openldap-software July 2007

openldap-software@openldap.org

108 participants
124 discussions

Re: how to use slapo-refint (or why it doesn't work?)
by Buchan Milne 01 Jul '07

01 Jul '07

On Saturday, 30 June 2007, Zhang Weiwu wrote: > [ > I don't know why the message (Wed, 27 Jun 2007 23:25:28 +0800) seems > didn't delivered to the list (failed moderation? I didn't receive > notification from moderator either). Here is it resend again. > ] > > On Wed, 2007-06-27 at 17:09 +0200, Buchan Milne wrote: > > Your use of the feature seems to be correct, but you don't provide any > > information on whether your configuration of the feature is correct. > > > > You may want to supply at least the section of slapd.conf relevant to > > this database (with sensitive details - e.g. rootpw etc. - replaced). > > Thanks and sorry for letting you have to ask more questions in order to > answer my question! > > Here is the complete slapd.conf (rootpw is no security threat because > this is a temporary test installation made to test slapo-refint feature) You are missing: overlay refint inside the database section, before the following line: refint_attributes contactPerson -- Buchan Milne ISP Systems Specialist - Monitoring/Authentication Team Leader B.Eng,RHCE(803004789010797),LPIC-2(LPI000074592) http://en.wikipedia.org/wiki/List_of_Internet_slang_phrases

1 0

Re: filtered logging
by Gavin Henry 01 Jul '07

01 Jul '07

<quote who="Kambiz Behrooz"> > Excise me. I should explain better > Log level is set to 0x240 but then we get both success and errors for > stats2 and config and there is no way to just get errors which we need > only. IIRC, try "loglevel none", this will only have high priority messages logged, i.e. erorrs. > > Thanks > >> If I understand right so I need to send it to >> openldap-software(a)openldap.org , right? > > Yes. > >> >> by the way I never used overlay before. > > Ok. > >> >> The company I work for use ldap pretty much and log file get big very >> fast >> and same times they are only interested on just "errors". Last time it >> was >> just a few lines on the file they needed and the log file contained over >> 100K lines. > > This is the information I was after. If they only want to log errors, > change the "loglevel" setting. See "man slapd.conf". This is what man > pages are for ;-) > > What loglevel is it currently on. > >> >> Thanks for the information >> >> Kind Regards, >> Kambiz Behrooz >> >> >> >> >> Kambiz Behrooz wrote: >>> I am new on openldap (and ldap and this maillist). >>> My company wants to have more control on the logging and I have to >>> make changes on openldap and probably make changes so the can be on >>> next version openldap. >>> >>> Does openldap use only syslog for all logging ? >>> where is easiest to begin ? >>> How good need the code be to have chance to be add to openldap ? >>> >>> Thanks for any information >>> >>> >> >> This is really for the openldap-software list. Please resend. >> >> Anyway.... >> >> Have you looked at the accesslog overlay? You haven't mentioned why/what >> logging is inadequate? >> >> Gavin >> >> >> -- >> Kind Regards, >> >> Gavin Henry. >> Managing Director. >> >> T +44 (0) 1224 279484 >> M +44 (0) 7930 323266 >> F +44 (0) 1224 824887 >> E ghenry(a)suretecsystems.com >> >> Open Source. Open Solutions(tm). >> >> http://www.suretecsystems.com/ >> >> >> >> ____________________________________________________________________________________ >> Building a website is a piece of cake. Yahoo! Small Business gives you >> all >> the tools to get online. >> http://smallbusiness.yahoo.com/webhosting > > > > ____________________________________________________________________________________ > Get the Yahoo! toolbar and be alerted to new email wherever you're > surfing. > http://new.toolbar.yahoo.com/toolbar/features/mail/index.php

1 0

WARNING: No dynamic config support for MODULE
by Manon Goo 01 Jul '07

01 Jul '07

Hi, I am using the slapd 2.3.30 debian package. I would like to have the schma and acl configuration dynamic so I am able to replicate it. but on the other hand I would like to use som overlays witch do not support the dynamic configuration. Is there any possibilty to keep schenas and acls in the dynamic configuration. And keeping the overlay and database configuration in an old style include file ? Manon Manon Goo Dembach Goo Informatik GmbH & Co KG Untersachsenhausen 33 D-50667 Köln Tel: +49 221 801483 0 Mobil: +49 177 8091974 Fax: +49 221 801483 20 Email: manon(a)dg-i.net Amtsgericht Köln HRA 22794, UST ID: DE242 159 527 Geschäftsführer: Manon Goo, Andreas Dembach Haftende Gesellschafterin: Dembach Goo Verwaltungs GmbH

3 3

multi-value attribute search result
by Piotr Wadas 30 Jun '07

30 Jun '07

Hello, using openldap 2.3.35. When I do a search for some attribute like "cn=foobar", and in set of attributes which are to be returned per-entry is "cn" attribute, all its values are returned. however, when I search with "cn=foo*", and entry has multiple "cn" values, like "cn=foo", "cn=joe", "cn=foobar", "cn=foobarX", "cn=bob", "cn=nofoobar" - is it possible to have "cn" returned, but only these values, which actually matched the filter ? Or, is it possible to find out how many values of "cn" in particular entry, matched? While doing such search in some specified case, I'm interested only with values "cn=foo", "cn=foobar" and "cn=foobarX", I do not care what are other "cn" values, nor even there are other values of "cn" which didn't match, or not. Such feature seems complicated, because filter actually may be build with many attributes, - and only if some of them are specified in return attributes, the matching values should be returned . Regards, Piotr

6 10

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-software July 2007