding the memory is dirty when 1)there are open
> transactions, 2) the data has not been written back to the filesystem
>
> What I don't understand is why there is a difference between filesystem and
> ramdisk?
> Is there any reason? The application (listed above) is not writing on the lmdb,
> but just reading (using reading transaction).
>
> Thank you
> Luca
>
>
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
Full_Name: Luca Foppiano
Version: 2.4
OS: linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (37.169.254.52)
Dear OpenLDAP team,
I'm using one of your component (LMDB) via a java JNDI bindings
implementation (https://github.com/deephacks/lmdbjni) and I'm having an issue
when I deploy my LMDB file on a tempfs filesystem in RAM.
The issue do not occur when the LMDB files are stored on a "normal" filesystem.
When the data is in the tempfs ramdisk all the allocated memory ends up being in
the Dirty area (it has not been written back to the Filesytem).
Here an example using the ramdisk:
7ce320000000-7cfc20000000 r--s 00000000 00:26 2459
/ramfs/nerd/data/db/db-en/entityEmbeddings/data.mdb
Size: 104857600 kB
Rss: 1255680 kB
Pss: 1255680 kB
Shared_Clean: 0 kB
Shared_Dirty: 0 kB
Private_Clean: 0 kB
Private_Dirty: 1255680 kB <---
Referenced: 1255680 kB
Anonymous: 0 kB
AnonHugePages: 0 kB
Shared_Hugetlb: 0 kB
Private_Hugetlb: 0 kB
Swap: 0 kB
SwapPss: 0 kB
KernelPageSize: 4 kB
MMUPageSize: 4 kB
Locked: 0 kB
VmFlags: rd sh mr mw me ms sd
and here an example without:
7ca4fc000000-7cbdfc000000 r--s 00000000 fd:00 11154951
/data/workspace/shared/nerd-data/db/db-en/entityEmbeddings/data.mdb
Size: 104857600 kB
Rss: 838124 kB
Pss: 838124 kB
Shared_Clean: 0 kB
Shared_Dirty: 0 kB
Private_Clean: 838124 kB <----
Private_Dirty: 0 kB
Referenced: 764872 kB
Anonymous: 0 kB
AnonHugePages: 0 kB
ShmemPmdMapped: 0 kB
Shared_Hugetlb: 0 kB
Private_Hugetlb: 0 kB
Swap: 0 kB
SwapPss: 0 kB
KernelPageSize: 4 kB
MMUPageSize: 4 kB
Locked: 0 kB
VmFlags: rd sh mr mw me ms sd
According to my understanding the memory is dirty when 1)there are open
transactions, 2) the data has not been written back to the filesystem
What I don't understand is why there is a difference between filesystem and
ramdisk?
Is there any reason? The application (listed above) is not writing on the lmdb,
but just reading (using reading transaction).
Thank you
Luca
zamazan4ik(a)tut.by wrote:
> Full_Name: Alexander Zaitsev
> Version: None
> OS: Linux
> URL:
> Submission from: (NULL) (128.140.241.11)
>
>
> Hello,
> Do you know about Conan(https://github.com/conan-io/conan)?
> Conan is modern dependency manager for C++. And will be great if your library
> will be available via package manager for other developers.
>
> On https://github.com/bincrafters/conan-templates) you can find example, how you
> can create package for the library.
>
> If you have any questions, just ask :-)
>
>
The OpenLDAP Project provides source code, not packages. Feel free to create
whatever packages you want. Closing this ITS.
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
Full_Name: Alexander Zaitsev
Version: None
OS: Linux
URL:
Submission from: (NULL) (128.140.241.11)
Hello,
Do you know about Conan(https://github.com/conan-io/conan)?
Conan is modern dependency manager for C++. And will be great if your library
will be available via package manager for other developers.
On https://github.com/bincrafters/conan-templates) you can find example, how you
can create package for the library.
If you have any questions, just ask :-)