openldap-technical

openldap-technical@openldap.org

9868 discussions

How to check whether OpenLDAP server is provider or consumer ?
by pramod kulkarni 23 Aug '13

23 Aug '13

I am trying to notify a system to check if the openLDAP server is provider or consumer.I can do this by getting a referral error on the consumer side whenever I try to write something on the server , but is their any other way to check if OpenLDAP is provider or consumer without writing to it ? .

2 1

How to two-way synchronization on openldap 2.4.33 version
by Tian Zhiying 23 Aug '13

23 Aug '13

Hi I use OpenLDAP 2.4.33 version, I want to achieve two-way synchronization, but master --> slave ok slave --> master not ok Can it support slave to master data synchronization on 2.4.33 version? Thanks Tian Zhiying

2 1

Mirrormode replication
by Darouichi, Aziz 22 Aug '13

22 Aug '13

Hi, I have 3 local servers and 1 remote server. All servers are configured for Mirror mode replications. Every night replication stops on the remote server. Once I delete the database on the remote, start services replication works fine, the next morning I have to go through the same process. The remote server is a VM image of one of the local servers. They hosing company changed the host name, IP address and allowed communication via a VPN tunnel between them and us. These is my replication entry in slapd.conf #mirrormode TRUE mirrormode on # define the provider to use the syncprov overlay # (last directives in database section) syncrepl rid=006 provider=ldap://192.168.60.42 tls_cert=/etc/pki/tls/certs/ldap-tls.curry.edu.cert.pem tls_key=/etc/pki/tls/private/ldap-tls.curry.edu.key.pem tls_cacert=/etc/pki/tls/certs/cacert.pem tls_reqcert=demand searchbase="dc=curry,dc=edu" schemachecking=on timelimit=unlimited sizelimit=unlimited type=refreshAndPersist retry="60 +" Thanks

2 6

How to start slapd without slapd.conf?
by Steppacher Ralf 21 Aug '13

21 Aug '13

Hello all, this is probably a really stupid question... But I cannot figure out how to start a freshly built slapd using only slapd-config configuration. I built and installed slapd 2.4.35: ./configure --prefix=$HOME/server/openldap --enable-modules --enable-overlays=mod --with-tls=openssl make depend make make test make install After that I find a slapd.conf and slapd.ldif in $HOME/server/openldap/etc/openldap. As I understood from the administrator's guide the slapd.conf approach is deprecated and should not be used. So I renamed the slapd.conf to slapd.conf.ignore so it is not picked up by default as I think it would be. But sudo $HOME/server/openldap/libexec/slapd -s any -F $HOME/server/openldap/etc/openldap/ logs ldif_read_file: no entry file "/home/dpr/server/openldap/etc/openldap//cn=config.ldif" and slapd is stopped immediatelly sudo $HOME/server/openldap/libexec/slapd -s any -F $HOME/server/openldap/etc/openldap/ -f $HOME/server/openldap/etc/openldap/slapd.ldif yields /home/dpr/server/openldap/etc/openldap/slapd.ldif: line 5: unknown directive <dn:> outside backend info and database definitions. and again the demon stops. The only way I got the demon to start is by using the default slapd.conf or with the -f option pointing to a slapd.conf file. Please advise. Thanks! Ralf

5 9

attribute to store system mailbox value
by Zeus Panchenko 19 Aug '13

19 Aug '13

hi, may somebody to recommend the attribute to store path to system mailbox, among attributes of schema files shipped with openldap, "system mailbox" is the path to mbox format file or maildir directory where MDA (depends on MDA configuration) stores received mail messages so, to not to add new LDAP object and attribute definition, I'd like to know, may be close by function attribute already exists? -- Zeus V. Panchenko jid:zeus@im.ibs.dn.ua IT Dpt., I.B.S. LLC GMT+2 (EET)

3 3

How to correct delete objects from cn=config?
by Robert Wolf 19 Aug '13

19 Aug '13

Hello people, I would like to ask for correct and/or official way how to remove objects from cn=config. I have found "how to delete backend DB" and "can't delete bdb backend from cn=config" threads. I know I can activate experimental delete support for cn=config, but I don't want to use experimental features. I would like to do it correct way. Can you explain how to delete objects from cn=config? I wanted to test null backend so I have added olcModuleLoad: {1}back_null in cn=module{0} and then I have created olcDatabase={2}null in cn=config. After testing I wanted to delete null backend and unload null module. But it is impossible to delete olcDatabase={2}null from cn=config (error 53 unwilling to perform) and it is impossible delete the back_null module (error 80 cannot delete olcModuleLoad). What is correct way to remove such configured backends and modules? I have read about slapcat and slapadd, which can be used to dump cn=config into LDIF, then edit this LDIF and import with slapadd, but the slapd should not be running. Is this only way how to remove some configuration? Is there any other way to remove configuration online? Thank you for answers. Regards, Robert Wolf.

6 10

ou=people hidden from ldapsearch
by Adam 18 Aug '13

18 Aug '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I'm sure this is a really stupid question, and I'm sorry for asking it, but I'm testing a migration from Sun DSEE to OpenLDAP 2.4.35 at the moment. I am creating a DIT similar to the following: dn: ou=people,dc=example,dc=com dn: ou=ftp,dc=example,dc=com dn: ou=groups,dc=example,dc=com dn: ou=hosts,dc=example,dc=com dn: ou=us,ou=people,dc=example,dc=com dn: ou=bd,ou=people,dc=example,dc=com dn: ou=id,ou=people,dc=example,dc=com dn: ou=users,ou=ftp,dc=example,dc=com dn: ou=groups,ou=ftp,dc=example,dc=com dn: ou=us,ou=groups,dc=example,dc=com dn: ou=bd,ou=groups,dc=example,dc=com dn: ou=id,ou=groups,dc=example,dc=com dn: ou=us,ou=hosts,dc=example,dc=com dn: ou=bd,ou=hosts,dc=example,dc=com dn: ou=id,ou=hosts,dc=example,dc=com When I perform a ldapsearch against our current Sun DSEE environment (with the same layout) I see the following: ldapsearch -x -h ldap.example.com -b example.com objectclass=organizationalUnit 1 -LLL dn: ou=people,dc=example,dc=com dn: ou=ftp,dc=example,dc=com dn: ou=groups,dc=example,dc=com dn: ou=hosts,dc=example,dc=com dn: ou=us,ou=people,dc=example,dc=com dn: ou=bd,ou=people,dc=example,dc=com dn: ou=id,ou=people,dc=example,dc=com dn: ou=users,ou=ftp,dc=example,dc=com dn: ou=groups,ou=ftp,dc=example,dc=com dn: ou=us,ou=groups,dc=example,dc=com dn: ou=bd,ou=groups,dc=example,dc=com dn: ou=id,ou=groups,dc=example,dc=com dn: ou=us,ou=hosts,dc=example,dc=com dn: ou=bd,ou=hosts,dc=example,dc=com dn: ou=id,ou=hosts,dc=example,dc=com When I perform the same search against OpenLDAP, I get the following: dn: ou=ftp,dc=example,dc=com dn: ou=hosts,dc=example,dc=com dn: ou=us,ou=people,dc=example,dc=com dn: ou=bd,ou=people,dc=example,dc=com dn: ou=id,ou=people,dc=example,dc=com dn: ou=users,ou=ftp,dc=example,dc=com dn: ou=groups,ou=ftp,dc=example,dc=com dn: ou=us,ou=groups,dc=example,dc=com dn: ou=bd,ou=groups,dc=example,dc=com dn: ou=id,ou=groups,dc=example,dc=com dn: ou=us,ou=hosts,dc=example,dc=com dn: ou=bd,ou=hosts,dc=example,dc=com dn: ou=id,ou=hosts,dc=example,dc=com Notice the destinct lack of ou=people,dc=example,dc=com and ou=groups,dc=example,dc=com. I know they're there, because I can create objects etc in them, but I'm at a complete loss as to why they don't show up in the ldapsearch. I know I'm obviously doing something stupid here, and again, I apologize, but any assistance would be appreciated. Thanks. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJSD4mtAAoJEH1iO/rgZIL9FwwH/3UxTIgxrVbe7IVf99IRB+hf veJMZ6NaqMjlFfFsla+KLbIF/64I5rwqVCLu/y6necJrQS2EY+cmZmNRlQ02/Cso rfd5ZQgp5q7ECZSkZCTLhrB1CIY183PiloDnG41lmpJkkP+thwj4NUdcMYYxP0bo EOMZIefdOewhV7+DOv0Jw807HCOAYrgfsbIk8uDmBUCdBaf4/WVmnLzTGMLq7zrj HLSJC09bPqcmlEieWVXFNVajE5ztZs8XI6WmFYvrDq1/+1bKoaYMRT2sMh8HnuEM hisFEUsLpQWSpwP52tmSGau2sOhthLPQKRBrIQbCyAwfEfwtqc+TUDmMsaxhKy0= =AqJ2 -----END PGP SIGNATURE-----

2 2

Schema Replication and data replication.
by espeake＠oreillyauto.com 12 Aug '13

12 Aug '13

So we are cooking with warm oil and I wan to the cooking with hot oil!!!! I have been able to get upgraded 2.4.28 on open ldap. Having issue with getting a good build of 2.4.35. But that isn't the problem. Below is the log on my log from one of my consumers after starting the slapd service. Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: loaded module back_hdb Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: module back_hdb: null module registered Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: loaded module ppolicy Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: module ppolicy: null module registered Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: loaded module memberof Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: module memberof: null module registered Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: loaded module dynlist Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: module dynlist: null module registered Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: loaded module syncprov Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: module syncprov: null module registered Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: loaded module refint Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: module refint: null module registered Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: loaded module back_ldap Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: module back_ldap: null module registered Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: Config: ** successfully added syncrepl rid=002 "ldap://tntest-ldap-master-1.oreillyauto.com" Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index objectClass 0x0004 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index cn 0x0004 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index uid 0x0004 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index oreillyGroup 0x0004 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index locationEntry 0x0004 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index counterNumber 0x0004 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index businessCategory 0x0004 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index locationNumber 0x0004 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index position 0x0004 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index title 0x0214 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index givenName 0x0214 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index functionListing 0x0004 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index manager 0x0004 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index sn 0x0214 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index nickName 0x0214 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index employeeNumber 0x0004 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index ou 0x0004 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index entryUUID 0x0004 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index supervisor 0x0004 Aug 7 21:36:16 tntest-ldap-2 slapd[3961]: index entryCSN 0x0004 Aug 7 21:36:17 tntest-ldap-2 slapd[3962]: slapd starting Aug 7 21:36:17 tntest-ldap-2 slapd[3962]: do_syncrep2: rid=002 LDAP_RES_SEARCH_RESULT Here is where is stops. Here in the ldif file from my master: # AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify. # CRC32 3411e7fc dn: olcDatabase={0}config objectClass: olcDatabaseConfig olcDatabase: {0}config olcUpdateRef: ldap://tntest-ldap-master-1.oreillyauto.com olcsyncrepl: rid=002 provider=ldap://tntest-ldap-master-1.oreillyauto.com type=refreshAndPersist retry="10 +" searchbase="cn=config" bindmethod=simple binddn="uid=admin,dc=oreillyauto,dc=com" credentials=<password> olcAccess: to * by dn="uid=admin,dc=oreillyauto,dc=com" write by dn="uid=ldapadmin,ou=system,dc=oreillyauto,dc=com" write by * none olcRootDN: cn=admin,cn=config olcRootPW:: c2VjcmV0 structuralObjectClass: olcDatabaseConfig entryUUID: 35b75e72-93c2-1032-9ca4-711c013d2dcb creatorsName: cn=config createTimestamp: 20130807153144Z entryCSN: 20130807153144.468097Z#000000#000#000000 modifiersName: cn=config modifyTimestamp: 20130807153144Z Here is the ldif from my consumer: dn: olcDatabase={0}config objectClass: olcDatabaseConfig olcDatabase: {0}config olcRootDN: cn=admin,cn=config olcRootPW: secret structuralObjectClass: olcDatabaseConfig olcsyncrepl: {0}rid=002 provider=ldap://tntest-ldap-master-1.oreillyauto.com type=refreshOnly retry="5 +" searchbase="cn=config" bindmethod=simple binddn="cn=admin,cn=config" credentials=<password> schemachecking=on olcAccess: to * by dn="uid=admin,dc=oreillyauto,dc=com" write by dn="uid=ldapadmin,ou=system,dc=oreillyauto,dc=com" write by * none entryUUID: f074ba7c-09ed-1030-952b-0bb60fbd91a8 creatorsName: cn=config createTimestamp: 20110503162710Z entryCSN: 20110503162710.319234Z#000000#000#000000 modifiersName: cn=config ModifyTimestamp: 20110503162710Z logging is set to config and sync. Is the issue the maybe the entryCSN? I am wondering if I need to blow out the cn=config stuff and recreate it on the consumer It should be that hard, just take a little time. Am I headed in the right direction or am I off base. Thank you, Eric Speake Web Systems Administrator O'Reilly Auto Parts This communication and any attachments are confidential, protected by Communications Privacy Act 18 USCS � 2510, solely for the use of the intended recipient, and may contain legally privileged material. If you are not the intended recipient, please return or destroy it immediately. Thank you.

3 16

RE24 testing call (OpenLDAP 2.4.36)
by Quanah Gibson-Mount 12 Aug '13

12 Aug '13

If you know how to build OpenLDAP manually, and would like to participate in testing the next set of code for the 2.4.36 release, please do so. Generally, get the code for RE24: <http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=snapshot;h=refs/h…> Configure & build. Execute the test suite (via make test) after it is built. Thanks! --Quanah -- Quanah Gibson-Mount Lead Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

8 17

UNSUBSCRIBE
by Kumar, Amit 12 Aug '13

12 Aug '13

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical