openldap-software October 2007

openldap-software@openldap.org

84 participants
107 discussions

RE: userPassword attribute
by Marot Laurent 11 Oct '07

11 Oct '07

Sorry Isn't posixUser an objectClass implementing userPassword ? I just actually wanted to know where I can find attribute definition of userpassword as the definition is commented out in core.schema # system schema #attributetype ( 2.5.4.35 NAME 'userPassword' # DESC 'RFC2256/2307: password of user' # EQUALITY octetStringMatch # SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{128} ) De : Owen DeLong [mailto:owen@delong.com] Envoyé : jeudi 11 octobre 2007 18:21 À : Marot Laurent Objet : Re: userPassword attribute PosixUser Owen On Oct 11, 2007, at 7:27 AM, Marot Laurent wrote: Hello, Could you please tell me where userPassword attribute syntax is defined in openLdap because I only found it in core.schema but commented out. Thanks LM

2 1

userPassword attribute
by Marot Laurent 11 Oct '07

11 Oct '07

Hello, Could you please tell me where userPassword attribute syntax is defined in openLdap because I only found it in core.schema but commented out. Thanks LM

3 2

Client application connection pool and OpenLDAP
by Sylvain Belleau 11 Oct '07

11 Oct '07

Hi! I have a Java application (that works with Novell JLDAP) as a client to OpenLDAP. This application use a connection pool in which 5 connections are open when it is started and maintain until the application is stopped. That means, the application send search, compare, update command to OpenLDAP through each of the 5 connections without closing the connections between each command that is sent to OpenLDAP. Does OpenLDAP support application that use a connection pool ? In other words, does OpenLDAP release its memory after each command (search, ADD, ...) that is executed or it release its memory after the client application close the socket ? I'm asking this question because memory used by OpenLDAP keep growing until it exceed the capacity of Linux. I use RHEL v.4 with OpenLDAP v.2.2.13 Someone told me, I should not have any memory leak with this version and probably that OpenLDAP release its memory only when the socket with the client application is closed. he also said that I should not use a connection pool to send ldap command to OpenLDAP. Do you agree with that ? thanks for your help Sylvain

4 3

Re: empty db
by Gavin Henry 11 Oct '07

11 Oct '07

<quote who="Richard smith"> > Where are they logs ? Sigh. /var/log/ldap or /var/log/openldap.log Know your system ;-) What version and distro are you using? RPMs/source? > > Gavin Henry <ghenry(a)OpenLDAP.org> wrote: > What do your logs show? > > > > --------------------------------- > Be a better Globetrotter. Get better travel answers from someone who > knows. > Yahoo! Answers - Check it out.

4 3

RE: ldapsearch on local attributes with slapo-translucent
by Srilakshmanan, Kumuthiny 11 Oct '07

11 Oct '07

Are you missing a bracket? "(&(object Class=AsteriskSIPUser)(AstAccountName=600))" -----Original Message----- From: openldap-software-bounces+kumuthiny.srilakshmanan=auspost.com.au(a)OpenLDAP.or g [mailto:openldap-software-bounces+kumuthiny.srilakshmanan=auspost.com.au@Ope nLDAP.org] On Behalf Of Gavin Henry Sent: Friday, 20 July 2007 7:26 AM To: openldap-software(a)openldap.org Subject: ldapsearch on local attributes with slapo-translucent Dear All, I'm doing some work with Asterisk and translucent, trying to overlay some attributes to an existing remote account, locally. These attributes have been added by entries in the local database before being presented to me via ldapsearch, whilst searching for attributes present in the remote directory: objectClass: AsteriskExtension objectClass: AsteriskSIPUser AstAccountName: 600 AstAccountType: friend AstAccountSecret: 600 AstAccountQualify: yes AstAccountPort: 5060 AstAccountNAT: never AstAccountMailbox: 600@device AstAccountHost: dynamic AstAccountDTMFMode: rfc2833 AstAccountContext: from-internal AstAccountCanReinvite: no AstAccountCallerID: Gavin <502> Should I expect to be able to search for the above attributes and get a result? Currently I am not. A filter like: "(&(objectClass=AsteriskSIPUser)(AstAccountName=600)" returns: ldapsearch: ldap_search_ext: Bad search filter (-7) So I guess that answers my question. If slapo-translucent did return results for searches against the local attributes, would this be defeating the purpose/design of the overlay? Thanks, Gavin. Australia Post is committed to providing our customers with excellent service. If we can assist you in any way please telephone 13 13 18 or visit our website. The information contained in this e-mail communication may be proprietary, confidential or legally professionally privileged. It is intended exclusively for the individual or entity to which it is addressed. You should only read, disclose, re-transmit, copy, distribute, act in reliance on or commercialise the information if you are authorised to do so. Australia Post does not represent, warrant or guarantee the integrity of this e-mail communication has been maintained nor that the communication is free of errors, virus or interference. If you are not the addressee or intended recipient please notify us by replying direct to the sender and then destroy any electronic or paper copy of this message. Any views expressed in this e-mail communication are taken to be those of the individual sender, except where the sender specifically attributes those views to Australia Post and is authorised to do so.

4 4

Info on cn=Monitor items
by Maykel Moya 11 Oct '07

11 Oct '07

Is there any available documentation explaining the meanings (what is monitored) of every item under cn=Monitor. In particular, I'm not sure about the exact meaning of: * cn=Log,cn=Monitor * cn=Bytes,cn=Statistics,cn=Monitor (sent Bytes since started?) * cn=PDU,cn=Statistics,cn=Monitor (don't know what PDU means) * cn=Entries,cn=Statistics,cn=Monitor (in my system it shows very high, maybe because of my cn=accesslog and cn=config contexts. It's planned to have Entries per context basis?) * cn=Backload,cn=Threads,cn=Monitor * cn=Runqueue,cn=Threads,cn=Monitor (monitoredInfo always have value (), what are possible values for this attribute) * cn=Read,cn=Waiters,cn=Monitor (in my system it shows 15, did it mean that there was 15 threads waiting to query the DIT? if so, it's strange for me give that this system is only for testing with 2 o 3 clients and such a number of read waiters are very improbable) Had the OL developers considered adding a description attribute to *,cn=Monitor entries? Regards, maykel

4 3

Re: empty db
by Gavin Henry 10 Oct '07

10 Oct '07

Richard smith wrote: > Gavin, > Thanks for the reply. > I assume the data dir is /var/lib/ldap. > I deleted the newly created objectClass.bdb file and moved all the other > files from the /var/lib/ldap dir to some other dir, except for the > DB_CONFIG. > I left that file in /var/lib/ldap. > > service ldap start > says ok and ok, but status still reported as stopped. > > no files generated What do your logs show?

1 0

some questions about syncrepl
by Guillaume Rousse 10 Oct '07

10 Oct '07

Hello. I'm trying to follow change propagations errors using delta-synrepl in search & persist mode, by using an accesslog overlay both on master and on slaves. I've a few questions for which I didn't found answer in the documentationn. First, I noticed than changes on the slaves seems to be written from rootdn, not from the dn declared in the syncrepl directive, which seems to be only used on the master, meaning I don't need any specific ACL on the slave. Is this correct ? Second, I have several slaves synchronizing on the same master. From slapd.conf man page, rid is supposed to be unique in the consumer only, meaning all my slaves can safely use the same rid (easier for maintaining centralized configurations). Is this correct interpretation ? Third, I noticed a lot of errors correction for syncrepl in openldap changelog. As I can't easily change installed versions (our policy is to stick with our distribution provided package, meaning a mix of 2.3.27 and 2.3.34), am I correct assuming 'refresh only' mode is less fragile than 'refresh & persist' mode, and than total synchronisation is also less fragile than delta synchronisation, if I need to fallback on a safer mode ? -- Guillaume Rousse Moyens Informatiques - INRIA Futurs Tel: 01 69 35 69 62

4 14

rootdn for syncrepl?
by Maykel Moya 08 Oct '07

08 Oct '07

In man slapd.conf you can read: -- rootdn <dn> Specify the distinguished name that is not subject to access control or administrative limit restrictions for operations on this database. [...] Note that the rootdn is always needed when using syncrepl. -- In this Conexitor forum[1] about replication configuration a particular DN is used with permissions granted via ACIs, it seems that cn=replicator is not the rootdn. Could you clarify about the real necessity of rootdn (and its usage) for syncrepl? Regards, maykel [1] http://www.connexitor.com/forums/viewtopic.php?t=3

2 2

syncprov dependencies
by Maykel Moya 08 Oct '07

08 Oct '07

Do slapo-syncprov depends on slapo-accesslog for syncrepl or delta-syncrepl operations? Regards, maykel

3 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-software October 2007