openldap-technical

openldap-technical@openldap.org

9 participants
9866 discussions

replication delay problem
by Cyril Grosjean 02 Mar '14

02 Mar '14

I use a couple of OpenLDAP 2.4.36 servers in a multi-master replication setup. Write operations are sent to a single server, and then replicated to the second one. I sometimes have write operations "peaks" of about 900 operations (modifications of the pwdFailureTime attribute mainly) per hour. The number of bind failures per user is neither limited nor reset yet and I especially noticed a script that connects to the directory with the same service account and (wrong) password. So, until this script is modified with the right password (which will take time, unfortunately), it can generate tons of failures, and thus tons of replications. I noticed a several minutes replication delay between the directories, at peak time, when comparing the contextCSN attributes. It looks to me a big delay with regards to the number of modifications. Anything I could do to limit that delay ?

4 11

Dell Inspiron B130 repair
by Michael 02 Mar '14

02 Mar '14

Good evening. I’d like to have my DC power jack repaired on my Dell Inspiron B130 as well as have the keyboard replaced if possible. Please let me know what the additional costs would be for the keyboard. Thanks Michael Starling 860.381.9284

1 1

Fwd: Re: Aw: Re: LMDB get value
by Howard Chu 01 Mar '14

01 Mar '14

-------- Original Message -------- Subject: Re: Aw: Re: LMDB get value Date: Sat, 01 Mar 2014 13:39:47 -0800 From: Howard Chu <hyc(a)symas.com> To: Markus Doppelbauer <doppelbauer(a)gmx.net> CC: Markus Doppelbauer wrote: > You are right. Thanks a lot! > An other question. Is there a "define"-option to compile LMDB without a > dependency to "libpthread"? (We will replace Daniel Bernsteins "CDB" for > performance reasons with LMDB - so locking is not required). No, nor is such a flag needed. LMDB readers do no locking anyway. If you're replacing CDB, then none of this matters. > Thanks a lot > Markus > *Gesendet:* Samstag, 01. März 2014 um 17:04 Uhr > *Von:* "Howard Chu" <hyc(a)symas.com> > *An:* "Markus Doppelbauer" <doppelbauer(a)gmx.net>, openldap-technical(a)openldap.org > *Betreff:* Re: LMDB get value > Markus Doppelbauer wrote: > > Hello, > > Test case (modified sample-mdb.c): > > http://doppelbauer.name/bug.c.txt > > If I run this proram the first time, LMDB finds the key. The second time, > > mdb_cursor_get() returns NOTFOUND. > > How to fix this issue? > > You're using an invalid dbi the second time, you didn't call mdb_dbi_open(). > > > Thanks a lot > > Markus > > > -- > -- Howard Chu > CTO, Symas Corp. http://www.symas.com > Director, Highland Sun http://highlandsun.com/hyc/ > Chief Architect, OpenLDAP http://www.openldap.org/project/ -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

LMDB get value
by Markus Doppelbauer 01 Mar '14

01 Mar '14

2 1

slapd.ldif beginner
by Sonny Taberman 01 Mar '14

01 Mar '14

Hi all ldap people. I have been trying this new way of configuring a slapd server from scratch. Sorry to say total failure on my side. I'm not sure where to begin. I have built a linux system from LFS Linux from scratch. So I want to install openldap from source, so far no problems. When my installation is done i have a directory in /etc/ named openldap and the content inside is this: DB_CONFIG.example ldap.conf ldap.conf.default schema slapd.conf slapd.conf.default slapd.ldif slapd.ldif.default To start configure my slapd using slapd.conf there is no problem. Actually I'm beginning to think I'm pretty good att this. :-) But then I try to read all I can find about configure a new slapd using slapd.ldif, not that easy. I understand that I need a new directory named slapd.d. After that I have no clue. I guess something is hardcoded in slapd but what am I supposed to do next? How can i communicate with slapd ? I guess I have to define a password somewhere for a manager or administrator but how and where? Is there a tutorial somwhere ? All I need is how to start. :-) best regards Sonny

3 3

Re: ldap_add: Object class violation (65), additional info: attribute 'host' not allowed
by W Forum W 27 Feb '14

27 Feb '14

Thanks!!! I found the same solution just before, it saved my day :-) Kind Regards On 02/27/2014 05:20 PM, Harry Jede wrote: > W Forum W wrote: >> Hi I tried to create a custom auxiliary class but I get this error >> >> attributetype: Inconsistent duplicate attributeType: "host" >> >> If I change the attributeType: "host" to attributeType: "hosts" >> it works. But I need the 'host' attribute.not 'hosts' > Its simple. "host" is defined in "account". So dont declare it twice, > just use it. > > # exists already in account > #attributetype ( 1.3.6.1.4.1.9554.1 > # NAME 'host' > # DESC 'host computer' > # EQUALITY caseIgnoreMatch > # SUBSTR caseIgnoreSubstringsMatch > # SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} > # ) > > objectclass ( 1.3.6.1.4.1.9554.0 > NAME 'teststuff' > SUP top > AUXILIARY > DESC 'Abstraction of an account with extra attributes' > MAY ( host ) > ) > >> How can I solve this? >> >> My schema looks like >> >> attributetype ( 1.3.6.1.4.1.9554.1 >> NAME 'host' >> DESC 'host computer' >> EQUALITY caseIgnoreMatch >> SUBSTR caseIgnoreSubstringsMatch >> SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} >> ) >> >> objectclass ( 1.3.6.1.4.1.9554.0 >> NAME 'teststuff' >> SUP top >> AUXILIARY >> DESC 'Abstraction of an account with extra attributes' >> MAY ( host ) >> ) >> >> Thanks

1 0

ldap_add: Object class violation (65), additional info: attribute 'host' not allowed
by W Forum W 27 Feb '14

27 Feb '14

Hi I try to add a user but the host attribute is not accept (everything else is fine) ldapadd -x -W -D "cn=admin,dc=example,dc=com" -f user.ldif Enter LDAP Password: adding new entry "uid=user,ou=Users,dc=example,dc=comt" ldap_add: Object class violation (65) additional info: attribute 'host' not allowed how can i add a host attribute i have following schema installed core.schema cosine.schema nis.schema inetorgperson.schema samba.schema thanks in advance

3 9

"entries aggregation"
by Alexandre Santos 27 Feb '14

27 Feb '14

Hi, I have a question about "entries aggregation". If for example I have ou=users,dc=exemple,dc=com and ou=info,dc=exemple,dc=com, and both have to be related, how can i do that? The uid must be different for integrity. Example people "test" data in ou=users and info in ou=info uid=test,ou=users,dc=exemple,dc=com ... mail: test(a)exemple.com uid=test_info,ou=info,dc=exemple,dc=com ... address: Street test if i search address and mail for "uid=test" it should give me both entries. Thanks

1 0

Not able to authenticate Windows and MAC client
by saurabh ohri 27 Feb '14

27 Feb '14

Hi all, I am new to openldap and i manage dto install and configure the same. My linux client is working well but not able to authenticate windows and mac clients. Have been trying since past 2 days by google and other posts but still facing issue. Any help would be highly appreciated. Details: using openldap-2.4.23-34 on RHEL6.5 Client details: Mac 10.8.5 -- tried configuring the network account server but it is showing RED. Error This server is not responding. Windows 7 – tried installing GINA but it is giving me invalid credentials error. Configuration file on server: Password: # extended LDIF # # LDAPv3 # base <dc=j,dc=example,dc=com> (default) with scope subtree # filter: (objectclass=*) # requesting: ALL # # j.example.com dn: dc=j,dc=example,dc=com objectClass: top objectClass: dcObject objectClass: organization o: example Organization description: example Inc DIT dc: j # Users, j.example.com dn: ou=Users,dc=j,dc=example,dc=com objectClass: organizationalUnit ou: Users # Groups, j.example.com dn: ou=Groups,dc=j,dc=example,dc=com objectClass: organizationalUnit ou: Groups # Admins, j.example.com dn: ou=Admins,dc=j,dc=example,dc=com objectClass: organizationalUnit ou: Admins # sohri, Users, j.example.com dn: uid=sohri,ou=Users,dc=j,dc=example,dc=com uid: sohri cn: sohri sn: 1 objectClass: top objectClass: posixAccount objectClass: inetOrgPerson loginShell: /bin/bash homeDirectory: /home/sohri uidNumber: 15000 gidNumber: 10000 userPassword:: e1NTSEF9eWdkWExpZUdIT01YRytRM3ZmZWdNY3QwSmd2bFNqSkcg mail: sam.ohri(a)example.com gecos: Local User # tpearce, Users, j.example.com dn: uid=tpearce,ou=Users,dc=j,dc=example,dc=com uid: tpearce cn: tpearce sn: 2 objectClass: top objectClass: posixAccount objectClass: inetOrgPerson loginShell: /bin/bash homeDirectory: /home/tpearce uidNumber: 15001 gidNumber: 10000 userPassword:: e1NTSEF9eWdkWExpZUdIT01YRytRM3ZmZWdNY3QwSmd2bFNqSkc= mail: tony.pearce(a)example.com gecos: local User # ldapusers, Groups, j.example.com dn: cn=ldapusers,ou=Groups,dc=j,dc=example,dc=com objectClass: posixGroup objectClass: top cn: ldapusers userPassword:: e2NyeXB0fXg= gidNumber: 10000 memberUid: uid=sohri memberUid: uid=tpearce # search result search: 2 result: 0 Success # numResponses: 8 # numEntries: 7 Regards Sam

4 8

memberOf values case
by Matteo Perego 27 Feb '14

27 Feb '14

Hi, I know that openldap usage behaviour is case insensitive. In my case a client use ldap attribute values in a case sensitive way. I've noticed that the memberOf value is created by the overlay using the DN case used in the query and not the DN case read from the database, I mean: dn: cn=test,ou=LOCAL,dc=example,dc=org changetype: modify replace: member member: uid=123,ou=people,dc=example,dc=org will create a memberOf: cn=test,ou=LOCAL,dc=example,dc=org attribute. dn: cn=test,ou=local,dc=example,dc=org changetype: modify replace: member member: uid=123,ou=people,dc=example,dc=org will create a memberOf: cn=test,ou=local,dc=example,dc=org attribute. The case of OU entry in the database is not considered and the values case depends on the writer client. I'm wondering if this's a known and desidered behaviour and I should deal with it or there's a chance to change it. -- Best Regards, Matteo Perego Xego di Perego Matteo & C. s.a.s. Via Giovanni Pascoli, 18 24040 Arzago d’Adda (BG) Part IVA/Cod Fis: 03126510167 R.E.A. 351612 tel +39-3395294954 fax +39-02700525082 http://www.xego.it email: info(a)xego.it

3 3

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical