openldap-technical

openldap-technical@openldap.org

18 participants
9785 discussions

Re: [EXT] rhel8 OS rpm spec file
by Kaushal Shriyan 21 Aug '23

21 Aug '23

Hi, Are there any tutorials or guides to configure symas based Openldap server on Red Hat Enterprise Linux release 8.7 (Ootpa)? # rpm -qa | grep openldap symas-openldap-servers-2.5.16-1.el8.x86_64 symas-openldap-servers-selinux-1.0.6-1.el8.noarch symas-openldap-libs-2.5.16-1.el8.x86_64 symas-openldap-clients-2.5.16-1.el8.x86_64 # Please guide me. Thanks in Advance. Best Regards, Kaushal On Wed, Aug 9, 2023 at 11:19 PM Kaushal Shriyan <kaushalshriyan(a)gmail.com> wrote: > > > On Mon, Aug 7, 2023 at 12:01 PM Windl, Ulrich <u.windl(a)ukr.de> wrote: > >> I think the question is somewhat off-topic here: Learn how to build an >> RPM package from elsewhere, maybe >> https://www.redhat.com/sysadmin/create-rpm-package or >> https://developers.redhat.com/blog/2019/03/18/rpm-packaging-guide-creating-… >> or https://linuxconfig.org/how-to-create-an-rpm-package >> >> -----Original Message----- >> From: Kaushal Shriyan <kaushalshriyan(a)gmail.com> >> Sent: Sunday, August 6, 2023 3:51 AM >> To: openldap-technical(a)openldap.org >> Subject: [EXT] rhel8 OS rpm spec file >> >> Hi, >> >> Is there a way to generate openldap-servers.x86_64 rpm spec file from >> https://www.openldap.org/software/download/OpenLDAP/openldap-release/openld… >> >> >> # ll >> total 900 >> -rw-r--r-- 1 1001 1001 11109 Jul 10 21:59 aclocal.m4 >> -rw-r--r-- 1 1001 1001 6100 Jul 10 21:59 ANNOUNCEMENT >> drwxr-xr-x 2 1001 1001 4096 Jul 10 21:59 build >> -rw-r--r-- 1 1001 1001 14120 Jul 10 21:59 CHANGES >> drwxr-xr-x 3 1001 1001 38 Jul 10 21:59 clients >> -rwxr-xr-x 1 1001 1001 753489 Jul 10 21:59 configure >> -rw-r--r-- 1 1001 1001 99724 Jul 10 21:59 configure.ac < >> http://configure.ac> >> drwxr-xr-x 7 1001 1001 129 Jul 10 21:59 contrib >> -rw-r--r-- 1 1001 1001 2345 Jul 10 21:59 COPYRIGHT >> drwxr-xr-x 8 1001 1001 102 Jul 10 21:59 doc >> drwxr-xr-x 3 1001 1001 4096 Jul 10 21:59 include >> -rw-r--r-- 1 1001 1001 3793 Jul 10 21:59 INSTALL >> drwxr-xr-x 8 1001 1001 123 Jul 10 21:59 libraries >> -rw-r--r-- 1 1001 1001 2214 Jul 10 21:59 LICENSE >> -rw-r--r-- 1 1001 1001 1029 Jul 10 21:59 Makefile.in >> -rw-r--r-- 1 1001 1001 3594 Jul 10 21:59 README >> drwxr-xr-x 4 1001 1001 52 Jul 10 21:59 servers >> drwxr-xr-x 5 1001 1001 93 Jul 10 21:59 tests >> # ./configure --help | grep spec >> To assign environment variables (e.g., CC, CFLAGS...), specify them as >> Defaults for the options are specified in brackets. >> --help=short display options specific to this package >> `/usr/local/bin', `/usr/local/lib' etc. You can specify >> --with-odbc with specific ODBC support >> compiler's sysroot if not specified). >> # >> >> Please guide me. >> >> Thanks in Advance. >> >> Best Regards, >> >> Kaushal >> >> > Thanks Quanah and Ulrich for the quick email response. Much appreciated > for guiding me. Thanks once again. > > Best Regards, > > Kaushal >

2 2

enable SSL
by Jean-Luc Chandezon 21 Aug '23

21 Aug '23

Hello dear community, I want to enable SSL, but I cannot find "/etc/sysconfig/slapd" file. OpenLDAP version is 2.4.59, on , for testing.. I'm going to migrate to last version next month. OS is Rocky Linux 8.8. Thanks, Jean-Luc

6 6

mdb_env_close, mdb_dbi_close, mdb_dbi_open
by Sam Dave 21 Aug '23

21 Aug '23

Hi, I'm interested in understanding these functions better. These are not criticisms.. since these functions are called rarely, I have no problem synchronizing them. I ask only for curiosity's sake. * mdb_env_close: "Only a single thread may call this function." Why can't different environments (separate files/dirs on disk) be closed from different threads? * mdb_dbi_close: "Handles should only be closed by a single thread." Why can't at least databases on different environments (separate files/dirs on disk) be closed from different threads? * mdb_dbi_open: "This function must not be called from multiple concurrent transactions in the same process." Why can't this function be called from different threads to open at least databases on different environments (separate files/dirs on disk)? What are the reasons for these limitations, under the hood? Could these functions have been designed in a different way, to allow for more multithreading (again, I'm not asking for this, I'm just curious). - Sam

2 4

Re: ldap_add: Naming violation (64) additional info: value of single-valued naming attribute 'dc' conflicts with value present in entry
by Kaushal Shriyan 17 Aug '23

17 Aug '23

On Thu, Aug 17, 2023 at 9:41 AM Quanah Gibson-Mount <quanah(a)fast-mail.org> wrote: > > > --On Thursday, August 17, 2023 7:25 AM +0530 Kaushal Shriyan > <kaushalshriyan(a)gmail.com> wrote: > > ># cat mydomain.ldif > > dn: dc=corporate,dc=mydomain,dc=in > > objectClass: dcObject > > objectClass: organization > > dc: mydomain > > o: mydomain > > > > > ># ldapadd -f mydomain.ldif -D cn=admin,dc=corporate,dc=mydomain,dc=in -W > > > > adding new entry "dc=corporate,dc=mydomain,dc=in" > > ldap_add: Naming violation (64) > > additional info: value of single-valued naming attribute 'dc' > > conflicts with value present in entry > > As it stated, "dc: mydomain" does not equal "dc: corporate". Fix the > naming value. > > --Quanah > > Thanks Quanah for the quick email response. It worked like a charm. Much appreciated for guiding me. Thanks once again. Best Regards, Kaushal

1 0

Questions about slapo-memberof
by Alex Samad - Yieldbroker 17 Aug '23

17 Aug '23

Hi I am using slapo-memberof wondering about its performance, I have a couple of groups that have a large pool of unique member attributes. I had some maintenance code that would update the largest group - say about 4k uniquemember entries. The code is wrong it rewrite all of the attributes instead of just updating the diff. But what we noticed is that for upto 13 sec the memberof attrib could be wrong on a user object whilst I presume slapo-memberof re evaluated all of the memberships Question I am in the middle of rewritting the maintenance code - will slapo-memberof only reprocess the additions / diffs or will it reeval all ... Do I have any control over how many threads or are there any control knobs I can tune for the slapo-memberof to help with this ? Thanks Alex

1 0

Re: 2.6.4 replication oddness
by Quanah Gibson-Mount 17 Aug '23

17 Aug '23

--On Thursday, August 17, 2023 2:02 PM -0400 Brendan Kearney <bpk678(a)gmail.com> wrote: >> Generally an export of the cn=config DB, minus any passwords of the >> different providers. If the config is identical across all 3, then >> just one copy of the config. >> >> --Quanah > > i have attached the export of cn=config, with sensitive data removed. > the config is intended to be identical between the nodes, though i have > broken things apart, in an attempt to rectify some issues and update > things to new functionality. I'm going to take this off list, but your config is an utter mess and contains a lot of things that need fixing. ;) I'll follow up once I have some time to fix it. --Quanah

2 2

slapd module thread synchronization and portability. __atomic_xxx().
by Sean Gallagher 17 Aug '23

17 Aug '23

Hi OpenLDAP affiliates, I'm working on a slapd module and have started looking at thread safety. I've noticed that lloadd uses __atomic_xx GCC builtins but slapd does not. Is there are reason for this? Does lloadd compile and run on all the same targets that slapd does? Sean. -- This email has been checked for viruses by AVG antivirus software. www.avg.com

2 1

2.6.4 replication oddness
by Brendan Kearney 16 Aug '23

16 Aug '23

list members, i am implementing slapd 2.6.4, having had 2.4.x running for quite some time. i had 2 primary nodes with n-way multi primary replication working like a charm, and want to have 2.6.4 with 3 primary nodes. i keep running into some odd issues when i bring up all three nodes and they begin replicating between each of the nodes. i have failure messages showing the instances core-dumping and want to find why the core dumps occur. Aug 08 16:21:20 server1 systemd[1]: slapd.service: Main process exited, code=dumped, status=11/SEGV Aug 08 16:21:20 server1 systemd[1]: slapd.service: Failed with result 'core-dump'. i have enable "stats" log level, and don't get much more info. i can run one instance and seem to be working without core dumping, but if i turn up one or both of the other slapd instances, all 3 of the instances begin failing. should i bump the log level up or is there diagnostics i can run, to find the reason things are failing? any insight is greatly appreciated. if i need to provide more info, let me know what is needed. thanks in advance, brendan

2 8

ldap_add: Naming violation (64) additional info: value of single-valued naming attribute 'dc' conflicts with value present in entry
by Kaushal Shriyan 16 Aug '23

16 Aug '23

Hi, I am running the below mentioned openldap server version on CentOS Linux release 7.9.2009 (Core). The details are as follows. # cat /etc/os-release NAME="CentOS Linux" VERSION="7 (Core)" ID="centos" ID_LIKE="rhel fedora" VERSION_ID="7" PRETTY_NAME="CentOS Linux 7 (Core)" ANSI_COLOR="0;31" CPE_NAME="cpe:/o:centos:centos:7" HOME_URL="https://www.centos.org/" BUG_REPORT_URL="https://bugs.centos.org/" CENTOS_MANTISBT_PROJECT="CentOS-7" CENTOS_MANTISBT_PROJECT_VERSION="7" REDHAT_SUPPORT_PRODUCT="centos" REDHAT_SUPPORT_PRODUCT_VERSION="7" # # rpm -qa | grep openldap openldap-clients-2.4.44-25.el7_9.x86_64 openldap-servers-2.4.44-25.el7_9.x86_64 openldap-2.4.44-25.el7_9.x86_64 # # slapd -VV @(#) $OpenLDAP: slapd 2.4.44 (Feb 23 2022 17:11:27) $ mockbuild(a)x86-01.bsys.centos.org: /builddir/build/BUILD/openldap-2.4.44/openldap-2.4.44/servers/slapd # systemctl status slapd ● slapd.service - OpenLDAP Server Daemon Loaded: loaded (/usr/lib/systemd/system/slapd.service; enabled; vendor preset: disabled) Active: active (running) since Thu 2023-08-17 05:57:50 IST; 5min ago Docs: man:slapd man:slapd-config man:slapd-hdb man:slapd-mdb file:///usr/share/doc/openldap-servers/guide.html Process: 6448 ExecStart=/usr/sbin/slapd -u ldap -h ${SLAPD_URLS} $SLAPD_OPTIONS (code=exited, status=0/SUCCESS) Process: 6410 ExecStartPre=/usr/libexec/openldap/check-config.sh (code=exited, status=0/SUCCESS) Main PID: 6450 (slapd) CGroup: /system.slice/slapd.service └─6450 /usr/sbin/slapd -u ldap -h ldapi:/// ldap:/// Aug 17 05:59:50 cbopenldap slapd[6450]: conn=1001 op=1 RESULT tag=105 err=64 text=value of single-valued naming attribute 'dc' conflicts with value present in entry Aug 17 05:59:50 cbopenldap slapd[6450]: conn=1001 op=2 UNBIND Aug 17 05:59:50 cbopenldap slapd[6450]: conn=1001 fd=11 closed Aug 17 06:00:01 cbopenldap slapd[6450]: conn=1002 fd=11 ACCEPT from IP=[::1]:42840 (IP=[::]:389) Aug 17 06:00:01 cbopenldap slapd[6450]: conn=1002 op=0 BIND dn="" method=128 Aug 17 06:00:01 cbopenldap slapd[6450]: conn=1002 op=0 RESULT tag=97 err=0 text= Aug 17 06:00:01 cbopenldap slapd[6450]: conn=1002 op=1 SRCH base="dc=corporate,dc=mydomain,dc=in" scope=2 deref=0 filter="(objectClass=*)" Aug 17 06:00:01 cbopenldap slapd[6450]: conn=1002 op=1 SEARCH RESULT tag=101 err=32 nentries=0 text= Aug 17 06:00:01 cbopenldap slapd[6450]: conn=1002 op=2 UNBIND Aug 17 06:00:01 cbopenldap slapd[6450]: conn=1002 fd=11 closed # # netstat -antup | grep -i 389 tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 6450/slapd tcp6 0 0 :::389 :::* LISTEN 6450/slapd # The distinguished name is *dc=corporate,dc=mydomain,dc=in * # cat mydomain_config.ldif dn: olcDatabase={2}hdb,cn=config changetype: modify replace: olcSuffix olcSuffix: dc=corporate,dc=mydomain,dc=in dn: olcDatabase={2}hdb,cn=config changetype: modify replace: olcRootDN olcRootDN: cn=admin,dc=corporate,dc=mydomain,dc=in #ldapmodify -Y EXTERNAL -H ldapi:/// -f mydomain_config.ldif # cat mydomain_config2.ldif dn: olcDatabase={2}hdb,cn=config changeType: modify replace: olcRootPW olcRootPW: {SSHA}m2NMC1NMrp5BavWVSHm2Becq7J2fHDNa #ldapmodify -Y EXTERNAL -H ldapi:/// -f mydomain_config2.ldif # cat mydomain_config3.ldif dn: olcDatabase={1}monitor,cn=config changetype: modify replace: olcAccess olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external, cn=auth" read by dn.base="cn=admin,dc=corporate,dc=mydomain,dc=in" read by * none #ldapmodify -Y EXTERNAL -H ldapi:/// -f mydomain_config3.ldif The distinguished name is *dc=corporate,dc=mydomain,dc=in * # cat mydomain.ldif dn: dc=corporate,dc=mydomain,dc=in objectClass: dcObject objectClass: organization dc: mydomain o: mydomain # ldapadd -f mydomain.ldif -D cn=admin,dc=corporate,dc=mydomain,dc=in -W adding new entry "dc=corporate,dc=mydomain,dc=in" ldap_add: Naming violation (64) additional info: value of single-valued naming attribute 'dc' conflicts with value present in entry # ldapsearch -x -b dc=corporate,dc=mydomain,dc=in *Output of ldapsearch -x -b dc=corporate,dc=mydomain,dc=in command* # extended LDIF # # LDAPv3 # base <dc=corporate,dc=mydomain,dc=in> with scope subtree # filter: (objectclass=*) # requesting: ALL # # search result search: 2 result: 32 No such object # numResponses: 1 # I am encountering the below issue as explained with the steps mentioned above ldap_add: Naming violation (64) > additional info: value of single-valued naming attribute 'dc' conflicts > with value present in entry Am I missing anything? Please guide me. Thanks in advance. Best Regards, Kaushal

2 1

Re: ldapmodify: wrong attributeType at line 5, entry "olcDatabase={2}hdb,cn=config"
by Kaushal Shriyan 11 Aug '23

11 Aug '23

On Wed, Aug 9, 2023 at 8:29 PM Quanah Gibson-Mount <quanah(a)fast-mail.org> wrote: > > > --On Wednesday, August 9, 2023 7:31 PM +0530 Kaushal Shriyan > <kaushalshriyan(a)gmail.com> wrote: > > > Configure OpenLDAP server while sending the configuration to the LDAP > > server. > ># cat db.ldif > > dn: olcDatabase={2}hdb,cn=config > > changetype: modify > > replace: olcSuffix > > olcSuffix: dc=itzgeek,dc=local > > dn: olcDatabase={2}hdb,cn=config > > changetype: modify > > replace: olcRootDN > > olcRootDN: cn=ldapadm,dc=itzgeek,dc=local > > dn: olcDatabase={2}hdb,cn=config > > changetype: modify > > replace: olcRootPW > > olcRootPW: {SSHA}RCQG8Sec/XtirtjxXL2cbAyeeWH2A9r/ > > > This is not valid LDIF change format. I suggest reading documentation on > how to create valid LDIF changes. > > <https://ldap.com/ldif-the-ldap-data-interchange-format/> has some good > detail, see the section on: > > LDIF Modify Change Records > > Regards, > Quanah > > Thanks Quanah for the quick email response. Is there a way to validate the LDIF file once it is created? Please guide me. Thanks in advance. Best Regards, Kaushal

2 1

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical