openldap-software

openldap-software@openldap.org

2719 discussions

more about perl backend and external perl modules
by Piotr Wadas 15 Jun '07

15 Jun '07

------------- root@gnp43:/home/pwadas# slapd -4 -d3872 -h ldap://192.168.0.221/ ldapi:/// @(#) $OpenLDAP: slapd 2.3.35 (May 12 2007 16:57:50) $ root@gnp43.internetdsl.tpnet.pl:/home/pwadas/SRC/SLAPD-NEW/openldap-2.3.35/servers/slapd Error Can't load '/usr/lib/perl/5.8/auto/POSIX/POSIX.so' for module POSIX: /usr/lib/perl/5.8/auto/POSIX/POSIX.so: undefined symbol: PL_sig_name at /usr/lib/perl/5.8/XSLoader.pm line 70. at /usr/lib/perl/5.8/POSIX.pm line 26 Compilation failed in require at /etc/ldap/PerlBackend.pm line 26. BEGIN failed--compilation aborted at /etc/ldap/PerlBackend.pm line 26. Compilation failed in require at (eval 2) line 1. BEGIN failed--compilation aborted at (eval 2) line 1. WARNING: No dynamic config support for database perl. Can't call method "init" on an undefined value. root@gnp43:/home/pwadas# root@gnp43:~/SRC/SLAPD-NEW# perl --version This is perl, v5.8.8 built for i486-linux-gnu-thread-multi ------------ Hello, I got the above error, when I try to start slapd, with perl backends, and some "use" lines in script. No matter what perl package I try to use (POSIX, DBI, whatever), I get similar error regarding perl library. I tried to rebuild perl and its modules, and rebuild openldap (tried 2.3.30 and 2.3.35 versions), with no effect. Is there some limitation on perl backend, because of kind of the way it's embedded into slapd, which actually disallow usage of external modules? It seems slapd runs fine, when I don't put any "use" lines into backend perl file (*.pm) Should I try without threading, or what? I've seen this thing being reported a few times on various lists, including some linux distribution bugzillas, anyway there was no answer, see e.g. this https://bugs.launchpad.net/ubuntu/+source/openldap2.2/+bug/90812 This slapd 2.3.35 was built with the following options: --prefix=/usr --libexecdir=/usr/lib --sysconfdir=/etc --localstatedir=/var --mandir=/usr/share/man --enable-debug --enable-dynamic --enable-syslog --enable-proctitle --enable-ipv6 --enable-local --enable-slapd --enable-aci --enable-cleartext --enable-crypt --enable-spasswd --enable-modules --enable-rewrite --enable-rlookups --enable-slp --enable-wrappers --enable-backends=mod --enable-overlays=mod --enable-slurpd --with-subdir=ldap --with-cyrus-sasl --with-threads --with-tls --enable-bdb=mod --enable-dnssrv=mod --enable-hdb=mod --enable-ldap=mod --enable-ldbm=mod --enable-meta=mod --enable-monitor=mod --enable-null=mod --enable-passwd=mod --enable-perl=mod --enable-relay=mod --enable-shell=mod --enable-sql=mod --enable-accesslog=mod --enable-auditlog=mod --enable-denyop=mod --enable-dyngroup=mod --enable-dynlist=mod --enable-lastmod=mod --enable-ppolicy=mod --enable-proxycache=mod --enable-refint=mod --enable-retcode=mod --enable-rwm=mod --enable-syncprov=mod --enable-translucent=mod --enable-unique=mod --enable-valsort=mod and the part from slapd.conf (of course the same happens with only one directory in perlModulePath, containing PerlBackend.pm) database perl suffix "dc=example" perlModulePath /etc/ldap /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl perlModule PerlBackend "PerlBackend.pm" is the file from slapd distribution, SampleLDAP, I just renamed it. Regards, Piotr

2 2

Limiting attributes through ACL
by Dan Ciarniello 14 Jun '07

14 Jun '07

I am trying to set up OpenLDAP to return all attributes for a given set of entries when accessed by an authenticated user but only a subset of the attributes when accessed anonymously but I can't figure out how to set up the ACL to do this. As an example, I have a directory entry ou=People with a number of inetOrgPerson subentries. When accessed anonymously, I would like only the cn attribute of the entries to be returned. Is this possible? If so, how do I set it up? Thanks, Dan.

2 1

Re: indexes and multiple values
by Quanah Gibson-Mount 14 Jun '07

14 Jun '07

--On Thursday, June 14, 2007 3:30 PM +0200 David Schmitter <schmitt(a)dataflow.ch> wrote: >> Perhaps you added an index after the >> data already existed, and forgot to run slapindex? >> > > That was exactly the problem. Glad it worked! Please remember to keep replies on the list, thanks! --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

is it possible to configure openldap to return latest modified entries first without using sorting feature?
by Zhang Weiwu 14 Jun '07

14 Jun '07

Dear list As the project I am working on requires, all ldap search results should return latest-modified entry first. This requirement have many practical reason behind it and is an important requirement. I solve this problem by always invoke ldap search with 'sort' option. I believe by doing so I have lowered down performance, especially the search result is often several thousands records. Now the server is overburden. I have noticed if I don't use sort feature, the result is always the reverse of the project requirement: last modified entries are displayed last. (project requirement is: last modified entries are displayed first.) The project requirement will not likely to change in a few years time, so I think perhaps we can enhance performance by reconfiguring openldap to reverse sort order -> not possible on OpenLDAP itself but I guess probably by configuring BDB backend, to ask it to 'save' data in the opposite way, and by doing so make future search result automatically 'sorted'. So far, it's my dream and my wild guess. I am digging into BDB documents to find out if such configuration is possible and also write the list see if experts knows this possibility already. And, I wouldn't be surprised if BDB cannot be configured the way I like, but, it's stupid not to ask the list just in case if it's possible Thanks a lot in advance! -- Zhang Weiwu Real Softservice http://www.realss.com +86 592 2091112

4 5

BDB checkpointing overhead
by Bill Johnstone 13 Jun '07

13 Jun '07

Hello. If I use the checkpointing feature in the bdb backend, if there were no changes made to the directory since the previous checkpoint, is there any overhead other than waking up the code to check to see if the database is to be synced? If there are no unsynced changes, does anything get written to disk or logged in any way when the checkpointing code wakes up? Thank you. ____________________________________________________________________________________ Bored stiff? Loosen up... Download and play hundreds of games for free on Yahoo! Games. http://games.yahoo.com/games/front

3 2

could not stat config file "%SYSCONFDIR%/schema/core.schema": No such file or directory (2)
by Joe Flowers 13 Jun '07

13 Jun '07

This has got to be something simple, but it's just not surfacing for me today.... Arg.... This is what I am getting after running "slapd -d 1" inside of MSYS: "could not stat config file "%SYSCONFDIR%/schema/core.schema": No such file or directory (2)" Joe ---------------------------------------------------------------------------------------------- 1. This is what the environment variable "SYSCONFDIR" looks like inside of MSYS by issuing the "set" command: SYSCONFDIR=/local/etc/openldap ---------------------------------------------------------------------------------------------- 2. mae@JLF /local/libexec $ ls -la /local/etc/openldap/schema/core.schema -r--r--r-- 1 mae Administ 20353 Jun 12 15:36 /local/etc/openldap/schema/core.schema mae@JLF /local/libexec ---------------------------------------------------------------------------------------------- 3. Error running "slapd -d 1" inside of MSYS: mae@JLF /local/libexec $ slapd -d 1 @(#) $OpenLDAP: slapd 2.3.35 (May 21 2007 16:51:47) $ @JLF:/home/Joe/openldap-2.3.35/servers/slapd daemon_init: listen on ldap:/// daemon_init: 1 listeners to open... ldap_url_parse_ext(ldap:///) daemon: listener initialized ldap:/// daemon_init: 1 listeners opened slapd.exe init: initiated server. bdb_back_initialize: initialize BDB backend bdb_back_initialize: Berkeley DB 4.5.20: (September 20, 2006) hdb_back_initialize: initialize HDB backend hdb_back_initialize: Berkeley DB 4.5.20: (September 20, 2006) could not stat config file "%SYSCONFDIR%/schema/core.schema": No such file or directory (2) slapd.exe destroy: freeing system resources. slapd stopped. connections_destroy: nothing to destroy. mae@JLF /local/libexec ----------------------------------------------------------------------------------------------

2 1

"make test" failed on test019 1st & then all subsequent tries: test017 failure.
by Joe Flowers 13 Jun '07

