openldap-technical September 2020

openldap-technical@openldap.org

34 participants
34 discussions

memberof Overlay not showing in base search
by Umar Draz 10 Sep '20

10 Sep '20

Hi, I am running OpenLDAP server on Ubuntu 18. The memberOf attribute is not showing in ldap simple search, if I do the following then memberOf attribute is hidden. *ldapsearch -Y external -H ldapi:/// -b dc=example,dc=com* # udraz, Users, example.com <http://lablynx.com/> dn: uid=udraz,ou=Users,dc=example,dc=com objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount uid: udraz sn: Draz givenName: Umar mail: udraz(a)example.com cn: Umar Draz displayName: Umar Draz uidNumber: 5000 gidNumber: 5000 gecos: Umar Draz loginShell: /bin/bash homeDirectory: /home/udraz But if I do the following then memberOf attribute appear *ldapsearch -Y external -H ldapi:/// -b dc=example,dc=com memberOf* # udraz, Users, example.com dn: uid=udraz,ou=Users,dc=example,dc=com memberOf: cn=developers,ou=Users,dc=example,dc=com Would you please help me how to solve this

7 8

LDAP Tool Box packages (was: OpenLDAP 2.4.53 available)
by Clément OUDOT 09 Sep '20

09 Sep '20

Le lun. 7 sept. 2020 à 17:37, <project(a)openldap.org> a écrit : > > OpenLDAP 2.4.53 is now available for download as detailed on our download page: > > https://www.openldap.org/software/download/ LTB packages for OpenLDAP 2.4.53 are also available: https://projects.ow2.org/view/ldaptoolbox/ltb-openldap-2-4-53-packages-rele… Clément.

1 0

mdb_opinfo_get: err MDB_READERS_FULL: Environment maxreaders limit reached(-30790)
by Christopher Paul 08 Sep '20

08 Sep '20

Hello OpenLDAP-Technical, I am running slamd tests against OpenLDAP 2.4.44 (RHEL7; client is RHEL shop so stuck for now at this version). I realize that olcThreads: 128 is probably overkill for most systems, but when I tried it, I got the captioned error. The max that olcThreads can be set to it seems is 128 minus the number of syncrepls you have. Otherwise it looks like that with enough client connections, this error will happen, and operations will fail err=80 (internal error). -- Chris Paul Rex Consulting, Inc https://www.rexconsulting.net

2 2

acl for attrs with regex
by Stefan Kania 08 Sep '20

08 Sep '20

Hello, I would like to set ACLs to a bunch of attributes via ACL. Is it possible to use regular expressions in the <what>x field for attrs, someting like access to attrs.regex=[a.*] by ..... read by * break I couldn't figure it out :-( If it is possible could someone please write a short example Thank you Stefan

3 2

Segfault upgrading to OpenLDAP 2.5.52 from 2.4.50 with curse form the past
by Francesco Malvezzi 07 Sep '20

07 Sep '20

hi experts, good morning you all. My OpenLDAP milieu is a two providers in mirrormode and a few consumers. They are all at version 2.4.50. A few days ago I have tried to upgrade to 2.4.52 a couple of consumers. After a while slapd seg faults; in order to let it start again I need a full sync; but after sometime it stops again. Rolling back to 2.4.50 sets everything fine again. I noticed I didn't read the release note in version 2.4.50 that said I would need to export / import the database if I have been using ppolicy in those time and had changed pwdChangedTime with Relax control (both apply to my setup). Do I need to perform the export / import on the providers first? If providers have a clean database, does syncrepl take care to clean databases on consumers without further export / import? Can my present segfault be linked to the above issue? Or should have it called its toll before? Thank you so much for your time, Francesco

3 3

Symas OpenLDAP for Linux RHEL7 & RHEL8 2.4.53-1 now available
by Quanah Gibson-Mount 07 Sep '20

07 Sep '20

Symas OpenLDAP for Linux on RHEL7 and RHEL8 for OpenLDAP 2.4.53-1 are now available. As previously noted, the RHEL8 packages differ from the Red Hat packages in that they do not contain Red Hat's patch violating RFC 4513 and RFC 6125. Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

groupOfNames vs. groupOfUniqueNames
by Olaf Hopp 07 Sep '20

07 Sep '20

Hi everybody, we are at the point of reorganising our LDAP. Currently we only have posixGroups, but in future we also want to support groupOfNames or groupOfUniqueNames My question what is the common sense of usage ? groupOfNames or groupOfUniqueNames ? I know your answers, you will say "it depends on your applications" but currently I have no application using it. All my current applications use my posixGroups. I just want to extend my LDAP for future use cases. So what to take : groupOf Names or groupOfUniqueNames besides posixGroup ? Regards, Olaf -- Karlsruher Institut für Technologie (KIT) ATIS - Abt. Technische Infrastruktur, Fakultät für Informatik Dipl.-Geophys. Olaf Hopp - Leitung IT-Dienste - Am Fasanengarten 5, Gebäude 50.34, Raum 009 76131 Karlsruhe Telefon: +49 721 608-43973 Fax: +49 721 608-46699 E-Mail: Olaf.Hopp(a)kit.edu atis.informatik.kit.edu www.kit.edu KIT – Die Forschungsuniversität in der Helmholtz-Gemeinschaft Das KIT ist seit 2010 als familiengerechte Hochschule zertifiziert.

5 7

Multiple LDAP admins
by Tayyab Saeed 07 Sep '20

07 Sep '20

Dear LDAP guys / Quanah, I want to create another LDAP administrative account with same or limited privileges. Kindly guide me or share any link which help to achieve the above goal. Thanks, Tayyab Saeed

3 4

OpenLDAP LTB packages (was: OpenLDAP 2.4.52 available)
by Clément OUDOT 06 Sep '20

06 Sep '20

Le ven. 28 août 2020 à 19:46, <project(a)openldap.org> a écrit : > > OpenLDAP 2.4.52 is now available for download Hello, LDAP Tool Box packages have been published (see announce: https://projects.ow2.org/view/ldaptoolbox/ltb-openldap-2-4-52-packages-rele…) We dropped support for Debian Wheezy, Debian Jessie and Centos/RHEL 6 as OpenLDAP 2.4.52 is requiring a version of OpenSSL that is not available on these systems. Cheers, Clément.

1 0

Re: Openldap performance question
by Amit Dongaonkar 04 Sep '20

04 Sep '20

Well I continue to read the documentation, however here are some observations: 1. Slapd is up and running all the time. 2. The service seems to go in a freeze mode for about 15 minutes or so and then responds again. 3. Once it starts responding and I attempt to change password (using self service password) it freezes again and does not respond for the next 15 minutes. 4. This behavior happens even when not attempting to change the password but just some basic searches using phpldapadmin. 5. The server is adequately providing the needed memory and computing resources so dont this that is causing the issue. Further any suggestions on what front end admin tool should be used with openldap. Thanks and Regards, *Amit Dongaonkar* On Fri, Sep 4, 2020 at 4:29 PM Quanah Gibson-Mount <quanah(a)symas.com> wrote: > > > --On Friday, September 4, 2020 5:12 PM -0400 Amit Dongaonkar > <amitd(a)nitssolutions.com> wrote: > > > As for the installation from the deb I was not aware the ubuntu provides > > its own build. > > > > > > After running the ldapwhoami the system takes some time to respond but > > eventually responds with > > "ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)" > > Sounds like either slapd is not running or you're attempting to connect in > an invalid fashion. I'd suggest doing some reading on how to use the ldap > client tools, how to start slapd, how to use and connect to slapd, etc. > > Regards, > Quanah > > > -- > > Quanah Gibson-Mount > Product Architect > Symas Corporation > Packaged, certified, and supported LDAP solutions powered by OpenLDAP: > <http://www.symas.com> >

3 3

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical September 2020