openldap-technical January 2026

openldap-technical@openldap.org

16 participants
14 discussions

SASL Targets Quarantined
by Bradley T Gill 08 Jan '26

08 Jan '26

I am not sure of the quarantine is a function of OpenLDAP or Cyrus SASL. But is it's behavior configurable? Too many times when AD is patched, all of our targets go into quarantine of will not attempt SASL until restarted. It would be more robust to wait 10 minutes and try again, then 20, 30, and hour, etc.. So it can recover gracefully. Is that possible how the solution stands now? Thanks, Brad

1 0

Relation between Shadow and PPolicy...
by Marco Gaiarin 07 Jan '26

07 Jan '26

'If any'. ;-) In some way, Shadow and PPolicy do similar things; there's some relation between them? Or some script (like smbldap-tools between SMB and UNIX data) that keep PPolicy and Shadow in sync? It make sense to use both? Thanks. --

2 1

Replication issue with OpenLdap: slapd 2.6.8 || RHEL 9 (Red Hat Enterprise Linux release 9.7)
by mridumit＠amdocs.com 06 Jan '26

06 Jan '26

Hi I am not able to replicate or facing replication issue within 2 instances where ldap is running. The error I see in logs of slapd is : slap_client_connect: URI=<provider url> DN="cn=<sample value>,dc=<sample value>,dc=<sample value>" ldap_sasl_bind_s failed (-1). Can anybody help us ? I can provide more information if required.

2 1

Migrating HA Cluster, Want to Force Full Replication
by Brendan Kearney 06 Jan '26

06 Jan '26

List members, I plan on updating my 3 node multi-primary instances and want to have a full resync done when each instance is rebuilt and rejoined to the cluster. Currently, I have both config and DIT fully replicated between all instances. When I rebuild each node, it will have all of the configs in place to be a part of the cluster. What I would like to have is all the data pushed to the newly built, but empty, instance. I have a process that is somewhat brute force, where all data is exported, stripped of entryCSN and contextCSN values, then added back to the newly built instance. This would require that the other instances be stopped or otherwise not take any updates during the transition. I would like to avoid this disruption in service, if at all possible. Is there a way to have a full resync done when a rebuilt instance that has no data rejoins a cluster? Thanks in advance, Brendan Kearney

4 10

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical January 2026