openldap-technical

openldap-technical@openldap.org

13 participants
9794 discussions

openldap replication and server redirect
by Real, Elizabeth (392K) 02 Feb '18

02 Feb '18

Openldap gurus, This maybe a networking issue rather than configuration but I thought I’d run it by you guys to see if this can work. For replication, does ldap care whether I use a server redirect on the /etc/hosts file rather than the actual FQDN or IP address? I have two ldap systems behind a firewall with ldap ports 389 and 636 allowed thru. A redirect was setup to be able to get to these two systems. I set up a third ldap server outside the firewall and could not get it to replicate with other two servers by using the allowed redirect address. The two internal system replicate data just fine. So for example, it is suggested to add the 3 servers FQDN and IP addresses each of their /etc/hosts file and ensure they can see/communicate with eachother. /etc/hosts: Server1.local.srv Server2.local.srv Server3.local.srv My setup looks like this: /etc/hosts Server1andserver2redirect.local.srv (redirect that routes ldap traffic to the two internal servers) Server3.local.srv Can this work? If yes, what am I missing? Thank you, Liz

2 1

Re: Ldap crash with Error "Assertion 'NUMKEYS(mp) > 1' failed in mdb_page_search_root()"
by Quanah Gibson-Mount 30 Jan '18

30 Jan '18

--On Tuesday, January 30, 2018 1:15 PM -0800 rammohan ganapavarapu <rammohanganap(a)gmail.com> wrote: > > One more question i have is, i have installed openldap-2.4.44 but i have > not installed lmdb rpm but i have configured my ldap to use mdb as > backend so now is it really using mdb or some thing else? RHEL may have compiled liblmdb in statically. That's the default configuration for OpenLDAP. --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

2 1

Re: Ldap crash with Error "Assertion 'NUMKEYS(mp) > 1' failed in mdb_page_search_root()"
by Quanah Gibson-Mount 30 Jan '18

30 Jan '18

--On Tuesday, January 30, 2018 12:01 PM -0800 rammohan ganapavarapu <rammohanganap(a)gmail.com> wrote: > > Quanah, > > > openldap-2.4.44 rpm provided by redhat repo is by defaulting > installing libdb-5.3, so do i have to build rpms with LMDB to get this > fix? It is generally advised to not use the builds provided by RedHat, including their lack of LMDB support. Other options include the LTB project (<https://ltb-project.org/download#openldap>) which include LMDB support along with BDB and require no support contract. Alternatively, the company I work for (Symas) provides builds of OpenLDAP backed by LMDB, but ones that allow for replication require a support contract. --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: Ldap crash with Error "Assertion 'NUMKEYS(mp) > 1' failed in mdb_page_search_root()"
by Quanah Gibson-Mount 30 Jan '18

30 Jan '18

--On Tuesday, January 30, 2018 8:53 AM -0800 rammohan ganapavarapu <rammohanganap(a)gmail.com> wrote: > > Quanah, > > > Thank you, where can i read more about the reason for this issue and > how it got fixed jut for my understanding? Hi, You can find the details in the ITS I referenced: <http://www.openldap.org/its/index.cgi/?findid=8336> --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: Ldap crash with Error "Assertion 'NUMKEYS(mp) > 1' failed in mdb_page_search_root()"
by Quanah Gibson-Mount 30 Jan '18

30 Jan '18

--On Tuesday, January 30, 2018 8:38 AM -0800 rammohan ganapavarapu <rammohanganap(a)gmail.com> wrote: > > Hi, > > > I am using "openldap-2.4.43" with MDB as backend DB, trying to run some > load test before i deploy it in prod, while i am running add or delete > operations ldap is crashing with the following error. > > > ../../../../servers/slapd/back-mdb/../../../libraries/liblmdb/mdb.c:5276: > Assertion 'NUMKEYS(mp) > 1' failed in mdb_page_search_root() This is ITS#8336, fixed in OpenLDAP 2.4.44/LDMB 0.9.18. I suggest you upgrade to the current OpenLDAP Release (2.4.45/LMDB 0.9.21) -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Exponential increase in Free Pages
by John Holder 30 Jan '18

30 Jan '18

Hi OpenLdap list I have a question on how to interprite the Free Pages stat from mdb_copy. I may be reading this particular stat wrong. After using the compact utility from mdb_copy -c, free page count will start at zero and immediately increase to where it left off before the compact then increases by a few. I was just wondering if the free pages count is actually a free pages pointer where it left off instead of a count of total free pages. Is it possible that the sparse file needs holes dug in using fallocate -d or something else. Thank you!

1 0

Partial OpenLDAP replication
by Paulo Coimbra 29 Jan '18

29 Jan '18

Hi everybody, I need to replicate part of our OpenLDAP Directory (Main) to other openLDAP servers (Customers), like this: MAIN...................................CUSTOMER OU=People,dc=XXX ---> OU=XXX_Users,dc=XXX **OR** Customer's LDAP query at Main (if a user is not found on Customer LDAP database) without any kind of replication (I really prefer this). How can I do this? Any Sugestion? -- br, Paulo Coimbra

1 0

Re: publisher migration or upgrade
by Scott Bickford 25 Jan '18

25 Jan '18

Quaanh, I did not use -q on slapadd. Essentially I do a slapadd -f /etc/openldap/slapd.conf -b o=myco,c=us, -v -w > load_myco.log We have three databases, so there are three slapadd above with -b o=myapps,c=us -v -w > load_apps.log and a -b o=mycust,c=us -v -w > load_cust.log We have a very large custom schema and three databases, so we are still using slapd.conf instead of cn=config. The schema dates back to the 1990s. The database is "bdb" on all three schemas. The three production subscribers are load balanced and just one publisher, which is not load balanced. It is used by some java applications (which are also clustered) for updates. I am hoping that we can replace subscribers over the course of several weeks since there is quite a bit involved and have them up and running in production with the publisher still on 2.4.40 and the subscribers on 2.4.44. I am working with a VMWare person on planning how we are going to rename the servers.

2 2

Pending EPIPE fix for macOS
by Lorenz Bauer 25 Jan '18

25 Jan '18

Hello Howard, List, My bug and corresponding patch seems to have fallen through the cracks: http://www.openldap.org/its/index.cgi?findid=8590 Could you have a look and let me know whether you'd like any modifications? Best Lorenz -- Lorenz Bauer | Systems Engineer 25 Lavington St., London SE1 0NZ www.cloudflare.com

3 3

Re: Pending EPIPE fix for macOS
by Lorenz Bauer 25 Jan '18

25 Jan '18

Hello Quanah, I have access to a macOS system, is there a test suite I can run which would help? Best Lorenz On 24 January 2018 at 17:39, Quanah Gibson-Mount <quanah(a)symas.com> wrote: > Hi Lorenz, > > The issue hasn't been lost, but we don't have easy access to an OSX system > to test against. We'll see what we can get set up. > > --Quanah > > > --On Tuesday, January 23, 2018 2:17 PM +0000 Lorenz Bauer < > lmb(a)cloudflare.com> wrote: > > >> >> >> >> >> Hello Howard, List, >> >> My bug and corresponding patch seems to have fallen through the cracks: >> http://www.openldap.org/its/index.cgi?findid=8590 >> >> Could you have a look and let me know whether you'd like any >> modifications? >> >> Best >> Lorenz >> >> >> >> >> >> >> -- >> >> Lorenz Bauer | Systems Engineer >> 25 Lavington St., London SE1 0NZ >> >> www.cloudflare.com >> > > > > -- > > Quanah Gibson-Mount > Product Architect > Symas Corporation > Packaged, certified, and supported LDAP solutions powered by OpenLDAP: > <http://www.symas.com> > > -- Lorenz Bauer | Systems Engineer 25 Lavington St., London SE1 0NZ www.cloudflare.com

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical