openldap-technical

openldap-technical@openldap.org

14 participants
9795 discussions

Re: Openldap performance question
by Amit Dongaonkar 04 Sep '20

04 Sep '20

Well I continue to read the documentation, however here are some observations: 1. Slapd is up and running all the time. 2. The service seems to go in a freeze mode for about 15 minutes or so and then responds again. 3. Once it starts responding and I attempt to change password (using self service password) it freezes again and does not respond for the next 15 minutes. 4. This behavior happens even when not attempting to change the password but just some basic searches using phpldapadmin. 5. The server is adequately providing the needed memory and computing resources so dont this that is causing the issue. Further any suggestions on what front end admin tool should be used with openldap. Thanks and Regards, *Amit Dongaonkar* On Fri, Sep 4, 2020 at 4:29 PM Quanah Gibson-Mount <quanah(a)symas.com> wrote: > > > --On Friday, September 4, 2020 5:12 PM -0400 Amit Dongaonkar > <amitd(a)nitssolutions.com> wrote: > > > As for the installation from the deb I was not aware the ubuntu provides > > its own build. > > > > > > After running the ldapwhoami the system takes some time to respond but > > eventually responds with > > "ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)" > > Sounds like either slapd is not running or you're attempting to connect in > an invalid fashion. I'd suggest doing some reading on how to use the ldap > client tools, how to start slapd, how to use and connect to slapd, etc. > > Regards, > Quanah > > > -- > > Quanah Gibson-Mount > Product Architect > Symas Corporation > Packaged, certified, and supported LDAP solutions powered by OpenLDAP: > <http://www.symas.com> >

3 3

Re: Openldap performance question
by Amit Dongaonkar 04 Sep '20

04 Sep '20

Hi Quanah, My bad I should have stated those details earlier on. Here are the details: 1. Ubuntu: 20.04 2. Openldap release: OpenLDAP: slapd (Ubuntu) (Jun 12 2020 22:18:58) $ Debian OpenLDAP Maintainers < pkg-openldap-devel(a)lists.alioth.debian.org> 3. Openldap backend : MDB As for the installation from the deb I was not aware the ubuntu provides its own build. After running the ldapwhoami the system takes some time to respond but eventually responds with "ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)" Thanks and Regards, *Amit Dongaonkar* On Fri, Sep 4, 2020 at 4:05 PM Quanah Gibson-Mount <quanah(a)symas.com> wrote: > > > --On Friday, September 4, 2020 4:48 PM -0400 Amit Dongaonkar > <amitd(a)nitssolutions.com> wrote: > > > > > > > Hello group, > > I have just installed openldap on ubuntu using a .deb file and have > > installed phpldapadmin on top to work with the directory. > > I see a lot of performance issue while accessing via phpldapadmin when > > even trying to login to ldap. > > At times it works perfectly well and other times it just keeps dragging > > for ever. > > I just have about 5-6 entries in the ldap db so far. > > Aside from everything else, I'd suggest not using PHPldapadmin, it's known > to have various issues. You also have not stated what Ubuntu release, > OpenLDAP release, or OpenLDAP backend you're using. Since Ubuntu already > provides OpenLDAP builds, it's not clear to me why you'd install it from a > deb. > > Regards, > Quanah > > > -- > > Quanah Gibson-Mount > Product Architect > Symas Corporation > Packaged, certified, and supported LDAP solutions powered by OpenLDAP: > <http://www.symas.com> >

2 1

Openldap performance question
by Amit Dongaonkar 04 Sep '20

04 Sep '20

Hello group, I have just installed openldap on ubuntu using a .deb file and have installed phpldapadmin on top to work with the directory. I see a lot of performance issue while accessing via phpldapadmin when even trying to login to ldap. At times it works perfectly well and other times it just keeps dragging for ever. I just have about 5-6 entries in the ldap db so far. Any help/pointers will be appreciated. Thanks and Regards, *Amit Dongaonkar*

3 3

git repository build
by Nick Folino 01 Sep '20

01 Sep '20

Did a recent change break building from git? Make install is erroring off. I wiped my repo, cloned from https://github.com/openldap/openldap.git and tried a clean configure/make depend/make all went well. Make install not so well. Looks like the install is executing the tools: Making install in /home/nick/git/openldap/clients Entering subdirectory tools make[2]: Entering directory '/home/nick/git/openldap/clients/tools' ../../build/shtool mkdir -p /apps/openldap/bin libtool: install: ../../build/shtool install -c -m 755 -s ldapsearch /apps/openldap/bin/ldapsearch ldap_sasl_interactive_bind: Can't contact LDAP server (-1) libtool: install: ../../build/shtool install -c -m 755 -s ldapmodify /apps/openldap/bin/ldapmodify ldap_sasl_interactive_bind: Can't contact LDAP server (-1) libtool: install: ../../build/shtool install -c -m 755 -s ldapdelete /apps/openldap/bin/ldapdelete ldap_sasl_interactive_bind: Can't contact LDAP server (-1) libtool: install: ../../build/shtool install -c -m 755 -s ldapmodrdn /apps/openldap/bin/ldapmodrdn ldap_sasl_interactive_bind: Can't contact LDAP server (-1) libtool: install: ../../build/shtool install -c -m 755 -s ldappasswd /apps/openldap/bin/ldappasswd ldap_sasl_interactive_bind: Can't contact LDAP server (-1) libtool: install: ../../build/shtool install -c -m 755 -s ldapwhoami /apps/openldap/bin/ldapwhoami ldap_sasl_interactive_bind: Can't contact LDAP server (-1) libtool: install: ../../build/shtool install -c -m 755 -s ldapvc /apps/openldap/bin/ldapvc ldap_sasl_interactive_bind: Can't contact LDAP server (-1) libtool: install: ../../build/shtool install -c -m 755 -s ldapcompare /apps/openldap/bin/ldapcompare usage: #INST@1151854# [options] DN <attr:value|attr::b64value> where: DN Distinguished Name attr assertion attribute value assertion value b64value base64 encoding of assertion value Nick

2 4

Resyncing basic question..
by Frédéric Goudal 01 Sep '20

01 Sep '20

Hello, I’m wondering about the correct way to resync a directory in a push configuration… The setup is the following (as described in the documentation) : - on the master I have added a second suffix with the hidden property and the same suffix value. - this suffix have an ldap backend on another computer which is the real slave. I know the procedure to resynchronize two directory when the slave is in a pull configuration : get the csn of the master and restart the slave with the csn as argument. But in the push configuration : do I need to restart the slave (the backend of the second suffix ) ? Or the master which deals with the hidden suffix ? I hope my explanation are clear. Thanks in advance. f.g.

3 3

how to clean old multiple CSN ?
by Frédéric Goudal 31 Aug '20

31 Aug '20

Hello, I have an ldap master that from some reason has multiple CSN : contextCSN: 20130927152219.157851Z#000000#001#000000 contextCSN: 20131127140429.597497Z#000000#002#000000 contextCSN: 20141208130549.278599Z#000000#004#000000 contextCSN: 20200831094837.531411Z#000000#00a#000000 Some are quite old. I don’t know why they are here. Is there a way to clean the old Context CSN ? f.g.

2 1

Acl attribute access
by Marc Roos 31 Aug '20

31 Aug '20

If I have this acl: to dn="sendmailMTAKey=test(a)bbbbb.com,ou=eeee,ou=ddddd,ou=ccccc,dc=bbbbb,dc= aaaaa,dc=local" by ssf=64 dn.exact="uid=acctest,ou=ffff,ou=ddddd,ou=ccccc,dc=bbbbb,dc=aaaaa,dc=loc al" read I can access with this ldap search: ldapsearch -LLL -W -s sub -b "sendmailMTAKey=test(a)bbbbb.com,ou=eeee,ou=ddddd,ou=ccccc,dc=bbbbb,dc=aaa aa,dc=local" -D "uid=acctest,ou=ffff,ou=ddddd,ou=ccccc,dc=bbbbb,dc=aaaaa,dc=local" -H ldaps://ldap.local sendmailMTAKey If I change the acl to to dn="sendmailMTAKey=test(a)bbbbb.com,ou=eeee,ou=ddddd,ou=ccccc,dc=bbbbb,dc= aaaaa,dc=local" attrs="sendmailMTAKey" by ssf=64 dn.exact="uid=acctest,ou=ffff,ou=ddddd,ou=ccccc,dc=bbbbb,dc=aaaaa,dc=loc al" read The ldapsearch is not returning any object. How to resolve this?

3 7

Acl with variable in filter
by Marc Roos 31 Aug '20

31 Aug '20

Is it possible to have a variable VAR in an acl filter? Something like this: to dn="sendmailMTAKey=test(a)bbbbb.com,ou=eeee,ou=ddddd,ou=ccccc,dc=bbbbb,dc= aaaaa,dc=local" filter="(sendmailMTAMapValue=VAR1) by ssf=64 dn.exact="uid=VAR1,ou=ffff,ou=ddddd,ou=ccccc,dc=bbbbb,dc=aaaaa,dc=local" read

1 1

user | this expansion in acl
by Marc Roos 31 Aug '20

31 Aug '20

I am not getting this page. Maybe there should be an example or so. I can use user anywhere in the acls and it will expand to the dn of the binddn of the ldapsearch request? user | this : resolves to the set { "cn=User,cn=adfasdfa,cn=asdfadfa,ou=asdfasdfas,ou=adsasdfasdf", "cn=Resource" } How can I get only 'User' and not the whole dn also not 'cn=User'? [1] https://www.openldap.org/faq/data/cache/1133.html

1 0

LMDB: iterating over the whole DB
by Vladimír Čunát 31 Aug '20

31 Aug '20

Hello. (I sent the same message 24h ago before subscribing, but it hasn't arrived so far. I hope you won't see a duplicate later.) We have a process that needs to analyze the contents of a whole LMDB. So far the approach was to open a read-only transaction and use a cursor to iterate over the whole contents in order. This long transaction apparently causes other concurrent process(es) to get MDB_MAP_FULL from mdb_put() even though that LMDB has plenty free pages at that moment. That would be a big problem for us, but fortunately we don't need the analysis to be atomic and splitting that iterating into smaller transactions seems to avoid the problem. That were just experiments without understanding why exactly it happens (though I get that long transactions are generally problematic). Could this behavior be considered a bug in LMDB? Is there a way of either distinguishing this MDB_MAP_FULL event from really full LMDB or avoiding it with confidence? (We only experimented with the number of keys accessed in one transaction.) By the way, thanks a lot for LMDB! --Vladimir https://knot-resolver.cz

3 6

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical