openldap-software

openldap-software@openldap.org

2719 discussions

Re: slapd-meta and paged results control
by Quanah Gibson-Mount 05 May '09

05 May '09

--On Tuesday, May 05, 2009 9:46 PM +0200 Lajos Boróczki <boroczki.lajos(a)gmail.com> wrote: > I forgot to include: 2.4.11 Please keep your replies on the list. I'd suggest you try a newer release of OpenLDAP (2.4.16 is the current stable release). --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

sync problem
by Leonardo Carneiro 05 May '09

05 May '09

Hi everyone, i'm no ldap expert at all. in fact i'm very noob. a few months ago i'd configured 2 ldap servers. they were set in 2 separated networks, and syncronized via a openvpn link. all was working ok when when about a month ago they stop syncing. the replogfile is empty. main server (piece of slapd.conf): replogfile /var/lib/ldap/openldap-master-replog replica host=192.168.0.2:389 binddn="cn=root,dc=dominio,dc=com,dc=br" bindmethod=simple credentials=[pass] secondary server (piece of slapd.conf) updatedn "cn=root,dc=dominio,dc=com,dc=br" updateref ldap://192.168.1.2:380 Sorry about my poor english, i'm from brasil. -- *Leonardo de Souza Carneiro* *Veltrac - Tecnologia em Logística.* lscarneiro(a)veltrac.com.br <mailto:lscarneiro@veltrac.com.br> http://www.veltrac.com.br <http://www.veltrac.com.br/> /Fone Com.: (43)2105-5600/ /Av. Higienópolis 1601 Ed. Eurocenter Sl. 803/ /Londrina- PR/ /Cep: 86015-010/ /Esta mensagem pode conter informação confidencial e/ou privilegiada./ /Se você recebeu esta mensagem por engano, por favor avise imediatamente o remetente, respondendo o e-mail e em seguida apague-o./ /This message may contain confidential and/or privileged information./ /If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message./

3 4

Inquiry Regarding Force Change Password
by Carlo Camerino 04 May '09

04 May '09

Hi Everyone, I'm new to openldap and was just wondering if OpenLDAP implements force change password policy? Does it expire the password of the user after a specified number of days? Also can I specify a list of commonly used passwords so that users cannot use it? Thanks Carlo

3 2

openldap2.4.16 and BDB4.7 not sync configured as provider/consumer
by Rodrigo Costa 04 May '09

04 May '09

openldap software, Sometime ago I open the ITS#5860 about some memory cache limitations not being respected by config files. Even this issue was solved when I tried to configured openldap to use replication(syncrepl) the system never enter into sync and the behavior appears similar to the ITS#5860 bug. The system start to sync and in the provider(master) I see the query for the DB sync. But the consumer(slave) memory consumption start to grow very fast making me to constrain much more the dncachesize to a 1/10 of the size of the provider(master) where at least system doesn't crash at consumer. Since changes were done in the openldap 2.4.16 I download and made tests with this version. I get into the same behavior with consumer(slave) never getting in sync with provider(master). The behaviors are : 1) Consumer(slave) start query to the provider(master) DB; 2) Memory allocation and number of threads in the provider(master) start to increase as expected; 3) dncachesize directive into provider(master) controls as expected the maximum memory to be allocated by slapd process in provider(master); 4) Consumer(slave) consumer memory in a much faster pace. dncachesize configured to 1/10 of provider(master) to avoid memory allocation problems; 5) After sometime the consumer(slave) CPU usage maintains in 200%. Provider(master) stays with low CPU usage, around 1 to 3 %; 6) A new provisioning in provider(master) isn't propagated to consumer(slave); 7) Bases never get in sync and CPU usage in consumer still high. Queries to provider(master) are answer very fast and even multiple individual queries to consumer(slave) are also answer in reasonable time. It looks like could exist certain issue in the replication logic where some processing dead loop could be found by the replication consumer(slave) logic. The newest openldap version and Berkeley DB 4.7 with all patches were compiled in the platform running the code. Any idea about this behavior? Thanks, Rodrigo.

3 2

Another DIT as subtree
by Diego Woitasen 03 May '09

03 May '09

Hi, I have an OpenLDAP 2.3.x server with back-bdb already populated. Is there a way to proxy searchs and show them as subtree of my DIT? For example, all the contents of ou=anotherldap,dc=example,dc=com must be fetched from a remote server and the remaining of the tree fetched locally from bdb. I was reading about translucent, back-ldap, back-meta and no one looks like I want. regards, Diego -- Diego Woitasen XTECH - Soluciones Linux para empresas (54) 011 5219-0678

2 1

slapd leaking memory on i386?
by John Morrissey 01 May '09

01 May '09

2.4.16 (with BDB4.7 + patches and the POSIX threads build options) has been stable on amd64/x86_64 for us, but I'm encountering problems with 2.4.16 on i386. slapd will run happily for several hours at a RSS of ~1.2GB, but then will suddenly gobble memory until it hits the i386 address space limit of 3GB and dies due to random segfaults as memory allocation fails. BDB caches are set to ~1.25GB total and the entry cache to 10,000 entries. I'm not sure how long it takes slapd to consume the extra 2GB of memory, but it's definitely less than 20 minutes according to sar(1). I have a couple core files from when this happens. Are there structures that are likely suspects for unchecked growth (the entry and BDB caches, for example) that I can poke at with a debugger to get an idea what's going on? john -- John Morrissey _o /\ ---- __o jwm(a)horde.net _-< \_ / \ ---- < \, www.horde.net/ __(_)/_(_)________/ \_______(_) /_(_)__

3 9

pwdPolicyAttribute not found any where
by Rahima Shaheen 30 Apr '09

30 Apr '09

Hi, I am facing a problem. I use openldap-2.2.29-db-4.3.29-openssl-0.9.8a-win32_Setup.exe and want to implement. I did 2 ou. a. ou= policies b. ou= developer 1 default password policy: cn=default,ou=policies,dc=my-domain,dc=com. Now I want to implement pwdPolicyAttribute. I make a ldif like: dn: cn=shaheen,ou=FPdeveloper,dc=my-domain,dc=com objectclass: top objectclass: person cn: shaheen sn: rahima title: FPdeveloper Developer userPassword: pass#123 pwdPolicySubentry: cn=default,ou=policies,dc=my-domain,dc=com but it gives error undefined attribute type. What is the wrong with me? My assumption is pwdPolicyAttribute is not Created. But whenever I want to create the schema an error attribute type is operational. What can I do. I also could not uncomment overlay in slapd. Please help me. -- Shaheen

2 1

rwn rewrite
by Adam Leach 29 Apr '09

29 Apr '09

All, I'm needing to use the rwn overlay to map a DN that uses uid= to a cn= so that when someone searches for cn=jsmith,dc=example,dc=com but the actual DN is uid=jsmith,dc=example,dc=com. Any ideas/suggestions? Thanks -- Adam Leach BS Computer/Electrical Engineering West Virginia University Systems Administrator - Raytheon

1 0

Valgrind reporting an invalid file descriptor
by Matthijs Mohlmann 29 Apr '09

29 Apr '09

Hello all, I'm writing an program with LDAP but probably something goes wrong when I try to shutdown the connection. First I call ldap_initialize, after that I call a bind operation. (Using function ldap_bind_ext) That goes all very well. Then I try to close the connection with ldap_unbind_ext. This goes according to the return value ok, but when running in valgrind I see a Warning: invalid file descriptor -1 in syscall close() ==4733== Warning: invalid file descriptor -1 in syscall close() ==4733== at 0x40007F2: (within /lib/ld-2.9.so) ==4733== by 0x4300BB0: ber_int_sb_close (in /usr/lib/liblber-2.4.so. 2.4.1) ==4733== by 0x43011AB: ber_sockbuf_free (in /usr/lib/liblber-2.4.so. 2.4.1) ==4733== by 0x404AEAE: ldap_ld_free (in /usr/lib/libldap_r-2.4.so. 2.4.1) ==4733== by 0x404AF55: ldap_unbind_ext (in /usr/lib/ libldap_r-2.4.so.2.4.1) ==4733== by 0x804A167: main (ldap.cpp:283) Is this a bug in the LDAP library, or did I forgot a call to something ? According to the documentation (man 3 ldap_unbind_ext) is this the only call I need to do. Can somebody enlighten me here ? Regards, Matthijs Mohlmann

1 0

how implement pwdpolicy
by Rahima Shaheen 28 Apr '09

28 Apr '09

Hi, I am very new to open ldap. I can run slap an add edit new entry. Now I want to implement pwdpolicy. I tried it several times. I like to describe what I said. 1. run slapd without modifying anything. 2. create an ou=policies. Script as following dn: ou=policies,dc=my-domain,dc=com objectClass: organizationalUnit objectClass: top ou: policies 3. write policy.schema. 4. include policy.schema; but overlay is not added. run slapd again. In the core.schema attributetype userpassword was comment out 5. Now I want to create policy.ldif. Script dn: cn=default,ou=policies,dc=my-domain,dc=com cn: default objectClass: pwdPolicy objectClass: person objectClass: top pwdAllowUserChange: TRUE pwdAttribute: userPassword pwdCheckQuality: 2 pwdExpireWarning: 600 pwdFailureCountInterval: 30 pwdGraceAuthNLimit: 5 pwdInHistory: 5 pwdLockout: TRUE pwdLockoutDuration: 0 pwdMaxAge: 0 pwdMaxFailure: 5 pwdMinAge: 0 pwdMinLength: 5 pwdMustChange: FALSE pwdSafeModify: FALSE #sn: 'dummy value' objectClass: organizationalUnit It gives an error "Invalid syntax (21) pwdAttribute: value #0 invalid per syntax. Why it gives such error? My assumption is ppolicy.schema attribute is not created successfully. Another point in core.schema attributeType; userPassword is comment out. If I uncomment it. slapd -d 1 gives an duplicate attribute type. Give a solution please. Now my question is a. how I am sure that my PPolicy.schema is created? I don't have any ppolicy.la b. what does do policy.la.

5 5

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-software