openldap-software

openldap-software@openldap.org

2719 discussions

trigger external program on some change
by Emmanuel Dreyfus 02 Aug '07

02 Aug '07

Hello I'd need to trigger execution of an external shell script when some particular change occur in the tree. Is there a simple way of doing that? Of course, an overlay could do that. I saw no available overlay that would have this capacity out of the box. The only way I see is building a new overlay just for that, or use something such as slapo-auditlog and feed it to an external filter (throug a pipe?). I wonder if there is a simplier mechanism available. -- Emmanuel Dreyfus manu(a)netbsd.org

4 3

OpenLDAP 2.4 (alpha) - multi-master-replication (docs)
by Stefan Jurisch 02 Aug '07

02 Aug '07

Hello, Just round about a few hour ago I wrote an email to Quanah, who gave me the advice to contact the developers' mailinglist, so I did it, but there the moderator told be to better redirect my question into this software-mailinglist... now I do so, and I really hope to be in the correct list now. :-) I just would like to ask one little question: Is there already any documentation on the multi-master-replication feature, which is planned for the upcoming openldap-release 2.4? At work I have to implement a special ldap-solution which should provide this feature beacuse our customer has multiple locations where the 3 big ones should have their own master-directory-server. Even the german Linux Magazine brought an article this month, where the author also writes about this new features in the new 2.4-release. I compiled the openldap-source just last sunday, but I did not find any documentation to activate and use the multi-master-replication. Perhaps you can help me, please? Looking forward to an answer I thank you in advance. Cordially yours Stefan "FastEddy" Jurisch Siegnetz.IT GmbH, Germany

2 1

Re: OpenLDAP: Referrals
by r d 01 Aug '07

01 Aug '07

can someone suggest something on following ----- Original Message ---- From: r d <rad390(a)yahoo.com> To: openldap-software(a)openldap.org Sent: Friday, July 27, 2007 3:49:05 PM Subject: OpenLDAP: Referrals -help Hello, I'm newbe to openldap. Want to get some helpful hand on setting up referral. I've two slapd instances running. The directory tree on machine 1 is dc=example,dc=com,ou=TestUser and directory tree on machine B has dc=example,dc=com,ou=TestUser and dc=example,dc=com,ou=LdapUser Now from machine A I'm trying to refer records in machine B using following command.and I get following output. my slapd.config on machine-A has following line referral ldap://machin-B:389/ C:\Program Files\OpenLDAP>ldapsearch.exe -x -H ldap://machin-A -D "cn=Mana ger,dc=example,dc=com" -b "dc=example,dc=com,ou=LdapUser" "cn="LdapUser1 foo" -W Enter LDAP Password: # extended LDIF # # LDAPv3 # base <dc=example,dc=com,ou=LdapUser> with scope sub # filter: sn=LU1foo # requesting: ALL # # search result search: 2 result: 10 Referral ref: ldap://machine-B:389/dc=example,dc=com,ou=LdapUser??sub # numResponses: 1 ========================== What I was expecting in output was search should return the record exists in machine B. But it didn't. Am I expecting right thing ? Is there anyhitng I need to configured, add entry in proper format or somehitng ? Please suggest ========================== Notice that sample entry exists on machine-B. ldapsearch -x -b 'dc=example,dc=com' '(&(objectclass=*)(cn=LdapUser1 foo))' # LdapUser1 foo, LdapUser, example.com dn: cn=LdapUser1 foo,ou=LdapUser,dc=example,dc=com objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: uidObject cn: LdapUser1 foo uid: LU1foo sn: LU1foo displayName: LdapUser1 foo userPassword:: VGVzdExkYXA= mail: LU1foo(a)mun.com ======================================================== Thanks in advance for looking into this, Need a vacation? Get great deals to amazing places on Yahoo! Travel. ____________________________________________________________________________________ Got a little couch potato? Check out fun summer activities for kids. http://search.yahoo.com/search?fr=oni_on_mail&p=summer+activities+for+kids&…

3 2

back-sql: change ORDER BY clause in backsql_get_attr_vals()
by maestro 01 Aug '07

01 Aug '07

Hello all! i have a very weired DB i need to access with back-sql. the DB does only support identifiers of max 18 chars length so i had to change the back-sql code to rename the ldap_entry_objclasses to something shorter - that is solved but this DB also cannot ORDER BY <alias> - since all backsql_get_attr_vals calls seem to only request one column it seems save to hardcode to ORDER BY 1 instead. i'm just wondering where the best place would be to do so any help is very appreciated. cheers m.