13 Jun '07

Any educated ideas why? Thanks! Joe ---------------------------------------------------------------------------- 2nd and subsequent "make test" ended in this: >>>>> Starting test017-syncreplication-refresh ... running defines.sh Starting master slapd on TCP/IP port 9011... Using ldapsearch to check that master slapd is running... Using ldapadd to create the context prefix entry in the master... Starting slave slapd on TCP/IP port 9012... Using ldapsearch to check that slave slapd is running... Using ldapadd to populate the master directory... Waiting 15 seconds for syncrepl to receive changes... Using ldapmodify to modify master directory... Waiting 15 seconds for syncrepl to receive changes... Try updating the slave slapd... ldapmodify should have failed (1)! >>>>> ./scripts/test017-syncreplication-refresh failed (exit 1) make[2]: *** [bdb-yes] Error 1 make[2]: Leaving directory `/home/Joe/openldap-2.3.35/tests' make[1]: *** [test] Error 2 make[1]: Leaving directory `/home/Joe/openldap-2.3.35/tests' make: *** [test] Error 2 mae@JLF /home/Joe/openldap-2.3.35 $ ---------------------------------------------------------------------------- 1st "make test" ended in this: Filtering R1 slave ldapsearch results... Filtering R2 slave ldapsearch results... Filtering P1 slave ldapsearch results... Filtering P2 slave ldapsearch results... Filtering P3 slave ldapsearch results... Comparing retrieved entries from master and R1 slave... test failed - master and R1 slave databases differ >>>>> ./scripts/test019-syncreplication-cascade failed (exit 1) make[2]: *** [bdb-yes] Error 1 make[2]: Leaving directory `/home/Joe/openldap-2.3.35/tests' make[1]: *** [test] Error 2 make[1]: Leaving directory `/home/Joe/openldap-2.3.35/tests' make: *** [test] Error 2 mae@JLF /home/Joe/openldap-2.3.35 $ ----------------------------------------------------------------------------

3 2

slurpd replication and openldap versions
by Matthias Leopold 12 Jun '07

12 Jun '07

hi i want to know in general what the caveats are when replicating ldap data with slurpd between openldap servers of different major versions. i would be especially interested in knowing if it is adviseable to replicate from a 2.3 master to 2.2 slaves (or the other way round). the reason for asking this is that i have noticed that in the present setup replication from 2.0 to 2.2 produces .rej files which are 10 times bigger than those resulting from "same generation" (2.0 <-> 2.0) replication. or are there any special configuration options for this situation? thanks for help matthias -- Mit freundlichen Grüssen Matthias Leopold System & Network Administration Streams Telecommunications GmbH Universitaetsstrasse 10/7, 1090 Vienna, Austria tel: +43 1 40159113 fax: +43 1 40159300 ------------------------------------------------

4 3

why syncrepl doesn't work ???
by Jeronimo Zucco 12 Jun '07

12 Jun '07

Hi, list. I'm trying to implement syncrepl in my openldap 2.3.35 without sucess. I tryed many (I sed: MANY) times to slacat, slapadd to slave for syn ldap servers, but for some reason with I don't know, the slave lost the sync. Then I have to do the same thing ate night: - stop ldap master; - slapcat master - slapadd on the slave; - start master and start slave This works about one hour, in the morning wasn't syncing again. If i restart the slave ldap, then the changes on the master is replicated, but stops to sync "on line" after this. I don't know what to do to solve this issue :-( Follow up my ldap configuration (just about syncrepl): ldap master: # acls permits to user replicator to read all the database index objectClass,entryCSN,entryUUID eq overlay syncprov syncprov-checkpoint 100 10 syncprov-sessionlog 100 limits dn.exact="cn=replicator,dc=domain,dc=com" size.soft=unlimited size.hard=unlimited ldap slave: syncrepl rid=1 provider=ldaps://master.domain.com:636 binddn="cn=replicator,dc=domain,dc=com" bindmethod=simple credentials=secret searchbase="dc=domain,dc=com" filter="(objectClass=*)" schemachecking=off scope=sub type=refreshAndPersist retry="60 +" Any tip will be apreciated. -- Jeronimo Zucco LPIC-1 Linux Professional Institute Certified Núcleo de Processamento de Dados Universidade de Caxias do Sul http://jczucco.blogspot.com

5 6

Regarding chaining to multiple ldap servers
by Arunachalam Parthasarathy 12 Jun '07

12 Jun '07

Hello, With openldap chain overlay, can we able to chain to multiple servers, Means can I have multiple chain-idassert-uri and chain-idassert-bind , which I can use many binddn/bindpassword , for chaining and i need to chain for (read and write) to those servers Thanks, Arunachalam. **************************************************************************** **************************** This e-mail and attachments contain confidential information from HUAWEI, which is intended only for the person or entity whose address is listed above. Any use of the information contained herein in any way (including, but not limited to, total or partial disclosure, reproduction, or dissemination) by persons other than the intended recipient's) is prohibited. If you receive this e-mail in error, please notify the sender by phone or email immediately and delete it!

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-software