Re: how to use slapo-refint (or why it doesn't work?)
by Buchan Milne
On Saturday, 30 June 2007, Zhang Weiwu wrote:
> [
> I don't know why the message (Wed, 27 Jun 2007 23:25:28 +0800) seems
> didn't delivered to the list (failed moderation? I didn't receive
> notification from moderator either). Here is it resend again.
> ]
>
> On Wed, 2007-06-27 at 17:09 +0200, Buchan Milne wrote:
> > Your use of the feature seems to be correct, but you don't provide any
> > information on whether your configuration of the feature is correct.
> >
> > You may want to supply at least the section of slapd.conf relevant to
> > this database (with sensitive details - e.g. rootpw etc. - replaced).
>
> Thanks and sorry for letting you have to ask more questions in order to
> answer my question!
>
> Here is the complete slapd.conf (rootpw is no security threat because
> this is a temporary test installation made to test slapo-refint feature)
You are missing:
overlay refint
inside the database section, before the following line:
refint_attributes contactPerson
--
Buchan Milne
ISP Systems Specialist - Monitoring/Authentication Team Leader
B.Eng,RHCE(803004789010797),LPIC-2(LPI000074592)
http://en.wikipedia.org/wiki/List_of_Internet_slang_phrases
15 years, 8 months
Re: filtered logging
by Gavin Henry
<quote who="Kambiz Behrooz">
> Excise me. I should explain better
> Log level is set to 0x240 but then we get both success and errors for
> stats2 and config and there is no way to just get errors which we need
> only.
IIRC, try "loglevel none", this will only have high priority messages
logged, i.e. erorrs.
>
> Thanks
>
>> If I understand right so I need to send it to
>> openldap-software(a)openldap.org , right?
>
> Yes.
>
>>
>> by the way I never used overlay before.
>
> Ok.
>
>>
>> The company I work for use ldap pretty much and log file get big very
>> fast
>> and same times they are only interested on just "errors". Last time it
>> was
>> just a few lines on the file they needed and the log file contained over
>> 100K lines.
>
> This is the information I was after. If they only want to log errors,
> change the "loglevel" setting. See "man slapd.conf". This is what man
> pages are for ;-)
>
> What loglevel is it currently on.
>
>>
>> Thanks for the information
>>
>> Kind Regards,
>> Kambiz Behrooz
>>
>>
>>
>>
>> Kambiz Behrooz wrote:
>>> I am new on openldap (and ldap and this maillist).
>>> My company wants to have more control on the logging and I have to
>>> make changes on openldap and probably make changes so the can be on
>>> next version openldap.
>>>
>>> Does openldap use only syslog for all logging ?
>>> where is easiest to begin ?
>>> How good need the code be to have chance to be add to openldap ?
>>>
>>> Thanks for any information
>>>
>>>
>>
>> This is really for the openldap-software list. Please resend.
>>
>> Anyway....
>>
>> Have you looked at the accesslog overlay? You haven't mentioned why/what
>> logging is inadequate?
>>
>> Gavin
>>
>>
>> --
>> Kind Regards,
>>
>> Gavin Henry.
>> Managing Director.
>>
>> T +44 (0) 1224 279484
>> M +44 (0) 7930 323266
>> F +44 (0) 1224 824887
>> E ghenry(a)suretecsystems.com
>>
>> Open Source. Open Solutions(tm).
>>
>> http://www.suretecsystems.com/
>>
>>
>>
>> ____________________________________________________________________________________
>> Building a website is a piece of cake. Yahoo! Small Business gives you
>> all
>> the tools to get online.
>> http://smallbusiness.yahoo.com/webhosting
>
>
>
> ____________________________________________________________________________________
> Get the Yahoo! toolbar and be alerted to new email wherever you're
> surfing.
> http://new.toolbar.yahoo.com/toolbar/features/mail/index.php
15 years, 8 months
WARNING: No dynamic config support for MODULE
by Manon Goo
Hi,
I am using the slapd 2.3.30 debian package.
I would like to have the schma and acl configuration
dynamic so I am able to replicate it. but on the other hand
I would like to use som overlays witch do not support
the dynamic configuration.
Is there any possibilty to keep schenas and acls in the
dynamic configuration. And keeping the overlay and database configuration
in an old style include file ?
Manon
Manon Goo
Dembach Goo Informatik GmbH & Co KG
Untersachsenhausen 33
D-50667 Köln
Tel: +49 221 801483 0
Mobil: +49 177 8091974
Fax: +49 221 801483 20
Email: manon(a)dg-i.net
Amtsgericht Köln HRA 22794, UST ID: DE242 159 527
Geschäftsführer: Manon Goo, Andreas Dembach
Haftende Gesellschafterin: Dembach Goo Verwaltungs GmbH
15 years, 8 months
multi-value attribute search result
by Piotr Wadas
Hello,
using openldap 2.3.35.
When I do a search for some attribute like "cn=foobar", and in set of
attributes which are to be returned per-entry is "cn" attribute, all its
values are returned.
however, when I search with "cn=foo*", and entry has multiple
"cn" values, like
"cn=foo",
"cn=joe",
"cn=foobar",
"cn=foobarX",
"cn=bob",
"cn=nofoobar"
- is it possible to have "cn" returned, but only these values,
which actually matched the filter ? Or, is it possible
to find out how many values of "cn" in particular entry, matched?
While doing such search in some specified case, I'm interested
only with values "cn=foo", "cn=foobar" and "cn=foobarX", I do not
care what are other "cn" values, nor even there are other values
of "cn" which didn't match, or not. Such feature seems complicated,
because filter actually may be build with many attributes,
- and only if some of them are specified in return attributes, the
matching values should be returned .
Regards,
Piotr
15 years, 8 months
