openldap-technical January 2024

openldap-technical@openldap.org

22 participants
22 discussions

etime calculation
by david.gracjan＠gmail.com 22 Jan '24

22 Jan '24

Hello, As part of a project we'd like to know exactly how etime is calculated in openldap. Is it purely the calculation time taken by openldap to execute the request, or are other parameters also taken into account? Like client time? For exemple, in local with a specific filter i do the search in 1 second and the etime in my logs are 1 second. Now i have a client who do the same search with the same filter and he perferm the search in 27 second and the etime in my log are 27 second too. Does the transfer time count? Does anything else count? Thanks in advance

2 1

RE25 testing call (2.5.17) #1
by Quanah Gibson-Mount 21 Jan '24

21 Jan '24

This is the first testing call for OpenLDAP 2.5.17. Depending on the results, this may be the only testing call. Generally, get the code for RE25: <https://git.openldap.org/openldap/openldap/-/archive/OPENLDAP_REL_ENG_2_5/o…> Extract, configure, and build. Execute the test suite (via make test) after it is built. Optionally, cd tests && make its to run through the regression suite. Thanks! OpenLDAP 2.5.17 Engineering Fixed liblber missing newline on long msg (ITS#10105) Fixed libldap exit handling with OpenSSL3 (ITS#9952) Fixed libldap with TLS and multiple ldap URIs (ITS#10101) Fixed libldap OpenSSL cipher suite handling (ITS#10094) Fixed libldap OpenSSL 3.0 and Diffie-Hellman param files (ITS#10124) Fixed libldap timestamps on Windows (ITS#10100) Fixed lloadd to work when resolv.conf is missing (ITS#10070) Fixed lloadd handling of closing connection (ITS#10083) Fixed slapd handling of regex testing in ACLs (ITS#10089) Fixed slapd-asyncmeta when remote suffix is empty (ITS#10076) Fixed slapo-dynlist so it can't be global (ITS#10091) Build Fixed lloadd type mismatches (ITS#10074) Fixed builds for Windows (ITS#10117) Fixed build with clang16 (ITS#10123 Documentation Fixed slapo-homedir(5) attribute name for olcHomedirArchivePath (ITS#10057) Minor Cleanup ITS#10059 ITS#10068 ITS#10109 ITS#10110 ITS#10129 ITS#10130 ITS#10135 ITS#10144 ITS#10145 ITS#10153 Regards, Quanah

4 5

RE26 testing call (2.6.7) #1
by Quanah Gibson-Mount 19 Jan '24

19 Jan '24

This is the first testing call for OpenLDAP 2.6.7. Depending on the results, this may be the only testing call. Generally, get the code for RE26: <https://git.openldap.org/openldap/openldap/-/archive/OPENLDAP_REL_ENG_2_6/o…> Extract, configure, and build. Execute the test suite (via make test) after it is built. Optionally, cd tests && make its to run through the regression suite. Thanks! OpenLDAP 2.6.7 Engineering Fixed liblber missing newline on long msg (ITS#10105) Fixed libldap exit handling with OpenSSL3 (ITS#9952) Fixed libldap with TLS and multiple ldap URIs (ITS#10101) Fixed libldap OpenSSL cipher suite handling (ITS#10094) Fixed libldap OpenSSL 3.0 and Diffie-Hellman param files (ITS#10124) Fixed libldap timestamps on Windows (ITS#10100) Fixed lloadd to work when resolv.conf is missing (ITS#10070) Fixed lloadd handling of closing connection (ITS#10083) Fixed lloadd tiers to be correctly linked on startup (ITS#10142) Fixed slapd handling of regex testing in ACLs (ITS#10089) Fixed slapd sync replication with glued database (ITS#10080) Fixed slapd local logging on Windows (ITS#10092) Fixed slapd-asyncmeta when remote suffix is empty (ITS#10076) Fixed slapo-dynlist so it can't be global (ITS#10091) Build Fixed lloadd type mismatches (ITS#10074) Fixed builds for Windows (ITS#10117) Fixed build with clang16 (ITS#10123) Documentation Fixed slapo-homedir(5) attribute name for olcHomedirArchivePath (ITS#10057) Minor Cleanup ITS#10059 ITS#10068 ITS#10098 ITS#10109 ITS#10110 ITS#10129 ITS#10130 ITS#10135 ITS#10143 ITS#10144 ITS#10145 ITS#10153 Regards, Quanah

1 1

RE: openldap-technical mailing list probe message
by Marc 19 Jan '24

19 Jan '24

Any one else getting ~20 messages? > -----Original Message----- > From: openldap-technical- > bounces+c0b8b5a8faa7db954b532a84b16686b22acfeaee(a)openldap.org <openldap- > technical-bounces+c0b8b5a8faa7db954b532a84b16686b22acfeaee(a)openldap.org> > Sent: Friday, 19 January 2024 04:19 > To: Marc > Subject: openldap-technical mailing list probe message > > This is a probe message. You can ignore this message. > > The openldap-technical(a)openldap.org mailing list has received a number > of bounces from you, indicating that there may be a problem delivering > messages to xxxxx. A sample is attached below. > Please examine this message to make sure there are no problems with > your email address. You may want to check with your mail > administrator for more help. > > You don't need to do anything to remain an enabled member of the > mailing list. > > If you have any questions or problems, you can contact the mailing > list owner at > > openldap-technical-owner(a)openldap.org

4 4

Re: libldap with openssl
by dextá 11 Jan '24

11 Jan '24

Quanah, Regarding ltb, which package contains libldap? [ ] openldap-ltb-contrib-overlays_2.5.15.1_amd64.deb 2023-07-11 17:40 405K [ ] openldap-ltb-contrib-overlays_2.5.16.1_amd64.deb 2023-08-22 18:27 405K [ ] openldap-ltb-dbg_2.5.15.1_amd64.deb 2023-07-11 17:40 2.2M [ ] openldap-ltb-dbg_2.5.16.1_amd64.deb 2023-08-22 18:27 2.2M [ ] openldap-ltb-explockout_2.5.15.1_amd64.deb 2023-07-11 17:40 32K [ ] openldap-ltb-explockout_2.5.16.1_amd64.deb 2023-08-22 18:27 32K [ ] openldap-ltb-mdb-utils_2.5.15.1_amd64.deb 2023-07-11 17:40 53K [ ] openldap-ltb-mdb-utils_2.5.16.1_amd64.deb 2023-08-22 18:27 53K [ ] openldap-ltb_2.5.15.1_amd64.deb 2023-07-11 17:40 1.6M [ ] openldap-ltb_2.5.16.1_amd64.deb 2023-08-22 18:27 1.6M and Symas? https://repo.symas.com/repo/deb/main/release25/pool/main/s/symas-openldap/ Em qua., 10 de jan. de 2024 às 16:21, Quanah Gibson-Mount < quanah(a)fast-mail.org> escreveu: > > > --On Wednesday, January 10, 2024 4:01 PM -0300 dextá > <dexter7bbot(a)gmail.com> wrote: > > > > > hello, thanks for the answers!! > > > > @quanah, Is it possible to install only libldap with openssl and not the > > whole of openldap? > > I know the Symas packages provide libldap separately from the server > package. I believe the LTB project does as well. > > Regards, > Quanah > > > >

3 2

libldap with openssl
by dextá 10 Jan '24

10 Jan '24

Hello, Is there a way to compile only the libldap with OpenSSL? I ask because I have installed on Debian 12 a version that uses GnuTLS, and I need to change it to OpenSSL. Regards, Dextá

3 3

Re: libldap with openssl
by dextá 10 Jan '24

10 Jan '24

Nice Quanah!!! I installed the above package, configured the path of the new lib via ldconfig and it worked. I needed it to be compatible with freeradius. Thanks for the help!!! Em qua., 10 de jan. de 2024 às 16:57, Quanah Gibson-Mount < quanah(a)fast-mail.org> escreveu: > > > --On Wednesday, January 10, 2024 4:38 PM -0300 dextá > <dexter7bbot(a)gmail.com> wrote: > > > > > Quanah, > > > > > > Regarding ltb, which package contains libldap? > > > Ok looks like LTB project doesn't separate it out. > > > > > and Symas? > > > https://repo.symas.com/repo/deb/main/release25/pool/main/s/symas-openldap/ > > Pretty apparent: > > symas-openldap-lib > > --Quanah > > > >

1 0

Re: libldap with openssl
by dextá 10 Jan '24

10 Jan '24

hello, thanks for the answers!! @quanah, Is it possible to install only libldap with openssl and not the whole of openldap? Em qua., 10 de jan. de 2024 às 15:50, Quanah Gibson-Mount < quanah(a)fast-mail.org> escreveu: > > > --On Wednesday, January 10, 2024 2:22 PM -0300 Lucas Castro > <lucas(a)gnuabordo.com.br> wrote: > > > > > Em 10/01/2024 13:59, dextá escreveu: > >> Hello, > >> > >> Is there a way to compile only the libldap with OpenSSL? I ask because > >> I have installed on Debian 12 a version that uses GnuTLS, and I need > >> to change it to OpenSSL. > > > > Hello Dexter, > > > > Debian openldap is already build against openSSL. Guess there's some > > other package on your debian that require GnuTLS installed. > > > > But openldap is really build against openSSL. > > This is incorrect. The OpenLDAP shipped by Debian is built against > GnuTLS, > not OpenSSL. If an OpenSSL linked version of OpenLDAP for Debian is > desired, I would suggest using the packages from Symas or the LTB project. > > > <https://repo.symas.com/> > <https://www.ltb-project.org/download.html> > > Regards, > Quanah > >

2 1

Modify default port 389 to custom port 11389 for openldap-servers
by Kaushal Shriyan 10 Jan '24

10 Jan '24

Hi, I am running OpenLdap server 2.4.59 on Red Hat Enterprise Linux release 8.8 (Ootpa) OS in standalone mode without any replication. # rpm -qa | grep openldap symas-openldap-servers-2.4.59-1.el8.x86_64 openldap-2.4.46-18.el8.x86_64 symas-openldap-2.4.59-1.el8.x86_64 symas-openldap-clients-2.4.59-1.el8.x86_64 # cat /etc/redhat-release Red Hat Enterprise Linux release 8.8 (Ootpa) # # cat modify.ldif dn: olcDatabase={2}mdb,cn=config changetype: modify replace: olcDbURI olcDbURI: ldap://127.0.0.1:11389/ # ldapmodify -x -D "cn=admin,dc=corporate,dc=example,dc=in" -W -f modify.ldif Enter LDAP Password: modifying entry "olcDatabase={2}mdb,cn=config" ldap_modify: Undefined attribute type (17) * additional info: olcDbURI: attribute type undefined* # Please guide me. Thanks in advance. Best Regards, Kaushal

2 1

Backup and restore OpenLdap server 2.4.59.
by Kaushal Shriyan 10 Jan '24

10 Jan '24

Hi, I am running OpenLdap server 2.4.59 on Red Hat Enterprise Linux release 8.8 (Ootpa) OS in standalone mode without any replication. # rpm -qa | grep openldap symas-openldap-servers-2.4.59-1.el8.x86_64 openldap-2.4.46-18.el8.x86_64 symas-openldap-2.4.59-1.el8.x86_64 symas-openldap-clients-2.4.59-1.el8.x86_64 # cat /etc/redhat-release Red Hat Enterprise Linux release 8.8 (Ootpa) # As per this https://repo.symas.com/, I see 2.5 LTS and 2.6 current feature release, I am not sure which one I need to upgrade from 2.4 → 2.5 or 2.6? Also, is there a way to back up and restore OpenLdap server 2.4.59? Please guide me. Thanks in advance. Best Regards, Kaushal

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical January 2024