openldap-technical January 2024

openldap-technical@openldap.org

22 participants
21 discussions

RE25 testing call (2.5.17) #1
by Quanah Gibson-Mount 21 Jan '24

21 Jan '24

This is the first testing call for OpenLDAP 2.5.17. Depending on the results, this may be the only testing call. Generally, get the code for RE25: <https://git.openldap.org/openldap/openldap/-/archive/OPENLDAP_REL_ENG_2_5/o…> Extract, configure, and build. Execute the test suite (via make test) after it is built. Optionally, cd tests && make its to run through the regression suite. Thanks! OpenLDAP 2.5.17 Engineering Fixed liblber missing newline on long msg (ITS#10105) Fixed libldap exit handling with OpenSSL3 (ITS#9952) Fixed libldap with TLS and multiple ldap URIs (ITS#10101) Fixed libldap OpenSSL cipher suite handling (ITS#10094) Fixed libldap OpenSSL 3.0 and Diffie-Hellman param files (ITS#10124) Fixed libldap timestamps on Windows (ITS#10100) Fixed lloadd to work when resolv.conf is missing (ITS#10070) Fixed lloadd handling of closing connection (ITS#10083) Fixed slapd handling of regex testing in ACLs (ITS#10089) Fixed slapd-asyncmeta when remote suffix is empty (ITS#10076) Fixed slapo-dynlist so it can't be global (ITS#10091) Build Fixed lloadd type mismatches (ITS#10074) Fixed builds for Windows (ITS#10117) Fixed build with clang16 (ITS#10123 Documentation Fixed slapo-homedir(5) attribute name for olcHomedirArchivePath (ITS#10057) Minor Cleanup ITS#10059 ITS#10068 ITS#10109 ITS#10110 ITS#10129 ITS#10130 ITS#10135 ITS#10144 ITS#10145 ITS#10153 Regards, Quanah

4 5

RE26 testing call (2.6.7) #1
by Quanah Gibson-Mount 19 Jan '24

19 Jan '24

This is the first testing call for OpenLDAP 2.6.7. Depending on the results, this may be the only testing call. Generally, get the code for RE26: <https://git.openldap.org/openldap/openldap/-/archive/OPENLDAP_REL_ENG_2_6/o…> Extract, configure, and build. Execute the test suite (via make test) after it is built. Optionally, cd tests && make its to run through the regression suite. Thanks! OpenLDAP 2.6.7 Engineering Fixed liblber missing newline on long msg (ITS#10105) Fixed libldap exit handling with OpenSSL3 (ITS#9952) Fixed libldap with TLS and multiple ldap URIs (ITS#10101) Fixed libldap OpenSSL cipher suite handling (ITS#10094) Fixed libldap OpenSSL 3.0 and Diffie-Hellman param files (ITS#10124) Fixed libldap timestamps on Windows (ITS#10100) Fixed lloadd to work when resolv.conf is missing (ITS#10070) Fixed lloadd handling of closing connection (ITS#10083) Fixed lloadd tiers to be correctly linked on startup (ITS#10142) Fixed slapd handling of regex testing in ACLs (ITS#10089) Fixed slapd sync replication with glued database (ITS#10080) Fixed slapd local logging on Windows (ITS#10092) Fixed slapd-asyncmeta when remote suffix is empty (ITS#10076) Fixed slapo-dynlist so it can't be global (ITS#10091) Build Fixed lloadd type mismatches (ITS#10074) Fixed builds for Windows (ITS#10117) Fixed build with clang16 (ITS#10123) Documentation Fixed slapo-homedir(5) attribute name for olcHomedirArchivePath (ITS#10057) Minor Cleanup ITS#10059 ITS#10068 ITS#10098 ITS#10109 ITS#10110 ITS#10129 ITS#10130 ITS#10135 ITS#10143 ITS#10144 ITS#10145 ITS#10153 Regards, Quanah

1 1

RE: openldap-technical mailing list probe message
by Marc 19 Jan '24

19 Jan '24

Any one else getting ~20 messages? > -----Original Message----- > From: openldap-technical- > bounces+c0b8b5a8faa7db954b532a84b16686b22acfeaee(a)openldap.org <openldap- > technical-bounces+c0b8b5a8faa7db954b532a84b16686b22acfeaee(a)openldap.org> > Sent: Friday, 19 January 2024 04:19 > To: Marc > Subject: openldap-technical mailing list probe message > > This is a probe message. You can ignore this message. > > The openldap-technical(a)openldap.org mailing list has received a number > of bounces from you, indicating that there may be a problem delivering > messages to xxxxx. A sample is attached below. > Please examine this message to make sure there are no problems with > your email address. You may want to check with your mail > administrator for more help. > > You don't need to do anything to remain an enabled member of the > mailing list. > > If you have any questions or problems, you can contact the mailing > list owner at > > openldap-technical-owner(a)openldap.org

4 4

Re: libldap with openssl
by dextá 11 Jan '24

11 Jan '24

Quanah, Regarding ltb, which package contains libldap? [ ] openldap-ltb-contrib-overlays_2.5.15.1_amd64.deb 2023-07-11 17:40 405K [ ] openldap-ltb-contrib-overlays_2.5.16.1_amd64.deb 2023-08-22 18:27 405K [ ] openldap-ltb-dbg_2.5.15.1_amd64.deb 2023-07-11 17:40 2.2M [ ] openldap-ltb-dbg_2.5.16.1_amd64.deb 2023-08-22 18:27 2.2M [ ] openldap-ltb-explockout_2.5.15.1_amd64.deb 2023-07-11 17:40 32K [ ] openldap-ltb-explockout_2.5.16.1_amd64.deb 2023-08-22 18:27 32K [ ] openldap-ltb-mdb-utils_2.5.15.1_amd64.deb 2023-07-11 17:40 53K [ ] openldap-ltb-mdb-utils_2.5.16.1_amd64.deb 2023-08-22 18:27 53K [ ] openldap-ltb_2.5.15.1_amd64.deb 2023-07-11 17:40 1.6M [ ] openldap-ltb_2.5.16.1_amd64.deb 2023-08-22 18:27 1.6M and Symas? https://repo.symas.com/repo/deb/main/release25/pool/main/s/symas-openldap/ Em qua., 10 de jan. de 2024 às 16:21, Quanah Gibson-Mount < quanah(a)fast-mail.org> escreveu: > > > --On Wednesday, January 10, 2024 4:01 PM -0300 dextá > <dexter7bbot(a)gmail.com> wrote: > > > > > hello, thanks for the answers!! > > > > @quanah, Is it possible to install only libldap with openssl and not the > > whole of openldap? > > I know the Symas packages provide libldap separately from the server > package. I believe the LTB project does as well. > > Regards, > Quanah > > > >

3 2

libldap with openssl
by dextá 10 Jan '24

10 Jan '24

Hello, Is there a way to compile only the libldap with OpenSSL? I ask because I have installed on Debian 12 a version that uses GnuTLS, and I need to change it to OpenSSL. Regards, Dextá

3 3

Re: libldap with openssl
by dextá 10 Jan '24

10 Jan '24

Nice Quanah!!! I installed the above package, configured the path of the new lib via ldconfig and it worked. I needed it to be compatible with freeradius. Thanks for the help!!! Em qua., 10 de jan. de 2024 às 16:57, Quanah Gibson-Mount < quanah(a)fast-mail.org> escreveu: > > > --On Wednesday, January 10, 2024 4:38 PM -0300 dextá > <dexter7bbot(a)gmail.com> wrote: > > > > > Quanah, > > > > > > Regarding ltb, which package contains libldap? > > > Ok looks like LTB project doesn't separate it out. > > > > > and Symas? > > > https://repo.symas.com/repo/deb/main/release25/pool/main/s/symas-openldap/ > > Pretty apparent: > > symas-openldap-lib > > --Quanah > > > >

1 0

Re: libldap with openssl
by dextá 10 Jan '24

10 Jan '24

hello, thanks for the answers!! @quanah, Is it possible to install only libldap with openssl and not the whole of openldap? Em qua., 10 de jan. de 2024 às 15:50, Quanah Gibson-Mount < quanah(a)fast-mail.org> escreveu: > > > --On Wednesday, January 10, 2024 2:22 PM -0300 Lucas Castro > <lucas(a)gnuabordo.com.br> wrote: > > > > > Em 10/01/2024 13:59, dextá escreveu: > >> Hello, > >> > >> Is there a way to compile only the libldap with OpenSSL? I ask because > >> I have installed on Debian 12 a version that uses GnuTLS, and I need > >> to change it to OpenSSL. > > > > Hello Dexter, > > > > Debian openldap is already build against openSSL. Guess there's some > > other package on your debian that require GnuTLS installed. > > > > But openldap is really build against openSSL. > > This is incorrect. The OpenLDAP shipped by Debian is built against > GnuTLS, > not OpenSSL. If an OpenSSL linked version of OpenLDAP for Debian is > desired, I would suggest using the packages from Symas or the LTB project. > > > <https://repo.symas.com/> > <https://www.ltb-project.org/download.html> > > Regards, > Quanah > >

2 1

Modify default port 389 to custom port 11389 for openldap-servers
by Kaushal Shriyan 10 Jan '24

10 Jan '24

Hi, I am running OpenLdap server 2.4.59 on Red Hat Enterprise Linux release 8.8 (Ootpa) OS in standalone mode without any replication. # rpm -qa | grep openldap symas-openldap-servers-2.4.59-1.el8.x86_64 openldap-2.4.46-18.el8.x86_64 symas-openldap-2.4.59-1.el8.x86_64 symas-openldap-clients-2.4.59-1.el8.x86_64 # cat /etc/redhat-release Red Hat Enterprise Linux release 8.8 (Ootpa) # # cat modify.ldif dn: olcDatabase={2}mdb,cn=config changetype: modify replace: olcDbURI olcDbURI: ldap://127.0.0.1:11389/ # ldapmodify -x -D "cn=admin,dc=corporate,dc=example,dc=in" -W -f modify.ldif Enter LDAP Password: modifying entry "olcDatabase={2}mdb,cn=config" ldap_modify: Undefined attribute type (17) * additional info: olcDbURI: attribute type undefined* # Please guide me. Thanks in advance. Best Regards, Kaushal

2 1

Backup and restore OpenLdap server 2.4.59.
by Kaushal Shriyan 10 Jan '24

10 Jan '24

Hi, I am running OpenLdap server 2.4.59 on Red Hat Enterprise Linux release 8.8 (Ootpa) OS in standalone mode without any replication. # rpm -qa | grep openldap symas-openldap-servers-2.4.59-1.el8.x86_64 openldap-2.4.46-18.el8.x86_64 symas-openldap-2.4.59-1.el8.x86_64 symas-openldap-clients-2.4.59-1.el8.x86_64 # cat /etc/redhat-release Red Hat Enterprise Linux release 8.8 (Ootpa) # As per this https://repo.symas.com/, I see 2.5 LTS and 2.6 current feature release, I am not sure which one I need to upgrade from 2.4 → 2.5 or 2.6? Also, is there a way to back up and restore OpenLdap server 2.4.59? Please guide me. Thanks in advance. Best Regards, Kaushal

2 1

Scaling slapd nodes in Kubernetes with the MDB Backend
by Alejandro Imass 05 Jan '24

05 Jan '24

Hi there! We are working on a new installation and decided to try something new.. In the past I would have gone with multi-master with ldap balancer but after reading and researching more and more on MDB, we decided to try to integrate OpenLDAP into our current CI/CD pipelines using K8s. What we tried so far and it seems to work is initialize a common persistence storage and then an auto scaling group that shares that common drive. Ech pod has as many threads as virtual CPU it may have, and none of the pods can write, except a dedicated write pod (single instance) with multiple threads for writing. Is there anything else we are missing here? Any experience scaling OpenLDAP with Kubernetes or other container technology. Thank you in advance for any comments, pointers or recommendations! -- Alex

3 4

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical January 2024