openldap-technical

openldap-technical@openldap.org

9897 discussions

Multiple LDAP admins
by Tayyab Saeed 07 Sep '20

07 Sep '20

Dear LDAP guys / Quanah, I want to create another LDAP administrative account with same or limited privileges. Kindly guide me or share any link which help to achieve the above goal. Thanks, Tayyab Saeed

3 4

OpenLDAP LTB packages (was: OpenLDAP 2.4.52 available)
by Clément OUDOT 06 Sep '20

06 Sep '20

Le ven. 28 août 2020 à 19:46, <project(a)openldap.org> a écrit : > > OpenLDAP 2.4.52 is now available for download Hello, LDAP Tool Box packages have been published (see announce: https://projects.ow2.org/view/ldaptoolbox/ltb-openldap-2-4-52-packages-rele…) We dropped support for Debian Wheezy, Debian Jessie and Centos/RHEL 6 as OpenLDAP 2.4.52 is requiring a version of OpenSSL that is not available on these systems. Cheers, Clément.

1 0

Re: Openldap performance question
by Amit Dongaonkar 04 Sep '20

04 Sep '20

Well I continue to read the documentation, however here are some observations: 1. Slapd is up and running all the time. 2. The service seems to go in a freeze mode for about 15 minutes or so and then responds again. 3. Once it starts responding and I attempt to change password (using self service password) it freezes again and does not respond for the next 15 minutes. 4. This behavior happens even when not attempting to change the password but just some basic searches using phpldapadmin. 5. The server is adequately providing the needed memory and computing resources so dont this that is causing the issue. Further any suggestions on what front end admin tool should be used with openldap. Thanks and Regards, *Amit Dongaonkar* On Fri, Sep 4, 2020 at 4:29 PM Quanah Gibson-Mount <quanah(a)symas.com> wrote: > > > --On Friday, September 4, 2020 5:12 PM -0400 Amit Dongaonkar > <amitd(a)nitssolutions.com> wrote: > > > As for the installation from the deb I was not aware the ubuntu provides > > its own build. > > > > > > After running the ldapwhoami the system takes some time to respond but > > eventually responds with > > "ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)" > > Sounds like either slapd is not running or you're attempting to connect in > an invalid fashion. I'd suggest doing some reading on how to use the ldap > client tools, how to start slapd, how to use and connect to slapd, etc. > > Regards, > Quanah > > > -- > > Quanah Gibson-Mount > Product Architect > Symas Corporation > Packaged, certified, and supported LDAP solutions powered by OpenLDAP: > <http://www.symas.com> >

3 3

Re: Openldap performance question
by Amit Dongaonkar 04 Sep '20

04 Sep '20

Hi Quanah, My bad I should have stated those details earlier on. Here are the details: 1. Ubuntu: 20.04 2. Openldap release: OpenLDAP: slapd (Ubuntu) (Jun 12 2020 22:18:58) $ Debian OpenLDAP Maintainers < pkg-openldap-devel(a)lists.alioth.debian.org> 3. Openldap backend : MDB As for the installation from the deb I was not aware the ubuntu provides its own build. After running the ldapwhoami the system takes some time to respond but eventually responds with "ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)" Thanks and Regards, *Amit Dongaonkar* On Fri, Sep 4, 2020 at 4:05 PM Quanah Gibson-Mount <quanah(a)symas.com> wrote: > > > --On Friday, September 4, 2020 4:48 PM -0400 Amit Dongaonkar > <amitd(a)nitssolutions.com> wrote: > > > > > > > Hello group, > > I have just installed openldap on ubuntu using a .deb file and have > > installed phpldapadmin on top to work with the directory. > > I see a lot of performance issue while accessing via phpldapadmin when > > even trying to login to ldap. > > At times it works perfectly well and other times it just keeps dragging > > for ever. > > I just have about 5-6 entries in the ldap db so far. > > Aside from everything else, I'd suggest not using PHPldapadmin, it's known > to have various issues. You also have not stated what Ubuntu release, > OpenLDAP release, or OpenLDAP backend you're using. Since Ubuntu already > provides OpenLDAP builds, it's not clear to me why you'd install it from a > deb. > > Regards, > Quanah > > > -- > > Quanah Gibson-Mount > Product Architect > Symas Corporation > Packaged, certified, and supported LDAP solutions powered by OpenLDAP: > <http://www.symas.com> >

2 1

Openldap performance question
by Amit Dongaonkar 04 Sep '20

04 Sep '20

Hello group, I have just installed openldap on ubuntu using a .deb file and have installed phpldapadmin on top to work with the directory. I see a lot of performance issue while accessing via phpldapadmin when even trying to login to ldap. At times it works perfectly well and other times it just keeps dragging for ever. I just have about 5-6 entries in the ldap db so far. Any help/pointers will be appreciated. Thanks and Regards, *Amit Dongaonkar*

3 3

git repository build
by Nick Folino 01 Sep '20

01 Sep '20

Did a recent change break building from git? Make install is erroring off. I wiped my repo, cloned from https://github.com/openldap/openldap.git and tried a clean configure/make depend/make all went well. Make install not so well. Looks like the install is executing the tools: Making install in /home/nick/git/openldap/clients Entering subdirectory tools make[2]: Entering directory '/home/nick/git/openldap/clients/tools' ../../build/shtool mkdir -p /apps/openldap/bin libtool: install: ../../build/shtool install -c -m 755 -s ldapsearch /apps/openldap/bin/ldapsearch ldap_sasl_interactive_bind: Can't contact LDAP server (-1) libtool: install: ../../build/shtool install -c -m 755 -s ldapmodify /apps/openldap/bin/ldapmodify ldap_sasl_interactive_bind: Can't contact LDAP server (-1) libtool: install: ../../build/shtool install -c -m 755 -s ldapdelete /apps/openldap/bin/ldapdelete ldap_sasl_interactive_bind: Can't contact LDAP server (-1) libtool: install: ../../build/shtool install -c -m 755 -s ldapmodrdn /apps/openldap/bin/ldapmodrdn ldap_sasl_interactive_bind: Can't contact LDAP server (-1) libtool: install: ../../build/shtool install -c -m 755 -s ldappasswd /apps/openldap/bin/ldappasswd ldap_sasl_interactive_bind: Can't contact LDAP server (-1) libtool: install: ../../build/shtool install -c -m 755 -s ldapwhoami /apps/openldap/bin/ldapwhoami ldap_sasl_interactive_bind: Can't contact LDAP server (-1) libtool: install: ../../build/shtool install -c -m 755 -s ldapvc /apps/openldap/bin/ldapvc ldap_sasl_interactive_bind: Can't contact LDAP server (-1) libtool: install: ../../build/shtool install -c -m 755 -s ldapcompare /apps/openldap/bin/ldapcompare usage: #INST@1151854# [options] DN <attr:value|attr::b64value> where: DN Distinguished Name attr assertion attribute value assertion value b64value base64 encoding of assertion value Nick

2 4

Resyncing basic question..
by Frédéric Goudal 01 Sep '20

01 Sep '20

Hello, I’m wondering about the correct way to resync a directory in a push configuration… The setup is the following (as described in the documentation) : - on the master I have added a second suffix with the hidden property and the same suffix value. - this suffix have an ldap backend on another computer which is the real slave. I know the procedure to resynchronize two directory when the slave is in a pull configuration : get the csn of the master and restart the slave with the csn as argument. But in the push configuration : do I need to restart the slave (the backend of the second suffix ) ? Or the master which deals with the hidden suffix ? I hope my explanation are clear. Thanks in advance. f.g.

3 3

how to clean old multiple CSN ?
by Frédéric Goudal 31 Aug '20

31 Aug '20

Hello, I have an ldap master that from some reason has multiple CSN : contextCSN: 20130927152219.157851Z#000000#001#000000 contextCSN: 20131127140429.597497Z#000000#002#000000 contextCSN: 20141208130549.278599Z#000000#004#000000 contextCSN: 20200831094837.531411Z#000000#00a#000000 Some are quite old. I don’t know why they are here. Is there a way to clean the old Context CSN ? f.g.

2 1

Acl attribute access
by Marc Roos 31 Aug '20

31 Aug '20

If I have this acl: to dn="sendmailMTAKey=test(a)bbbbb.com,ou=eeee,ou=ddddd,ou=ccccc,dc=bbbbb,dc= aaaaa,dc=local" by ssf=64 dn.exact="uid=acctest,ou=ffff,ou=ddddd,ou=ccccc,dc=bbbbb,dc=aaaaa,dc=loc al" read I can access with this ldap search: ldapsearch -LLL -W -s sub -b "sendmailMTAKey=test(a)bbbbb.com,ou=eeee,ou=ddddd,ou=ccccc,dc=bbbbb,dc=aaa aa,dc=local" -D "uid=acctest,ou=ffff,ou=ddddd,ou=ccccc,dc=bbbbb,dc=aaaaa,dc=local" -H ldaps://ldap.local sendmailMTAKey If I change the acl to to dn="sendmailMTAKey=test(a)bbbbb.com,ou=eeee,ou=ddddd,ou=ccccc,dc=bbbbb,dc= aaaaa,dc=local" attrs="sendmailMTAKey" by ssf=64 dn.exact="uid=acctest,ou=ffff,ou=ddddd,ou=ccccc,dc=bbbbb,dc=aaaaa,dc=loc al" read The ldapsearch is not returning any object. How to resolve this?

3 7

Acl with variable in filter
by Marc Roos 31 Aug '20

31 Aug '20

Is it possible to have a variable VAR in an acl filter? Something like this: to dn="sendmailMTAKey=test(a)bbbbb.com,ou=eeee,ou=ddddd,ou=ccccc,dc=bbbbb,dc= aaaaa,dc=local" filter="(sendmailMTAMapValue=VAR1) by ssf=64 dn.exact="uid=VAR1,ou=ffff,ou=ddddd,ou=ccccc,dc=bbbbb,dc=aaaaa,dc=local" read

1 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical