openldap-technical

openldap-technical@openldap.org

14 participants
9796 discussions

Re: Multi-master replication : read_config: no serverID / URL match found. Check slapd -h arguments.
by HG 13 Aug '19

13 Aug '19

Hi, For example: When /etc/sysconfig/slapd contains: SLAPD_URLS="ldapi:/// ldap://linux1014.ts.aa-srv.com/" # Any custom options SLAPD_OPTIONS="-4" # Keytab location for GSSAPI Kerberos authentication #KRB5_KTNAME="FILE:/etc/openldap/ldap.keytab" systemctl start slapd fails But with: SLAPD_URLS="ldapi:/// ldap://linux1014.ts.aa-srv.com" # Any custom options SLAPD_OPTIONS="-4" # Keytab location for GSSAPI Kerberos authentication #KRB5_KTNAME="FILE:/etc/openldap/ldap.keytab" It starts without any trouble. I took me hours to find this :-( Regards Hans Op ma 12 aug. 2019 om 18:03 schreef Quanah Gibson-Mount <quanah(a)symas.com>: > --On Monday, August 12, 2019 12:38 PM +0200 HG <hanspeter.sloot(a)gmail.com> > > wrote: > > > When I stop and start the slapd service the latter fails with : > > Aug 12 11:33:17 ldap1.domain.com slapd[30972]: @(#) $OpenLDAP: slapd > > 2.4.44 (Jan 29 2019 10:05:51) $ > > It means that there is no match between what you defined as the URI's > associated with olcServerID and the -h argument to slapd, so it cannot > link > a serverID to this instance of slapd. > > --Quanah > > -- > > Quanah Gibson-Mount > Product Architect > Symas Corporation > Packaged, certified, and supported LDAP solutions powered by OpenLDAP: > <http://www.symas.com> >

2 1

Filter memberOf attributes
by Markus Ludwig Grandpré 13 Aug '19

13 Aug '19

Dear list members, i've recently read that dn syntax in memberOf attributes does not allow substring matching in an ldap search filter like: (memberOf=cn=41*) Is there another way implement a substring search in memberOf attributes? Given the following structure: dn: cn=user0,ou=people,o=univeritaet konstanz,c=de memberOf: cn=410000,ou=groups,o=univeritaet konstanz,c=de dn: cn=user1,ou=people,o=univeritaet konstanz,c=de memberOf: cn=410001,ou=groups,o=univeritaet konstanz,c=de dn: cn=user2,ou=people,o=univeritaet konstanz,c=de memberOf: cn=410002,ou=groups,o=univeritaet konstanz,c=de ... dn: cn=user100,ou=people,o=univeritaet konstanz,c=de memberOf: cn=410100,ou=groups,o=univeritaet konstanz,c=de dn: cn=user101,ou=people,o=univeritaet konstanz,c=de memberOf: cn=420000,ou=groups,o=univeritaet konstanz,c=de ... is there an appropriate ldap search filter expression that can be used to filter all memberOf attributes that begin with 41? Whereby compound ldap search expressions like: (| (memberOf=cn=410000,ou=groups,o=univeritaet konstanz,c=de) (memberOf=cn=410001,ou=groups,o=univeritaet konstanz,c=de) (memberOf=cn=410002,ou=groups,o=univeritaet konstanz,c=de) ... (memberOf=cn=410100,ou=groups,o=univeritaet konstanz,c=de) ) are not intended to become implemented, because in real world they would get much too long and therefore too hard to maintain. Best regrads, Markus -- Markus Ludwig Grandpré Universität Konstanz Kommunikations-, Informations-, Medienzentrum (KIM) DV-Anwendungsprogrammierer / Abteilung Basisdienste 78457 Konstanz, Deutschland ++49 7531 88 4342

1 0

Transaction commit speed
by Sam Dave 13 Aug '19

13 Aug '19

Hi, Are transaction commits always fast (almost instantaneous) operations compared to the read or write operations within it? Is it possible for say an mdb_cursor_get or mdb_put to be faster than a subsequent mdb_txn_commit, and if so under what circumstances can that happen? This is relevant info for UI applications showing a progress indicator. If an mdb_txn_commit is always fast, we can rely on the _get/_put count to calculate the percentage. Thanks, Sam

3 2

Re: Multi-master replication : read_config: no serverID / URL match found. Check slapd -h arguments.
by HG 12 Aug '19

