openldap-technical September 2010

openldap-technical@openldap.org

111 participants
113 discussions

Setting up a chain overlay
by Bram Cymet 22 Sep '10

22 Sep '10

Hi, I am trying to setup a chain overlay to allow writes to a read-only slave to be chained up to the master. The closest ldif file I could figure out to update the cn=config directory was: dn: olcOverlay={0}chain,olcDatabase={-1}frontend,cn=config changetype: add objectClass: olcOverlayConfig objectClass: olcChainConfig olcOverlay: {0}chain dn: olcDatabase=ldap,olcOverlay={0}chain,olcDatabase={-1}frontend,cn=config changetype: add objectClass: olcLDAPConfig objectClass: olcChainDatabase olcDBURI:ldap://10.1.0.3/ olcDbIDAssertBind: bindmethod=simple binddn="cn=admin,dc=roessner-net,dc=de" credentials=********** mode=self This works until I have to restart the slave ldap server because this is an invalid config. Can anyone let me know an ldif file to set up the chain to the master? Or at least point me to the right direction. Thanks, -- Bram Cymet Software Developer Canadian Bank Note Co. Ltd. Cell: 613-608-9752

4 7

Re: Problem of getpeereid.c:38: error: storage size of ‘peercred’ isn’t known
by Gavin Henry 22 Sep '10

22 Sep '10

Simply add CPPFLAGS=-D_GNU_SOURCE Don't email people directly :-) ----- Original Message ----- Hey , when i configure LDAP i got this error "getpeereid.c:38: error: storage size of ‘peercred’ isn’t known " also i saw your answer Presumably a dup of ITS#5464. > Workaround: Compile with CPPFLAGS=-D_GNU_SOURCE. what is the Presumably ? can you pls give me the full command that should i follow ??? Thx !! -- Kind Regards, Gavin Henry. OpenLDAP Engineering Team. E ghenry(a)OpenLDAP.org Community developed LDAP software. http://www.openldap.org/project/

1 0

Replicating from a mirrormode pair to a read-only server
by Andrew Findlay 22 Sep '10

22 Sep '10

I am updating an OpenLDAP installation at present, and one of the improvements is to introduce a pair of master servers running in mirror mode. There will be several read-only servers as well, and I would like those to replicate from whichever master is currently available. I did the obvious thing, and put two syncrepl clauses in the read-only server's config - one for each master server. Starting with an empty database, the read-only server chews CPU badly and generates thousands of log messages like this: Sep 2 14:57:34 nis0 slapd[9257]: => bdb_idl_insert_key: c_put id failed: DB_LOCK_DEADLOCK: Locker killed to resolve a deadlock (-30994) Sep 2 14:57:38 nis0 slapd[9257]: => bdb_idl_delete_key: c_del id failed: DB_LOCK_DEADLOCK: Locker killed to resolve a deadlock (-30994) Sep 2 14:57:38 nis0 slapd[9257]: conn=-1 op=0: attribute "entryCSN" index delete failure Sep 2 14:57:38 nis0 slapd[9257]: => bdb_idl_insert_key: c_put id failed: DB_LOCK_DEADLOCK: Locker killed to resolve a deadlock (-30994) Sep 2 14:57:38 nis0 slapd[9257]: => bdb_idl_delete_key: c_del id failed: DB_LOCK_DEADLOCK: Locker killed to resolve a deadlock (-30994) Sep 2 14:57:38 nis0 slapd[9257]: conn=-1 op=0: attribute "entryCSN" index delete failure .... Sep 2 14:56:10 nis0 slapd[4953]: => bdb_idl_insert_key: c_put id failed: DB_LOCK_DEADLOCK: Locker killed to resolve a deadlock (-30994) Sep 2 14:56:10 nis0 slapd[4953]: => bdb_idl_insert_key: c_put id failed: DB_LOCK_DEADLOCK: Locker killed to resolve a deadlock (-30994) Sep 2 14:56:11 nis0 slapd[4953]: => bdb_idl_insert_key: c_put id failed: DB_LOCK_DEADLOCK: Locker killed to resolve a deadlock (-30994) Sep 2 14:56:11 nis0 slapd[4953]: conn=-1 op=0: attribute "localAttribute" index add failure Sep 2 14:56:11 nis0 slapd[4953]: => bdb_idl_insert_key: c_put id failed: DB_LOCK_DEADLOCK: Locker killed to resolve a deadlock (-30994) Sep 2 14:56:11 nis0 slapd[4953]: => bdb_idl_insert_key: c_put id failed: DB_LOCK_DEADLOCK: Locker killed to resolve a deadlock (-30994) It is very likely that each syncrepl connection will be retrieving the same entries at about the same time, so there is clearly potential for collisions. Question: is this topology sensible? If it is expected to work I will gather some debug data for an ITS. If not, I will have to drop back to plan B... OpenLDAP 2.4.22 with BerkeleyDB.4.8 running on SLES 10.3 i586 Thanks Andrew -- ----------------------------------------------------------------------- | From Andrew Findlay, Skills 1st Ltd | | Consultant in large-scale systems, networks, and directory services | | http://www.skills-1st.co.uk/ +44 1628 782565 | -----------------------------------------------------------------------

3 8

slapo-rwm : concatenate rule
by Anthony Milan 21 Sep '10

21 Sep '10

Hi, I would like to create a rewrite rule with slapo-rwm using back-relay to concatenate two different attributes in an other one? Something like this with an approximate syntax: map attribute cn concat(givenName sn) or with Perl syntax: map attribute cn "$givenName $sn" Is it possible to do this with rewriteRules directives? Thanks for help, -- Anthony Milan

2 1

Recommended BerkeleyDB version?
by Marco Pizzoli 21 Sep '10

21 Sep '10

Hi all, I would like to know if is there a "recommended" version of BerkeleyDB to be used with OpenLDAP. Days ago, on this mailing list, I read comments about 4.8.30. On the Oracle site I see there are also: - 5.0.21 - 5.0.26 - 5.1.19 Thanks in advance Marco -- _________________________________________ Non è forte chi non cade, ma chi cadendo ha la forza di rialzarsi. Jim Morrison

3 3

Filter on higher rdn and read lower rdn attributes
by S.A. 21 Sep '10

21 Sep '10

Hello, I have a question regarding the construction of search filter (assuming that what I think is possible in LDAP). For a tree shown like below: o dc=com | o dc=xyz / | | \ ou=machines o . . . . . o ou=people / | \ uid=abby o . . o ou=xie <- OC1 / ou=options o <- OC2 / ou=theme1 o <- OC3 OC1 != OC2 != OC3 (objectclasses with different set of attributes) Assume that at uid=<name> rdn, the objectclass (OC1) has an attribute called accessFlag. Based on this accessFlag attribute value, is it possible to construct a search filter that will give us the attributes of the objectclass (OC3) with rdn ou=<theme name>? That is, I want to get the theme values of all users whose accessFlag is set to some value. Thank you!

2 3

Undefined attribute type (17)
by Michael Ostrowski 21 Sep '10

21 Sep '10

Hi, I am getting the following error when trying to modify an entry via the ldapmodify command Any help would be appreciated, Thanks, Mike c:\open-ldap\OpenLDAP>ldapmodify -f useradd1.ldif -v -D "cn=Manager,dc=loda,dc=l ocal" -w secret ldap_initialize( <DEFAULT> ) replace change-type: modify replace add: uid replace uid: larry modifying entry "cn=Larry Anderson, dc=loda, dc=local" modify complete ldap_modify: Undefined attribute type (17) additional info: change-type: attribute type undefined The LDIF file looks like dn: cn=Larry Anderson, dc=loda, dc=local change-type:modify add:uid uid:larry The current entry in the database dn: cn=Larry Anderson,dc=loda,dc=local cn: Larry Anderson objectClass: person sn:: QW5kZXJzb24gICAgICAgICAg structuralObjectClass: person entryUUID: 91801ba1-103b-4277-85fc-56dfa2ae0bd7 creatorsName: cn=Manager,dc=loda,dc=local modifiersName: cn=Manager,dc=loda,dc=local createTimestamp: 20100915201014Z modifyTimestamp: 20100915201014Z entryCSN: 20100915201014Z#000001#00#000000 <http://www.arraynetworks.net/entry.asp?PageID=395>

2 2

Re: Recommended BerkeleyDB version?
by Marco Pizzoli 21 Sep '10

21 Sep '10

Hi Quanah, thanks for the answer. If I would like to stay up-to-date with this information, where can I find it? I saw this url http://www.openldap.org/doc/admin24/appendix-recommended-versions.html but it still lists BDB versions 4.4 through 4.7. Thanks again Marco On Mon, Sep 20, 2010 at 5:35 PM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote: > --On Monday, September 20, 2010 9:35 AM +0200 Marco Pizzoli < > marco.pizzoli(a)gmail.com> wrote: > > Hi all, >> I would like to know if is there a "recommended" version of BerkeleyDB to >> be used with OpenLDAP. >> >> Days ago, on this mailing list, I read comments about 4.8.30. >> >> On the Oracle site I see there are also: >> - 5.0.21 >> - 5.0.26 >> - 5.1.19 >> > > 5.0.x has not yet been heavily tested with OpenLDAP. Recommended versions > remain 4.6.x through 4.8.x, as long as you have all patches applied for 4.6 > & 4.7. > > --Quanah > > > -- > > Quanah Gibson-Mount > Principal Software Engineer > Zimbra, Inc > -------------------- > Zimbra :: the leader in open source messaging and collaboration > -- _________________________________________ Non è forte chi non cade, ma chi cadendo ha la forza di rialzarsi. Jim Morrison

2 1

Policies!
by Alejandro Rodriguez Luna 21 Sep '10

21 Sep '10

Hi all!! is there a way that I can assign local policies and group policies to windows and linux machine through OpenLDAP, as I do with AD? ---------------------------------- Alejandro Rodriguez Luna Web: http://www.alexluna.org E-mail: el_alexluna(a)yahoo.com.mx MSN: el_alexluna(a)yahoo.com.mx GTalk: alexluna(a)gmail.com Movil: 044-311-112-86-41 ----------------------------------

2 1

How to slapadd cn=config
by Torsten Schlabach (Tascel eG) 21 Sep '10

21 Sep '10

Dear list! If I have an LDIF backup of a cn=config database, taken with slapcat, how would I use it to bootstrap a new server, for example, in a desaster recovery setting? I tried it and slapadd required a configuration, but cn=config *is* the configuration and I am trying to restore it. So this is a bit of a chicken and egg problem, isn't it? Is there an "official" way of doing that? Regards, Torsten

5 6

← Newer
1
2
3
4
5
6
7
8
...
12
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical September 2010