openldap-software

openldap-software@openldap.org

2719 discussions

Start a nNew thread

how to do TLS encryption ?
by JOYDEEP 27 Mar '07

27 Mar '07

dear list, What to do in slapd.conf to enable the TLS encryption only between server and client ?

2 3

Weird filter behaviour with ldapsearch
by Jukka Hienola 27 Mar '07

27 Mar '07

Hi! I just encountered that my master server behaves in strange way. In requests to my slave servers, I get desired result: ldapsearch -x -ZZ -h slave.server.net \ "(&(objectclass=posixgroup)(cn=groupname))" cn -LLL dn: cn=groupname,ou=groups,dc=server,dc=net cn: groupname when same request on master server doesn't return anything, UNLESS I write e.g. ldapsearch -x -ZZ -h master.server.net \ "(&(objectclass=posixgroup)(cn=g*e))" cn -LLL or ldapsearch -x -ZZ -h master.server.net \ "(&(objectclass=posixgroup)(cn=g*))" cn -LLL ldapsearch -x -ZZ -h master.server.net \ "(&(objectclass=posixgroup)(cn=*e))" cn -LLL but e.g. ldapsearch -x -ZZ -h master.server.net \ "(&(objectclass=posixgroup)(cn=gr*))" cn -LLL or (cn=*me), (cn=gro*), (cn=*ame) etc. fails. Master and all slaves have in slapd.conf index cn eq,pres,sub I'm pretty sure that this has been working also on my master server. Also my master and slae servers share same ACL definitions. Any ideas what could cause this behaviour?? Same problem exists when trying to read data from directory in PHP script. Jukka -- IT Services Manager, Department of Physical Sciences, University of Helsinki, hienola at physics helsinki fi, tel. +358 (0)9 191 50713, fax. +358 (0)9 191 50610

2 1

Use of SASL and Cross Compile openldap libraries
by Tanuj Agrawal 26 Mar '07

26 Mar '07

Can someone tell me where does openLDAP uses SASAL libraries ? Is it just the libraries annd clients/tools section that use sasl ? In cross-compiling openLDAP what all are supported as hosts. --------------------------------- It's here! Your new message! Get new email alerts with the free Yahoo! Toolbar.

2 1

slurpd vs ldapsync
by Michael Pelletier 26 Mar '07

26 Mar '07

Hello, I was wondering if someone could give a quick summary comparing these two. Are there any benefits going with either one? Thanks, Michael Pelletier Senior Linux Systems Administrator / Programmer INTECH (Enhanced Investment Technologies, LLC) http://www.intechjanus.com/ This e-mail transmission contains information intended only for the use of the recipient(s) named above. Further, it contains information that may be privileged and confidential. If you are not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this message (including any attachments) is strictly prohibited. If you have received this e-mail in error, please notify the sender by reply e-mail and then delete this message from your mail system. Thank you for your compliance.

6 9

Re: Expected behavior of mirrormode
by Howard Chu 22 Mar '07

22 Mar '07

Software usage questions don't belong on the -devel list. Jesse W. Hathaway wrote: > I am testing the new mirromode feature in 2.4.4alpha and have run > into some unexpected behavior: > > 1) If mirrormode is on in the config when slapd starts it fails to > synchronize with the producer, this is unexpected behavior > > syncrepl rid=545 > provider=ldap://ns3 > type=refreshAndPersist > searchbase="dc=chappy,dc=com" > schemachecking=off > bindmethod=simple > binddn="cn=admin,dc=chappy,dc=com" > credentials=secret > > mirrormode on > > > 2) If mirrormode is off in the config when the consumer slapd > starts the consumer slapd synchronizes with the producer, if > mirrormode is then turned on dynamically, synchronization > continues and the consumer is writable by anyone, this is > expected behavior > > 3) After mirror mode is set dynamically, if the consumer slapd > is restarted, then the consumer will no longer sync with the > producer, this is unexpected behavior > > Are these bugs or by design? > > thanks, Jesse > > -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: back-sql - table lock
by Howard Chu 22 Mar '07

22 Mar '07

This question does not relate to OpenLDAP software development, it's a usage question. It belongs on the openldap-software list, not the -devel list. marek-openldap wrote: > Hi > > I successfuly created connection from OpenLDAP to my Informix database. > I can see everything in LDAP Browser:) > I have noticed that when slapd is running I cannot insert data into > table using sql client. I get error from my db: > 243: Could not position within a table (user). > 113: ISAM error: the file is locked. > > Is there any lock or transaction isolation level problem? -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

LDAP_CONTROL_PAGED control
by Vincent MATHIEU 22 Mar '07

22 Mar '07

I try to do a search in an openldap server. This search can return a large number of entries (> 30 000) ; the sizelimit parameter in slapd.conf is set to 2100. I use Net::LDAP perl module, LDAP_CONTROL_PAGED control and a code like the example in paged.pm (http://search.cpan.org/~gbarr/perl-ldap/lib/Net/LDAP/Control/Paged.pm). I set size parameter of Net::LDAP::Control::Paged to 1000. openldap return's 1000 entries with 2 first search call, but an error code 4 (Sizelimit exceeded) occurs in third search call : conn=6 op=1 SRCH base="ou=people,dc=univ-nancy2,dc=fr" scope=2 deref=2 filter="(objectClass=inetOrgPerson)" conn=6 op=1 SRCH attr=cn sn givenName mail conn=6 op=1 SEARCH RESULT tag=101 err=0 nentries=1000 text= conn=6 op=2 SRCH base="ou=people,dc=univ-nancy2,dc=fr" scope=2 deref=2 filter="(objectClass=inetOrgPerson)" conn=6 op=2 SRCH attr=cn sn givenName mail conn=6 op=2 SEARCH RESULT tag=101 err=0 nentries=1000 text= conn=6 op=3 SRCH base="ou=people,dc=univ-nancy2,dc=fr" scope=2 deref=2 filter="(objectClass=inetOrgPerson)" conn=6 op=3 SRCH attr=cn sn givenName mail conn=6 op=3 SEARCH RESULT tag=101 err=4 nentries=100 text= Is it the normal behaviour ? How can I do to get all entries from ou people ? Thank's Vincent -- Vincent MATHIEU Université Nancy 2 - CRI Equipe système et réseaux tel : 03 54 50 36 56 coordonnées : http://www.univ-nancy2.fr/ANNUAIRE/PERS/detail_pres.php?uid=vmathieu

4 5

Error: Objectclass: value #1 invalid per syntax
by shilpa muramkar 22 Mar '07

22 Mar '07

hi, i had recently applied for OIDs with IANA. and they have sent me a Personal Enterprise Number(PEN) (consider it as "pqrs"). The prefix they have sent is 1.3.6.1.4.1 "for attributes i have used-----"1.3.6.1.4.1.pqrs.1 "for objectclasses i have used----"1.3.6.1.4.1.pqrs.2 Using that i have created OIDs for my purpose. my schema file looks like below. attributetype( 1.3.6.1.4.1.pqrs.1.12 NAME 'outofofficeon' DESC 'Specifies if the user is out of office or not' SYNTAX 'cis' SINGLE-VALUE ) attributetype( 1.3.6.1.4.1.pqrs.1.13 NAME 'timezone' DESC 'Time zone of the entry' SYNTAX 'cis' SINGLE-VALUE ) attributetype( 1.3.6.1.4.1.pqrs.1.14 NAME 'shippingaddress' DESC 'Shipping address of the entry' SYNTAX 'cis' MULTI-VALUE ) objectclass( 1.3.6.1.4.1.pqrs.2.1 NAME 'ssausergroup' DESC 'SSA Usergroup' SUP groupofuniquenames STRUCTURAL MAY( ssarole $ ssaugtype ) ) objectclass( 1.3.6.1.4.1.pqrs.2.2 NAME 'ssabase' DESC 'SSA Base' SUP top STRUCTURAL MUST( uid $ cn $ sn ) ............................. ......................... ........................... now i am trying to run an LDIF file which contains a sample data like dn: uid=admin,ou=ssausers,dc=ssainternal,dc=net changetype: add objectClass: top objectClass: ssauser objectClass: ssantuser uid: admin cn: admin userpassword: admin ssarole: administrator ssarole: superadministrator sn: admin preferredlanguage: en_US ntuserdomainid: ssainternal using the ldapadd command....all the data gets added except for the above one. It gives me an error saying ldap_add: Invalid syntax(21) additional info: objectClass: value #1 invalid per syntax. Does it mean that the objectclasses i have mentioned in the above ldif entry are causing the problem?? i.e "ssauser", "ssantuser"????? Is it that the definitions of these objectclasses in schema is not proper?? Or has it got anything to do with the way i have arranged the OIDs? kindly help me out with this.......... waiting fo rur reply shilpa

4 6

Re: connection lost
by Dave Horsfall 21 Mar '07

21 Mar '07

On Wed, 21 Mar 2007, koenigsmann(a)gutenberg-rz.de wrote: > Bis Dienstag, den 2. April bin ich leider nicht erreichbar. Sollte Ihr > Anliegen nicht so lange warten können, wenden Sie sich bitte an unsere > Hotline unter der Rufnummer 0511-5181188. [...] Can anyone translate this, or is it just another of those stupid Out-of-Office responders? -- Dave Horsfall DTM VK2KFU daveh(a)ci.com.au Ph: +61 2 9552-5509 (d) -5500 (sw) Corinthian Eng'ng P/L, Ste 54 Jones Bay Whf, 26-32 Pirrama Rd, Pyrmont 2009, AU

2 2

connection lost
by Hans Moser 21 Mar '07

21 Mar '07

Hi! Can anyone tell from the log extract why "connection lost" happened? Is there a server error visible or did the client close the connection? The server (2.3.27) is a pure proxy with only a meta backend. Mar 21 08:01:28 exts098 local4:debug slapd[430186]: daemon: activity on 1 descriptor Mar 21 08:01:28 exts098 local4:debug slapd[430186]: daemon: listen=6, new connection on 7 Mar 21 08:01:28 exts098 local4:debug slapd[430186]: daemon: added 7r Mar 21 08:01:28 exts098 local4:debug slapd[430186]: conn=29179 fd=7 ACCEPT from IP=10.17.99.14:47825 (IP=0.0.0.0:3389) Mar 21 08:01:28 exts098 local4:debug slapd[430186]: daemon: select: listen=6 active_threads=0 tvp=NULL Mar 21 08:01:29 exts098 local4:debug slapd[430186]: daemon: activity on 1 descriptor Mar 21 08:01:29 exts098 local4:debug slapd[430186]: daemon: activity on: Mar 21 08:01:29 exts098 local4:debug slapd[430186]: 7r Mar 21 08:01:29 exts098 local4:debug slapd[430186]: Mar 21 08:01:29 exts098 local4:debug slapd[430186]: daemon: read activity on 7 Mar 21 08:01:29 exts098 local4:debug slapd[430186]: connection_get(7): got connid=29179 Mar 21 08:01:29 exts098 local4:debug slapd[430186]: connection_read(7): checking for input on id=29179 Mar 21 08:01:29 exts098 local4:debug slapd[430186]: ber_get_next on fd 7 failed errno=0 (Error 0) Mar 21 08:01:29 exts098 local4:debug slapd[430186]: connection_read(7): input error=-2 id=29179, closing. Mar 21 08:01:29 exts098 local4:debug slapd[430186]: connection_closing: readying conn=29179 sd=7 for close Mar 21 08:01:29 exts098 local4:debug slapd[430186]: connection_close: conn=29179 sd=7 Mar 21 08:01:29 exts098 local4:debug slapd[430186]: =>meta_back_conn_destroy: fetching conn=29179 DN="" Mar 21 08:01:29 exts098 local4:debug slapd[430186]: daemon: removing 7 Mar 21 08:01:29 exts098 local4:debug slapd[430186]: conn=29179 fd=7 closed (connection lost) Mar 21 08:01:29 exts098 local4:debug slapd[430186]: daemon: select: listen=6 active_threads=0 tvp=NULL Mar 21 08:01:29 exts098 local4:debug slapd[430186]: daemon: activity on 1 descriptor Mar 21 08:01:29 exts098 local4:debug slapd[430186]: daemon: waked Mar 21 08:01:29 exts098 local4:debug slapd[430186]: daemon: select: listen=6 active_threads=0 tvp=NULL Thanks! Hans

2 1

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-software