12 Aug '19

Thanks I understood that already. But I found out that SLAPD_URLS in /etc/sysconfig/slaps has an issue. It contains ldapi:/// and ldap:/// When I modify the latter in ldap://xxx.yyy.com/ slaps will not work. After removing the last / it works fine. Looks like a bug Op ma 12 aug. 2019 18:03 schreef Quanah Gibson-Mount <quanah(a)symas.com>: > --On Monday, August 12, 2019 12:38 PM +0200 HG <hanspeter.sloot(a)gmail.com> > > wrote: > > > When I stop and start the slapd service the latter fails with : > > Aug 12 11:33:17 ldap1.domain.com slapd[30972]: @(#) $OpenLDAP: slapd > > 2.4.44 (Jan 29 2019 10:05:51) $ > > It means that there is no match between what you defined as the URI's > associated with olcServerID and the -h argument to slapd, so it cannot > link > a serverID to this instance of slapd. > > --Quanah > > -- > > Quanah Gibson-Mount > Product Architect > Symas Corporation > Packaged, certified, and supported LDAP solutions powered by OpenLDAP: > <http://www.symas.com> >

1 0

Multi-master replication : read_config: no serverID / URL match found. Check slapd -h arguments.
by HG 12 Aug '19

12 Aug '19

Hello all, I am trying to setup multi-master replication while following the instructions on: https://www.itzgeek.com/how-tos/linux/centos-how-tos/configure-openldap-mul… When I stop and start the slapd service the latter fails with : Aug 12 11:33:17 ldap1.domain.com slapd[30972]: @(#) $OpenLDAP: slapd 2.4.44 (Jan 29 2019 10:05:51) $ mockbuild(a)x86-ol7-builder-02.us.oracle.com: /builddir/build/BUILD/openldap-2.4.44/openldap-2.4.44/servers/slapd Aug 12 11:33:17 ldap1.domain.com slapd slapd[30972]: read_config: no serverID / URL match found. Check slapd -h arguments. Aug 12 11:33:17 ldap1.domain.com slapd slapd[30972]: slapd stopped. Aug 12 11:33:17 ldap1.domain.com slapd slapd[30972]: connections_destroy: nothing to destroy. The openldap version is:2.4.44-21.el7_6.x86_64 I have filled /etc/sysconfig/slapd with the right url's. Also used strace to see whether I could determine the cause. This looks like a bug to me. Can anyone help? Regards Hans

2 1

Default autoconf values / building OpenLDAP 2.4.48
by Dominique Fuchs 12 Aug '19

12 Aug '19

Hi everyone, I just started building OpenLDAP 2.4.48 (stable tarball from openldap.org) and realized that there are some autoconf options regarding SLAPD configuration that do not comply with the --help documentation. Specifically: First I got errors regarding missing sql.h, then mysql_config. This led to the conclusion that autoconf tried to enable sql and ndb. However, in the documentation it says it'll default to 'no', which is why I didn't explicitly --disable-ndb and --disable-sql. When I do that, it acts as expected and configure is successful. Unfortunately I'm completely unaware how the handling of these default values is accomplished for autoconf, so I dign't have a chance to look it up myself. Thanks for any hints, Dominique

4 5

How can I run slapd in foreground
by Marc Roos 10 Aug '19

10 Aug '19

Afaik from the mesos executor, it wants to keep the process in foreground, so when the task terminates, it will be detected and restarted. How can I run slapd in foreground?

2 1

Building the OpenLDAP client libraries on Windows
by Olivier Hartmann 09 Aug '19

09 Aug '19

Hello, We are having difficulties building the OpenLDAP client libraries on Windows. Would anyone on this list be willing to share a procedure through which they succeeded in doing that with a recent version of OpenLDAP (2.4.47 or the next one)? The only thing we are after is building the OpenLDAP client libraries (not the server). Any help would be appreciated. Thanks, -Olivier

2 1

Help with LDAP Notifications
by Manojkiran Eda 08 Aug '19

08 Aug '19

1 0

How to change BaseDN? (OpenLDAP/slapd)
by Dominique Fuchs 08 Aug '19

08 Aug '19

Hi everyone, I'm actually stuck trying to set up an OpenLDAP implementation on my server running debian/slapd. Based on the hostname of the server (server.foo.bar) slapd automatically sets up the base config with dc=foo,dc=bar as BaseDN. This runs fine and I can connect successfully. However, I actually want the BaseDN for the LDAP structure to rely on the subdomain ldap.foo.bar (dc=ldap,dc=foo,dc=bar). How can I accomplish this? I already tried to fiddle around with ldapmodify/ldif-files, but the only thing I found online where descriptions of how to add a node, not how to change the root node. This post on SO: https://stackoverflow.com/questions/19537319/change-basedn-in-openldap only explains how to rename an existing setup (and even there I can't imagine there isn't a more native way of changing the BaseDN). Thanks in advance!

5 6

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical