openldap-technical

openldap-technical@openldap.org

13 participants
9906 discussions

Re: slapd crashes with ch_realloc of X bytes failed
by Meike Stone 14 Jan '13

14 Jan '13

2013/1/14 Quanah Gibson-Mount <quanah(a)zimbra.com>: > > > Sorry, I don't have your configuration memorized. Generally, you should > list: Oops sorry, I used my gmail account and did not see, that the thread in the mailing list is "broken".. Here are all posted informations from my production system http://www.openldap.org/lists/openldap-technical/201211/msg00164.html > > memory allocator (should be tcmalloc, if you've set that up correctly) In the test system yes (us see it in the pmaps), but on production, I use glibc. > > DB Information: > a) Total number of DNs in your database about 1.500.000 > b) DB_CONFIG settings set_cachesize 2 0 1 set_lg_regionmax 262144 set_lg_bsize 2097152 set_flags DB_LOG_AUTOREMOVE > c) Size of database on disk: du -c -h *.bdb 27M MyActivateTime.bdb 8.0K MyClassName.bdb 30M MyDeletedTime.bdb 14M MyInsertDate.bdb 92K MyJpeg.bdb 1.9M MyKey.bdb 2.2M MyLanguage.bdb 184K MyPhoneNumber.bdb 38M MyPk.bdb 14M MyPId.bdb 5.4M MyPIfId.bdb 9.4M MyProductTyp.bdb 140K MyProperty.bdb 2.5M MySystemFlag.bdb 22M MyUserName.bdb 184K MyVId.bdb 428M cn.bdb 728M dn2id.bdb 37M entryCSN.bdb 39M entryUUID.bdb 4.0G id2entry.bdb 6.2M objectClass.bdb 5.4G total > From slapd.conf/cn=config: > a) cachesize setting > b) idlcachesize setting > c) dncachesize setting cachesize 750000 dncachesize 750000 idlcachesize 2250000 Thanks and best regards Meike

2 1

Re: Replication not working
by Quanah Gibson-Mount 14 Jan '13

14 Jan '13

--On Sunday, January 13, 2013 1:37 AM +0530 anil beniwal <beni.anil(a)gmail.com> wrote: > > Hi Quanah > > I will be highly thankful to you, if you can help me out in below issue. > > We have three servers on rhel 6.3, 16 vcpu and 32G RAM , openldap 2.4.33 > with mdb db of 200G a) Keep messages to the list b) Use delta-syncrepl for MMR c) Grab the latest RE24 code --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: Memory usage with bdb
by Friedrich Locke 14 Jan '13

14 Jan '13

Quanah, i would like to have ti fully functional on OpenBSD 5.2. I have no coding skill nor understand technically how ldap works. How may we get in touch with OpenLDAP developer to let them know about this problem ? Since you are baffled. Probably, the OpenLDAP should be aware about this problem. []s On Mon, Jan 14, 2013 at 4:33 PM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote: > --On Monday, January 14, 2013 3:45 PM -0200 Friedrich Locke < > friedrich.locke(a)gmail.com> wrote: > > Sorry. >> >> Here you have it: >> > > If further information is necessary, let me know! >> > > Thanks. I have to say I'm pretty baffled. I've never used OpenLDAP under > BSD, but I wonder if there are issues with how BDB itself is built. For > Linux, there are particular flags you want to set to get it to work well. > > > --Quanah > > -- > > Quanah Gibson-Mount > Sr. Member of Technical Staff > Zimbra, Inc > A Division of VMware, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration >

1 0

Re: Memory usage with bdb
by Friedrich Locke 14 Jan '13

14 Jan '13

Sorry. Here you have it: On Mon, Jan 14, 2013 at 3:30 PM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote: > --On Monday, January 14, 2013 2:00 PM -0200 Friedrich Locke < > friedrich.locke(a)gmail.com> wrote: > > Some time ago, i send a message about slapd "eating" all my memory >> resource. >> >> Mr. Quanah asked me to provide more details. Here you have it: >> sioux@gustav$ uname -a >> OpenBSD gustav.cpd.ufv.br 5.2 GENERIC.MP#368 amd64 >> sioux@gustav$ >> >> sioux@gustav$ pkg_info | grep openldap >> openldap-client-2.4.31 Open source LDAP software (client) >> openldap-server-2.4.31p0 Open source LDAP software (server) >> sioux@gustav$ pkg_info | grep db >> cyrus-sasl-2.1.25p3-db4 RFC 2222 SASL (Simple Authentication and Security >> Layer) >> db-4.6.21v0 Berkeley DB package, revision 4 >> dbus-1.6.2p0v0 message bus system >> gdbm-1.8.3p0 GNU dbm >> iodbc-3.52.7 ODBC 3.x driver manager >> sioux@gustav$ >> > > You are still extremely vague in your details. > > How large is your DB on disk? (du -c -h *.bdb) > gustav# pwd /var/openldap-data gustav# du -c -h *.bdb 32.0K cn.bdb 32.0K dn2id.bdb 64.0K id2entry.bdb 32.0K mail.bdb 32.0K mailAlternateAddress.bdb 32.0K mailHost.bdb 32.0K objectClass.bdb 32.0K uid.bdb 288K total > What are your BDB settings in your DB_CONFIG file? > gustav# cat /var/openldap-data/DB_CONFIG # $OpenLDAP$ # Example DB_CONFIG file for use with slapd(8) BDB/HDB databases. # # See the Oracle Berkeley DB documentation # < http://www.oracle.com/technology/documentation/berkeley-db/db/ref/env/db_co… > # for detail description of DB_CONFIG syntax and semantics. # # Hints can also be found in the OpenLDAP Software FAQ # <http://www.openldap.org/faq/index.cgi?file=2> # in particular: # <http://www.openldap.org/faq/index.cgi?file=1075> # Note: most DB_CONFIG settings will take effect only upon rebuilding # the DB environment. # one 0.25 GB cache #set_cachesize 0 268435456 1 set_cachesize 0 16777216 1 # Data Directory #set_data_dir db # Transaction Log settings set_lg_regionmax 262144 set_lg_bsize 2097152 #set_lg_dir logs # Note: special DB_CONFIG flags are no longer needed for "quick" # slapadd(8) or slapindex(8) access (see their -q option). > What how many DNs are there in your database? > gustav# ldapsearch -D cn=oldap,dc=ufv,dc=br -W | grep dn: Enter LDAP Password: dn: dc=ufv,dc=br dn: ou=group,dc=ufv,dc=br dn: cn=its,ou=group,dc=ufv,dc=br dn: cn=asd,ou=group,dc=ufv,dc=br dn: cn=dba,ou=group,dc=ufv,dc=br dn: cn=wbx,ou=group,dc=ufv,dc=br dn: cn=alg,ou=group,dc=ufv,dc=br dn: cn=djb,ou=group,dc=ufv,dc=br dn: cn=nofiles,ou=group,dc=ufv,dc=br dn: cn=qmail,ou=group,dc=ufv,dc=br dn: cn=ftp,ou=group,dc=ufv,dc=br dn: cn=src,ou=group,dc=ufv,dc=br dn: cn=vmail,ou=group,dc=ufv,dc=br dn: cn=ord,ou=group,dc=ufv,dc=br dn: cn=adc,ou=group,dc=ufv,dc=br dn: cn=bod,ou=group,dc=ufv,dc=br dn: cn=frn,ou=group,dc=ufv,dc=br dn: ou=people,dc=ufv,dc=br dn: uid=sioux,ou=people,dc=ufv,dc=br dn: uid=mysql,ou=people,dc=ufv,dc=br dn: uid=oldap,ou=people,dc=ufv,dc=br dn: uid=dnscache,ou=people,dc=ufv,dc=br dn: uid=dnslog,ou=people,dc=ufv,dc=br dn: uid=tinydns,ou=people,dc=ufv,dc=br dn: uid=ftp,ou=people,dc=ufv,dc=br dn: uid=alias,ou=people,dc=ufv,dc=br dn: uid=qmaild,ou=people,dc=ufv,dc=br dn: uid=qmaill,ou=people,dc=ufv,dc=br dn: uid=qmailp,ou=people,dc=ufv,dc=br dn: uid=qmailq,ou=people,dc=ufv,dc=br dn: uid=qmailr,ou=people,dc=ufv,dc=br dn: uid=qmails,ou=people,dc=ufv,dc=br dn: uid=cvs,ou=people,dc=ufv,dc=br dn: uid=tftp,ou=people,dc=ufv,dc=br dn: uid=vmail,ou=people,dc=ufv,dc=br dn: uid=grios,ou=people,dc=ufv,dc=br dn: uid=vlobo,ou=people,dc=ufv,dc=br dn: ou=appsrv,dc=ufv,dc=br dn: cn=ypldap,ou=appsrv,dc=ufv,dc=br dn: cn=webprv,ou=appsrv,dc=ufv,dc=br dn: cn=mail,ou=appsrv,dc=ufv,dc=br gustav# Total: 41 > What is your total amount of RAM? > > Memory: 2GB > May be a few useful bits of information to have. > > If further information is necessary, let me know! > > --Quanah > > > > -- > > Quanah Gibson-Mount > Sr. Member of Technical Staff > Zimbra, Inc > A Division of VMware, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration >

2 1

memory leak
by Friedrich Locke 14 Jan '13

14 Jan '13

Hi! Is anybody aware of memory leaks in OpenLDAP 2.4.31 ? My server is consuming memory. I have only around 16 users on my oldap implementation. Every search performed increase memory consumption. Any ideia ?

2 1

OpenLDAP SSL
by Andy Carlson 14 Jan '13

14 Jan '13

I am running an OpenLDAP server and I am attempting to get it set up with SSL. The service config appears to already be configured with port 636. I have added the Cert, CACert, and Key into the cn=config context using the three corresponding attributes. When I attempt to restart the slapd service it will not start up. I have done this on three other servers whose configuration is exactly the same and it worked perfectly. Any thoughts? Thanks much!!!, Andy Carlson Moody Bible Institute Identity Administrator | Information Systems 312-329-4385 www.moody.edu<http://www.moody.edu>

3 2

Re: Memory usage with bdb
by Friedrich Locke 14 Jan '13

14 Jan '13

Some time ago, i send a message about slapd "eating" all my memory resource. Mr. Quanah asked me to provide more details. Here you have it: sioux@gustav$ uname -a OpenBSD gustav.cpd.ufv.br 5.2 GENERIC.MP#368 amd64 sioux@gustav$ sioux@gustav$ pkg_info | grep openldap openldap-client-2.4.31 Open source LDAP software (client) openldap-server-2.4.31p0 Open source LDAP software (server) sioux@gustav$ pkg_info | grep db cyrus-sasl-2.1.25p3-db4 RFC 2222 SASL (Simple Authentication and Security Layer) db-4.6.21v0 Berkeley DB package, revision 4 dbus-1.6.2p0v0 message bus system gdbm-1.8.3p0 GNU dbm iodbc-3.52.7 ODBC 3.x driver manager sioux@gustav$ So: Why is this happening ? On Thu, Nov 1, 2012 at 3:02 PM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote: > --On Thursday, November 01, 2012 2:24 PM -0200 Friedrich Locke < > friedrich.locke(a)gmail.com> wrote: > > Is anyone aware of any buggy in openldap+bdb related to memory usage? >> Have anyone here using this type of backend ? Any problem to report? >> > > No. Yes. No. > > I would suggest you provide some more detailed information as to what, if > any, problem you feel you are experiencing. This email is quite vague. > > --Quanah > > -- > > Quanah Gibson-Mount > Sr. Member of Technical Staff > Zimbra, Inc > A Division of VMware, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration >

2 1

openbsd+ldap+qmail: a nightmare
by Friedrich Locke 14 Jan '13

14 Jan '13

Hi folks, i have been walking around and now i need to get qmail+ldap+openbsd working. I could configure everything, as usual openbsd runs rock solid. But i believe openldap does not like openbsd somehow. That's what i want to figure it out. The point is: i have just setted up obsd+oldap+qmail. I am trying to send a message for the only user i have in the tree: somehow, i don't know why is "eating" all my system memory. I am really curious why it happens on OBSD. I am running amd64 5.2, but i remenber to have given up some time ago when the obsd version was not 5.2. When i issue ldapsearch not memory increase is realized. The problem remains even with the 5.2 version. Some information is provided below : sioux@gustav$ uname -a OpenBSD gustav.cpd.ufv.br 5.2 GENERIC.MP#368 amd64 sioux@gustav$ pkg_info | grep openldap openldap-client-2.4.31 Open source LDAP software (client) openldap-server-2.4.31p0 Open source LDAP software (server) sioux@gustav$ For the /etc/openldap/slapd.conf, here you have it: # # See slapd.conf(5) for details on configuration options. # This file should NOT be world readable. # include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/nis.schema include /etc/openldap/schema/qmail.schema # Define global ACLs to disable default read access. # Do not enable referrals until AFTER you have a working directory # service AND an understanding of referrals. #referral ldap://root.openldap.org pidfile /var/run/openldap/slapd.pid argsfile /var/run/openldap/slapd.args # Load dynamic backend modules: # modulepath /usr/local/libexec/openldap # moduleload back_bdb.la # moduleload back_hdb.la # moduleload back_ldap.la # Sample security restrictions # Require integrity protection (prevent hijacking) # Require 112-bit (3DES or better) encryption for updates # Require 63-bit encryption for simple bind # security ssf=1 update_ssf=112 simple_bind=64 # Sample access control policy: # Root DSE: allow anyone to read it # Subschema (sub)entry DSE: allow anyone to read it # Other DSEs: # Allow self write access # Allow authenticated users read access # Allow anonymous users to authenticate # Directives needed to implement policy: # access to dn.base="" by * read # access to dn.base="cn=Subschema" by * read # access to * # by self write # by users read # by anonymous auth # # if no access controls are present, the default policy # allows anyone and everyone to read anything but restricts # updates to rootdn. (e.g., "access to * by * read") # # rootdn can always read and write EVERYTHING! ####################################################################### # BDB database definitions ####################################################################### database bdb #suffix "dc=my-domain,dc=com" suffix "dc=ufv,dc=br" #rootdn "cn=Manager,dc=my-domain,dc=com" rootdn "cn=oldap,dc=ufv,dc=br" # Cleartext passwords, especially for the rootdn, should # be avoid. See slappasswd(8) and slapd.conf(5) for details. # Use of strong authentication encouraged. #rootpw secret rootpw {SSHA}HBjSmSCbiE8J26EuDg3ULnSj2SmN1x5g # The database directory MUST exist prior to running slapd AND # should only be accessible by the slapd and slap tools. # Mode 700 recommended. directory /var/openldap-data # Indices to maintain index cn eq index objectClass eq index mail,mailalternateaddress,uid eq,sub index accountstatus,mailhost,deliverymode eq index default eq cachesize 4096 checkpoint 128 15 dbnosync dirtyread sasl-host gustav.cpd.ufv.br sasl-realm UFV.BR sasl-regexp uid=([^,]+),cn=UFV.BR,cn=gssapi,cn=auth uid=$1,ou=people,dc=ufv,dc=br limits dn.base="cn=ypldap,ou=appsrv,dc=ufv,dc=br" time=2048 size=16384 limits dn.base="cn=mail,ou=appsrv,dc=ufv,dc=br" time=2048 size=16384 limits dn.onelevel="ou=people,dc=ufv,dc=br" time=4 size=16384 ################################################################################ # access definition on ou=appsrv,dc=ufv,dc=br ################################################################################ access to dn.one="ou=appsrv,dc=ufv,dc=br" attrs=userPassword by self read by anonymous auth # by * none access to dn.one="ou=appsrv,dc=ufv,dc=br" by dn.one="ou=appsrv,dc=ufv,dc=br" read access to dn.base="ou=appsrv,dc=ufv,dc=br" attrs=entry by dn.one="ou=appsrv,dc=ufv,dc=br" read ################################################################################ # access definition on ou=group,dc=ufv,dc=br ################################################################################ access to dn.one="ou=group,dc=ufv,dc=br" by dn.base="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read by dn.one="ou=people,dc=ufv,dc=br" read access to dn.base="ou=group,dc=ufv,dc=br" attrs=entry by dn.base="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read by dn.one="ou=people,dc=ufv,dc=br" read ################################################################################ # access definition on ou=people,dc=ufv,dc=br ################################################################################ access to dn.one="ou=people,dc=ufv,dc=br" attrs=userPassword by self read by dn.base="cn=mail,ou=appsrv,dc=ufv,dc=br" read by anonymous auth by * none access to dn.one="ou=people,dc=ufv,dc=br" attrs=uid,homeDirectory by self read by dn.base="cn=mail,ou=appsrv,dc=ufv,dc=br" read by dn.base="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read access to dn.one="ou=people,dc=ufv,dc=br" attrs=cn,uidNumber,gidNumber,loginShell,gecos,description by self read by dn.base="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read access to dn.one="ou=people,dc=ufv,dc=br" attrs=mail,mailMessageStore,mailAlternateAddress,qmailUID,qmailGID,mailHost,mailForwardingAddress,deliveryProgramPath,qmailDotMode,deliveryMode,mailReplyText,accountStatus,qmailAccountPurge,mailQuotaSize,mailQuotaCount,mailSizeMax by self read by dn.base="cn=mail,ou=appsrv,dc=ufv,dc=br" read access to dn.one="ou=people,dc=ufv,dc=br" by self read by dn.base="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read by dn.base="cn=mail,ou=appsrv,dc=ufv,dc=br" read access to dn.base="ou=people,dc=ufv,dc=br" attrs=entry by dn.base="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read by dn.base="cn=mail,ou=appsrv,dc=ufv,dc=br" read ################################################################################ # access definition for the root (ufv.br) ################################################################################ access to dn.base="dc=ufv,dc=br" attrs=entry by dn.base="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read by dn.base="cn=mail,ou=appsrv,dc=ufv,dc=br" read ####################################################################### # Monitor database definitions ####################################################################### database monitor access to dn.subtree="cn=monitor" by dn.base="cn=oldap,dc=ufv,dc=br" read # by * none

1 0

authentication problems
by Friedrich Locke 12 Jan '13

12 Jan '13

Dear list member, i am trying to retrieve data from a openldap server. When i issue ldapsearch from local machine itself, every thing works ok, but when i try from a remote host, i got problems related to GSSAPI authentication. Here you have: sioux@gustav$ ldapsearch -D cn=ypldap,ou=appsrv,dc=ufv,dc=br -b uid=vlobo,ou=people,dc=ufv,dc=br -W Enter LDAP Password: # extended LDIF # # LDAPv3 # base <uid=vlobo,ou=people,dc=ufv,dc=br> with scope subtree # filter: (objectclass=*) # requesting: ALL # # vlobo, people, ufv.br dn: uid=vlobo,ou=people,dc=ufv,dc=br uid: vlobo objectClass: organizationalRole objectClass: posixAccount objectClass: qmailUser cn: Valter Lobo uidNumber: 2001 gidNumber: 2000 homeDirectory: /home/vlobo loginShell: /bin/sh gecos: Valter Lobo,,, # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 sioux@gustav$ ############################################################################ But when i try from a remote host (the same command line with -h option, of course): sioux@lion$ ldapsearch -D cn=ypldap,ou=appsrv,dc=ufv,dc=br -b ou=people,dc=ufv,dc=br -h gustav.cpd.ufv.br -W Enter LDAP Password: SASL/GSSAPI authentication started ldap_sasl_interactive_bind_s: Local error (-2) additional info: SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure (see text) (open(/tmp/krb5cc_1000): No such file or directory) sioux@lion$ What is it my mistaken ? Thanks in advance.

2 1

cluster
by Friedrich Locke 12 Jan '13

12 Jan '13

Hi! I am aware that openldap supports custering, but i have some doubts. Is this cluster based on a single write server/multiple read server ? Or i may have multiple read/write server ? Does an openldap cluster scales unlimited ? I mean: if I need more space or processing power, it is just to add a new server . I would like to use a configuration like: The space requirement would be spread over the number of servers; A client can connect to any node of the cluster for read/write operation; To increase space/processing power, just add a new node. Is that possible with openldap ? PS: keep in mind that there is a huge difference in allowing multiple write/read over a set of nodes that keep is own copy of the data and a set of nodes whose data is spread accross them all.

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical