openldap-technical

openldap-technical@openldap.org

2 participants
9943 discussions

Speed when writing dublicate keys
by Tom Kirchner 13 Feb '15

13 Feb '15

Hi, I have a database with about 1 million integer keys. Now I want to append a lot of small values (each 3 bytes) to random keys very often (tens of millions of times). How do I insert into the database the fastest? Currently I am trying the following setup, but I wonder if that is optimal, because I see a decrease in indexing speed after about 500000 random writes (here appends): - I have split the whole key range into 16 databases (each within a different lmdb environment), so each range-db holds about 65000 keys - I open each range-db with the flags: MDB_APPENDDUP | MDB_INTEGERKEY | MDB_INTEGERDUP | MDB_DUPSORT - then when I want to append 3 bytes to the value of a key, I use the following call: res = mdb_put( txn[dbnumber], db[dbnumber], &k, &v, MDB_APPENDDUP ); Thank you for your help! -Tom

2 2

Re: Is the monitor backend writable?
by Ferenc Wagner 13 Feb '15

13 Feb '15

"Ulrich Windl" <Ulrich.Windl(a)rz.uni-regensburg.de> writes: > Ferenc Wagner <wferi(a)niif.hu> schrieb am 13.02.2015 um 09:20 in Nachricht <874mqqte84.fsf(a)lant.ki.iif.hu>: > >> From http://www.openldap.org/faq/data/cache/358.html: >> >> dn: cn=Log,cn=Monitor >> changetype: modify >> add: managedInfo >> managedInfo: stats >> managedInfo: stats2 >> >> I'm running 2.4.40 with cn=config, olcLoglevel: stats (thus I can change >> the log level anyway), but cn=Log,cn=Monitor does not contain any >> managedInfo attributes (at least >> >> $ ldapsearch -x -H ldapi:/// -D cn=monitor -W -b cn=Log,cn=Monitor managedInfo > > If the default isn't "-s sub", I'd add it, and did you try "monitoredInfo" instead? Neither makes a difference. Not even -s base. Also consider this: $ ldapsearch -LLL -x -H ldapi:/// -D cn=monitor -W -b cn=Log,cn=Monitor -s sub '*' '+' Enter LDAP Password: dn: cn=Log,cn=Monitor objectClass: monitorContainer structuralObjectClass: monitorContainer cn: Log creatorsName: cn=monitor modifiersName: cn=monitor createTimestamp: 20150128093559Z modifyTimestamp: 20150128093559Z description: This subsystem contains information about logging. description: Set the attribute "managedInfo" to the desired log levels. entryDN: cn=Log,cn=Monitor subschemaSubentry: cn=Subschema hasSubordinates: FALSE -- Feri.

1 0

determining what schema are loaded
by chris c 12 Feb '15

12 Feb '15

I've been tasked with adding a mail attribute for an openldap 2.4.23 installation. I've read enough of the entries on the mailing list that talk about the inability to do so being related to the proper schema not being loaded, and I think that is the issue. What I'm struggling with, is how to determine what schema are loaded and where they are loaded from? In reading the Redhat documentation, they reference Required attributes are specified using the objectClass definition, and can be found in schema files located in the /etc/openldap/slapd.d/cn=config/cn=schema/directory. So does this mean that in the above referenced directory, those schema will be loaded?

2 1

Trying to connection php with ldap
by Abhishek koserwal 12 Feb '15

12 Feb '15

*<?php// LDAP variables//$ldaphost = "host";$ldaphost = "localhost";$ldapport = 389;//$ldap_base_dn = "dc=exemplo,dc=com";$ldap_base_dn = "dc=zyz,dc=com";//$ldaprdn = "cn=Manager,$ldap_base_dn";$ldaprdn = "cn=root,$ldap_base_dn";$ldappassw = "my_password";// Connecting to LDAP$ldapconn = ldap_connect($ldaphost, $ldapport) or die ("Could not connect to $ldaphost");@ldap_set_option($ldapconn, LDAP_OPT_PROTOCOL_VERSION, 3);if ($ldapconn) { // binding to ldap server $ldapbind = ldap_bind($ldapconn,$ldaprdn,$ldappassw); // verify binding if (!$ldapbind) { echo '<script>alert("not connected")</script>'; var_dump($ldapbind); exit(); } }?>* Fail to bind, $ldapbind return bool(false). I have configured phpldapadmin, which is working fine. Regards Abhishek Koserwal Final year, CSE, IET-DAVV The capacity to learn is a gift; The ability to learn is a skill; The willingness to learn is a choice -- Brian Herbert

3 2

Re: LDAP searches for Kerberos entries
by Dameon Wagner 12 Feb '15

12 Feb '15

(Reposted to the list rather than just to Michael, sorry about that.) On Wed, Feb 11 2015 at 16:24:09 +0100, Michael Ströder scribbled in "Re: LDAP searches for Kerberos entries": > Simo Sorce wrote: > > On Wed, 2015-02-04 at 12:24 +0100, Michael Ströder wrote: > >> HI! > >> > >> Maybe some of you are using MIT Kerberos with LDAP backend. > >> > >> For creating a decent web2ldap search form template for the > >> Kerberos schema I'd like to know which kind of searches you > >> usually do when looking into your backend via LDAP. > >> > >> Which attributes are you usually using in the search? Which > >> filters do you hack on command-line? > >> > >> Well, 'krbPrincipalName' will of course be the most used search > >> attribute. The default equality matching rule is > >> caseExactIA5Match, so for convenience I'd add something to use > >> caseIgnoreIA5Match without the user having to select that > >> himself. > > > > You should also search on KrbCanonicalName if you need exact > > matching, krbPrincipalName is multivalued and may contain aliases. > > Thanks, added it. > > What about 'krbPrincipalAliases'? Is that actually used? That depends on whether you're using MIT or Heimdal for your your KDCs. IIRC krbPrincipalAliases refers to a feathure of Heimdal's implementation that MIT doesn't have, namely the ability for a principal to have one or more aliases (so host/foo.example.com could have also have HTTP/foo.example.com and ldap/foo.example.com all refer to the same principal in the KDB) If you're using an MIT realm, you probably don't need it. Cheers. Dameon. -- ><> ><> ><> ><> ><> ><> ooOoo <>< <>< <>< <>< <>< <>< Dameon Wagner, Systems Development and Support Team IT Services, University of Oxford ><> ><> ><> ><> ><> ><> ooOoo <>< <>< <>< <>< <>< <><

1 0

OpenLDAP Inheritance not working
by Matthew W. Marshall 12 Feb '15

12 Feb '15

I’m running into an issue with adding users to LDAP, when I use the following LDIF dn: mail=jsmith,ou=customers,dc=mydeqcust,dc=org cn: John Smith sn: Smith uid: jsmith mail: jsmith(a)dev.local<mailto:jsmith@dev.local> objectClass: inetOrgPerson mail: jsmith it adds fine, however does not show any attributes from OrginizationalPerson or Person. I checked in the slapd.d schema files and all the objectClasses have the correct SUP records. My understanding from the docs at http://www.zytrax.com/books/ldap/apa/ldif-objects.html was that openldap will include the inherited items automatically. I’m running slapd 2.4.39 with the slapd.d config style. Is there an additional option I need to configure? Matthew Marshall Network/Systems Engineer 602-771-4637 Matthew.Marshall(a)azdeq.gov<mailto:Matthew.Marshall@azdeq.gov> ********************************************************************** NOTICE: This e-mail (and any attachments) may contain PRIVILEGED OR CONFIDENTIAL information and is intended only for the use of the specific individual(s) to whom it is addressed. It may contain information that is privileged and confidential under state and federal law. This information may be used or disclosed only in accordance with law, and you may be subject to penalties under law for improper use or further disclosure of the information in this e-mail and its attachments. If you have received this e-mail in error, please immediately notify the person named above by reply e-mail, and then delete the original e-mail. Thank you.

3 4

Re: i am new to ldap plz help i have provided ldif file and simple authentication code
by Andrew Findlay 12 Feb '15

12 Feb '15

On Wed, Feb 11, 2015 at 11:19:40AM +0530, Bharath K wrote: > this is my java code where i can get output for "none" authentication when i > use "simple" authentication its not working... > env.put(Context.SECURITY_AUTHENTICATION, "simple"); > env.put(Context.SECURITY_PRINCIPAL, "cn=Manager, ou=People,dc=example,dc=com"); That DN is not in the LDIF data that you posted. It might be set as the rootDN for the database, but we need to see the OpenLDAP configuration to know whether it is right (either the slapd.conf file or an LDIF dump of everything under cn=config depending on which config system you are using). > env.put(Context.SECURITY_CREDENTIALS, "ldap123"); > // env.put(Context.SECURITY_CREDENTIALS, "{SSHA}rZe5WkunQdmRkyCcEHu9g6VsqRecnzIa"); Note that you must send the plain-text password. The SSHA hash is only used in server config or in LDAP entries. > this is my LDIF file > # nagios, People, example.com > dn: uid=nagios,ou=People,dc=example,dc=com > objectClass: inetOrgPerson > objectClass: posixAccount > objectClass: shadowAccount > uid: nagios > sn: nagios > givenName: nagios > cn: nagios > displayName: nagios > uidNumber: 500 > gidNumber: 500 > userPassword:: secret If you want to set the password to 'secret' then you should only have one colon: userPassword: secret Using :: means that the data is Base-64 encoded. Please post the OpenLDAP configuration so that we can check the DNs and passwords. Please also reload the data with the correct userPassword values and try: env.put(Context.SECURITY_PRINCIPAL, "uid=nagios,ou=People,dc=example,dc=com"); env.put(Context.SECURITY_CREDENTIALS, "secret"); VERY IMPORTANT: please post the actual data and the real passwords that you are using to test with. If they are really secret, then change them to something trivial BEFORE doing the tests. Andrew -- ----------------------------------------------------------------------- | From Andrew Findlay, Skills 1st Ltd | | Consultant in large-scale systems, networks, and directory services | | http://www.skills-1st.co.uk/ +44 1628 782565 | -----------------------------------------------------------------------

1 0

LMDB b-tree question
by Kristoffer Sjögren 11 Feb '15

11 Feb '15

Hi Does every database consist of a separate b-tree or is "database" just a name spacing convince? I.e. are reads faster for many smaller databases rather than one large database? Cheers, -Kristoffer

2 3

Accessing random rows from LMDB
by Sravan Kumar Reddy Javaji 10 Feb '15

10 Feb '15

Hello Everyone, I am new to LMDB. I have couple of questions, 1) Is there anyway that I can find the total number of records in LMDB. 2) Can I access all the rows from LMDB randomly instead of sequentially. For example, if there are 10 rows in LMDB as shown below, Key, Value K1, V1 K2, V2 K3, V3 K4, V4 K5, V5 I want to access it randomly, something like shown below Key, Value K3, V3 K5, V5 K4, V4 K2, V2 K1, V1 I know that it is better to read sequentially from LMDB and then later randomize the records. But I have around 1 million records in LMDB, I cant upload entire data to memory at once. I am planning to read data batch wise into memory and perform some operation on it. So, I am wondering, is there anyway that I can read the data randomly from LMDB directly. Looking forward to hear from you - Regards, Sravan

2 3

Crash with LMDB on iOS
by QW Support 10 Feb '15

10 Feb '15

I'm having trouble running the latest LMDB version on iOS 8.1.3 It seems to work with previous versions before SysV semaphores were used. Now it crashes with SIGSYS on line: semid = semget(IPC_PRIVATE, 2, mode); (line:4520 file:mdb.c) Has anyone got this to work? Thanks - Greg

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical