openldap-software

openldap-software@openldap.org

2719 discussions

need help about rwm
by Gennady G. Marchenko 16 Aug '09

16 Aug '09

Good day sirs! Please help me with understanding rwm functionality, is it real with rwm get with one search filter some fields from one dn and some field from another? I have 2 DNs: cn=test,ou=mail,dc=exapmle,dc=org mail: test(a)example.org uid=test,ou=users,dc=example,dc=org uidNumber: 11 mailhost: bla-bla I want to get merge of these DNs i.e. something like this: uid=test,dc=example,dc=org cn=test mail: test(a)example.org uidNumber: 11 mailhost: bla-bla Can I done it with rwm or no? Thanks for help, Gennady.

1 0

LDAP_OPT_X_SASL_AUTHCID and LDAP_OPT_X_SASL_AUTHZID
by Michael Ströder 16 Aug '09

16 Aug '09

HI! what is returned by ldap_get_options(LDAP_OPT_X_SASL_AUTHCID,[..]) ldap_get_options(LDAP_OPT_X_SASL_AUTHZID,[..]) I'm getting results with python-ldap which look strange to me after doing a SASL bind. But I'm not sure what should be returned. Ciao, Michael.

3 8

Determine Kerberbos principal name used with SASL/GSSAPI
by Michael Ströder 12 Aug '09

12 Aug '09

HI! Is there any way in libldap to determine which Kerberbos principal name was actually used after a successful SASL/GSSAPI bind? Ciao, Michael.

1 0

Re: Openldap Group ACL
by Jonathan Clarke 09 Aug '09

09 Aug '09

On 07/08/2009 22:36, Jittinan Suwanrueangsri wrote: > Hi all > > I have tested acl of OpenLdap 2.4 by using following code in > slapd.conf > > > access to dn.subtree="ou=System,dc=example,dc=com" > by > group/groupOfUniqueNames/uniqueMember.regex="cn=[^,]+,ou=Groups,dc=example,dc=com" > write > by users read > > > In my directory there is a dn: cn=LdapAdmins,ou=Groups,dc=example,dc=com > but from log message which is shown below a dn does not match pattern > cn=[^,]+,ou=Groups,dc=example,dc=com because it get read > permission.After that I change acl to > > access to dn.subtree="ou=System,dc=example,dc=com" > by > group/groupOfUniqueNames/uniqueMember.regex="cn=LdapAdmins,ou=Groups,dc=example,dc=com" > write > by users read > > It work correctly by get write permission > > Because I use group/groupOfUniqueNames/uniqueMember.regex .It should > treat "cn=[^,]+,ou=Groups,dc=example,dc=com" as regular expression > pattern but seem that it just exact pattern.Why? Who can explain? According to slapd.access(5), regex expansion is not supported for the group clause in ACLs. Only submatch replacement is possible. To implement this access policy, you may want to check out sets. See http://www.openldap.org/faq/data/cache/1133.html Regards, Jonathan > Log level 128 > > => access_allowed: read access to > "uid=authenticate,ou=System,dc=example,dc=com" "objectClass" requested > => dn: [2] ou=system,dc=example,dc=com > => acl_get: [2] matched > => acl_get: [2] attr objectClass > => slap_access_allowed: result not in cache (objectClass) > => acl_mask: access to entry > "uid=authenticate,ou=System,dc=example,dc=com", attr "objectClass" requested > => acl_mask: to value by "uid=matt,ou=users,dc=example,dc=com", (=0) > <= check a_group_pat: cn=[^,]+,ou=Groups,dc=example,dc=com > /=> acl_string_expand: pattern: cn=[^,]+,ou=Groups,dc=example,dc=com > => acl_string_expand: expanded: cn=[^,]+,ou=Groups,dc=example,dc=com/ > <= check a_dn_pat: users > <= acl_mask: [2] applying read(=rscxd) (stop) > <= acl_mask: [2] mask: read(=rscxd) > => slap_access_allowed: read access granted by read(=rscxd) > => access_allowed: read access granted by read(=rscxd) > -- -------------------------------------------------------------- Jonathan Clarke - jonathan(a)phillipoux.net -------------------------------------------------------------- Ldap Synchronization Connector (LSC) - http://lsc-project.org --------------------------------------------------------------

1 0

Add DSML interface to OpenLDAP
by Roberto Barrero 06 Aug '09

06 Aug '09

Hi all, I'm beginner in OpenLDAP and I've a question... I've an OpenLDAP server installed, and I want enable DSML interface to access data using it since my client. How I can install this interface? Thanks in advance -- ----------------------------------- Roberto Barrero de Uña ----------------------------------- Experience Ingenieria y Servicios Parque Tecnológico de Boecillo Edificio Centro, módulo 202 47151 Boecillo (Valladolid) ---------------------------------- correo: rbarrero(a)experienceis.com Tfno: +34 983 54 98 48 Móvil: +34 670 86 64 79

3 2

ldapsearch with password always returns invalid credentials
by Subbarao Karanam 05 Aug '09

05 Aug '09

hello, When I did a ldapsearch always gives me "Invalid credentials Error". Really fed up about this as I'm not getting any help.. When I did a ldapsearch with ldapsearch -x -h crmsldap.agilent -p 389 -s base -b 'ou=people,dc=crmsldap,dc=company' "(&(objectClass=*))" # extended LDIF # # LDAPv3 # base <ou=people,dc=crmsldap,dc=company> with scope base # filter: (&(objectClass=*)) # requesting: ALL # # people, crmsldap.agilent dn: ou=people,dc=crmsldap,dc=company objectClass: top objectClass: organizationalUnit ou: people # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 Second Command ldapsearch -x -h crmsldap.agilent -p 389 -s base -b 'ou=people,dc=crmsldap,dc=company "(&(objectClass=*))" -w admin + ldap_bind: Invalid credentials (49) Can you please help me where is the problem...Attached is the slapd.conf, my users ldif file... Thanks Subbarao

4 3

Stability of autogroup overlay with OpenLDAP < 2.4.18
by Ryan Steele 01 Aug '09

01 Aug '09

Is the autogroup overlay considered stable for use with versions of OpenLDAP earlier than 2.4.18? I know it's being used on earlier versions (as 2.4.18 is not considered stable yet), but I've also seen some reports of basic search functionality getting clobbered after doing so. According to ITS#6227, that bug was fixed, but I'd like to confirm that the overlay does at least work before investing the time (however short it may be) to compile it and package it in with OpenLDAP locally for internal use. I appreciate any feedback. Regards, Ryan

3 3

LDAP Process "hangs"
by Andi Gorhan 31 Jul '09

31 Jul '09

Hello, I have a question regarding the LDAP search mechanism. I have 2 Master Server and 1 Slave Server. All Servers are in Sync. The second Master is a standby Master which is active if the first one goes down. Now I want to test a failover szenario and shut down the first Master. The second one is active now and the Slave is now in Sync with the second one. After rebooting the first Master I started LDAP and no error occured. LDAP is up and running. I tested the Server with some ldapsearches and everything works fine except the search with filters. If I do a search for example "uid=abc*" LDAP hangs and does not respond. Searching for exact DNs are working fine. What happended here? Hopefully anybody can help me. Thanks a lot. Best regards, Andi

4 3

BT IP Exchange interconnect
by Gavin Henry 31 Jul '09

31 Jul '09

Hi All, Has anyone passed the tests using OpenSIPS: http://www.btwholesale.com/pages/static/Products/Converged_Voice/IP_Exchang… Thanks. -- http://www.suretecsystems.com/services/openldap/ http://www.suretectelecom.com -- http://www.suretecsystems.com/services/openldap/ http://www.suretectelecom.com

2 1

correctly setting DB_CONFIG
by Peter Clark 30 Jul '09

30 Jul '09

Hello, I have gotten myself a bit confused. I have gone over the the FAQ-O-Matic entries on setting DB_CONFIG: http://www.openldap.org/faq/data/cache/1072.html http://www.openldap.org/faq/data/cache/1073.html http://www.openldap.org/faq/data/cache/1075.html I am working with a rather small ldap database (roughtly 3000 entries). When I look at top I see slapd grabbing 525 MB of memeory: PID USERNAME THR PRI NICE SIZE RES STATE C TIME WCPU COMMAND 653 ldap 13 44 0 525M 27604K ucond 1 0:00 0.00% slapd Is slapd really using that or is that just reserved memory? When I db_stat my cache directory I think I am seeing that it is using 62 MB of cache (this is Delta-Sync Master, does that matter?): <snip> db_stat-4.6 -h /var/db/openldap-data -m 62MB 513KB 900B Total cache size 1 Number of caches 1 Maximum number of caches 62MB 520KB Pool individual cache size 0 Maximum memory-mapped file size 0 Maximum open file descriptors 0 Maximum sequential buffer writes 0 Sleep after writing maximum sequential buffers 0 Requested pages mapped into the process' address space 592172 Requested pages found in the cache (99%) 1204 Requested pages not found in the cache 109 Pages created in the cache 1204 Pages read into the cache 8640 Pages written from the cache to the backing file 0 Clean pages forced from the cache 0 Dirty pages forced from the cache 0 Dirty pages written by trickle-sync thread 1313 Current total page count 1313 Current clean page count 0 Current dirty page count 8191 Number of hash buckets used for page location 594689 Total number of times hash chains searched for a page 2 The longest hash chain searched for a page 615710 Total number of hash chain entries checked for page 0 The number of hash bucket locks that required waiting (0%) 0 The maximum number of times any hash bucket lock was waited for (0%) 0 The number of region locks that required waiting (0%) 0 The number of buffers frozen 0 The number of buffers thawed 0 The number of frozen buffers freed 1381 The number of page allocations 0 The number of hash buckets examined during allocations 0 The maximum number of hash buckets examined for an allocation 0 The number of pages examined during allocations 0 The max number of pages examined for an allocation 8 Threads waited on page I/O </snip> When different indices, id2entry and dn2entry flies are all quite small (though _db.003 is 63 mb): ls -alh /var/db/openldap-data/ total 28924 drwx------ 3 ldap ldap 1.0K Jul 27 10:57 . drwxr-xr-x 10 root wheel 512B Jul 29 13:56 .. -rw-r--r-- 1 ldap ldap 1.3K Sep 16 2008 DB_CONFIG -rw------- 1 ldap ldap 24K Jul 27 10:55 __db.001 -rw------- 1 ldap ldap 560K Jul 27 10:55 __db.002 -rw------- 1 ldap ldap 63M Jul 27 10:55 __db.003 -rw------- 1 ldap ldap 3.0M Jul 27 10:55 __db.004 -rw------- 1 ldap ldap 464K Jul 27 10:55 __db.005 -rw------- 1 ldap ldap 32K Jul 27 10:55 __db.006 drwx------ 2 ldap ldap 512B Jul 27 10:57 accesslog -rw------- 1 ldap ldap 36K Jul 29 11:12 accountStatus.bdb -rw-r--r-- 1 ldap ldap 4.0K Jul 27 10:57 alock -rw------- 1 ldap ldap 956K Jul 29 11:12 cn.bdb -rw------- 1 ldap ldap 556K Jul 29 11:12 dn2id.bdb -rw------- 1 ldap ldap 84K Jul 29 11:12 entryCSN.bdb -rw------- 1 ldap ldap 72K Jul 29 11:12 entryUUID.bdb -rw------- 1 ldap ldap 36K Jul 29 11:12 gidNumber.bdb -rw------- 1 ldap ldap 544K Jul 29 11:12 givenName.bdb -rw------- 1 ldap ldap 2.5M Jul 29 11:12 id2entry.bdb -rw------- 1 ldap ldap 10M Jul 5 18:20 log.0000000004 -rw------- 1 ldap ldap 10M Jul 29 11:12 log.0000000005 -rw------- 1 ldap ldap 8.0K Jul 29 10:57 lookupKey.bdb -rw------- 1 ldap ldap 8.0K Oct 3 2008 lookupName.bdb -rw------- 1 ldap ldap 948K Jul 29 11:12 mail.bdb -rw------- 1 ldap ldap 36K Jul 29 11:12 mailForwardingAddress.bdb -rw------- 1 ldap ldap 48K Jul 29 11:12 mailQuotaSize.bdb -rw------- 1 ldap ldap 220K Jul 29 11:12 objectClass.bdb -rw------- 1 ldap ldap 596K Jul 29 11:12 sn.bdb -rw------- 1 ldap ldap 628K Jul 29 11:12 uid.bdb -rw------- 1 ldap ldap 72K Jul 29 11:12 uidNumber.bdb -rw------- 1 ldap ldap 72K Jul 29 11:12 userPassword.bdb Here is my DB_CONFIG as it stands: # cache set_cachesize 0 52428800 0 # Data Directory #set_data_dir db # Transaction Log settings set_lg_regionmax 1048576 set_lg_max 10485760 set_lg_bsize 2097152 # Delete transaction log files as soon as contents are checkpointed and are no longer needed. set_flags DB_LOG_AUTOREMOVE I have the cache set to 50mb but I do not think I have this correct. Entry cache vs IDL cache vs BDB cache. Any help straightening this out would be appreciated. Peter

2 1

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-software