1 0

Possible to create "link" between trees in openldap 2.3
by Ski Kacoroski 01 Aug '07

01 Aug '07

Hi, I am not sure what the correct terminology is, but as part of a major re-work of our OpenLDAP directory we are moving from: ou=people, dc=nsd, dc=org to ou=people, ou=accounts, dc=nsd, dc=org. In the new server I would like to create a "link" from ou=people, dc=nsd, dc=org -> ou=people, ou=accounts, dc=nsd, dc=org. because I have 2500 email clients that have as a search base ou=people, dc=nsd, dc=org and my user community is not able to update their email clients to point to the new search base. Is it there a way to create a "link" and if so how. Thanks for your help. cheers, ski -- "When we try to pick out anything by itself, we find it connected to the entire universe" John Muir Chris "Ski" Kacoroski, ski(a)nsd.org, 206-501-9803

2 2

Upgrade from OpenLDAP 2.1.30 -> 2.3.37
by Leon de Rooij 31 Jul '07

31 Jul '07

Hi all, After a period of testing I upgraded our LDAP servers from 2.1.30 to 2.3.37. Many things were done, changed replication from slurpd to syncrepl, changed backend from ldbm to hdb, even changed the structure of the tree a bit, almost everything works great :) Except some searches are slower ! I have around 160K dn's with around 3.2M attrs in a server with 4G memory with a tree looking like this (simplified): o=sp | ou=users | namespace=domain.com | uid=username Now, when I do this search: # time ldapsearch -b "o=sp" "mail=user(a)domain.com" dn dn: uid=user,namespace=domain.com,ou=users,o=sp real 0m0.005s user 0m0.000s sys 0m0.000s But when I do this search: # time ldapsearch -b "ou=users,o=sp" "mail=user(a)domain.com" dn dn: uid=user,namespace=domain.com,ou=users,o=sp real 0m0.190s user 0m0.000s sys 0m0.000s (even after a couple of searches, the numbers stay the same) That's 50 times slower ! Right now all machines using LDAP are doing fine, but I'd like the searches with a different base than o=sp to be the same speed (I expected them to be even quicker because there's less to search, or am I wrong ?) (BTW, on our old LDAP, searches within o=sp were equally quick as searches in a different basedn, around 0.009 s real) I have indexed o, ou and namespace with pres and eq (and mail with pres, eq and sub), so I don't see a problem there. I still have to look a bit more into DB_CONFIG tuning, but still, is it normal behaviour of OpenLDAP 2.3.37 with hdb backend that searches in a subtree are slower than in the base of the tree ? Just before sending this mail I also tried searching like this: # time ldapsearch -b "namespace=domain.com,ou=users,o=sp" "mail=user(a)domain.com" dn dn: uid=user,namespace=domain.com,ou=users,o=sp real 0m0.015s user 0m0.000s sys 0m0.000s So that's in between both previous searches.. strange.. thanks & regards, Leon de Rooij leon(a)scarlet-internet.nl

5 8

noSuchObject at LDAP
by Hasan Tolga Bazan 31 Jul '07

31 Jul '07

Hello, If there is a LDAP tree consisting of "student names" and the searched name does not exist in the tree,"noSuchObject(32)" result code is returned. Is it possible to configure LDAP to get a default value like "name: Peter" instead of getting "noSuchObject" ? Thanks BR/Tolga _________________________________________________________________ With Windows Live Hotmail, you can personalize your inbox with your favorite color. www.windowslive-hotmail.com/learnmore/personalize.html?locale=en-us&ocid=TX…

2 1

Slapd doesn't start after update
by ツ Leandro Sales 28 Jul '07

28 Jul '07

Hi, I upgrade openldap from 2.2.28-r7 to 2.3.35-rc1 and no the slapd doesn't start. What may be the problem? I tried to downgrade back to 2.2.28-r7 and when I start the daemon I got: /usr/lib64/openldap/slapd: error while loading shared libraries: liblber-2.3.so.0: cannot open shared object file: No such file or directory Any clue? Thank you. []s Leandro.

2 3

OpenLDAP: Referrals -help
by r d 28 Jul '07

28 Jul '07

Hello, I'm newbe to openldap. Want to get some helpful hand on setting up referral. I've two slapd instances running. The directory tree on machine 1 is dc=example,dc=com,ou=TestUser and directory tree on machine B has dc=example,dc=com,ou=TestUser and dc=example,dc=com,ou=LdapUser Now from machine A I'm trying to refer records in machine B using following command.and I get following output. my slapd.config on machine-A has following line referral ldap://machin-B:389/ C:\Program Files\OpenLDAP>ldapsearch.exe -x -H ldap://machin-A -D "cn=Mana ger,dc=example,dc=com" -b "dc=example,dc=com,ou=LdapUser" "cn="LdapUser1 foo" -W Enter LDAP Password: # extended LDIF # # LDAPv3 # base <dc=example,dc=com,ou=LdapUser> with scope sub # filter: sn=LU1foo # requesting: ALL # # search result search: 2 result: 10 Referral ref: ldap://machine-B:389/dc=example,dc=com,ou=LdapUser??sub # numResponses: 1 ========================== What I was expecting in output was search should return the record exists in machine B. But it didn't. Am I expecting right thing ? Is there anyhitng I need to configured, add entry in proper format or somehitng ? Please suggest ========================== Notice that sample entry exists on machine-B. ldapsearch -x -b 'dc=example,dc=com' '(&(objectclass=*)(cn=LdapUser1 foo))' # LdapUser1 foo, LdapUser, example.com dn: cn=LdapUser1 foo,ou=LdapUser,dc=example,dc=com objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: uidObject cn: LdapUser1 foo uid: LU1foo sn: LU1foo displayName: LdapUser1 foo userPassword:: VGVzdExkYXA= mail: LU1foo(a)mun.com ======================================================== Thanks in advance for looking into this, ____________________________________________________________________________________ Need a vacation? Get great deals to amazing places on Yahoo! Travel. http://travel.yahoo.com/

1 0

Rewriting BindDN?
by Allen S. Rout 27 Jul '07

27 Jul '07

[apologies if this gets duped: I appear to be having GMANE problems] Greetings. I'm trying to duplicate the docs on rewriting BindDN before twiddling them to my actual goals. I'm using 2.3.35 on linux (gentoo). I've tried to strip the twiddling I'm doing down as far as I can: moduleload rwm overlay rwm rwm-rewriteEngine on rwm-rewriteMap LDAP attr2dn "ldap://localhost/ou=People,dc=ufl,dc=edu?dn?sub" rwm-rewriteContext bindDN rwm-rewriteRule "^mail=[^,]+@[^,]+$" "${attr2dn($0)}" ":@I" which is, I think, straight out of the docs. Jul 19 10:44:12 misc01 slapd[15708]: line 2 (moduleload rwm) Jul 19 10:44:12 misc01 slapd[15708]: loaded module rwm Jul 19 10:44:12 misc01 slapd[15708]: module rwm: null module registered Jul 19 10:44:12 misc01 slapd[15708]: line 3 (overlay rwm) Jul 19 10:44:12 misc01 slapd[15708]: line 5 (rwm-rewriteEngine on) Jul 19 10:44:12 misc01 slapd[15708]: line 7 (rwm-rewriteMap LDAP attr2dn "ldap://localhost/ou=People,dc=ufl,dc=edu?dn?sub") Jul 19 10:44:12 misc01 slapd[15708]: line 9 (rwm-rewriteContext bindDN) Jul 19 10:44:12 misc01 slapd[15708]: line 10 (rwm-rewriteRule "^mail=[^,]+@[^,]+$" "${attr2dn($0)}" ":@I") I think that the module is getting loaded. The 'null module' confuses me. But if I take out the moduleload, the overlay declaration fails, so -something- is getting loaded, and if I take out the overlay statement then the directives are undefined. I can't come up with a scenario where the module would be loaded and define all the entry points, but not actually do anything. :) But when I connect, I get invalid credentials, and: Jul 19 10:44:33 misc01 slapd[15721]: connection_read(12): checking for input on id=0 Jul 19 10:44:33 misc01 slapd[15721]: daemon: epoll: listen=7 active_threads=1 tvp=zero Jul 19 10:44:33 misc01 slapd[15721]: daemon: epoll: listen=8 active_threads=1 tvp=zero Jul 19 10:44:33 misc01 slapd[15721]: do_bind Jul 19 10:44:33 misc01 slapd[15721]: >>> dnPrettyNormal: <mail=asr(a)ufl.edu> Jul 19 10:44:33 misc01 slapd[15721]: <<< dnPrettyNormal: <mail=asr(a)ufl.edu>, <mail=asr(a)ufl.edu> Jul 19 10:44:33 misc01 slapd[15721]: do_bind: version=3 dn="mail=asr(a)ufl.edu" method=128 Jul 19 10:44:33 misc01 slapd[15721]: conn=0 op=0 BIND dn="mail=asr(a)ufl.edu" method=128 Jul 19 10:44:33 misc01 slapd[15721]: send_ldap_result: conn=0 op=0 p=3 Jul 19 10:44:33 misc01 slapd[15721]: send_ldap_result: err=49 matched="" text="" Jul 19 10:44:33 misc01 slapd[15721]: send_ldap_response: msgid=1 tag=97 err=49 Jul 19 10:44:33 misc01 slapd[15721]: conn=0 op=0 RESULT tag=97 err=49 text= Jul 19 10:44:33 misc01 slapd[15721]: daemon: activity on 1 descriptor what I find frustrating about this is that I don't even see an attempt to (say) apply the bindDN rewrite rule. Should I be expecting to see that? What config entries do I need to get some visibility into this process? I'm already doing loglevel -1: is there more? :) - Allen S. Rout

2 3

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-software