openldap-technical

openldap-technical@openldap.org

14 participants
9796 discussions

LMDB and Android
by Kristoffer Sjögren 18 Jan '15

18 Jan '15

Hi I'm a Android noob and need to build LMDB for Android. Is Android NDK the way to go? https://developer.android.com/tools/sdk/ndk/index.html Any tricks I should be aware of? Cheers, -Kristoffer

2 4

Re: back-sql deployment woes
by Nick Atzert 15 Jan '15

15 Jan '15

I personally wouldn't move to a sql backend.. I've recommended against it. This is what the boss wants though so here we are. :-) Any ideas? Thanks. On Jan 5, 2015 8:03 PM, "Quanah Gibson-Mount" <quanah(a)zimbra.com> wrote: > --On Monday, January 05, 2015 7:27 PM -0500 thelastknowngod < > tlkg.me(a)gmail.com> wrote: > > I've finished moving my existing LDAP user data into MySQL >> > > Why would you move to SQL for an LDAP server? > > for use with >> back-sql on my testing machine and everything is working perfectly. >> > > back-sql is entirely experimental and generally unsupported. > > --Quanah > > -- > > Quanah Gibson-Mount > Platform Architect > Zimbra, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration >

7 10

Update openldap version from 2.3.43 to latest
by Tian Zhiying 15 Jan '15

15 Jan '15

Hi Admin I'm running OpenLDAP 2.3.43 in CentOS 5.8 64bit, now I want to update OpenLDAP from 2.3.43 to latest. How can I do it ? If no way update from 2.3.43 to latest, how can I migration data of 2.3.43 to new OpenLDAP? Thanks. Tian Zhiying ----- 在此邮件中未发现病毒。检查工具：AVG - www.avg.com 版本：2012.0.2249 / 病毒数据库：4257/8428 - 发布日期：01/14/15

2 1

[Openldap] Replicate olcAccess and olcLimits from Provider to consumer
by coma 14 Jan '15

14 Jan '15

Dear List, I am currently trying to find out if it is possible to replicate the olcAccess and olcLimits from a master server to a slave server for a specific database (in my case, replicate olcAccess and olcLimits configured on my "dc=example,dc=com" database only, i don't replicates cn=config and other databases). can you give me advice on this? Thanks in advance for any help, Sincerely

1 0

resynchronizing partial replica after ACL change
by Ferenc Wagner 13 Jan '15

13 Jan '15

Hi, I'm running a couple of partial replicas, where the replicated content is narrowed by provider ACLs. All is fine. Now, I need to extend the replicas with a new attribute, so I extend the ACL to allow reading of this attribute as well. How can I get the replicas synchronize this new attribute without downtime? Is forcing a full reload by slapd -c rid=1 a good solution? Does that incur the slapd restart downtime only, or would the replica database be in a crippled state until the full resync finishes? -- Thanks, Feri.

5 6

[Openldap] Add new node in existant n-way multimaster environment
by coma 13 Jan '15

13 Jan '15

Dear list, I'm currently trying to understand how to adding a new node (new master server) in an existant n-way multimaster environment by adding the new node as a "scratch node" (without any data, and without declare all the other servers in the cn=config), so, to do that, i'm would to know if it's possible to add a new master but force an "initial replication" (force it first to replicate config and data from an other master)? Thank you in advance for any answers,

1 0

slapcat command
by Eileen(=^ω^=) 12 Jan '15

12 Jan '15

Hi team! I face a question. When I use "slapcat -l filename.ldif ", the output file will include the createTimestamp、modifyTimestamp、entrycsn and entryUUID etc. These attributes will cause the output file can not put back to the bdb database. ‍ could you pls kindly tell me how can use this slapcat without these attibutes ? thanks and best wishes Eileen~

4 7

replace: olcAccess
by Igor Shmukler 07 Jan '15

07 Jan '15

Hello, With help from various generous people on this list, I am finishing up with my project. Among other things, I need to perform a non-interactive OpenLDAP configuration. I install the server with apptitude and have LDIFs to change the root password and suffix. However, it seems that I still need to correctly adjust olcAccess so my searches work. The olcAccess is the part that is not working as I expected. My LDIF runs just fine changing the name, and domain suffix. Yet, after the operation is complete, ldapsearch(1) start returning errors. When the suffix was nodomain [default left by the install] searches worked. Please advise. The LDIF is below: dn: olcDatabase={1}hdb,cn=config changetype: modify replace: olcAccess olcAccess: {0}to attrs=userPassword,shadowLastChange by dn="cn=admin,dc=example,dc=com" write by anonymous auth by self write by * none olcAccess: {1}to dn.base="" by * read olcAccess: {2}to * by self write by dn="cn=admin,dc=example,dc=com" write by * read dn: olcDatabase={1}hdb,cn=config changetype: modify replace: olcSuffix olcSuffix: dc=example,dc=com dn: olcDatabase={1}hdb,cn=config changetype: modify replace: olcRootDN olcRootDN: cn=admin,dc=example,dc=com I don't see any errors. Nothing throws me off when I run slapcat(8). Please advise. Thank you, Igor Shmukler

5 6

back-sql deployment woes
by thelastknowngod 06 Jan '15

06 Jan '15

I've finished moving my existing LDAP user data into MySQL for use with back-sql on my testing machine and everything is working perfectly. Trying to switch production over to it is giving me some headaches though. The two environments are configured the same way as far as I can tell and I can startup the service without issue. However when I try to authenticate on the production environment after swapping the backend out it fails. Here are the logs when I tried to authenticate from IRC: Jan 5 17:37:21 new-ldap slapd[14406]: <==backsql_search() Jan 5 17:37:21 new-ldap slapd[14406]: connection_get(14): got connid=1001 Jan 5 17:37:21 new-ldap slapd[14406]: connection_read(14): checking for input on id=1001 Jan 5 17:37:21 new-ldap slapd[14406]: op tag 0x60, time 1420497441 Jan 5 17:37:21 new-ldap slapd[14406]: conn=1001 op=2 do_bind Jan 5 17:37:21 new-ldap slapd[14406]: >>> dnPrettyNormal: <cn=irc,ou=accounts,cn=USERNAME,ou=people,dc=ls,dc=local> Jan 5 17:37:21 new-ldap slapd[14406]: <<< dnPrettyNormal: <cn=irc,ou=accounts,cn=USERNAME,ou=people,dc=ls,dc=local>, <cn=irc,ou=accounts,cn=USERNAME,ou=people,dc=ls,dc=local> Jan 5 17:37:21 new-ldap slapd[14406]: do_bind: version=3 dn="cn=irc,ou=accounts,cn=USERNAME,ou=people,dc=ls,dc=local" method=128 Jan 5 17:37:21 new-ldap slapd[14406]: ==>backsql_bind() Jan 5 17:37:21 new-ldap slapd[14406]: ==>backsql_get_db_conn() Jan 5 17:37:21 new-ldap slapd[14406]: <==backsql_get_db_conn() Jan 5 17:37:21 new-ldap slapd[14406]: ==>backsql_attrlist_add(): adding "userPassword" to list Jan 5 17:37:21 new-ldap slapd[14406]: ==>backsql_attrlist_add(): attribute "userPassword" is in list Jan 5 17:37:21 new-ldap slapd[14406]: ==>backsql_attrlist_add(): adding "objectClass" to list Jan 5 17:37:21 new-ldap slapd[14406]: ==>backsql_dn2id("cn=irc,ou=accounts,cn=USERNAME,ou=people,dc=ls,dc=local") Jan 5 17:37:21 new-ldap slapd[14406]: backsql_dn2id("cn=irc,ou=accounts,cn=USERNAME,ou=people,dc=ls,dc=local"): id_query "SELECT id,keyval,oc_map_id,dn FROM ldap_entries WHERE dn=?" Jan 5 17:37:21 new-ldap slapd[14406]: backsql_dn2id("cn=irc,ou=accounts,cn=USERNAME,ou=people,dc=ls,dc=local"): id=13 keyval=1 oc_id=8 dn=cn=irc,ou=accounts,cn=USERNAME,ou=people,dc=ls,dc=local Jan 5 17:37:21 new-ldap slapd[14406]: >>> dnPrettyNormal: <cn=irc,ou=accounts,cn=USERNAME,ou=people,dc=ls,dc=local> Jan 5 17:37:21 new-ldap slapd[14406]: <<< dnPrettyNormal: <cn=irc,ou=accounts,cn=USERNAME,ou=people,dc=ls,dc=local>, <cn=irc,ou=accounts,cn=USERNAME,ou=people,dc=ls,dc=local> Jan 5 17:37:21 new-ldap slapd[14406]: <==backsql_dn2id("cn=irc,ou=accounts,cn=USERNAME,ou=people,dc=ls,dc=local"): err=0 Jan 5 17:37:21 new-ldap slapd[14406]: ==>backsql_attrlist_add(): attribute "userPassword" is in list Jan 5 17:37:21 new-ldap slapd[14406]: ==>backsql_attrlist_add(): attribute "objectClass" is in list Jan 5 17:37:21 new-ldap slapd[14406]: ==>backsql_attrlist_add(): adding "ref" to list Jan 5 17:37:21 new-ldap slapd[14406]: ==>backsql_id2entry() Jan 5 17:37:21 new-ldap slapd[14406]: backsql_id2entry(): custom attribute list Jan 5 17:37:21 new-ldap slapd[14406]: ==>backsql_get_attr_vals(): oc="ircAccount" attr="userPassword" keyval=1 Jan 5 17:37:21 new-ldap slapd[14406]: backsql_get_attr_vals(): number of values in query: 1 Jan 5 17:37:21 new-ldap slapd[14406]: <==backsql_get_attr_vals() Jan 5 17:37:21 new-ldap slapd[14406]: ==>backsql_get_attr_vals(): oc="ircAccount" attr="objectClass" keyval=1 Jan 5 17:37:21 new-ldap slapd[14406]: backsql_get_attr_vals(): number of values in query: 0 Jan 5 17:37:21 new-ldap slapd[14406]: backsql_id2entry(): attribute "ref" is not defined for objectlass "ircAccount" Jan 5 17:37:21 new-ldap slapd[14406]: <==backsql_id2entry() The attribute the IRC server is looking for is "ircuid" but I'm not seeing that in the log. Could it be that, because this is a custom attribute, it isn't being passed along and/or searched for? It works with that attribute in the old configuration.

2 1

cannot start instance
by Brendan Kearney 05 Jan '15

05 Jan '15

i have been doing a bunch of testing and now have an instance that wont start up. if i run: /usr/sbin/slapd -u ldap -h "ldapi:/// ldap:///" -4 -d9 it runs through and fails with: 54a45a96 read_config: no serverID / URL match found. Check slapd -h arguments. not sure where to look for issues. the ldapi and ldap listeners start up during daemon_init: 54a45551 daemon_init: listen on ldapi:/// 54a45551 daemon_init: listen on ldap:/// 54a45551 daemon_init: 2 listeners to open... ldap_url_parse_ext(ldapi:///) 54a45551 daemon: listener initialized ldapi:/// ldap_url_parse_ext(ldap:///) 54a45551 daemon: listener initialized ldap:/// 54a45551 daemon_init: 2 listeners opened the olcServerID lines are in cn=config.ldif: olcServerID: 1 ldap://ldap1.bpk2.com olcServerID: 2 ldap://ldap2.bpk2.com not sure what is wrong. can someone point me in the right direction?

3 8

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical