openldap-technical December 2012

openldap-technical@openldap.org

66 participants
73 discussions

Re: Disble the 389 ldapsearch
by Bheeshma SM 20 Dec '12

20 Dec '12

hi I tried ./slapd -h ldap:/// ./slapd -h ldaps:/// Slapd status says its listening to both the ports But when i try ldapsearch -p 389 -h <hostname> it works but with -p 636 its doesnot work. and -H ldap:// works and -H ldaps:// works can you help me out with this. What i want is ldapsearch must not be successful with ldap:// and -p 389 but it must be successfull in ldaps:// and -p 636 Thanks Bhee On Thu, Dec 20, 2012 at 12:49 PM, Allan E. Johannesen <aej(a)wpi.edu> wrote: > See "-h" in slapd to specify the ports on which it will listen, if that's > what > you want to do. >

1 0

Disble the 389 ldapsearch
by Bheeshma SM 20 Dec '12

20 Dec '12

Hi I want to know how to disable the 389 search in Openldap. I am using Openldap 2.4.33 in RHEL 5.8 I have both the search running . ldapsearch -x -H ldap://hostname -D "<>" -w "<>" -b "<>" ldapsearch -x -H ldaps://hostname -D "<>" -w "<>" -b "<>" Both the above searches are running successfully, but i dont want the 389 dat is the ldap://hostname to run, Is there are way i can disable that..? Thanks in advance Bhee

1 0

DB_LOG_AUTOREMOVE not working
by BheeshmaManjunath 19 Dec '12

19 Dec '12

Hi I am using the latest Openldap. Software- Openldap 2.4.33 Server - RHEL 5.8 64 bit When i do an Ldapsearch, Ldapadd, Ldapdelete , the log.00000000x files are getting generated in the directory folder. To auto remove them i did add the " set_flags DB_LOG_AUTOREMOVE " to the DB_CONFIG file which is present in the directory folder itself. And I am using crontab to add the new data on the daily bases, but the log.00000000x files which are generated are not being auto removed..? Can anyone help me regarding this issue..? Is there a need to restart the server before adding the new data on the daily bases..? If so why is it so..? Thanks bhee

3 4

acl issue
by anil beniwal 19 Dec '12

19 Dec '12

Hi We are having below two acl to allow acces for read and write to two different users. First one is working fine, 2nd one is not allowing to write access to Vpwrite user. Can some body help me to rectify it. Scanerio is we want to delegate read access to all the attributes to one user and other user to write access to all the attributes. This is for login. access to attrs=userPassword by self write by dn="cn=Vpwrite,ou=businessUsersGroup,dc=example,dc=com" write by dn="cn=Vpread,ou=businessUsersGroup,dc=example,dc=com" read by anonymous auth by * break Read/Write access access to * by dn="cn=Vwrite,ou=businessUsersGroup,dc=example,dc=com" write by dn="cn=Vread,ou=businessUsersGroup,dc=example,dc=com" read by * none Please let me know , if you need more details. -- Thanks&Regards Anil Beniwal

2 1

best practices for backing up ldap configuration
by Khosrow Ebrahimpour 19 Dec '12

19 Dec '12

Hello everyone, Are there any best practices for backing up ldap configuration? Our current approach is to run a nightly diff on the output of "slapcat -l -b cn=config' and if it has changed, the new ldif is comitted to svn. Ideally, I'd like to just add the slapd.d directory to svn, and everytime it changes I'd checkin the new version. But I have a feeling that the ".svn" directories that will be created are going to cause trouble. Is there better way of doing this? Thanks, -- Khosrow

7 13

Doe's olcAuthzRegexp rules applied on the all incoming authentication requests?
by Tio Teath 18 Dec '12

18 Dec '12

Are olcAuthzRegexp rules applied on the all incoming authentication requests, or on the SASL request only? And what exactly loglevel shows those rules processing? I've tried all of them , and any showed me olcAuthzRegexp processing.

1 0

EXTERNAL mech missing
by Emmanuel Dreyfus 18 Dec '12

18 Dec '12

Hi When is the EXTERNAL mech proposed? I want to use peercred on a slapd instance, but EXTERNAL is not available: $ ldapsearch -xLLLH ldapi:/// -s base -b '' supportedSASLMechanisms dn: supportedSASLMechanisms: DIGEST-MD5 supportedSASLMechanisms: PLAIN supportedSASLMechanisms: LOGIN I have other machines when it shows up without a hassle. Where is the setting that cause it to be proposed? -- Emmanuel Dreyfus manu(a)netbsd.org

3 7

Re: Bulk update
by anil beniwal 17 Dec '12

17 Dec '12

Hi Quanah Thanks a lot. We can't change ldap version now. As we are about to GoLive. On Mon, Dec 17, 2012 at 10:14 PM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote: > --On Monday, December 17, 2012 10:59 AM +0530 anil beniwal < > beni.anil(a)gmail.com> wrote: > > >> Hi >> >> We want to update bulk records ( 3 million ) insert in my openldap >> 42.4.20 on rhel 6.3 . Three servers in replication. >> >> Each record is almost 6 KB. >> >> My concern, is there any tool or trick to speed this up. As of now for >> some 9 K records its taking around 3 hours. >> >> What should be my DB_CONFIG file . >> >> >> Please let me know what else should be taken care off. >> > > a) Upgrade to a sane, stable version of OpenLDAP < > http://ltb-project.org/wiki/**download#openldap<http://ltb-project.org/wiki/download#openldap> > > > b) Use -q with slapadd > c) Ensure your tool threads setting is appropriate for the number of > cpu/cores on your server > d) Read over <https://wiki.zimbra.com/wiki/**OpenLDAP_Performance_Tuning#* > *Configuring_the_Berkeley_DB_**subsystem_to_increase_LDAP_** > server_performance<https://wiki.zimbra.com/wiki/OpenLDAP_Performance_Tuning#Configuring_the_Be…>> > and apply it to your setup. In particular, if you have plenty of RAM, use > a shared memory key, and set the DB_CONFIG cachesize to a large value. > --Quanah > > > > -- > > Quanah Gibson-Mount > Sr. Member of Technical Staff > Zimbra, Inc > A Division of VMware, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration > -- Thanks&Regards Anil Beniwal

1 0

DB_LOG_AUTOREMOVE not working without restarting the server.
by Bheeshma SM 17 Dec '12

17 Dec '12

1 0

Bulk update
by anil beniwal 17 Dec '12

17 Dec '12

Hi We want to update bulk records ( 3 million ) insert in my openldap 42.4.20 on rhel 6.3 . Three servers in replication. Each record is almost 6 KB. My concern, is there any tool or trick to speed this up. As of now for some 9 K records its taking around 3 hours. What should be my DB_CONFIG file . Please let me know what else should be taken care off. -- Thanks&Regards Anil Beniwal

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical December 2012