openldap-bugs

openldap-bugs@openldap.org

1 participants
20964 discussions

Re: (ITS#5395) Patch for test system
by ando＠sys-net.it 28 Feb '08

28 Feb '08

Andrew Bartlett wrote: > On Thu, 2008-02-28 at 10:02 +0100, Pierangelo Masarati wrote: >> abartlet(a)samba.org wrote: >>> Full_Name: Andrew Bartlett >>> Version: CVS HEAD >>> OS: Fedora 8 >>> URL: http://abartlet.net/patches/memberof-refint.patch >>> Submission from: (NULL) (59.167.251.137) >>> >>> >>> I've added a patch to show that refint and memberof work together. >> Your patch seems to be missing some (trivial) modification to >> tests/scripts/define.sh (the MEMBEROFREFINTOUT env var). Thanks. In the meanwhile I figured it out (easy enough ;), and it seems to work fine. I'm going to commit it, unless there's any IPR issue (which I'd delegate to Howard or Kurt). p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati(a)sys-net.it ---------------------------------------

1 0

Re: (ITS#5395) Patch for test system
by abartlet＠samba.org 28 Feb '08

28 Feb '08

--=-EClFEzQujUbhDNVbokiu Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Thu, 2008-02-28 at 10:02 +0100, Pierangelo Masarati wrote: > abartlet(a)samba.org wrote: > > Full_Name: Andrew Bartlett > > Version: CVS HEAD > > OS: Fedora 8 > > URL: http://abartlet.net/patches/memberof-refint.patch > > Submission from: (NULL) (59.167.251.137) > >=20 > >=20 > > I've added a patch to show that refint and memberof work together. >=20 > Your patch seems to be missing some (trivial) modification to > tests/scripts/define.sh (the MEMBEROFREFINTOUT env var). Index: tests/scripts/defines.sh =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D RCS file: /repo/OpenLDAP/pkg/ldap/tests/scripts/defines.sh,v retrieving revision 1.162 diff -u -r1.162 defines.sh --- tests/scripts/defines.sh 11 Feb 2008 16:29:55 -0000 1.162 +++ tests/scripts/defines.sh 28 Feb 2008 09:05:29 -0000 @@ -335,6 +335,7 @@ DYNLISTOUT=3D$DATADIR/dynlist.out DDSOUT=3D$DATADIR/dds.out MEMBEROFOUT=3D$DATADIR/memberof.out +MEMBEROFREFINTOUT=3D$DATADIR/memberof-refint.out SHTOOL=3D"$SRCDIR/../build/shtool" =20 # Just in case we linked the binaries dynamically Andrew Bartlett --=20 Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Red Hat Inc. --=-EClFEzQujUbhDNVbokiu Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQBHxnl4z4A8Wyi0NrsRAlC3AJ0VXuGhuDO25kBOPLEgTWgRmcQUoQCfUAW2 L1ELbty7Q5zRu/v9SN4umlo= =ZjP1 -----END PGP SIGNATURE----- --=-EClFEzQujUbhDNVbokiu--

1 0

Re: [JunkMail] (ITS#5393) syncrepl push based replication with back-ldap fails
by hyc＠symas.com 28 Feb '08

28 Feb '08

Please direct all followups to the ITS. Emmanuel Duru wrote: > >> -----Message d'origine----- >> De : Howard Chu [mailto:hyc@symas.com] >> emmanuel.duru(a)atosorigin.com wrote: >>> Full_Name: Emmanuel Duru >>> Version: 2.3.39 >>> OS: Windows >>> URL: ftp://ftp.openldap.org/incoming/ >>> Submission from: (NULL) (195.68.44.148) >>> I'm trying to set a directory architecture with a syncrepl push based >>> replication, as (partly) stated in the admin guide, chapter 16.1.1. >>> I have a provider slapd with bdb, an intermediate slapd with back-ldap, >> which >>> points to a consumer slapd with bdb. >>> First, I have to set an updateDN on the consumer slapd, else back-ldap >> gets a >>> "no user modification allowed" error on operational attributes >>> (structuralobjectclass, contextcsn) when it tries to update the consumer >> slapd >> >> That is expected. >> >>> (the admin guide says the opposite). >> I guess the Admin Guide has a bug then. What exact section are you >> referring to? >> > > Section 16.1.1, the configuration example says twice :" # without the need > to write the UpdateDN before starting replication" That is not what that comment means. That comment means that we *are* using an updateDN. But, the entry corresponding to the updateDN we used in our example doesn't need to be created in advance, because we already know that it's a valid user on the target server. It was unfortunately taken out of context; i.e. it was copied directly from test045 and without the other test045 config file you have no way to see what it means. Definitely we should fix the example here. >>> Then this does not work at all when modifying an entry, because back- >> ldap gets a >>> "modify/delete: hasSubordinates: no such attribute" error when it tries >> to >>> update the entry. >> That's also expected, since hasSubordinates is a dynamically generated >> operational attribute (and also read-only, as I recall). You need to >> exclude >> any dynamically generated operational attributes from the syncrepl search. >> E.g. 2.4's test045 specifically tests this scenario, and the syncrepl spec >> uses: >> syncrepl rid=1 >> provider=ldap://localhost:9011/ >> binddn="cn=Manager,dc=example,dc=com" >> bindmethod=simple >> credentials=secret >> searchbase="dc=example,dc=com" >> filter="(objectClass=*)" >> >> attrs="*,structuralObjectClass,entryUUID,entryCSN,creatorsName,createTimes >> tamp,modifiersName,modifyTimestamp" >> schemachecking=off >> scope=sub >> type=refreshAndPersist >> retry="5 5 300 5" >> > > OK, my mistake. > >> In general, while this is known to work in 2.3, you're better off using >> 2.4. >> (We intentionally did not include test045 in 2.3...) > I'm using 2.3 because I want to use "stable" version. I will keep on using > it, until 2.4 becomes stable (which may occur before the end of my project). > In fact, my real need is this one: I have a backbone network with non > OpenLDAP synchronized directories, and I want to use OpenLDAP directories in > front of this network, on each computer (at least for performance reasons, > until the network fully migrates to OpenLDAP directories). On the master > computer, I will use a master OpenLDAP directory, which replicates to the > non OpenLDAP directory with this syncrepl/back-ldap mechanism (all I need to > do is update the schema of the non OpenLDAP directory, I suppose). On the > slave computers, the non OpenLDAP directory should be provider, and the > OpenLDAP directory should be consumer, but I don't know yet how I will > manage to do this (of course the non OpenLDAP directory does not implement > syncrepl). It seems that syncrepl replication with back-ldap as provider > does not work, is it supposed to? No. back-ldap doesn't know anything about syncrepl itself, it merely passes requests thru from one server to another. Whatever server ultimately answers the request must know how to act as a syncrepl provider, otherwise you get nothing. -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5395) Patch for test system
by ando＠sys-net.it 28 Feb '08

28 Feb '08

abartlet(a)samba.org wrote: > Full_Name: Andrew Bartlett > Version: CVS HEAD > OS: Fedora 8 > URL: http://abartlet.net/patches/memberof-refint.patch > Submission from: (NULL) (59.167.251.137) > > > I've added a patch to show that refint and memberof work together. Your patch seems to be missing some (trivial) modification to tests/scripts/define.sh (the MEMBEROFREFINTOUT env var). p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati(a)sys-net.it ---------------------------------------

1 0

Re: [JunkMail] (ITS#5393) syncrepl push based replication with back-ldap fails
by hyc＠symas.com 28 Feb '08

28 Feb '08

1 0

(ITS#5395) Patch for test system
by abartlet＠samba.org 28 Feb '08

28 Feb '08

Full_Name: Andrew Bartlett Version: CVS HEAD OS: Fedora 8 URL: http://abartlet.net/patches/memberof-refint.patch Submission from: (NULL) (59.167.251.137) I've added a patch to show that refint and memberof work together.

1 0

Re: [JunkMail] (ITS#5393) syncrepl push based replication with back-ldap fails
by hyc＠symas.com 27 Feb '08

27 Feb '08

emmanuel.duru(a)atosorigin.com wrote: > Full_Name: Emmanuel Duru > Version: 2.3.39 > OS: Windows > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (195.68.44.148) > I'm trying to set a directory architecture with a syncrepl push based > replication, as (partly) stated in the admin guide, chapter 16.1.1. > I have a provider slapd with bdb, an intermediate slapd with back-ldap, which > points to a consumer slapd with bdb. > First, I have to set an updateDN on the consumer slapd, else back-ldap gets a > "no user modification allowed" error on operational attributes > (structuralobjectclass, contextcsn) when it tries to update the consumer slapd That is expected. > (the admin guide says the opposite). I guess the Admin Guide has a bug then. What exact section are you referring to? > Then this does not work at all when modifying an entry, because back-ldap gets a > "modify/delete: hasSubordinates: no such attribute" error when it tries to > update the entry. That's also expected, since hasSubordinates is a dynamically generated operational attribute (and also read-only, as I recall). You need to exclude any dynamically generated operational attributes from the syncrepl search. E.g. 2.4's test045 specifically tests this scenario, and the syncrepl spec uses: syncrepl rid=1 provider=ldap://localhost:9011/ binddn="cn=Manager,dc=example,dc=com" bindmethod=simple credentials=secret searchbase="dc=example,dc=com" filter="(objectClass=*)" attrs="*,structuralObjectClass,entryUUID,entryCSN,creatorsName,createTimestamp,modifiersName,modifyTimestamp" schemachecking=off scope=sub type=refreshAndPersist retry="5 5 300 5" In general, while this is known to work in 2.3, you're better off using 2.4. (We intentionally did not include test045 in 2.3...) -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#5393) syncrepl push based replication with back-ldap fails
by emmanuel.duru＠atosorigin.com 27 Feb '08

27 Feb '08

Full_Name: Emmanuel Duru Version: 2.3.39 OS: Windows URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (195.68.44.148) I'm trying to set a directory architecture with a syncrepl push based replication, as (partly) stated in the admin guide, chapter 16.1.1. I have a provider slapd with bdb, an intermediate slapd with back-ldap, which points to a consumer slapd with bdb. First, I have to set an updateDN on the consumer slapd, else back-ldap gets a "no user modification allowed" error on operational attributes (structuralobjectclass, contextcsn) when it tries to update the consumer slapd (the admin guide says the opposite). Then this does not work at all when modifying an entry, because back-ldap gets a "modify/delete: hasSubordinates: no such attribute" error when it tries to update the entry.

1 0

(ITS#5392) Some traces are lost
by emmanuel.duru＠atosorigin.com 27 Feb '08

27 Feb '08

Full_Name: Emmanuel Duru Version: 2.3.39 OS: Windows URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (195.68.44.148) Traces related to connections are not logged on file (either default file, or specified file). Examples of traces which are not logged : conn=0 fd=2160 ACCEPT from IP=127.0.0.1:1299 (IP=0.0.0.0:4800) conn=0 op=0 BIND dn="cn=manager,c=fr" method=128 conn=0 op=0 BIND dn="cn=manager,c=fr" mech=SIMPLE ssf=0 conn=0 op=0 RESULT tag=97 err=0 text= conn=0 op=1 SRCH base="c=fr" scope=2 deref=0 filter="(o=soc)" conn=0 op=1 SRCH attr=* conn=0 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= conn=0 op=2 UNBIND conn=0 fd=2160 closed These traces appear on screen but not on file. The problem is that when starting slapd as a Windows service, these traces are lost.

1 0

Bug in Proxy mode..
by K C, Sachin (Sachin) 26 Feb '08

26 Feb '08

OpenLDAP Team, Seems to be a bug in OpenLDAP 2.4.8 configured in Proxy mode with --enable-ldap and --enable-rewrite The proxy config is database ldap suffix "o=<O>" # List of proxy servers delimited by space # uri <Server List> uri "ldap://<Main>:<port>/ ldap://<Secondary>:<port>/" When the "Main" was running, all requests were passed onto Main. I brought it down and saw that the requests were sent to "Secondary" server. After sometime, I brought the Main server back to live simulating a recovery from crash. The requests were still redirected to "Secondary" despite the "Main" server being accessible. I brought down the "Secondary" server and the requests were directed to Main server.!! Is this the correct behaviour? ( I believe that the server in the head of the list should be contacted everytime a request comes to proxy! ) ThanX Sachin

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs