openldap-technical January 2013

openldap-technical@openldap.org

71 participants
131 discussions

Re: MDB Newbie
by Kyle Smith 09 Jan '13

09 Jan '13

On Wed, Jan 2, 2013 at 5:00 PM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote: > --On Wednesday, January 02, 2013 4:35 PM -0500 Kyle Smith < > alacer.cogitatus(a)gmail.com> wrote: > > >> Greetings and Salutations. >> >> >> December 20, I converted from bdb to mdb. Now my memory usage looks like >> this: http://faculty.ycp.edu/~**ksmith8/openldap_stats.png<http://faculty.ycp.edu/~ksmith8/openldap_stats.png> >> >> >> I am concerned with the graph for "superman". How can I start tracking >> down the usage and why almost 50% of my memory is being consumed. These 4 >> are in MMR and are 2.4.33 and are nearly exact in server specification. >> Thanks in advance! >> > > Memory is vague. Do you mean shared, resident, or virtual? Your graphs > don't illustrate which either. > > --Quanah > > -- > > Quanah Gibson-Mount > Sr. Member of Technical Staff > Zimbra, Inc > A Division of VMware, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration > Memory in this case is Physical memory as reported by ubuntu top. %MEM is the column. I did a "du -c -h data.mdb" on each of the four. Superman is listed at 1.4GB, while the other 3 are at 185MB. Not quite sure why that one is so much bigger. Thanks in advance.

1 0

Re: Replication status
by anil beniwal 08 Jan '13

08 Jan '13

Dear It means my DR server is not in sync with other two servers dc1 and dc2. but i am able to do successful search of last added user on all the servers.(which i added only on dc1 server) On Mon, Jan 7, 2013 at 7:44 AM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote: > --On Monday, January 07, 2013 5:24 AM +0530 anil beniwal < > beni.anil(a)gmail.com> wrote: > > >> Hi >> >> We are having 3 openldap 2.4.33 servers on rhel 6.3 in MMR, below is my >> replication status for all of them. >> We have imported all the data on one server and copied same data to other >> 2 servers. >> > > DR >> contextCSN: 20130101132757.303803Z#000000#**000#000000 >> contextCSN: 20130102093855.341468Z#000000#**001#000000 >> contextCSN: 20130102050153.147891Z#000000#**002#000000 >> contextCSN: 20130102135821.337371Z#000000#**003#00000 >> > > #000# is the CSN created before MMR was set up, so there were no servers > with any server ID, i.e., one server with a server ID of zero. This > context CSN will never update. > > #001# is the CSN of the server with ServerID 1. > #002# is the CSN of the server with ServerID 2. > #003# is the CSN of the server with ServerID 3. > > The 001 through 003 CSNs will reflect the last time any of those servers > had a direct *not replicated* update. For testing if a server is up to > date, you want to compare all the CSNs to one another between the two > servers. > > I.e., you want CSN 001 to match CSN 001 on both servers. CSN 002 to match > CSN 002 on both servers. CSN 003 to CSN 003 on both servers. I wrote a > rather fun perl script for Zimbra to do this across a MMR setup. > > I will note that delta-syncrepl MMR remains the best option for > configuring MMR, as it is the least likely to end up with conflicts, unless > you run purely in MirrorMode. It also retains the bandwidth and write > throughput advantages it has with provider/replica replication as well. > > --Quanah > > -- > > Quanah Gibson-Mount > Sr. Member of Technical Staff > Zimbra, Inc > A Division of VMware, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration >

2 1

MirrorMode, delta syncrepl and memberof issues
by Al 08 Jan '13

08 Jan '13

Hi All - I'm having an issue with mirrormode replication (via delta syncrepl) and the memberof overlay. When a group membership is changed on the first node, slapd on the second node is crashing with the following error (as seen from running slapd with -d-1): slapd: memberof.c:1465: memberof_res_modify: Assertion `0' failed. If I disable either memberof or mirrormode, the change replicates correctly. This behavior happens on both bdb and mdb backends. Any thoughts on what that might mean? I am still in development, so I can try pretty much anything at this point - I appreciate any guidance that you can offer. Here are the important details: OpenLDAP 2.4.33 Redhat Linux 6.3 - x64 Server1 and Server2 are using the same configuration, minus the serverid and the syncrepl provider. here is server1's pertinent config: olcServerID: 1 ... olcSyncrepl: rid=000 provider=ldap://server1.xxx.xxx.com:389/ bindme thod=simple timeout=0 network-timeout=0 binddn="cn=ldapreplicator,xxx, xxx,xxx.com" credentials="secret" keepalive=0:0:0 starttls=critical filter="(objectclass=*)" searchbase="xxx.com" logfilter= "(&(objectClass=auditWriteObject)(reqResult=0))" logbase="cn=accesslog" scope =sub schemachecking=on type=refreshAndPersist retry="60 +" syncdata=accesslog olcMirrorMode: TRUE ... olcMemberOfRefInt: FALSE olcMemberOfGroupOC: groupOfUniqueNames olcMemberOfMemberAD: uniquemember Regards, Al

2 1

Replication status
by anil beniwal 07 Jan '13

07 Jan '13

Hi We are having 3 openldap 2.4.33 servers on rhel 6.3 in MMR, below is my replication status for all of them. We have imported all the data on one server and copied same data to other 2 servers. 1. I am not able to figure out why i am having 4th line in my DR server, while searching contextCSN, while we are having only 3 ldap servers 2. Why CSN values are different , while i am getting latest added record in search on all the servers. Before Adding user dc1 contextCSN: 20130101132757.303803Z#000000#000#000000 contextCSN: 20130106222129.577348Z#000000#001#000000 contextCSN: 20130102050153.147891Z#000000#002#000000 dc2 contextCSN: 20130101132757.303803Z#000000#000#000000 contextCSN: 20130106222129.577348Z#000000#001#000000 contextCSN: 20130102050153.147891Z#000000#002#000000 DR contextCSN: 20130101132757.303803Z#000000#000#000000 contextCSN: 20130106222129.577348Z#000000#001#000000 contextCSN: 20130102050153.147891Z#000000#002#000000 contextCSN: 20130102135821.337371Z#000000#003#000000 After adding User ( its reflecting on all the servers in search) DC 1 contextCSN: 20130101132757.303803Z#000000#000#000000 contextCSN: 20130102093855.341468Z#000000#001#000000 contextCSN: 20130102050153.147891Z#000000#002#000000 DC 2 contextCSN: 20130101132757.303803Z#000000#000#000000 contextCSN: 20130102093855.341468Z#000000#001#000000 contextCSN: 20130102050153.147891Z#000000#002#000000 DR contextCSN: 20130101132757.303803Z#000000#000#000000 contextCSN: 20130102093855.341468Z#000000#001#000000 contextCSN: 20130102050153.147891Z#000000#002#000000 contextCSN: 20130102135821.337371Z#000000#003#00000 -- Thanks&Regards Anil Beniwal

2 1

How to change the base dn after installation
by Onno van der Straaten 07 Jan '13

07 Jan '13

Hi, I have a simple directory setup with base dn dc=my-domain, dc=com. How can I change the base dn? I'm running the latest OpenLDAP version on Fedora 17. Thanks, Onno

2 1

How to create a directory admin group
by Onno van der Straaten 07 Jan '13

07 Jan '13

Hi, How can I define a admin group for my directory? Currently I have one admin account, the one that was created during installation, cn=Manager, dc=my-domain, dc=com. I would like to create a group for example cn=ldap-admins,dc=my-domain,dc=com and then make users member of this group to grant them privilege to do admin work on the directory similar to cn=Manager. I suppose I have to add access rules. But where and how I don't know. Thanks, Onno

2 1

Bind failing with "critical extension is unavailable" error when used with pagedresultscontrol
by Cannady, Mike 05 Jan '13

05 Jan '13

I have a program that works with Microsoft LDAP that I'm trying to get to work with openldap. The program is from a third-party and I have NO access to the code. I was able to duplicate the behavior with Perl code (testPaged.pl) later in this email. The bind is to a domain that uses the BDB backend. If my test code ignores the error from bind, it does the paged results just fine. The problem is the third-party program stops if it sees the error in bind. I've captured network traffic to the Microsoft LDAP server and see that it generates NO error. The version I'm running is: [root@radius1 openldap]# slapd -V @(#) $OpenLDAP: slapd 2.4.23 (Jul 31 2012 10:47:00) $ mockbuild@x86-001.build.bos.redhat.com:/builddir/build/BUILD/openldap-2.4.23/openldap-2.4.23/build-servers/servers/slapd Is this a bug? I have the perl code, the debug run of the perl code, the slapd.d structure, dumps of the olcDatabase entries, and the results of "slapd -d -1" output. ##==============================================================testPaged.pl [mcannady@vmHTCradius1 ldap]$ cat testPaged.pl use Net::LDAP; use Net::LDAP::Control::Paged; use Net::LDAP::Constant qw( LDAP_CONTROL_PAGED ); ################################## sub ProcessSearch { my ( $msg, $result ) = @_; ## Nothing to do return if ( ! defined($result) ); if ( $result->isa("Net::LDAP::Reference") ) { ## a reference... just mention it. } else { $result->dump( ); print "\n"; } } ##################################### $ldap = Net::LDAP->new( "radius1.pbx.htc.internal" ); $page = Net::LDAP::Control::Paged->new( size => 10 , critical => true ); $mesg = $ldap->bind( "uid=NuPoint,dc=htc,dc=com", password => "XXXXXXX[redacted]XXXXXXXXXXX" , control => [ $page ] ); if ( $mesg->code ) { ## print error print "error on bind: ", $mesg->error(), "\n"; return; } @args = ( base => "cn=Users,dc=htc,dc=com", scope => "subtree", filter => "(objectClass=user)", callback => \&ProcessSearch, # Call this sub for each entry control => [ $page ], ); my $cookie; while(1) { # Perform search my $mesg = $ldap->search( @args ); # Only continue on LDAP_SUCCESS $mesg->code and last; # Get cookie from paged control my($resp) = $mesg->control( LDAP_CONTROL_PAGED ) or last; $cookie = $resp->cookie or last; # Set cookie in paged control $page->cookie($cookie); } if ($cookie) { # We had an abnormal exit, so let the server know we do not want any more $page->cookie($cookie); $page->size(0); $ldap->search( @args ); } [mcannady@vmHTCradius1 ldap]$ ##================================================================ perl debug-mode test [mcannady@vmHTCradius1 ldap]$ perl -d testPaged.pl Loading DB routines from perl5db.pl version 1.32 Editor support available. Enter h or `h h' for help, or `man perldebug' for more help. main::(testPaged.pl:20): $ldap = Net::LDAP->new( "radius1.pbx.htc.internal" ); DB<1> n main::(testPaged.pl:22): $page = Net::LDAP::Control::Paged->new( size => 10 , critical => true ); DB<1> n main::(testPaged.pl:24): $mesg = $ldap->bind( "uid=NuPoint,dc=htc,dc=com", main::(testPaged.pl:25): password => "XXXXXXXXX[redacted]XXXXXX" , main::(testPaged.pl:26): control => [ $page ] main::(testPaged.pl:27): ); DB<1> n main::(testPaged.pl:28): if ( $mesg->code ) { DB<1> n main::(testPaged.pl:30): print "error on bind: ", $mesg->error(), "\n"; DB<1> n error on bind: critical extension is unavailable main::(testPaged.pl:31): return; ##====================================================================================== [root@radius1 slapd.d]# find . -print . ./cn=config.ldif ./cn=config ./cn=config/cn=include{1}.ldif ./cn=config/cn=schema ./cn=config/cn=schema/cn={1}cosine.ldif ./cn=config/cn=schema/cn={4}ad.ldif ./cn=config/cn=schema/cn={2}inetorgperson.ldif ./cn=config/cn=schema/cn={3}nis.ldif ./cn=config/cn=schema/cn={0}core.ldif ./cn=config/cn=include{3}.ldif ./cn=config/olcDatabase={1}bdb.ldif ./cn=config/olcDatabase={2}bdb.ldif ./cn=config/olcDatabase={0}config.ldif ./cn=config/cn=schema.ldif ./cn=config/cn=include{2}.ldif ./cn=config/cn=include{0}.ldif ./cn=config/olcDatabase={3}monitor.ldif ./cn=config/olcDatabase={-1}frontend.ldif ##======================================================================================= ======================================================== cat olcDatabase={0}config.ldif dn: olcDatabase={0}config objectClass: olcDatabaseConfig olcDatabase: {0}config olcLastMod: TRUE olcMaxDerefDepth: 15 olcReadOnly: FALSE olcRootDN: cn=admin,cn=config olcRootPW:: XXXredactedXXX structuralObjectClass: olcDatabaseConfig entryUUID: ac0d8a60-c861-1031-9bd4-5591ba7dfe32 creatorsName: cn=config createTimestamp: 20121121195915Z entryCSN: 20121121195915Z#000000#00#000000 modifiersName: cn=config modifyTimestamp: 20121121195915Z ======================================================== cat olcDatabase={1}bdb.ldif dn: olcDatabase={1}bdb objectClass: olcDatabaseConfig objectClass: olcBdbConfig olcDatabase: {1}bdb olcSuffix: dc=htc,dc=com olcAccess: {0}to * by dn.base="uid=push-master,cn=nupointproxy,dc=internal" w rite by * +0 break olcAccess: {1}to dn.base="" by * read olcAccess: {2}to dn.base="cn=subschema" by * read olcAccess: {3}to dn.subtree="cn=monitor" by users read by * none olcAccess: {4}to * by self write by * read olcLastMod: TRUE olcMaxDerefDepth: 15 olcReadOnly: FALSE olcRootPW:: XXXXXXXXXXXXXXXXXXXXredactedXXXXXXXXXXXX olcDbDirectory: /var/lib/ldap/htc.com olcDbCacheSize: 150000 olcDbCheckpoint: 102400 1 olcDbConfig: {0}set_cachesize 0 268435465 1 olcDbConfig: {1}set_lg_bsize 2097152 olcDbConfig: {2}set_lg_regionmax 262144 olcDbConfig: {3}set_flags DB_LOG_AUTOREMOVE olcDbNoSync: TRUE olcDbDirtyRead: FALSE olcDbIDLcacheSize: 150000 olcDbIndex: objectClass pres,eq olcDbIndex: cn pres,eq,sub olcDbIndex: ou pres,eq,sub olcDbIndex: mail pres,eq,sub olcDbIndex: sn pres,eq,sub olcDbIndex: givenName pres,eq,sub olcDbLinearIndex: FALSE olcDbMode: 384 olcDbSearchStack: 16 olcDbShmKey: 12321 olcDbCacheFree: 1 structuralObjectClass: olcBdbConfig entryUUID: ac0da28e-c861-1031-9bd5-5591ba7dfe32 creatorsName: cn=config createTimestamp: 20121121195915Z olcRootDN: uid=Manager,dc=htc,dc=com olcUpdateDN: uid=Push-Master,cn=NupointProxy,dc=internal entryCSN: 20121212180425.846656Z#000000#000#000000 modifiersName: cn=admin,cn=config modifyTimestamp: 20121212180425Z ======================================================== cat olcDatabase={-1}frontend.ldif dn: olcDatabase={-1}frontend objectClass: olcDatabaseConfig objectClass: olcFrontendConfig olcDatabase: {-1}frontend olcLastMod: TRUE olcMaxDerefDepth: 0 olcReadOnly: FALSE olcSchemaDN: cn=Subschema structuralObjectClass: olcDatabaseConfig entryUUID: ac0d771e-c861-1031-9bd3-5591ba7dfe32 creatorsName: cn=config createTimestamp: 20121121195915Z olcTimeLimit: unlimited olcSizeLimit: unlimited entryCSN: 20121214201101.233668Z#000000#000#000000 modifiersName: cn=admin,cn=config modifyTimestamp: 20121214201101Z ======================================================== cat olcDatabase={2}bdb.ldif dn: olcDatabase={2}bdb objectClass: olcDatabaseConfig objectClass: olcBdbConfig olcDatabase: {2}bdb olcSuffix: dc=internal olcAddContentAcl: FALSE olcLastMod: TRUE olcMaxDerefDepth: 15 olcReadOnly: FALSE olcRootDN: cn=admin,cn=config olcSyncUseSubentry: FALSE olcMonitoring: TRUE olcDbDirectory: /var/lib/ldap/htc.internal olcDbCacheSize: 1000 olcDbCheckpoint: 100 63 olcDbNoSync: FALSE olcDbDirtyRead: FALSE olcDbIDLcacheSize: 0 olcDbLinearIndex: FALSE olcDbMode: 0600 olcDbSearchStack: 16 olcDbShmKey: 0 olcDbCacheFree: 1 olcDbDNcacheSize: 0 structuralObjectClass: olcBdbConfig entryUUID: 92ff370e-dcc9-1031-8a59-533cee5baf07 creatorsName: cn=config createTimestamp: 20121217191324Z entryCSN: 20121217191324.652465Z#000000#000#000000 modifiersName: cn=config modifyTimestamp: 20121217191324Z ======================================================== cat olcDatabase={3}monitor.ldif dn: olcDatabase={3}monitor objectClass: olcDatabaseConfig olcDatabase: {3}monitor olcAddContentAcl: FALSE olcLastMod: TRUE olcMaxDerefDepth: 15 olcReadOnly: FALSE olcSyncUseSubentry: FALSE olcMonitoring: FALSE structuralObjectClass: olcDatabaseConfig entryUUID: 54da1e50-d8df-1031-85bf-235d062b63b6 creatorsName: cn=config createTimestamp: 20121212193904Z entryCSN: 20121212193904.665758Z#000000#000#000000 modifiersName: cn=config modifyTimestamp: 20121212193904Z ======================================================== Script started on Tue 18 Dec 2012 01:56:28 PM EST [root@radius1 openldap]# slapd -u ldap -d -1 @(#) $OpenLDAP: slapd 2.4.23 (Jul 31 2012 10:47:00) $ mockbuild@x86-001.build.bos.redhat.com:/builddir/build/BUILD/openldap-2.4.23/openldap-2.4.23/build-servers/servers/slapd ldap_pvt_gethostbyname_a: host=radius1.pbx.htc.internal, r=0 daemon_init: <null> daemon_init: listen on ldap:/// daemon_init: 1 listeners to open... ldap_url_parse_ext(ldap:///) daemon: listener initialized ldap:/// daemon_init: 2 listeners opened ldap_create slapd init: initiated server. slap_sasl_init: initialized! bdb_back_initialize: initialize BDB backend bdb_back_initialize: Berkeley DB 4.7.25: (March 5, 2012) hdb_back_initialize: initialize HDB backend hdb_back_initialize: Berkeley DB 4.7.25: (March 5, 2012) null_back_initialize: initialize null backend backend_startup_one: starting "cn=config" ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config.ldif" => str2entry: "dn: cn=config objectClass: olcGlobal cn: config olcConfigFile: /etc/openldap/slapd.conf olcConfigDir: /etc/openldap/slapd.d olcAllows: bind_v2 olcArgsFile: /var/run/openldap/slapd.args olcAttributeOptions: lang- olcAuthzPolicy: none olcConcurrency: 0 olcConnMaxPending: 100 olcConnMaxPendingAuth: 1000 olcGentleHUP: FALSE olcIdleTimeout: 0 olcTLSCACertificateFile: /etc/pki/tls/certs/ca-bundle.crt olcTLSCertificateFile: /etc/pki/tls/certs/slapd.pem olcTLSCertificateKeyFile: /etc/pki/tls/certs/slapd.pem olcIndexSubstrIfMaxLen: 4 olcIndexSubstrIfMinLen: 2 olcIndexSubstrAnyLen: 4 olcIndexSubstrAnyStep: 2 olcLocalSSF: 71 olcLogLevel: Stats olcPidFile: /var/run/openldap/slapd.pid olcReadOnly: FALSE olcReplicationInterval: 0 olcReverseLookup: FALSE olcSaslHost: htcRadius1.htc.internal olcSaslSecProps: noplain,noanonymous olcSockbufMaxIncoming: 262143 olcSockbufMaxIncomingAuth: 16777215 olcThreads: 16 olcTLSCRLCheck: none olcTLSVerifyClient: never olcToolThreads: 1 structuralObjectClass: olcGlobal entryUUID: ac065c7c-c861-1031-9bc9-5591ba7dfe32 creatorsName: cn=config createTimestamp: 20121121195915Z entryCSN: 20121121195915Z#000000#00#000000 modifiersName: cn=config modifyTimestamp: 20121121195915Z " >>> dnPrettyNormal: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnPrettyNormal: <cn=config>, <cn=config> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> <= str2entry(cn=config) -> 0x7fcb0f61d108 => test_filter PRESENT => access_allowed: search access to "cn=config" "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 olcTLSCRLCheck: value #0: keyword <TLSCRLCheck> ignored olcTLSCRLCheck: value #0: keyword <TLSCRLCheck> ignored olcReplicationInterval: value #0: <olcReplicationInterval> keyword is obsolete (ignored) ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config/cn=include{0}.ldif" => str2entry: "dn: cn=include{0} objectClass: olcIncludeFile cn: include{0} olcInclude: /etc/openldap/schema/core.schema structuralObjectClass: olcIncludeFile entryUUID: ac0c28d2-c861-1031-9bca-5591ba7dfe32 creatorsName: cn=config createTimestamp: 20121121195915Z entryCSN: 20121121195915Z#000000#00#000000 modifiersName: cn=config modifyTimestamp: 20121121195915Z " >>> dnPrettyNormal: <cn=include{0}> => ldap_bv2dn(cn=include{0},0) <= ldap_bv2dn(cn=include{0})=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=include{0})=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=include{0})=0 <<< dnPrettyNormal: <cn=include{0}>, <cn=include{0}> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> <= str2entry(cn=include{0}) -> 0x7fcb0f61d108 => test_filter PRESENT => access_allowed: search access to "cn=include{0},cn=config" "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config/cn=include{1}.ldif" => str2entry: "dn: cn=include{1} objectClass: olcIncludeFile cn: include{1} olcInclude: /etc/openldap/schema/cosine.schema structuralObjectClass: olcIncludeFile entryUUID: ac0c434e-c861-1031-9bcb-5591ba7dfe32 creatorsName: cn=config createTimestamp: 20121121195915Z entryCSN: 20121121195915Z#000000#00#000000 modifiersName: cn=config modifyTimestamp: 20121121195915Z " >>> dnPrettyNormal: <cn=include{1}> => ldap_bv2dn(cn=include{1},0) <= ldap_bv2dn(cn=include{1})=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=include{1})=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=include{1})=0 <<< dnPrettyNormal: <cn=include{1}>, <cn=include{1}> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> <= str2entry(cn=include{1}) -> 0x7fcb0f61d108 => test_filter PRESENT => access_allowed: search access to "cn=include{1},cn=config" "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config/cn=include{2}.ldif" => str2entry: "dn: cn=include{2} objectClass: olcIncludeFile cn: include{2} olcInclude: /etc/openldap/schema/inetorgperson.schema structuralObjectClass: olcIncludeFile entryUUID: ac0c54f6-c861-1031-9bcc-5591ba7dfe32 creatorsName: cn=config createTimestamp: 20121121195915Z entryCSN: 20121121195915Z#000000#00#000000 modifiersName: cn=config modifyTimestamp: 20121121195915Z " >>> dnPrettyNormal: <cn=include{2}> => ldap_bv2dn(cn=include{2},0) <= ldap_bv2dn(cn=include{2})=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=include{2})=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=include{2})=0 <<< dnPrettyNormal: <cn=include{2}>, <cn=include{2}> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> <= str2entry(cn=include{2}) -> 0x7fcb0f61d108 => test_filter PRESENT => access_allowed: search access to "cn=include{2},cn=config" "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config/cn=include{3}.ldif" => str2entry: "dn: cn=include{3} objectClass: olcIncludeFile cn: include{3} olcInclude: /etc/openldap/schema/nis.schema structuralObjectClass: olcIncludeFile entryUUID: ac0c6496-c861-1031-9bcd-5591ba7dfe32 creatorsName: cn=config createTimestamp: 20121121195915Z entryCSN: 20121121195915Z#000000#00#000000 modifiersName: cn=config modifyTimestamp: 20121121195915Z " >>> dnPrettyNormal: <cn=include{3}> => ldap_bv2dn(cn=include{3},0) <= ldap_bv2dn(cn=include{3})=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=include{3})=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=include{3})=0 <<< dnPrettyNormal: <cn=include{3}>, <cn=include{3}> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> <= str2entry(cn=include{3}) -> 0x7fcb0f61d108 => test_filter PRESENT => access_allowed: search access to "cn=include{3},cn=config" "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config/cn=schema.ldif" => str2entry: "dn: cn=schema objectClass: olcSchemaConfig cn: schema olcObjectIdentifier: OLcfg 1.3.6.1.4.1.4203.666.11.1 olcObjectIdentifier: OLcfgAt OLcfg:3 olcObjectIdentifier: OLcfgGlAt OLcfgAt:0 olcObjectIdentifier: OLcfgBkAt OLcfgAt:1 olcObjectIdentifier: OLcfgDbAt OLcfgAt:2 olcObjectIdentifier: OLcfgOvAt OLcfgAt:3 olcObjectIdentifier: OLcfgOc OLcfg:4 olcObjectIdentifier: OLcfgGlOc OLcfgOc:0 olcObjectIdentifier: OLcfgBkOc OLcfgOc:1 olcObjectIdentifier: OLcfgDbOc OLcfgOc:2 olcObjectIdentifier: OLcfgOvOc OLcfgOc:3 olcObjectIdentifier: OMsyn 1.3.6.1.4.1.1466.115.121.1 olcObjectIdentifier: OMsInteger OMsyn:27 olcObjectIdentifier: OMsBoolean OMsyn:7 olcObjectIdentifier: OMsDN OMsyn:12 olcObjectIdentifier: OMsDirectoryString OMsyn:15 olcObjectIdentifier: OMsOctetString OMsyn:40 olcAttributeTypes: ( 2.5.4.0 NAME 'objectClass' DESC 'RFC2256: object classes of the entity' EQUALITY objectIdentifierMatch SYNTAX 1.3.6.1.4.1.1466.115.121 .1.38 ) olcAttributeTypes: ( 2.5.21.9 NAME 'structuralObjectClass' DESC 'X.500(93): st ructural object class of entry' EQUALITY objectIdentifierMatch SYNTAX 1.3.6.1 .4.1.1466.115.121.1.38 SINGLE-VALUE NO-USER-MODIFICATION USAGE directoryOpera tion ) olcAttributeTypes: ( 2.5.18.1 NAME 'createTimestamp' DESC 'RFC2252: time which object was created' EQUALITY generalizedTimeMatch ORDERING generalizedTimeOr deringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE NO-USER-MODIFIC ATION USAGE directoryOperation ) olcAttributeTypes: ( 2.5.18.2 NAME 'modifyTimestamp' DESC 'RFC2252: time which object was last modified' EQUALITY generalizedTimeMatch ORDERING generalized TimeOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE NO-USER-M ODIFICATION USAGE directoryOperation ) olcAttributeTypes: ( 2.5.18.3 NAME 'creatorsName' DESC 'RFC2252: name of creat or' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SING LE-VALUE NO-USER-MODIFICATION USAGE directoryOperation ) olcAttributeTypes: ( 2.5.18.4 NAME 'modifiersName' DESC 'RFC2252: name of last modifier' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1. 12 SINGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation ) olcAttributeTypes: ( 2.5.18.9 NAME 'hasSubordinates' DESC 'X.501: entry has ch ildren' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALU E NO-USER-MODIFICATION USAGE directoryOperation ) olcAttributeTypes: ( 2.5.18.10 NAME 'subschemaSubentry' DESC 'RFC2252: name of controlling subschema entry' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1. 4.1.1466.115.121.1.12 SINGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperat ion ) olcAttributeTypes: ( 1.3.6.1.4.1.4203.666.1.33 NAME 'entryDN' DESC 'DN of the entry' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 S INGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation ) olcAttributeTypes: ( 1.3.6.1.1.16.4 NAME 'entryUUID' DESC 'UUID of the entry' EQUALITY UUIDMatch ORDERING UUIDOrderingMatch SYNTAX 1.3.6.1.1.16.1 SINGLE-VA LUE NO-USER-MODIFICATION USAGE directoryOperation ) olcAttributeTypes: ( 1.3.6.1.4.1.4203.666.1.7 NAME 'entryCSN' DESC 'change seq uence number of the entry content' EQUALITY CSNMatch ORDERING CSNOrderingMatc h SYNTAX 1.3.6.1.4.1.4203.666.11.2.1{64} SINGLE-VALUE NO-USER-MODIFICATION US AGE directoryOperation ) olcAttributeTypes: ( 1.3.6.1.4.1.4203.666.1.13 NAME 'namingCSN' DESC 'change s equence number of the entry naming (RDN)' EQUALITY CSNMatch ORDERING CSNOrder ingMatch SYNTAX 1.3.6.1.4.1.4203.666.11.2.1{64} SINGLE-VALUE NO-USER-MODIFICA TION USAGE directoryOperation ) olcAttributeTypes: ( 1.3.6.1.4.1.4203.666.1.23 NAME 'syncreplCookie' DESC 'syn crepl Cookie for shadow copy' EQUALITY octetStringMatch ORDERING octetStringO rderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE NO-USER-MODIFI CATION USAGE dSAOperation ) olcAttributeTypes: ( 1.3.6.1.4.1.4203.666.1.25 NAME 'contextCSN' DESC 'the lar gest committed CSN of a context' EQUALITY CSNMatch ORDERING CSNOrderingMatch SYNTAX 1.3.6.1.4.1.4203.666.11.2.1{64} SINGLE-VALUE NO-USER-MODIFI>>> dnPrettyNormal: <cn=schema> => ldap_bv2dn(cn=schema,0) <= ldap_bv2dn(cn=schema)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=schema)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=schema)=0 <<< dnPrettyNormal: <cn=schema>, <cn=schema> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> <= str2entry(cn=schema) -> 0x7fcb0f61d108 => test_filter PRESENT => access_allowed: search access to "cn=schema,cn=config" "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config/cn=schema/cn={0}core.ldif" => str2entry: "dn: cn={0}core objectClass: olcSchemaConfig cn: {0}core olcAttributeTypes: {0}( 2.5.4.2 NAME 'knowledgeInformation' DESC 'RFC2256: kno wledge information' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121. 1.15{32768} ) olcAttributeTypes: {1}( 2.5.4.4 NAME ( 'sn' 'surname' ) DESC 'RFC2256: last (f amily) name(s) for which the entity is known by' SUP name ) olcAttributeTypes: {2}( 2.5.4.5 NAME 'serialNumber' DESC 'RFC2256: serial numb er of the entity' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch S YNTAX 1.3.6.1.4.1.1466.115.121.1.44{64} ) olcAttributeTypes: {3}( 2.5.4.6 NAME ( 'c' 'countryName' ) DESC 'RFC2256: ISO- 3166 country 2-letter code' SUP name SINGLE-VALUE ) olcAttributeTypes: {4}( 2.5.4.7 NAME ( 'l' 'localityName' ) DESC 'RFC2256: loc ality which this object resides in' SUP name ) olcAttributeTypes: {5}( 2.5.4.8 NAME ( 'st' 'stateOrProvinceName' ) DESC 'RFC2 256: state or province which this object resides in' SUP name ) olcAttributeTypes: {6}( 2.5.4.9 NAME ( 'street' 'streetAddress' ) DESC 'RFC225 6: street address of this object' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreS ubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ) olcAttributeTypes: {7}( 2.5.4.10 NAME ( 'o' 'organizationName' ) DESC 'RFC2256 : organization this object belongs to' SUP name ) olcAttributeTypes: {8}( 2.5.4.11 NAME ( 'ou' 'organizationalUnitName' ) DESC ' RFC2256: organizational unit this object belongs to' SUP name ) olcAttributeTypes: {9}( 2.5.4.12 NAME 'title' DESC 'RFC2256: title associated with the entity' SUP name ) olcAttributeTypes: {10}( 2.5.4.14 NAME 'searchGuide' DESC 'RFC2256: search gui de, deprecated by enhancedSearchGuide' SYNTAX 1.3.6.1.4.1.1466.115.121.1.25 ) olcAttributeTypes: {11}( 2.5.4.15 NAME 'businessCategory' DESC 'RFC2256: busin ess category' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTA X 1.3.6.1.4.1.1466.115.121.1.15{128} ) olcAttributeTypes: {12}( 2.5.4.16 NAME 'postalAddress' DESC 'RFC2256: postal a ddress' EQUALITY caseIgnoreListMatch SUBSTR caseIgnoreListSubstringsMatch SYN TAX 1.3.6.1.4.1.1466.115.121.1.41 ) olcAttributeTypes: {13}( 2.5.4.17 NAME 'postalCode' DESC 'RFC2256: postal code ' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4. 1.1466.115.121.1.15{40} ) olcAttributeTypes: {14}( 2.5.4.18 NAME 'postOfficeBox' DESC 'RFC2256: Post Off ice Box' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3 .6.1.4.1.1466.115.121.1.15{40} ) olcAttributeTypes: {15}( 2.5.4.19 NAME 'physicalDeliveryOfficeName' DESC 'RFC2 256: Physical Delivery Office Name' EQUALITY caseIgnoreMatch SUBSTR caseIgnor eSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ) olcAttributeTypes: {16}( 2.5.4.20 NAME 'telephoneNumber' DESC 'RFC2256: Teleph one Number' EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMat ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50{32} ) olcAttributeTypes: {17}( 2.5.4.21 NAME 'telexNumber' DESC 'RFC2256: Telex Numb er' SYNTAX 1.3.6.1.4.1.1466.115.121.1.52 ) olcAttributeTypes: {18}( 2.5.4.22 NAME 'teletexTerminalIdentifier' DESC 'RFC22 56: Teletex Terminal Identifier' SYNTAX 1.3.6.1.4.1.1466.115.121.1.51 ) olcAttributeTypes: {19}( 2.5.4.23 NAME ( 'facsimileTelephoneNumber' 'fax' ) DE SC 'RFC2256: Facsimile (Fax) Telephone Number' SYNTAX 1.3.6.1.4.1.1466.115.12 1.1.22 ) olcAttributeTypes: {20}( 2.5.4.24 NAME 'x121Address' DESC 'RFC2256: X.121 Addr ess' EQUALITY numericStringMatch SUBSTR numericStringSubstringsMatch SYNTAX 1 .3.6.1.4.1.1466.115.121.1.36{15} ) olcAttributeTypes: {21}( 2.5.4.25 NAME 'internationaliSDNNumber' DESC 'RFC2256 : international ISDN number' EQUALITY numericStringMatch SUBSTR numericString SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{16} ) olcAttributeTypes: {22}( 2.5.4.26 NAME 'registeredAddress' DESC 'RFC2256: regi stered postal address' SUP postalAddress SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 ) olcAttributeTypes: {23}( 2.5.4.27 NAME 'destinationIndicator' DESC 'RFC2256: d estination indicator' EQUALITY caseIgnoreMatch SUBSTR cas>>> dnPrettyNormal: <cn={0}core> => ldap_bv2dn(cn={0}core,0) <= ldap_bv2dn(cn={0}core)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn={0}core)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn={0}core)=0 <<< dnPrettyNormal: <cn={0}core>, <cn={0}core> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> <= str2entry(cn={0}core) -> 0x7fcb0f61d108 => test_filter PRESENT => access_allowed: search access to "cn={0}core,cn=schema,cn=config" "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config/cn=schema/cn={1}cosine.ldif" => str2entry: "dn: cn={1}cosine objectClass: olcSchemaConfig cn: {1}cosine olcAttributeTypes: {0}( 0.9.2342.19200300.100.1.2 NAME 'textEncodedORAddress' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1. 1466.115.121.1.15{256} ) olcAttributeTypes: {1}( 0.9.2342.19200300.100.1.4 NAME 'info' DESC 'RFC1274: g eneral information' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{2048} ) olcAttributeTypes: {2}( 0.9.2342.19200300.100.1.5 NAME ( 'drink' 'favouriteDri nk' ) DESC 'RFC1274: favorite drink' EQUALITY caseIgnoreMatch SUBSTR caseIgno reSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ) olcAttributeTypes: {3}( 0.9.2342.19200300.100.1.6 NAME 'roomNumber' DESC 'RFC1 274: room number' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch S YNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ) olcAttributeTypes: {4}( 0.9.2342.19200300.100.1.7 NAME 'photo' DESC 'RFC1274: photo (G3 fax)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.23{25000} ) olcAttributeTypes: {5}( 0.9.2342.19200300.100.1.8 NAME 'userClass' DESC 'RFC12 74: category of user' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMat ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ) olcAttributeTypes: {6}( 0.9.2342.19200300.100.1.9 NAME 'host' DESC 'RFC1274: h ost computer' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTA X 1.3.6.1.4.1.1466.115.121.1.15{256} ) olcAttributeTypes: {7}( 0.9.2342.19200300.100.1.10 NAME 'manager' DESC 'RFC127 4: DN of manager' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115 .121.1.12 ) olcAttributeTypes: {8}( 0.9.2342.19200300.100.1.11 NAME 'documentIdentifier' D ESC 'RFC1274: unique identifier of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ) olcAttributeTypes: {9}( 0.9.2342.19200300.100.1.12 NAME 'documentTitle' DESC ' RFC1274: title of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstri ngsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ) olcAttributeTypes: {10}( 0.9.2342.19200300.100.1.13 NAME 'documentVersion' DES C 'RFC1274: version of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSu bstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ) olcAttributeTypes: {11}( 0.9.2342.19200300.100.1.14 NAME 'documentAuthor' DESC 'RFC1274: DN of author of document' EQUALITY distinguishedNameMatch SYNTAX 1 .3.6.1.4.1.1466.115.121.1.12 ) olcAttributeTypes: {12}( 0.9.2342.19200300.100.1.15 NAME 'documentLocation' DE SC 'RFC1274: location of document original' EQUALITY caseIgnoreMatch SUBSTR c aseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ) olcAttributeTypes: {13}( 0.9.2342.19200300.100.1.20 NAME ( 'homePhone' 'homeTe lephoneNumber' ) DESC 'RFC1274: home telephone number' EQUALITY telephoneNumb erMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121 .1.50 ) olcAttributeTypes: {14}( 0.9.2342.19200300.100.1.21 NAME 'secretary' DESC 'RFC 1274: DN of secretary' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.146 6.115.121.1.12 ) olcAttributeTypes: {15}( 0.9.2342.19200300.100.1.22 NAME 'otherMailbox' SYNTAX 1.3.6.1.4.1.1466.115.121.1.39 ) olcAttributeTypes: {16}( 0.9.2342.19200300.100.1.26 NAME 'aRecord' EQUALITY ca seIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) olcAttributeTypes: {17}( 0.9.2342.19200300.100.1.27 NAME 'mDRecord' EQUALITY c aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) olcAttributeTypes: {18}( 0.9.2342.19200300.100.1.28 NAME 'mXRecord' EQUALITY c aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) olcAttributeTypes: {19}( 0.9.2342.19200300.100.1.29 NAME 'nSRecord' EQUALITY c aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) olcAttributeTypes: {20}( 0.9.2342.19200300.100.1.30 NAME 'sOARecord' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) olcAttributeTypes: {21}( 0.9.2342.19200300.100.1.31 NAME 'cNAMERecord' EQUALIT Y caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) olcAttributeTypes: {22}( 0.9.2342.19200300.100.1.38 NAM>>> dnPrettyNormal: <cn={1}cosine> => ldap_bv2dn(cn={1}cosine,0) <= ldap_bv2dn(cn={1}cosine)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn={1}cosine)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn={1}cosine)=0 <<< dnPrettyNormal: <cn={1}cosine>, <cn={1}cosine> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> <= str2entry(cn={1}cosine) -> 0x7fcb0f61d108 => test_filter PRESENT => access_allowed: search access to "cn={1}cosine,cn=schema,cn=config" "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config/cn=schema/cn={2}inetorgperson.ldif" => str2entry: "dn: cn={2}inetorgperson objectClass: olcSchemaConfig cn: {2}inetorgperson olcAttributeTypes: {0}( 2.16.840.1.113730.3.1.1 NAME 'carLicense' DESC 'RFC279 8: vehicle license or registration plate' EQUALITY caseIgnoreMatch SUBSTR cas eIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) olcAttributeTypes: {1}( 2.16.840.1.113730.3.1.2 NAME 'departmentNumber' DESC ' RFC2798: identifies a department within an organization' EQUALITY caseIgnoreM atch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) olcAttributeTypes: {2}( 2.16.840.1.113730.3.1.241 NAME 'displayName' DESC 'RFC 2798: preferred name to be used when displaying entries' EQUALITY caseIgnoreM atch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SI NGLE-VALUE ) olcAttributeTypes: {3}( 2.16.840.1.113730.3.1.3 NAME 'employeeNumber' DESC 'RF C2798: numerically identifies an employee within an organization' EQUALITY ca seIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.12 1.1.15 SINGLE-VALUE ) olcAttributeTypes: {4}( 2.16.840.1.113730.3.1.4 NAME 'employeeType' DESC 'RFC2 798: type of employment for a person' EQUALITY caseIgnoreMatch SUBSTR caseIgn oreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) olcAttributeTypes: {5}( 0.9.2342.19200300.100.1.60 NAME 'jpegPhoto' DESC 'RFC2 798: a JPEG image' SYNTAX 1.3.6.1.4.1.1466.115.121.1.28 ) olcAttributeTypes: {6}( 2.16.840.1.113730.3.1.39 NAME 'preferredLanguage' DESC 'RFC2798: preferred written or spoken language for a person' EQUALITY caseIg noreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1. 15 SINGLE-VALUE ) olcAttributeTypes: {7}( 2.16.840.1.113730.3.1.40 NAME 'userSMIMECertificate' D ESC 'RFC2798: PKCS#7 SignedData used to support S/MIME' SYNTAX 1.3.6.1.4.1.14 66.115.121.1.5 ) olcAttributeTypes: {8}( 2.16.840.1.113730.3.1.216 NAME 'userPKCS12' DESC 'RFC2 798: personal identity information, a PKCS #12 PFX' SYNTAX 1.3.6.1.4.1.1466.1 15.121.1.5 ) olcObjectClasses: {0}( 2.16.840.1.113730.3.2.2 NAME 'inetOrgPerson' DESC 'RFC2 798: Internet Organizational Person' SUP organizationalPerson STRUCTURAL MAY ( audio $ businessCategory $ carLicense $ departmentNumber $ displayName $ em ployeeNumber $ employeeType $ givenName $ homePhone $ homePostalAddress $ ini tials $ jpegPhoto $ labeledURI $ mail $ manager $ mobile $ o $ pager $ photo $ roomNumber $ secretary $ uid $ userCertificate $ x500uniqueIdentifier $ pre ferredLanguage $ userSMIMECertificate $ userPKCS12 ) ) structuralObjectClass: olcSchemaConfig entryUUID: ac0d4294-c861-1031-9bd1-5591ba7dfe32 creatorsName: cn=config createTimestamp: 20121121195915Z entryCSN: 20121121195915Z#000000#00#000000 modifiersName: cn=config modifyTimestamp: 20121121195915Z " >>> dnPrettyNormal: <cn={2}inetorgperson> => ldap_bv2dn(cn={2}inetorgperson,0) <= ldap_bv2dn(cn={2}inetorgperson)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn={2}inetorgperson)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn={2}inetorgperson)=0 <<< dnPrettyNormal: <cn={2}inetorgperson>, <cn={2}inetorgperson> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> <= str2entry(cn={2}inetorgperson) -> 0x7fcb0f61d108 => test_filter PRESENT => access_allowed: search access to "cn={2}inetorgperson,cn=schema,cn=config" "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config/cn=schema/cn={3}nis.ldif" => str2entry: "dn: cn={3}nis objectClass: olcSchemaConfig cn: {3}nis olcAttributeTypes: {0}( 1.3.6.1.1.1.1.2 NAME 'gecos' DESC 'The GECOS field; th e common name' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatc h SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ) olcAttributeTypes: {1}( 1.3.6.1.1.1.1.3 NAME 'homeDirectory' DESC 'The absolut e path to the home directory' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1 466.115.121.1.26 SINGLE-VALUE ) olcAttributeTypes: {2}( 1.3.6.1.1.1.1.4 NAME 'loginShell' DESC 'The path to th e login shell' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.2 6 SINGLE-VALUE ) olcAttributeTypes: {3}( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange' EQUALITY integ erMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) olcAttributeTypes: {4}( 1.3.6.1.1.1.1.6 NAME 'shadowMin' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) olcAttributeTypes: {5}( 1.3.6.1.1.1.1.7 NAME 'shadowMax' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) olcAttributeTypes: {6}( 1.3.6.1.1.1.1.8 NAME 'shadowWarning' EQUALITY integerM atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) olcAttributeTypes: {7}( 1.3.6.1.1.1.1.9 NAME 'shadowInactive' EQUALITY integer Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) olcAttributeTypes: {8}( 1.3.6.1.1.1.1.10 NAME 'shadowExpire' EQUALITY integerM atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) olcAttributeTypes: {9}( 1.3.6.1.1.1.1.11 NAME 'shadowFlag' EQUALITY integerMat ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) olcAttributeTypes: {10}( 1.3.6.1.1.1.1.12 NAME 'memberUid' EQUALITY caseExactI A5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1. 26 ) olcAttributeTypes: {11}( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup' EQUALITY ca seExactIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.11 5.121.1.26 ) olcAttributeTypes: {12}( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple' DESC 'Netgr oup triple' SYNTAX 1.3.6.1.1.1.0.0 ) olcAttributeTypes: {13}( 1.3.6.1.1.1.1.15 NAME 'ipServicePort' EQUALITY intege rMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) olcAttributeTypes: {14}( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol' SUP name ) olcAttributeTypes: {15}( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber' EQUALITY int egerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) olcAttributeTypes: {16}( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber' EQUALITY integer Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) olcAttributeTypes: {17}( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber' DESC 'IP address ' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} ) olcAttributeTypes: {18}( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber' DESC 'IP netw ork' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SI NGLE-VALUE ) olcAttributeTypes: {19}( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber' DESC 'IP netm ask' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SI NGLE-VALUE ) olcAttributeTypes: {20}( 1.3.6.1.1.1.1.22 NAME 'macAddress' DESC 'MAC address' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} ) olcAttributeTypes: {21}( 1.3.6.1.1.1.1.23 NAME 'bootParameter' DESC 'rpc.bootp aramd parameter' SYNTAX 1.3.6.1.1.1.0.1 ) olcAttributeTypes: {22}( 1.3.6.1.1.1.1.24 NAME 'bootFile' DESC 'Boot image nam e' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) olcAttributeTypes: {23}( 1.3.6.1.1.1.1.26 NAME 'nisMapName' SUP name ) olcAttributeTypes: {24}( 1.3.6.1.1.1.1.27 NAME 'nisMapEntry' EQUALITY caseExac tIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121. 1.26{1024} SINGLE-VALUE ) olcObjectClasses: {0}( 1.3.6.1.1.1.2.0 NAME 'posixAccount' DESC 'Abstraction o f an account with POSIX attributes' SUP top AUXILIARY MUST ( cn $ uid $ uidNu mber $ gidNumber $ homeDirectory ) MAY ( userPassword $ loginShell $ gecos $ description ) ) olcObjectClasses: {1}( 1.3.6.1.1.1.2.1 NAME 'shadowAccount' DESC 'Additional a ttributes for shadow passwords'>>> dnPrettyNormal: <cn={3}nis> => ldap_bv2dn(cn={3}nis,0) <= ldap_bv2dn(cn={3}nis)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn={3}nis)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn={3}nis)=0 <<< dnPrettyNormal: <cn={3}nis>, <cn={3}nis> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> <= str2entry(cn={3}nis) -> 0x7fcb0f61d108 => test_filter PRESENT => access_allowed: search access to "cn={3}nis,cn=schema,cn=config" "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config/cn=schema/cn={4}ad.ldif" => str2entry: "dn: cn={4}AD objectClass: olcSchemaConfig cn: {4}AD olcAttributeTypes: {0}( 1.2.840.113556.1.2.447 NAME 'mailNickname' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ) olcAttributeTypes: {1}( 1.2.840.113556.1.4.782 NAME 'objectCategory' SYNTA X 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE ) olcAttributeTypes: {2}( 1.2.840.113556.1.4.221 NAME 'sAMAccountName' SYNTA X 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ) olcObjectClasses: {0}( 1.2.840.113556.1.5.9 NAME 'user' SUP organizational Person STRUCTURAL MAY ( objectCategory $ mailNickname $ sAMAccountName $ di splayName $ mail ) ) olcObjectClasses: {1}( 1.2.840.113556.1.3.23 NAME 'container' SUP top STRU CTURAL MUST cn ) structuralObjectClass: olcSchemaConfig entryUUID: 6feaa26c-cf6d-1031-986d-79eaa697be5e creatorsName: cn=config createTimestamp: 20121130191106Z entryCSN: 20121130191106Z#000000#00#000000 modifiersName: cn=config modifyTimestamp: 20121130191106Z " >>> dnPrettyNormal: <cn={4}AD> => ldap_bv2dn(cn={4}AD,0) <= ldap_bv2dn(cn={4}AD)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn={4}AD)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn={4}ad)=0 <<< dnPrettyNormal: <cn={4}AD>, <cn={4}ad> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> <= str2entry(cn={4}AD) -> 0x7fcb0f61d108 => test_filter PRESENT => access_allowed: search access to "cn={4}AD,cn=schema,cn=config" "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config/olcDatabase={-1}frontend.ldif" => str2entry: "dn: olcDatabase={-1}frontend objectClass: olcDatabaseConfig objectClass: olcFrontendConfig olcDatabase: {-1}frontend olcLastMod: TRUE olcMaxDerefDepth: 0 olcReadOnly: FALSE olcSchemaDN: cn=Subschema structuralObjectClass: olcDatabaseConfig entryUUID: ac0d771e-c861-1031-9bd3-5591ba7dfe32 creatorsName: cn=config createTimestamp: 20121121195915Z olcTimeLimit: unlimited olcSizeLimit: unlimited entryCSN: 20121214201101.233668Z#000000#000#000000 modifiersName: cn=admin,cn=config modifyTimestamp: 20121214201101Z " >>> dnPrettyNormal: <olcDatabase={-1}frontend> => ldap_bv2dn(olcDatabase={-1}frontend,0) <= ldap_bv2dn(olcDatabase={-1}frontend)=0 => ldap_dn2bv(272) <= ldap_dn2bv(olcDatabase={-1}frontend)=0 => ldap_dn2bv(272) <= ldap_dn2bv(olcDatabase={-1}frontend)=0 <<< dnPrettyNormal: <olcDatabase={-1}frontend>, <olcDatabase={-1}frontend> >>> dnNormalize: <cn=Subschema> => ldap_bv2dn(cn=Subschema,0) <= ldap_bv2dn(cn=Subschema)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=subschema)=0 <<< dnNormalize: <cn=subschema> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> >>> dnNormalize: <cn=admin,cn=config> => ldap_bv2dn(cn=admin,cn=config,0) <= ldap_bv2dn(cn=admin,cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=admin,cn=config)=0 <<< dnNormalize: <cn=admin,cn=config> <= str2entry(olcDatabase={-1}frontend) -> 0x7fcb0f61d108 => test_filter PRESENT => access_allowed: search access to "olcDatabase={-1}frontend,cn=config" "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 >>> dnPrettyNormal: <cn=Subschema> => ldap_bv2dn(cn=Subschema,0) <= ldap_bv2dn(cn=Subschema)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Subschema)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=subschema)=0 <<< dnPrettyNormal: <cn=Subschema>, <cn=subschema> >>> dnPrettyNormal: <cn=Subschema> => ldap_bv2dn(cn=Subschema,0) <= ldap_bv2dn(cn=Subschema)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Subschema)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=subschema)=0 <<< dnPrettyNormal: <cn=Subschema>, <cn=subschema> ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config/olcDatabase={0}config.ldif" => str2entry: "dn: olcDatabase={0}config objectClass: olcDatabaseConfig olcDatabase: {0}config olcLastMod: TRUE olcMaxDerefDepth: 15 olcReadOnly: FALSE olcRootDN: cn=admin,cn=config olcRootPW:: Y29uZmln structuralObjectClass: olcDatabaseConfig entryUUID: ac0d8a60-c861-1031-9bd4-5591ba7dfe32 creatorsName: cn=config createTimestamp: 20121121195915Z entryCSN: 20121121195915Z#000000#00#000000 modifiersName: cn=config modifyTimestamp: 20121121195915Z " >>> dnPrettyNormal: <olcDatabase={0}config> => ldap_bv2dn(olcDatabase={0}config,0) <= ldap_bv2dn(olcDatabase={0}config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(olcDatabase={0}config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(olcDatabase={0}config)=0 <<< dnPrettyNormal: <olcDatabase={0}config>, <olcDatabase={0}config> >>> dnNormalize: <cn=admin,cn=config> => ldap_bv2dn(cn=admin,cn=config,0) <= ldap_bv2dn(cn=admin,cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=admin,cn=config)=0 <<< dnNormalize: <cn=admin,cn=config> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> <= str2entry(olcDatabase={0}config) -> 0x7fcb0f61d108 => test_filter PRESENT => access_allowed: search access to "olcDatabase={0}config,cn=config" "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 >>> dnPrettyNormal: <cn=admin,cn=config> => ldap_bv2dn(cn=admin,cn=config,0) <= ldap_bv2dn(cn=admin,cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=admin,cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=admin,cn=config)=0 <<< dnPrettyNormal: <cn=admin,cn=config>, <cn=admin,cn=config> >>> dnPrettyNormal: <cn=admin,cn=config> => ldap_bv2dn(cn=admin,cn=config,0) <= ldap_bv2dn(cn=admin,cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=admin,cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=admin,cn=config)=0 <<< dnPrettyNormal: <cn=admin,cn=config>, <cn=admin,cn=config> ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config/olcDatabase={1}bdb.ldif" => str2entry: "dn: olcDatabase={1}bdb objectClass: olcDatabaseConfig objectClass: olcBdbConfig olcDatabase: {1}bdb olcSuffix: dc=htc,dc=com olcAccess: {0}to * by dn.base="uid=push-master,cn=nupointproxy,dc=internal" w rite by * +0 break olcAccess: {1}to dn.base="" by * read olcAccess: {2}to dn.base="cn=subschema" by * read olcAccess: {3}to dn.subtree="cn=monitor" by users read by * none olcAccess: {4}to * by self write by * read olcLastMod: TRUE olcMaxDerefDepth: 15 olcReadOnly: FALSE olcRootPW:: e1NIQX01ZW42RzZNZXpScm9UM1hLcWtkUE9tWS9CZlE9 olcDbDirectory: /var/lib/ldap/htc.com olcDbCacheSize: 150000 olcDbCheckpoint: 102400 1 olcDbConfig: {0}set_cachesize 0 268435465 1 olcDbConfig: {1}set_lg_bsize 2097152 olcDbConfig: {2}set_lg_regionmax 262144 olcDbConfig: {3}set_flags DB_LOG_AUTOREMOVE olcDbNoSync: TRUE olcDbDirtyRead: FALSE olcDbIDLcacheSize: 150000 olcDbIndex: objectClass pres,eq olcDbIndex: cn pres,eq,sub olcDbIndex: ou pres,eq,sub olcDbIndex: mail pres,eq,sub olcDbIndex: sn pres,eq,sub olcDbIndex: givenName pres,eq,sub olcDbLinearIndex: FALSE olcDbMode: 384 olcDbSearchStack: 16 olcDbShmKey: 12321 olcDbCacheFree: 1 structuralObjectClass: olcBdbConfig entryUUID: ac0da28e-c861-1031-9bd5-5591ba7dfe32 creatorsName: cn=config createTimestamp: 20121121195915Z olcRootDN: uid=Manager,dc=htc,dc=com olcUpdateDN: uid=Push-Master,cn=NupointProxy,dc=internal entryCSN: 20121212180425.846656Z#000000#000#000000 modifiersName: cn=admin,cn=config modifyTimestamp: 20121212180425Z " >>> dnPrettyNormal: <olcDatabase={1}bdb> => ldap_bv2dn(olcDatabase={1}bdb,0) <= ldap_bv2dn(olcDatabase={1}bdb)=0 => ldap_dn2bv(272) <= ldap_dn2bv(olcDatabase={1}bdb)=0 => ldap_dn2bv(272) <= ldap_dn2bv(olcDatabase={1}bdb)=0 <<< dnPrettyNormal: <olcDatabase={1}bdb>, <olcDatabase={1}bdb> >>> dnNormalize: <dc=htc,dc=com> => ldap_bv2dn(dc=htc,dc=com,0) <= ldap_bv2dn(dc=htc,dc=com)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=htc,dc=com)=0 <<< dnNormalize: <dc=htc,dc=com> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> >>> dnNormalize: <uid=Manager,dc=htc,dc=com> => ldap_bv2dn(uid=Manager,dc=htc,dc=com,0) <= ldap_bv2dn(uid=Manager,dc=htc,dc=com)=0 => ldap_dn2bv(272) <= ldap_dn2bv(uid=manager,dc=htc,dc=com)=0 <<< dnNormalize: <uid=manager,dc=htc,dc=com> >>> dnNormalize: <cn=admin,cn=config> => ldap_bv2dn(cn=admin,cn=config,0) <= ldap_bv2dn(cn=admin,cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=admin,cn=config)=0 <<< dnNormalize: <cn=admin,cn=config> <= str2entry(olcDatabase={1}bdb) -> 0x7fcb0f61d108 => test_filter PRESENT => access_allowed: search access to "olcDatabase={1}bdb,cn=config" "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 >>> dnPrettyNormal: <dc=htc,dc=com> => ldap_bv2dn(dc=htc,dc=com,0) <= ldap_bv2dn(dc=htc,dc=com)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=htc,dc=com)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=htc,dc=com)=0 <<< dnPrettyNormal: <dc=htc,dc=com>, <dc=htc,dc=com> >>> dnPrettyNormal: <uid=Manager,dc=htc,dc=com> => ldap_bv2dn(uid=Manager,dc=htc,dc=com,0) <= ldap_bv2dn(uid=Manager,dc=htc,dc=com)=0 => ldap_dn2bv(272) <= ldap_dn2bv(uid=Manager,dc=htc,dc=com)=0 => ldap_dn2bv(272) <= ldap_dn2bv(uid=manager,dc=htc,dc=com)=0 <<< dnPrettyNormal: <uid=Manager,dc=htc,dc=com>, <uid=manager,dc=htc,dc=com> >>> dnPrettyNormal: <uid=Push-Master,cn=NupointProxy,dc=internal> => ldap_bv2dn(uid=Push-Master,cn=NupointProxy,dc=internal,0) <= ldap_bv2dn(uid=Push-Master,cn=NupointProxy,dc=internal)=0 => ldap_dn2bv(272) <= ldap_dn2bv(uid=Push-Master,cn=NupointProxy,dc=internal)=0 => ldap_dn2bv(272) <= ldap_dn2bv(uid=push-master,cn=nupointproxy,dc=internal)=0 <<< dnPrettyNormal: <uid=Push-Master,cn=NupointProxy,dc=internal>, <uid=push-master,cn=nupointproxy,dc=internal> bdb_db_init: Initializing BDB database >>> dnPrettyNormal: <dc=htc,dc=com> => ldap_bv2dn(dc=htc,dc=com,0) <= ldap_bv2dn(dc=htc,dc=com)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=htc,dc=com)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=htc,dc=com)=0 <<< dnPrettyNormal: <dc=htc,dc=com>, <dc=htc,dc=com> >>> dnNormalize: <uid=push-master,cn=nupointproxy,dc=internal> => ldap_bv2dn(uid=push-master,cn=nupointproxy,dc=internal,0) <= ldap_bv2dn(uid=push-master,cn=nupointproxy,dc=internal)=0 => ldap_dn2bv(272) <= ldap_dn2bv(uid=push-master,cn=nupointproxy,dc=internal)=0 <<< dnNormalize: <uid=push-master,cn=nupointproxy,dc=internal> Backend ACL: access to * by dn.base="uid=push-master,cn=nupointproxy,dc=internal" write by * +0 break /etc/openldap/slapd.d: line 1: warning: cannot assess the validity of the ACL scope within backend naming context >>> dnNormalize: <> <<< dnNormalize: <> Backend ACL: access to dn.base="" by * read /etc/openldap/slapd.d: line 1: warning: ACL appears to be out of scope within backend naming context >>> dnNormalize: <cn=subschema> => ldap_bv2dn(cn=subschema,0) <= ldap_bv2dn(cn=subschema)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=subschema)=0 <<< dnNormalize: <cn=subschema> Backend ACL: access to dn.base="cn=subschema" by * read /etc/openldap/slapd.d: line 1: warning: ACL appears to be out of scope within backend naming context >>> dnNormalize: <cn=monitor> => ldap_bv2dn(cn=monitor,0) <= ldap_bv2dn(cn=monitor)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=monitor)=0 <<< dnNormalize: <cn=monitor> Backend ACL: access to dn.subtree="cn=monitor" by users read by * none /etc/openldap/slapd.d: line 1: warning: ACL appears to be out of scope within backend naming context Backend ACL: access to * by self write by * read /etc/openldap/slapd.d: line 1: warning: cannot assess the validity of the ACL scope within backend naming context >>> dnPrettyNormal: <uid=Manager,dc=htc,dc=com> => ldap_bv2dn(uid=Manager,dc=htc,dc=com,0) <= ldap_bv2dn(uid=Manager,dc=htc,dc=com)=0 => ldap_dn2bv(272) <= ldap_dn2bv(uid=Manager,dc=htc,dc=com)=0 => ldap_dn2bv(272) <= ldap_dn2bv(uid=manager,dc=htc,dc=com)=0 <<< dnPrettyNormal: <uid=Manager,dc=htc,dc=com>, <uid=manager,dc=htc,dc=com> >>> dnPrettyNormal: <uid=Push-Master,cn=NupointProxy,dc=internal> => ldap_bv2dn(uid=Push-Master,cn=NupointProxy,dc=internal,0) <= ldap_bv2dn(uid=Push-Master,cn=NupointProxy,dc=internal)=0 => ldap_dn2bv(272) <= ldap_dn2bv(uid=Push-Master,cn=NupointProxy,dc=internal)=0 => ldap_dn2bv(272) <= ldap_dn2bv(uid=push-master,cn=nupointproxy,dc=internal)=0 <<< dnPrettyNormal: <uid=Push-Master,cn=NupointProxy,dc=internal>, <uid=push-master,cn=nupointproxy,dc=internal> index objectClass 0x0006 index cn 0x0716 index ou 0x0716 index mail 0x0716 index sn 0x0716 index givenName 0x0716 ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config/olcDatabase={2}bdb.ldif" => str2entry: "dn: olcDatabase={2}bdb objectClass: olcDatabaseConfig objectClass: olcBdbConfig olcDatabase: {2}bdb olcSuffix: dc=internal olcAddContentAcl: FALSE olcLastMod: TRUE olcMaxDerefDepth: 15 olcReadOnly: FALSE olcRootDN: cn=admin,cn=config olcSyncUseSubentry: FALSE olcMonitoring: TRUE olcDbDirectory: /var/lib/ldap/htc.internal olcDbCacheSize: 1000 olcDbCheckpoint: 100 63 olcDbNoSync: FALSE olcDbDirtyRead: FALSE olcDbIDLcacheSize: 0 olcDbLinearIndex: FALSE olcDbMode: 0600 olcDbSearchStack: 16 olcDbShmKey: 0 olcDbCacheFree: 1 olcDbDNcacheSize: 0 structuralObjectClass: olcBdbConfig entryUUID: 92ff370e-dcc9-1031-8a59-533cee5baf07 creatorsName: cn=config createTimestamp: 20121217191324Z entryCSN: 20121217191324.652465Z#000000#000#000000 modifiersName: cn=config modifyTimestamp: 20121217191324Z " >>> dnPrettyNormal: <olcDatabase={2}bdb> => ldap_bv2dn(olcDatabase={2}bdb,0) <= ldap_bv2dn(olcDatabase={2}bdb)=0 => ldap_dn2bv(272) <= ldap_dn2bv(olcDatabase={2}bdb)=0 => ldap_dn2bv(272) <= ldap_dn2bv(olcDatabase={2}bdb)=0 <<< dnPrettyNormal: <olcDatabase={2}bdb>, <olcDatabase={2}bdb> >>> dnNormalize: <dc=internal> => ldap_bv2dn(dc=internal,0) <= ldap_bv2dn(dc=internal)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=internal)=0 <<< dnNormalize: <dc=internal> >>> dnNormalize: <cn=admin,cn=config> => ldap_bv2dn(cn=admin,cn=config,0) <= ldap_bv2dn(cn=admin,cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=admin,cn=config)=0 <<< dnNormalize: <cn=admin,cn=config> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> <= str2entry(olcDatabase={2}bdb) -> 0x7fcb0f61d108 => test_filter PRESENT => access_allowed: search access to "olcDatabase={2}bdb,cn=config" "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 >>> dnPrettyNormal: <dc=internal> => ldap_bv2dn(dc=internal,0) <= ldap_bv2dn(dc=internal)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=internal)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=internal)=0 <<< dnPrettyNormal: <dc=internal>, <dc=internal> >>> dnPrettyNormal: <cn=admin,cn=config> => ldap_bv2dn(cn=admin,cn=config,0) <= ldap_bv2dn(cn=admin,cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=admin,cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=admin,cn=config)=0 <<< dnPrettyNormal: <cn=admin,cn=config>, <cn=admin,cn=config> bdb_db_init: Initializing BDB database >>> dnPrettyNormal: <dc=internal> => ldap_bv2dn(dc=internal,0) <= ldap_bv2dn(dc=internal)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=internal)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=internal)=0 <<< dnPrettyNormal: <dc=internal>, <dc=internal> >>> dnPrettyNormal: <cn=admin,cn=config> => ldap_bv2dn(cn=admin,cn=config,0) <= ldap_bv2dn(cn=admin,cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=admin,cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=admin,cn=config)=0 <<< dnPrettyNormal: <cn=admin,cn=config>, <cn=admin,cn=config> ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config/olcDatabase={3}monitor.ldif" => str2entry: "dn: olcDatabase={3}monitor objectClass: olcDatabaseConfig olcDatabase: {3}monitor olcAddContentAcl: FALSE olcLastMod: TRUE olcMaxDerefDepth: 15 olcReadOnly: FALSE olcSyncUseSubentry: FALSE olcMonitoring: FALSE structuralObjectClass: olcDatabaseConfig entryUUID: 54da1e50-d8df-1031-85bf-235d062b63b6 creatorsName: cn=config createTimestamp: 20121212193904Z entryCSN: 20121212193904.665758Z#000000#000#000000 modifiersName: cn=config modifyTimestamp: 20121212193904Z " >>> dnPrettyNormal: <olcDatabase={3}monitor> => ldap_bv2dn(olcDatabase={3}monitor,0) <= ldap_bv2dn(olcDatabase={3}monitor)=0 => ldap_dn2bv(272) <= ldap_dn2bv(olcDatabase={3}monitor)=0 => ldap_dn2bv(272) <= ldap_dn2bv(olcDatabase={3}monitor)=0 <<< dnPrettyNormal: <olcDatabase={3}monitor>, <olcDatabase={3}monitor> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> >>> dnNormalize: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnNormalize: <cn=config> <= str2entry(olcDatabase={3}monitor) -> 0x7fcb0f61d108 => test_filter PRESENT => access_allowed: search access to "olcDatabase={3}monitor,cn=config" "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 >>> dnPrettyNormal: <cn=Monitor> => ldap_bv2dn(cn=Monitor,0) <= ldap_bv2dn(cn=Monitor)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Monitor)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=monitor)=0 <<< dnPrettyNormal: <cn=Monitor>, <cn=monitor> send_ldap_result: conn=-1 op=0 p=0 send_ldap_result: err=0 matched="" text="" matching_rule_use_init 1.2.840.113556.1.4.804 (integerBitOrMatch): matchingRuleUse: ( 1.2.840.113556.1.4.804 NAME 'integerBitOrMatch' APPLIES ( supportedLDAPVersion $ entryTtl $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcWriteTimeout $ olcDbCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $ olcDbIDLcacheSize $ olcDbSearchStack $ olcDbShmKey $ olcChainMaxReferralDepth $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ mailPreferenceOption $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) ) 1.2.840.113556.1.4.803 (integerBitAndMatch): matchingRuleUse: ( 1.2.840.113556.1.4.803 NAME 'integerBitAndMatch' APPLIES ( supportedLDAPVersion $ entryTtl $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcWriteTimeout $ olcDbCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $ olcDbIDLcacheSize $ olcDbSearchStack $ olcDbShmKey $ olcChainMaxReferralDepth $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ mailPreferenceOption $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) ) 1.3.6.1.4.1.1466.109.114.2 (caseIgnoreIA5Match): matchingRuleUse: ( 1.3.6.1.4.1.1466.109.114.2 NAME 'caseIgnoreIA5Match' APPLIES ( altServer $ olcDbConfig $ mail $ dc $ associatedDomain $ email $ aRecord $ mDRecord $ mXRecord $ nSRecord $ sOARecord $ cNAMERecord $ janetMailbox $ gecos $ homeDirectory $ loginShell $ memberUid $ memberNisNetgroup $ ipHostNumber $ ipNetworkNumber $ ipNetmaskNumber $ macAddress $ bootFile $ nisMapEntry ) ) 1.3.6.1.4.1.1466.109.114.1 (caseExactIA5Match): matchingRuleUse: ( 1.3.6.1.4.1.1466.109.114.1 NAME 'caseExactIA5Match' APPLIES ( altServer $ olcDbConfig $ mail $ dc $ associatedDomain $ email $ aRecord $ mDRecord $ mXRecord $ nSRecord $ sOARecord $ cNAMERecord $ janetMailbox $ gecos $ homeDirectory $ loginShell $ memberUid $ memberNisNetgroup $ ipHostNumber $ ipNetworkNumber $ ipNetmaskNumber $ macAddress $ bootFile $ nisMapEntry ) ) 2.5.13.39 (certificateListMatch): 2.5.13.38 (certificateListExactMatch): matchingRuleUse: ( 2.5.13.38 NAME 'certificateListExactMatch' APPLIES ( authorityRevocationList $ certificateRevocationList $ deltaRevocationList ) ) 2.5.13.35 (certificateMatch): 2.5.13.34 (certificateExactMatch): matchingRuleUse: ( 2.5.13.34 NAME 'certificateExactMatch' APPLIES ( userCertificate $ cACertificate ) ) 2.5.13.30 (objectIdentifierFirstComponentMatch): matchingRuleUse: ( 2.5.13.30 NAME 'objectIdentifierFirstComponentMatch' APPLIES ( supportedControl $ supportedExtension $ supportedFeatures $ ldapSyntaxes $ supportedApplicationContext ) ) 2.5.13.29 (integerFirstComponentMatch): matchingRuleUse: ( 2.5.13.29 NAME 'integerFirstComponentMatch' APPLIES ( supportedLDAPVersion $ entryTtl $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcWriteTimeout $ olcDbCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $ olcDbIDLcacheSize $ olcDbSearchStack $ olcDbShmKey $ olcChainMaxReferralDepth $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ mailPreferenceOption $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) ) 2.5.13.27 (generalizedTimeMatch): matchingRuleUse: ( 2.5.13.27 NAME 'generalizedTimeMatch' APPLIES ( createTimestamp $ modifyTimestamp ) ) 2.5.13.24 (protocolInformationMatch): matchingRuleUse: ( 2.5.13.24 NAME 'protocolInformationMatch' APPLIES protocolInformation ) 2.5.13.23 (uniqueMemberMatch): matchingRuleUse: ( 2.5.13.23 NAME 'uniqueMemberMatch' APPLIES uniqueMember ) 2.5.13.22 (presentationAddressMatch): matchingRuleUse: ( 2.5.13.22 NAME 'presentationAddressMatch' APPLIES presentationAddress ) 2.5.13.20 (telephoneNumberMatch): matchingRuleUse: ( 2.5.13.20 NAME 'telephoneNumberMatch' APPLIES ( telephoneNumber $ homePhone $ mobile $ pager ) ) 2.5.13.17 (octetStringMatch): matchingRuleUse: ( 2.5.13.17 NAME 'octetStringMatch' APPLIES ( userPassword $ olcDbCryptKey ) ) 2.5.13.16 (bitStringMatch): matchingRuleUse: ( 2.5.13.16 NAME 'bitStringMatch' APPLIES x500UniqueIdentifier ) 2.5.13.14 (integerMatch): matchingRuleUse: ( 2.5.13.14 NAME 'integerMatch' APPLIES ( supportedLDAPVersion $ entryTtl $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcWriteTimeout $ olcDbCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $ olcDbIDLcacheSize $ olcDbSearchStack $ olcDbShmKey $ olcChainMaxReferralDepth $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ mailPreferenceOption $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) ) 2.5.13.13 (booleanMatch): matchingRuleUse: ( 2.5.13.13 NAME 'booleanMatch' APPLIES ( hasSubordinates $ olcAddContentAcl $ olcGentleHUP $ olcHidden $ olcLastMod $ olcMirrorMode $ olcMonitoring $ olcReadOnly $ olcReverseLookup $ olcSyncUseSubentry $ olcDbChecksum $ olcDbNoSync $ olcDbDirtyRead $ olcDbLinearIndex $ olcChainCacheURI $ olcChainReturnError $ olcDbRebindAsUser $ olcDbChaseReferrals $ olcDbProxyWhoAmI $ olcDbSingleConn $ olcDbUseTemporaryConn $ olcDbNoRefs $ olcDbNoUndefFilter ) ) 2.5.13.11 (caseIgnoreListMatch): matchingRuleUse: ( 2.5.13.11 NAME 'caseIgnoreListMatch' APPLIES ( postalAddress $ registeredAddress $ homePostalAddress ) ) 2.5.13.8 (numericStringMatch): matchingRuleUse: ( 2.5.13.8 NAME 'numericStringMatch' APPLIES ( x121Address $ internationaliSDNNumber ) ) 2.5.13.7 (caseExactSubstringsMatch): matchingRuleUse: ( 2.5.13.7 NAME 'caseExactSubstringsMatch' APPLIES ( serialNumber $ destinationIndicator $ dnQualifier ) ) 2.5.13.6 (caseExactOrderingMatch): matchingRuleUse: ( 2.5.13.6 NAME 'caseExactOrderingMatch' APPLIES ( serialNumber $ destinationIndicator $ dnQualifier ) ) 2.5.13.5 (caseExactMatch): matchingRuleUse: ( 2.5.13.5 NAME 'caseExactMatch' APPLIES ( supportedSASLMechanisms $ vendorName $ vendorVersion $ ref $ name $ cn $ uid $ labeledURI $ description $ olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ olcArgsFile $ olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $ olcAuthzPolicy $ olcAuthzRegexp $ olcBackend $ olcDatabase $ olcDisallows $ olcDitContentRules $ olcInclude $ olcLdapSyntaxes $ olcLimits $ olcLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $ olcObjectClasses $ olcObjectIdentifier $ olcOverlay $ olcPasswordCryptSaltFormat $ olcPasswordHash $ olcPidFile $ olcPlugin $ olcPluginLogFile $ olcReferral $ olcReplica $ olcReplicaArgsFile $ olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestrict $ olcRootDSE $ olcRootPW $ olcSaslAuxprops $ olcSaslHost $ olcSaslRealm $ olcSaslSecProps $ olcSecurity $ olcServerID $ olcSizeLimit $ olcSortVals $ olcSubordinate $ olcSyncrepl $ olcTCPBuffer $ olcTimeLimit $ olcTLSCACertificateFile $ olcTLSCACertificatePath $ olcTLSCertificateFile $ olcTLSCertificateKeyFile $ olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSCRLFile $ olcTLSRandFile $ olcTLSVerifyClient $ olcTLSDHParamFile $ olcTLSProtocolMin $ olcUpdateRef $ olcDbDirectory $ olcDbCheckpoint $ olcDbCryptFile $ olcDbPageSize $ olcDbIndex $ olcDbLockDetect $ olcDbMode $ olcChainingBehavior $ olcDbURI $ olcDbStartTLS $ olcDbNetworkTimeout $ olcDbQuarantine $ olcDbACLPasswd $ olcDbACLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $ olcDbIDAssertMode $ olcDbIDAssertAuthzFrom $ olcDbTFSupport $ olcDbTimeout $ olcDbIdleTimeout $ olcDbConnTtl $ olcDbCancel $ olcDbIDAssertPassThru $ olcDbSocketPath $ olcDbSocketExtensions $ knowledgeInformation $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $ title $ businessCategory $ postalCode $ postOfficeBox $ physicalDeliveryOfficeName $ destinationIndicator $ givenName $ initials $ generationQualifier $ dnQualifier $ houseIdentifier $ dmdName $ pseudonym $ textEncodedORAddress $ info $ drink $ roomNumber $ userClass $ host $ documentIdentifier $ documentTitle $ documentVersion $ documentLocation $ personalTitle $ co $ uniqueIdentifier $ organizationalStatus $ buildingName $ documentPublisher $ carLicense $ departmentNumber $ displayName $ employeeNumber $ employeeType $ preferredLanguage $ ipServiceProtocol $ nisMapName $ mailNickname $ sAMAccountName ) ) 2.5.13.4 (caseIgnoreSubstringsMatch): matchingRuleUse: ( 2.5.13.4 NAME 'caseIgnoreSubstringsMatch' APPLIES ( serialNumber $ destinationIndicator $ dnQualifier ) ) 2.5.13.3 (caseIgnoreOrderingMatch): matchingRuleUse: ( 2.5.13.3 NAME 'caseIgnoreOrderingMatch' APPLIES ( serialNumber $ destinationIndicator $ dnQualifier ) ) 2.5.13.2 (caseIgnoreMatch): matchingRuleUse: ( 2.5.13.2 NAME 'caseIgnoreMatch' APPLIES ( supportedSASLMechanisms $ vendorName $ vendorVersion $ ref $ name $ cn $ uid $ labeledURI $ description $ olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ olcArgsFile $ olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $ olcAuthzPolicy $ olcAuthzRegexp $ olcBackend $ olcDatabase $ olcDisallows $ olcDitContentRules $ olcInclude $ olcLdapSyntaxes $ olcLimits $ olcLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $ olcObjectClasses $ olcObjectIdentifier $ olcOverlay $ olcPasswordCryptSaltFormat $ olcPasswordHash $ olcPidFile $ olcPlugin $ olcPluginLogFile $ olcReferral $ olcReplica $ olcReplicaArgsFile $ olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestrict $ olcRootDSE $ olcRootPW $ olcSaslAuxprops $ olcSaslHost $ olcSaslRealm $ olcSaslSecProps $ olcSecurity $ olcServerID $ olcSizeLimit $ olcSortVals $ olcSubordinate $ olcSyncrepl $ olcTCPBuffer $ olcTimeLimit $ olcTLSCACertificateFile $ olcTLSCACertificatePath $ olcTLSCertificateFile $ olcTLSCertificateKeyFile $ olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSCRLFile $ olcTLSRandFile $ olcTLSVerifyClient $ olcTLSDHParamFile $ olcTLSProtocolMin $ olcUpdateRef $ olcDbDirectory $ olcDbCheckpoint $ olcDbCryptFile $ olcDbPageSize $ olcDbIndex $ olcDbLockDetect $ olcDbMode $ olcChainingBehavior $ olcDbURI $ olcDbStartTLS $ olcDbNetworkTimeout $ olcDbQuarantine $ olcDbACLPasswd $ olcDbACLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $ olcDbIDAssertMode $ olcDbIDAssertAuthzFrom $ olcDbTFSupport $ olcDbTimeout $ olcDbIdleTimeout $ olcDbConnTtl $ olcDbCancel $ olcDbIDAssertPassThru $ olcDbSocketPath $ olcDbSocketExtensions $ knowledgeInformation $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $ title $ businessCategory $ postalCode $ postOfficeBox $ physicalDeliveryOfficeName $ destinationIndicator $ givenName $ initials $ generationQualifier $ dnQualifier $ houseIdentifier $ dmdName $ pseudonym $ textEncodedORAddress $ info $ drink $ roomNumber $ userClass $ host $ documentIdentifier $ documentTitle $ documentVersion $ documentLocation $ personalTitle $ co $ uniqueIdentifier $ organizationalStatus $ buildingName $ documentPublisher $ carLicense $ departmentNumber $ displayName $ employeeNumber $ employeeType $ preferredLanguage $ ipServiceProtocol $ nisMapName $ mailNickname $ sAMAccountName ) ) 1.2.36.79672281.1.13.3 (rdnMatch): 2.5.13.1 (distinguishedNameMatch): matchingRuleUse: ( 2.5.13.1 NAME 'distinguishedNameMatch' APPLIES ( creatorsName $ modifiersName $ subschemaSubentry $ entryDN $ namingContexts $ aliasedObjectName $ dynamicSubtrees $ distinguishedName $ seeAlso $ olcDefaultSearchBase $ olcRootDN $ olcSchemaDN $ olcSuffix $ olcUpdateDN $ olcDbACLAuthcDn $ olcDbIDAssertAuthcDn $ olcRelay $ member $ owner $ roleOccupant $ manager $ documentAuthor $ secretary $ associatedName $ dITRedirect $ objectCategory ) ) 2.5.13.0 (objectIdentifierMatch): matchingRuleUse: ( 2.5.13.0 NAME 'objectIdentifierMatch' APPLIES ( supportedControl $ supportedExtension $ supportedFeatures $ supportedApplicationContext ) ) slapd startup: initiated. backend_startup_one: starting "cn=config" config_back_db_open Backend ACL: access to * by * none config_back_db_open: line 0: warning: cannot assess the validity of the ACL scope within backend naming context backend_startup_one: starting "dc=htc,dc=com" bdb_db_open: "dc=htc,dc=com" bdb_db_open: database "dc=htc,dc=com": dbenv_open(/var/lib/ldap/htc.com). backend_startup_one: starting "dc=internal" bdb_db_open: "dc=internal" bdb_db_open: warning - no DB_CONFIG file found in directory /var/lib/ldap/htc.internal: (2). Expect poor performance for suffix "dc=internal". bdb_db_open: database "dc=internal": dbenv_open(/var/lib/ldap/htc.internal). backend_startup_one: starting "cn=Monitor" >>> dnNormalize: <cn=Monitor> <<< dnNormalize: <cn=monitor> >>> dnPretty: <cn=Backends> => ldap_bv2dn(cn=Backends,0) <= ldap_bv2dn(cn=Backends)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Backends)=0 <<< dnPretty: <cn=Backends> >>> dnNormalize: <cn=Backends> <<< dnNormalize: <cn=backends> >>> dnPretty: <cn=Connections> => ldap_bv2dn(cn=Connections,0) <= ldap_bv2dn(cn=Connections)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Connections)=0 <<< dnPretty: <cn=Connections> >>> dnNormalize: <cn=Connections> <<< dnNormalize: <cn=connections> >>> dnPretty: <cn=Databases> => ldap_bv2dn(cn=Databases,0) <= ldap_bv2dn(cn=Databases)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Databases)=0 <<< dnPretty: <cn=Databases> >>> dnNormalize: <cn=Databases> <<< dnNormalize: <cn=databases> >>> dnPretty: <cn=Listeners> => ldap_bv2dn(cn=Listeners,0) <= ldap_bv2dn(cn=Listeners)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Listeners)=0 <<< dnPretty: <cn=Listeners> >>> dnNormalize: <cn=Listeners> <<< dnNormalize: <cn=listeners> >>> dnPretty: <cn=Log> => ldap_bv2dn(cn=Log,0) <= ldap_bv2dn(cn=Log)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Log)=0 <<< dnPretty: <cn=Log> >>> dnNormalize: <cn=Log> <<< dnNormalize: <cn=log> >>> dnPretty: <cn=Operations> => ldap_bv2dn(cn=Operations,0) <= ldap_bv2dn(cn=Operations)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Operations)=0 <<< dnPretty: <cn=Operations> >>> dnNormalize: <cn=Operations> <<< dnNormalize: <cn=operations> >>> dnPretty: <cn=Overlays> => ldap_bv2dn(cn=Overlays,0) <= ldap_bv2dn(cn=Overlays)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Overlays)=0 <<< dnPretty: <cn=Overlays> >>> dnNormalize: <cn=Overlays> <<< dnNormalize: <cn=overlays> >>> dnPretty: <cn=SASL> => ldap_bv2dn(cn=SASL,0) <= ldap_bv2dn(cn=SASL)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=SASL)=0 <<< dnPretty: <cn=SASL> >>> dnNormalize: <cn=SASL> <<< dnNormalize: <cn=sasl> >>> dnPretty: <cn=Statistics> => ldap_bv2dn(cn=Statistics,0) <= ldap_bv2dn(cn=Statistics)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Statistics)=0 <<< dnPretty: <cn=Statistics> >>> dnNormalize: <cn=Statistics> <<< dnNormalize: <cn=statistics> >>> dnPretty: <cn=Threads> => ldap_bv2dn(cn=Threads,0) <= ldap_bv2dn(cn=Threads)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Threads)=0 <<< dnPretty: <cn=Threads> >>> dnNormalize: <cn=Threads> <<< dnNormalize: <cn=threads> >>> dnPretty: <cn=Time> => ldap_bv2dn(cn=Time,0) <= ldap_bv2dn(cn=Time)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Time)=0 <<< dnPretty: <cn=Time> >>> dnNormalize: <cn=Time> <<< dnNormalize: <cn=time> >>> dnPretty: <cn=TLS> => ldap_bv2dn(cn=TLS,0) <= ldap_bv2dn(cn=TLS)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=TLS)=0 <<< dnPretty: <cn=TLS> >>> dnNormalize: <cn=TLS> <<< dnNormalize: <cn=tls> >>> dnPretty: <cn=Waiters> => ldap_bv2dn(cn=Waiters,0) <= ldap_bv2dn(cn=Waiters)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Waiters)=0 <<< dnPretty: <cn=Waiters> >>> dnNormalize: <cn=Waiters> <<< dnNormalize: <cn=waiters> >>> dnNormalize: <cn=Backend 0> <<< dnNormalize: <cn=backend 0> >>> dnNormalize: <cn=Database 0,cn=Databases,cn=Monitor> => ldap_bv2dn(cn=Database 0,cn=Databases,cn=Monitor,0) <= ldap_bv2dn(cn=Database 0,cn=Databases,cn=Monitor)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=database 0,cn=databases,cn=monitor)=0 <<< dnNormalize: <cn=database 0,cn=databases,cn=monitor> >>> dnNormalize: <cn=Backend 1> <<< dnNormalize: <cn=backend 1> >>> dnNormalize: <cn=Backend 2> <<< dnNormalize: <cn=backend 2> >>> dnNormalize: <cn=Database 3,cn=Databases,cn=Monitor> => ldap_bv2dn(cn=Database 3,cn=Databases,cn=Monitor,0) <= ldap_bv2dn(cn=Database 3,cn=Databases,cn=Monitor)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=database 3,cn=databases,cn=monitor)=0 <<< dnNormalize: <cn=database 3,cn=databases,cn=monitor> >>> dnNormalize: <cn=Backend 3> <<< dnNormalize: <cn=backend 3> >>> dnNormalize: <cn=Database 1,cn=Databases,cn=Monitor> => ldap_bv2dn(cn=Database 1,cn=Databases,cn=Monitor,0) <= ldap_bv2dn(cn=Database 1,cn=Databases,cn=Monitor)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=database 1,cn=databases,cn=monitor)=0 <<< dnNormalize: <cn=database 1,cn=databases,cn=monitor> >>> dnNormalize: <cn=Database 2,cn=Databases,cn=Monitor> => ldap_bv2dn(cn=Database 2,cn=Databases,cn=Monitor,0) <= ldap_bv2dn(cn=Database 2,cn=Databases,cn=Monitor)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=database 2,cn=databases,cn=monitor)=0 <<< dnNormalize: <cn=database 2,cn=databases,cn=monitor> >>> dnNormalize: <cn=Backend 4> <<< dnNormalize: <cn=backend 4> >>> dnNormalize: <cn=Backend 5> <<< dnNormalize: <cn=backend 5> >>> dnNormalize: <cn=Backend 6> <<< dnNormalize: <cn=backend 6> >>> dnNormalize: <cn=Backend 7> <<< dnNormalize: <cn=backend 7> >>> dnNormalize: <cn=Backend 8> <<< dnNormalize: <cn=backend 8> >>> dnNormalize: <cn=Backend 9> <<< dnNormalize: <cn=backend 9> >>> dnNormalize: <cn=Backend 10> <<< dnNormalize: <cn=backend 10> >>> dnNormalize: <cn=Backend 11> <<< dnNormalize: <cn=backend 11> >>> dnNormalize: <cn=Max File Descriptors> <<< dnNormalize: <cn=max file descriptors> >>> dnNormalize: <cn=Total> <<< dnNormalize: <cn=total> >>> dnNormalize: <cn=Current> <<< dnNormalize: <cn=current> >>> dnNormalize: <cn=Frontend> <<< dnNormalize: <cn=frontend> >>> dnNormalize: <cn=Database 0> <<< dnNormalize: <cn=database 0> >>> dnNormalize: <cn=Backend 0,cn=Backends,cn=Monitor> => ldap_bv2dn(cn=Backend 0,cn=Backends,cn=Monitor,0) <= ldap_bv2dn(cn=Backend 0,cn=Backends,cn=Monitor)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=backend 0,cn=backends,cn=monitor)=0 <<< dnNormalize: <cn=backend 0,cn=backends,cn=monitor> >>> dnNormalize: <cn=Database 1> <<< dnNormalize: <cn=database 1> >>> dnNormalize: <cn=Backend 3,cn=Backends,cn=Monitor> => ldap_bv2dn(cn=Backend 3,cn=Backends,cn=Monitor,0) <= ldap_bv2dn(cn=Backend 3,cn=Backends,cn=Monitor)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=backend 3,cn=backends,cn=monitor)=0 <<< dnNormalize: <cn=backend 3,cn=backends,cn=monitor> >>> dnNormalize: <cn=Database 2> <<< dnNormalize: <cn=database 2> >>> dnNormalize: <cn=Backend 3,cn=Backends,cn=Monitor> => ldap_bv2dn(cn=Backend 3,cn=Backends,cn=Monitor,0) <= ldap_bv2dn(cn=Backend 3,cn=Backends,cn=Monitor)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=backend 3,cn=backends,cn=monitor)=0 <<< dnNormalize: <cn=backend 3,cn=backends,cn=monitor> >>> dnNormalize: <cn=Database 3> <<< dnNormalize: <cn=database 3> >>> dnNormalize: <cn=Backend 2,cn=Backends,cn=Monitor> => ldap_bv2dn(cn=Backend 2,cn=Backends,cn=Monitor,0) <= ldap_bv2dn(cn=Backend 2,cn=Backends,cn=Monitor)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=backend 2,cn=backends,cn=monitor)=0 <<< dnNormalize: <cn=backend 2,cn=backends,cn=monitor> >>> dnNormalize: <cn=Listener 0> <<< dnNormalize: <cn=listener 0> >>> dnNormalize: <cn=Listener 1> <<< dnNormalize: <cn=listener 1> >>> dnNormalize: <cn=Bind> <<< dnNormalize: <cn=bind> >>> dnNormalize: <cn=Unbind> <<< dnNormalize: <cn=unbind> >>> dnNormalize: <cn=Search> <<< dnNormalize: <cn=search> >>> dnNormalize: <cn=Compare> <<< dnNormalize: <cn=compare> >>> dnNormalize: <cn=Modify> <<< dnNormalize: <cn=modify> >>> dnNormalize: <cn=Modrdn> <<< dnNormalize: <cn=modrdn> >>> dnNormalize: <cn=Add> <<< dnNormalize: <cn=add> >>> dnNormalize: <cn=Delete> <<< dnNormalize: <cn=delete> >>> dnNormalize: <cn=Abandon> <<< dnNormalize: <cn=abandon> >>> dnNormalize: <cn=Extended> <<< dnNormalize: <cn=extended> >>> dnNormalize: <cn=Overlay 0> <<< dnNormalize: <cn=overlay 0> >>> dnNormalize: <cn=Overlay 1> <<< dnNormalize: <cn=overlay 1> >>> dnNormalize: <cn=Overlay 2> <<< dnNormalize: <cn=overlay 2> >>> dnNormalize: <cn=Overlay 3> <<< dnNormalize: <cn=overlay 3> >>> dnNormalize: <cn=Bytes> <<< dnNormalize: <cn=bytes> >>> dnNormalize: <cn=PDU> <<< dnNormalize: <cn=pdu> >>> dnNormalize: <cn=Entries> <<< dnNormalize: <cn=entries> >>> dnNormalize: <cn=Referrals> <<< dnNormalize: <cn=referrals> >>> dnNormalize: <cn=Max> <<< dnNormalize: <cn=max> >>> dnNormalize: <cn=Max Pending> <<< dnNormalize: <cn=max pending> >>> dnNormalize: <cn=Open> <<< dnNormalize: <cn=open> >>> dnNormalize: <cn=Starting> <<< dnNormalize: <cn=starting> >>> dnNormalize: <cn=Active> <<< dnNormalize: <cn=active> >>> dnNormalize: <cn=Pending> <<< dnNormalize: <cn=pending> >>> dnNormalize: <cn=Backload> <<< dnNormalize: <cn=backload> >>> dnNormalize: <cn=State> <<< dnNormalize: <cn=state> >>> dnNormalize: <cn=Runqueue> <<< dnNormalize: <cn=runqueue> >>> dnNormalize: <cn=Tasklist> <<< dnNormalize: <cn=tasklist> >>> dnNormalize: <cn=Start> <<< dnNormalize: <cn=start> >>> dnNormalize: <cn=Current> <<< dnNormalize: <cn=current> >>> dnNormalize: <cn=Uptime> <<< dnNormalize: <cn=uptime> >>> dnNormalize: <cn=Read> <<< dnNormalize: <cn=read> >>> dnNormalize: <cn=Write> <<< dnNormalize: <cn=write> slapd starting daemon: added 4r listener=(nil) daemon: added 7r listener=0x7fcb0f5bc2d0 daemon: added 8r listener=0x7fcb0f5bc390 daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: activity on 1 descriptor daemon: activity on: slap_listener_activate(7): daemon: epoll: listen=7 busy daemon: epoll: listen=8 active_threads=0 tvp=zero >>> slap_listener(ldap:///) daemon: activity on 1 descriptor daemon: activity on:daemon: listen=7, new connection on 16 daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: added 16r (active) listener=(nil) conn=1000 fd=16 ACCEPT from IP=172.24.10.201:23867 (IP=0.0.0.0:389) daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: activity on 1 descriptor daemon: activity on: 16r daemon: read active on 16 daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero connection_get(16) connection_get(16): got connid=1000 connection_read(16): checking for input on id=1000 ber_get_next ldap_read: want=8, got=8 0000: 30 60 02 01 01 60 33 02 0`...`3. ldap_read: want=90, got=90 0000: 01 03 04 19 75 69 64 3d 4e 75 50 6f 69 6e 74 2c ....uid=NuPoint, 0010: 64 63 3d 68 74 63 2c 64 63 3d 63 6f 6d 80 13 64 dc=htc,dc=com..d 0020: 65 63 20 31 33 20 32 30 31 32 20 63 72 65 61 74 ec 13 2012 creat 0030: 65 64 a0 26 30 24 04 16 31 2e 32 2e 38 34 30 2e ed.&0$..1.2.840. 0040: 31 31 33 35 35 36 2e 31 2e 34 2e 33 31 39 01 01 113556.1.4.319.. 0050: ff 04 07 30 05 02 01 0a 04 00 ...0...... ber_get_next: tag 0x30 len 96 contents: ber_dump: buf=0x7fcad8000920 ptr=0x7fcad8000920 end=0x7fcad8000980 len=96 0000: 02 01 01 60 33 02 01 03 04 19 75 69 64 3d 4e 75 ...`3.....uid=Nu 0010: 50 6f 69 6e 74 2c 64 63 3d 68 74 63 2c 64 63 3d Point,dc=htc,dc= 0020: 63 6f 6d 80 13 64 65 63 20 31 33 20 32 30 31 32 com..dec 13 2012 0030: 20 63 72 65 61 74 65 64 a0 26 30 24 04 16 31 2e created.&0$..1. 0040: 32 2e 38 34 30 2e 31 31 33 35 35 36 2e 31 2e 34 2.840.113556.1.4 0050: 2e 33 31 39 01 01 ff 04 07 30 05 02 01 0a 04 00 .319.....0...... op tag 0x60, time 1355857467 ber_get_next ldap_read: want=8 error=Resource temporarily unavailable daemon: activity on 1 descriptor daemon: activity on: conn=1000 op=0 do_bind daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero ber_scanf fmt ({imt) ber: ber_dump: buf=0x7fcad8000920 ptr=0x7fcad8000923 end=0x7fcad8000980 len=93 0000: 60 33 02 01 03 04 19 75 69 64 3d 4e 75 50 6f 69 `3.....uid=NuPoi 0010: 6e 74 2c 64 63 3d 68 74 63 2c 64 63 3d 63 6f 6d nt,dc=htc,dc=com 0020: 80 13 64 65 63 20 31 33 20 32 30 31 32 20 63 72 ..dec 13 2012 cr 0030: 65 61 74 65 64 a0 26 30 24 04 16 31 2e 32 2e 38 eated.&0$..1.2.8 0040: 34 30 2e 31 31 33 35 35 36 2e 31 2e 34 2e 33 31 40.113556.1.4.31 0050: 39 01 01 ff 04 07 30 05 02 01 0a 04 00 9.....0...... ber_scanf fmt (m}) ber: ber_dump: buf=0x7fcad8000920 ptr=0x7fcad8000943 end=0x7fcad8000980 len=61 0000: 00 13 64 65 63 20 31 33 20 32 30 31 32 20 63 72 ..dec 13 2012 cr 0010: 65 61 74 65 64 a0 26 30 24 04 16 31 2e 32 2e 38 eated.&0$..1.2.8 0020: 34 30 2e 31 31 33 35 35 36 2e 31 2e 34 2e 33 31 40.113556.1.4.31 0030: 39 01 01 ff 04 07 30 05 02 01 0a 04 00 9.....0...... => get_ctrls ber_scanf fmt ({m) ber: ber_dump: buf=0x7fcad8000920 ptr=0x7fcad800095a end=0x7fcad8000980 len=38 0000: 30 24 04 16 31 2e 32 2e 38 34 30 2e 31 31 33 35 0$..1.2.840.1135 0010: 35 36 2e 31 2e 34 2e 33 31 39 01 01 ff 04 07 30 56.1.4.319.....0 0020: 05 02 01 0a 04 00 ...... ber_scanf fmt (b) ber: ber_dump: buf=0x7fcad8000920 ptr=0x7fcad8000974 end=0x7fcad8000980 len=12 0000: 00 01 ff 04 07 30 05 02 01 0a 04 00 .....0...... ber_scanf fmt (m) ber: ber_dump: buf=0x7fcad8000920 ptr=0x7fcad8000977 end=0x7fcad8000980 len=9 0000: 04 07 30 05 02 01 0a 04 00 ..0...... => get_ctrls: oid="1.2.840.113556.1.4.319" (critical) <= get_ctrls: n=1 rc=12 err="critical extension is unavailable" send_ldap_result: conn=1000 op=0 p=3 send_ldap_result: err=12 matched="" text="critical extension is unavailable" send_ldap_response: msgid=1 tag=97 err=12 ber_flush2: 47 bytes to sd 16 0000: 30 2d 02 01 01 61 28 0a 01 0c 04 00 04 21 63 72 0-...a(......!cr 0010: 69 74 69 63 61 6c 20 65 78 74 65 6e 73 69 6f 6e itical extension 0020: 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 is unavailable ldap_write: want=47, written=47 0000: 30 2d 02 01 01 61 28 0a 01 0c 04 00 04 21 63 72 0-...a(......!cr 0010: 69 74 69 63 61 6c 20 65 78 74 65 6e 73 69 6f 6e itical extension 0020: 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 is unavailable conn=1000 op=0 RESULT tag=97 err=12 text=critical extension is unavailable conn=1000 op=0 do_bind: get_ctrls failed daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero daemon: activity on 1 descriptor daemon: activity on: 16r daemon: read active on 16 daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero connection_get(16) connection_get(16): got connid=1000 connection_read(16): checking for input on id=1000 ber_get_next ldap_read: want=8, got=0 ber_get_next on fd 16 failed errno=0 (Success) connection_read(16): input error=-2 id=1000, closing. connection_closing: readying conn=1000 sd=16 for close connection_close: conn=1000 sd=16 daemon: activity on 1 descriptor daemon: activity on: daemon: removing 16 conn=1000 fd=16 closed (connection lost) daemon: epoll: listen=7 active_threads=0 tvp=zero daemon: epoll: listen=8 active_threads=0 tvp=zero ^Cdaemon: shutdown requested and initiated. daemon: closing 7 daemon: closing 8 slapd shutdown: waiting for 0 operations/tasks to finish slapd shutdown: initiated ====> bdb_cache_release_all ====> bdb_cache_release_all slapd destroy: freeing system resources. slapd stopped. [root@radius1 openldap]# exit exit Script done on Tue 18 Dec 2012 03:06:10 PM EST ********************************************************************** HTC Disclaimer: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. **********************************************************************

3 2

Re: Fwd: Multi-Master OpenLDAP Replication for 3 nodes -- slapadd command failing
by fal patel 05 Jan '13

05 Jan '13

Oho, so you agree that the OpenLDAP Guide Section 18.3.3 "N-Way Multi-Master" fails to work as is with the Section 10.2 "Creating a database off-line", specifically with Section 10.2.1 "The slapadd program"? And you're failing or refusing to provide a LDIF file for the above that that actually works? That means you don't have "enough understanding and general competence" to make your own product, OpenLDAP, work according to the description in your own manual, the "OpenLDAP 2.4 Administrator's Guide". Your product is a joke and you're another. I hereby unsubscribe from this mailing list. Fal On Thu, Jan 3, 2013 at 9:51 PM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote: > --On Thursday, January 03, 2013 9:28 PM -0800 fal patel < > fal0patel(a)gmail.com> wrote: > > It should be acceptable as an LDIF as input to slapadd. >> If it is not, it is buggy by definition. >> Remember, we should be able to perform database configuration OFF-LINE. >> ie. without slapd running. >> And obviously when off-line, slapadd works whereas ldapmodify, ldapadd >> etc. cannot. >> > > If you would spend the time to start with a basic cn=config setup, and > then perform the ldap modifications as noted in the admin guide, your end > result would be a cn=config DB you could *slapcat* into LDIF, which you > could then use as a template for loading other servers. In fact, you'd be > long done with this if you'd simply done that very simple thing. > > Just because slapadd doesn't parse LDIF meant for ldap modify does *not* > mean it is buggy. It means you are following the admin guide. > > The admin guide is not a document that explains how to do anything and > everything under the sun. It is a general guide that gives working > examples of how to do various things. The end user is supposed to have > enough understanding and general competence to be able to extrapolate how > to go from there. > > In addition, you've also been pointed to test suites that set up > multi-master replication of cn=config. You could have trivially exported > those cn=config DB's via slapcat as well. > > You seem awfully determined to have other people take the time to do your > work for you, rather than doing what you could have already done weeks ago > in a few minutes. > > > --Quanah > > > -- > > Quanah Gibson-Mount > Sr. Member of Technical Staff > Zimbra, Inc > A Division of VMware, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration >

1 0

Re: About TLS - ldaps search
by Bheeshma SM 05 Jan '13

05 Jan '13

Is there a specific way, i have to configure the slapd to listem to 636 port..? And does the 389 search is a secure search...? Is there a particular way of Starting the TLS operation..? Thanks in advance On Fri, Jan 4, 2013 at 4:31 PM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote: > --On Friday, January 04, 2013 4:09 PM -0800 Bheeshma SM < > bheeshma.manjunath(a)gmail.com> wrote: > > >> Hi guys. >> >> I have a problem in Openldap 2.4.33 on RHEL 5.8 >> >> I am able to do a " ldapsearch -x -p 389 -h -D<> -w<> -b<> " >> >> but i am not able to do >> >> " ldapsearch -x -p 636 -h -D<> -w<> -b<> >> > > Sounds like slapd is not configured to listen to port 636. No amount of > mucking with ldapsearch is going to change that. > > I would note that you can do secure searches over port 389 just fine. > Simply use the startTLS operation. > > --Quanah > > -- > > Quanah Gibson-Mount > Sr. Member of Technical Staff > Zimbra, Inc > A Division of VMware, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration >

2 1

About TLS - ldaps search
by Bheeshma SM 05 Jan '13

05 Jan '13

Hi guys. I have a problem in Openldap 2.4.33 on RHEL 5.8 I am able to do a *" ldapsearch -x -p 389 -h -D<> -w<> -b<> "* but i am not able to do *" ldapsearch -x -p 636 -h -D<> -w<> -b<>* I have done all the changes in ldap.conf and certificates are working fine. The weird thing is *"ldapsearch -x -H **ldaps://hostname* <ldaps://hostname>* -D <> -w <> -b<> " is working fine.* What i am trying to do is-- I want to disable the 389 port so that is no searches running in the non-secure port. So can any1 tell me why the *" ldapsearch -x -p 636 -h -D<> -w<> -b<>" [secure search is not working]* Please help me out in this. Thanks in advance. -bhee

2 1

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical January 2013