openldap-technical

openldap-technical@openldap.org

9897 discussions

IETF opinion change on "implicit TLS" vs. StartTLS
by Michael Ströder 16 Feb '18

16 Feb '18

HI! To me this rationale for SMTP submission with implicit TLS seems also applicable to LDAPS vs. StartTLS: https://tools.ietf.org/html/rfc8314#appendix-A So LDAPS should not be considered deprecated. Rather it should be recommended and the _optional_ use of StartTLS should be strongly discouraged. Ciao, Michael.

4 6

Re: placeholder problems
by Côme Chilliet 12 Feb '18

12 Feb '18

Le jeudi 8 février 2018, 09:59:03 CET Joeri Casteels a écrit : > Now i would like to assign them directly to the correct unix group depending on the base you start from or Primary group you select. > If i use this placeholder:Home directory*: /home/%primaryGroup%/%uid% i get the option in the template to select my primary group but it does not fill in the Home Directory correct nor it fills in the correct group. Hum primaryGroup is not an LDAP field so I don’t think you can use it like that. You can use %gidNumber% but I’m not sure it will help. You can open an issue to make the primary group name available as %primaryGroup% in templates but I can’t guarantee it will be added. > Also setting the passord expiration does not work correctly with the info on the website under placeholder i tried epoch time and it does not work at all to fetch the day of today and add 4years on top for example. Even just fetching the day of today does not work under unix Password Expiration data: The epoch modifier was added in FusionDirectory 1.2.1 which is not out yet. > Then there is another small matter i would like to know if there is an easy change for this. My users are allowed to change some info on their own but non of them find the edit button since it’s in the bottom right corner where nobody looks. Is it possible to make these buttons directly under the last frame? Can i edit this myself in de code? You can create you own CSS theme in which you can change the button display. See https://fusiondirectory-developer-documentation.readthedocs.io/en/latest/th… Côme

1 0

Re: plugin rsyslog
by Côme Chilliet 07 Feb '18

07 Feb '18

Le mercredi 7 février 2018, 15:59:18 CET Albert Shih a écrit : > Hi everyone, > > I try to install the rsyslog plugin but failed with this message The rsyslog plugin was removed some versions ago. > If it's the case how can I keep a log of « who do this, who do that ? » If what you want is to track what users are doing inside FD, you can use the audit plugin. Côme

1 0

openldap replication and server redirect
by Real, Elizabeth (392K) 02 Feb '18

02 Feb '18

Openldap gurus, This maybe a networking issue rather than configuration but I thought I’d run it by you guys to see if this can work. For replication, does ldap care whether I use a server redirect on the /etc/hosts file rather than the actual FQDN or IP address? I have two ldap systems behind a firewall with ldap ports 389 and 636 allowed thru. A redirect was setup to be able to get to these two systems. I set up a third ldap server outside the firewall and could not get it to replicate with other two servers by using the allowed redirect address. The two internal system replicate data just fine. So for example, it is suggested to add the 3 servers FQDN and IP addresses each of their /etc/hosts file and ensure they can see/communicate with eachother. /etc/hosts: Server1.local.srv Server2.local.srv Server3.local.srv My setup looks like this: /etc/hosts Server1andserver2redirect.local.srv (redirect that routes ldap traffic to the two internal servers) Server3.local.srv Can this work? If yes, what am I missing? Thank you, Liz

2 1

Re: Ldap crash with Error "Assertion 'NUMKEYS(mp) > 1' failed in mdb_page_search_root()"
by Quanah Gibson-Mount 30 Jan '18

30 Jan '18

--On Tuesday, January 30, 2018 1:15 PM -0800 rammohan ganapavarapu <rammohanganap(a)gmail.com> wrote: > > One more question i have is, i have installed openldap-2.4.44 but i have > not installed lmdb rpm but i have configured my ldap to use mdb as > backend so now is it really using mdb or some thing else? RHEL may have compiled liblmdb in statically. That's the default configuration for OpenLDAP. --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

2 1

Re: Ldap crash with Error "Assertion 'NUMKEYS(mp) > 1' failed in mdb_page_search_root()"
by Quanah Gibson-Mount 30 Jan '18

30 Jan '18

--On Tuesday, January 30, 2018 12:01 PM -0800 rammohan ganapavarapu <rammohanganap(a)gmail.com> wrote: > > Quanah, > > > openldap-2.4.44 rpm provided by redhat repo is by defaulting > installing libdb-5.3, so do i have to build rpms with LMDB to get this > fix? It is generally advised to not use the builds provided by RedHat, including their lack of LMDB support. Other options include the LTB project (<https://ltb-project.org/download#openldap>) which include LMDB support along with BDB and require no support contract. Alternatively, the company I work for (Symas) provides builds of OpenLDAP backed by LMDB, but ones that allow for replication require a support contract. --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: Ldap crash with Error "Assertion 'NUMKEYS(mp) > 1' failed in mdb_page_search_root()"
by Quanah Gibson-Mount 30 Jan '18

30 Jan '18

--On Tuesday, January 30, 2018 8:53 AM -0800 rammohan ganapavarapu <rammohanganap(a)gmail.com> wrote: > > Quanah, > > > Thank you, where can i read more about the reason for this issue and > how it got fixed jut for my understanding? Hi, You can find the details in the ITS I referenced: <http://www.openldap.org/its/index.cgi/?findid=8336> --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: Ldap crash with Error "Assertion 'NUMKEYS(mp) > 1' failed in mdb_page_search_root()"
by Quanah Gibson-Mount 30 Jan '18

30 Jan '18

--On Tuesday, January 30, 2018 8:38 AM -0800 rammohan ganapavarapu <rammohanganap(a)gmail.com> wrote: > > Hi, > > > I am using "openldap-2.4.43" with MDB as backend DB, trying to run some > load test before i deploy it in prod, while i am running add or delete > operations ldap is crashing with the following error. > > > ../../../../servers/slapd/back-mdb/../../../libraries/liblmdb/mdb.c:5276: > Assertion 'NUMKEYS(mp) > 1' failed in mdb_page_search_root() This is ITS#8336, fixed in OpenLDAP 2.4.44/LDMB 0.9.18. I suggest you upgrade to the current OpenLDAP Release (2.4.45/LMDB 0.9.21) -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Exponential increase in Free Pages
by John Holder 30 Jan '18

30 Jan '18

Hi OpenLdap list I have a question on how to interprite the Free Pages stat from mdb_copy. I may be reading this particular stat wrong. After using the compact utility from mdb_copy -c, free page count will start at zero and immediately increase to where it left off before the compact then increases by a few. I was just wondering if the free pages count is actually a free pages pointer where it left off instead of a count of total free pages. Is it possible that the sparse file needs holes dug in using fallocate -d or something else. Thank you!

1 0

Partial OpenLDAP replication
by Paulo Coimbra 29 Jan '18

29 Jan '18

Hi everybody, I need to replicate part of our OpenLDAP Directory (Main) to other openLDAP servers (Customers), like this: MAIN...................................CUSTOMER OU=People,dc=XXX ---> OU=XXX_Users,dc=XXX **OR** Customer's LDAP query at Main (if a user is not found on Customer LDAP database) without any kind of replication (I really prefer this). How can I do this? Any Sugestion? -- br, Paulo Coimbra

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical