openldap-technical July 2012

openldap-technical@openldap.org

69 participants
71 discussions

Re: Reindex failed on MDB backend (cn=config)
by Quanah Gibson-Mount 10 Jul '12

10 Jul '12

--On Tuesday, July 10, 2012 10:44 AM +0200 Pieter Baele <pieter.baele(a)gmail.com> wrote: > > > On Tue, Jul 10, 2012 at 8:42 AM, Quanah Gibson-Mount <quanah(a)zimbra.com> > wrote: > > > --On Tuesday, July 10, 2012 8:26 AM +0200 Pieter Baele > <pieter.baele(a)gmail.com> wrote: > > >>> I added some indexes on a mdb database (Mirror) using ADS, and then tried >>> to reindex using the LTB init script. > >> What version of OpenLDAP? > openldap-ltb-2.4.31-1.el6.x86_64 Hi Pieter, Please keep replies on the list if you want assistance. Can you reproduce this issue using the latest RE24 code? Thanks, Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Reindex failed on MDB backend (cn=config)
by Pieter Baele 09 Jul '12

09 Jul '12

I added some indexes on a mdb database (Mirror) using ADS, and then tried to reindex using the LTB init script. service slapd reindex slapd: [INFO] Using /etc/default/slapd for configuration slapd: [INFO] Launching OpenLDAP database reindexing... slapindex: ./../../../libraries/libmdb/mdb.c:1361: mdb_page_touch: Assertion `mp->mp_p.p_pgno != np->mp_p.p_pgno' failed. slapd: [ALERT] OpenLDAP database reindexing failed I don't have additional details, because only Stats2 and Sync loglevel is enabled, and I already recovered. My question: how do I add indexes correctly so this doesn't happen again? directly with the use of an ldif file? Note: I want to use MDB in production, because our db will be small (never above 2GB, or 128TB ;-) ) Any recommendations? Sincerely, PieterB

2 1

Filter character encoding independent
by Philip Brusten 09 Jul '12

09 Jul '12

Hi, Our OpenLDAP information is stored in UTF-8 character encoding, like any other default installation I guess. Some of the records have special characters in their name, like ë, é, è, ç, etc. We want to make a webapplication that can do lookups on these names, without forcing the user to enter the correct characters. E.g. if they search for "Francois", it should match all givenNames "François" in LDAP. However if people do search for "François" if should also match all givenNames "François". I've looked for certain matching rules that could do this, but I haven't found what I'm looking for so far. Can anybody help me out? Kr, Philip

3 4

Accesslog purge doesn't work in Openldap 2.4.21 - Ubuntu Lucid
by Miguel Montero Rodríguez 08 Jul '12

08 Jul '12

Hi everyone, I've just seen that /var/lib/ldap/accesslog is growing so I've realized that olcAccessLogPurge is not working properly (for example, I have log.0000000001 file from 2011-09-10). The files that I used to configure accesslog are: ---------------------------------------------------------------- dn: olcDatabase={2}hdb,cn=config objectClass: olcDatabaseConfig objectClass: olcHdbConfig olcDatabase: {2}hdb olcDbDirectory: /var/lib/ldap/accesslog olcSuffix: cn=accesslog olcRootDN: cn=Administrator,dc=example,dc=net olcDbIndex: default eq olcDbIndex: entryCSN,objectClass,reqEnd,reqResult,reqStart ---------------------------------------------------------------- The other file for configuring the accesslog is: ---------------------------------------------------------------- dn: olcOverlay=accesslog,olcDatabase={1}hdb,cn=config objectClass: olcOverlayConfig objectClass: olcAccessLogConfig olcOverlay: accesslog olcAccessLogDB: cn=accesslog olcAccessLogOps: all olcAccessLogSuccess: TRUE # scan the accesslog DB every day, and purge entries older than 7 days olcAccessLogPurge: 07+00:00 01+00:00 ---------------------------------------------------------------- LDAP is working properly but not this. Anyone can tell me any clue about this? Thank you in advance. Best regards, Miguel.

4 6

Increase size of id2entry.bdb in DB_CONFIG ?
by Frank Bonnet 08 Jul '12

08 Jul '12

Hello My slapd server suddenly refuse to generate an LDIF file though th slapcat command. It is asking to increase the size of the id2entry.bdb database. I restart slapd and it works fine again but I would like to know what happened. Is there any configurable parameter that I would be able to write down into DB_CONFIG file to increase the size of this database ? I haven't found any precise documentation about this when googling about this. Or is it totally anything else ? see below the actual result of the db_stat command applied to this base : ldap# db_stat-4.6 -d id2entry.bdb Wed Jul 4 09:23:56 2012 Local time 53162 Btree magic number 9 Btree version number Little-endian Byte order Flags 2 Minimum keys per-page 16384 Underlying database page size 4079 Overflow key/data size 3 Number of levels in the tree 18735 Number of unique keys in the tree 18735 Number of data items in the tree 4 Number of tree internal pages 28130 Number of bytes free in tree internal pages (57% ff) 1694 Number of tree leaf pages 3940820 Number of bytes free in tree leaf pages (85% ff) 0 Number of tree duplicate pages 0 Number of bytes free in tree duplicate pages (0% ff) 7 Number of tree overflow pages 67789 Number of bytes free in tree overflow pages (40% ff) 0 Number of empty pages 0 Number of pages on the free list Thank you very much

5 11

Re: Increase size of id2entry.bdb in DB_CONFIG ?
by Quanah Gibson-Mount 06 Jul '12

06 Jul '12

--On Friday, July 06, 2012 10:40 AM +0200 Frank Bonnet <f.bonnet(a)esiee.fr> wrote: >> set_lg_regionmax 262144 >> set_lg_max 10485760 >> set_lg_bsize 2097152 > > Do you know if there is somewhere a documentation > that describe in details all DB_CONFIG statements ? > > thanks Hi Frank, Please keep this discussion on the list, thanks. I would advise consulting the BDB documentation that came with the version of BDB your OpenLDAP build is linked with. It often is in the Appendices, for example: <http://docs.oracle.com/cd/E17076_02/html/api_reference/C/set_lg_regionmax_p…> --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

2 1

Setting up multiple proxies on openldap 2.4.23
by Bhargav Mistry 06 Jul '12

06 Jul '12

Hi, I am trying to configure multiple proxy so that the ldap master can push data to more than one proxy servers. My olcDatabase={3}ldap.ldif file looks like this: dn: olcDatabase={3}ldap objectClass: olcDatabaseConfig objectClass: olcLDAPConfig olcDatabase: {3}ldap olcHidden: TRUE olcSuffix: dc=amdocs,dc=com olcRootDN: cn=ldap,dc=amdocs,dc=com olcSyncUseSubentry: FALSE olcMonitoring: TRUE structuralObjectClass: olcLDAPConfig entryUUID: c7d2672e-5c10-1031-9a08-0f8186de202c creatorsName: cn=config createTimestamp: 20120706234807Z olcSyncrepl:: <syncrepl entry here> olcDbACLBind: bindmethod=simple timeout=0 network-timeout=0 binddn="cn=Manager ,dc=something,dc=com" credentials="secret" olcDbURI: ldap://proxy-1.server.com entryCSN: 20120707001006.061485Z#000000#001#000000 modifiersName: cn=config modifyTimestamp: 20120707001006Z With this configuration it is currently pushing only to proxy-1.server.com, how do I add more than one olcDbURI values so that it can push to multiple servers? Thanks. Bhargav. This message and the information contained herein is proprietary and confidential and subject to the Amdocs policy statement, you may review at http://www.amdocs.com/email_disclaimer.asp

1 0

syncrepl selective sync?
by jimy 06 Jul '12

06 Jul '12

Hello, what ist the best way to sync all contained in ou=group1,ou=sync,dc=example,dc=com AND ou=group2,ou=sync,dc=example,dc=com only with a of searchbase="ou=sync,dc=example,dc=com" ? Can this be done with filter= or do I need subordinate dbs? thx jimy

3 2

Uniqueness constraint over multiple attributes
by Jan Beerden 06 Jul '12

06 Jul '12

Hello, Is there a way to have a unique constraint over multiple attributes? We have different attributes for the primary email address of a person, and for additional aliases, and we'd like to enforce global uniqueness in such a way that the primary email address for one person can not be used as an email alias for another person. The slapo-unique manpage doesn't make this very clear. Regards -- Jan Beerden jan.beerden(a)fks.be fks bvba - Formal and Knowledge Systems http://www.fks.be/ Schampbergstraat 32 Tel: ++32-(0)11-21 49 11 B-3511 Kuringen Fax: ++32-(0)11-22 04 19

4 10

Anyone using ejabberd with OpenLDAP?
by Gavin Henry 06 Jul '12

06 Jul '12

HI all, Taking advantage of the technical list for once and the OpenLDAP "related" questions :-) Anyone messed with ejabberd and OpenLDAP? I'm looking for an XMPP server with the best LDAP support. ejabberd does auth, rosters and vcards but the ability to load a list of hosts/domains from LDAP like you can do with Exim etc. would rule. Any suggestions? -- http://www.suretecsystems.com/services/openldap/ http://www.surevoip.co.uk

3 4

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical July 2012