openldap-technical

openldap-technical@openldap.org

5 participants
9899 discussions

Fwd: RE25 testing call (2.5.14)
by Lucio De Re 10 Oct '22

10 Oct '22

As requested by Quanah. If no other practical measure is available, the server I'm using can be accessed via SSH. I'll supply further details in return for an SSH-format public key and essential identification. Lucio. -------- Forwarded Message -------- Subject: Re: RE25 testing call (2.5.14) Date: Fri, 7 Oct 2022 18:53:42 +0200 From: Lucio De Re <lucio(a)ff.co.za> Organization: Future Foundation To: Quanah Gibson-Mount <quanah(a)fast-mail.org> On 2022/10/04 18:50, Quanah Gibson-Mount wrote: > This is the first testing call for OpenLDAP 2.5.14. Depending on the > results, this may be the only testing call. > > Generally, get the code for RE25: > > <https://git.openldap.org/openldap/openldap/-/archive/OPENLDAP_REL_ENG_2_5/o…> > > > Extract, configure, and build. > > Execute the test suite (via make test) after it is built. Optionally, > cd tests && make its to run through the regression suite. > > Thanks! > On NetBSD 9.1... NetBSD jackal.proxima.alt.za 9.1 NetBSD 9.1 (GENERIC) #0: Sun Oct 18 19:24:30 UTC 2020 mkrepro@mkrepro.NetBSD.org:/usr/src/sys/arch/i386/compile/GENERIC i386 Fri 07 Oct 2022 18:51:30 SAST ... >>>>> Starting test049-sync-config for mdb... running defines.sh Starting provider slapd on TCP/IP port 9011... Using ldapsearch to check that provider slapd is running... Inserting syncprov overlay on provider... Starting consumer slapd on TCP/IP port 9012... Using ldapsearch to check that consumer slapd is running... Configuring syncrepl on consumer... Waiting 7 seconds for syncrepl to receive changes... Using ldapsearch to check that syncrepl received config changes... Adding schema and databases on provider... Using ldapadd to populate provider... Waiting 7 seconds for syncrepl to receive changes... Using ldapsearch to check that syncrepl received database changes... Replacing olcSyncrepl on provider... Waiting 7 seconds for syncrepl to receive changes... Using ldapsearch to read config from the provider... Using ldapsearch to read config from the consumer... Filtering provider results... Filtering consumer results... Comparing retrieved configs from provider and consumer... Using ldapsearch to read all the entries from the provider... Using ldapsearch to read all the entries from the consumer... Filtering provider results... Filtering consumer results... Comparing retrieved entries from provider and consumer... >>>>> Test succeeded >>>>> test049-sync-config completed OK for mdb after 27 seconds. >>>>> Starting test050-syncrepl-multiprovider for mdb... running defines.sh Initializing server configurations... Starting server 1 on TCP/IP port 9011... Using ldapsearch to check that server 1 is running... Inserting syncprov overlay on server 1... Starting server 2 on TCP/IP port 9012... Using ldapsearch to check that server 2 is running... Configuring syncrepl on server 2... Starting server 3 on TCP/IP port 9013... Using ldapsearch to check that server 3 is running... Configuring syncrepl on server 3... Starting server 4 on TCP/IP port 9014... Using ldapsearch to check that server 4 is running... Configuring syncrepl on server 4... Adding schema and databases on server 1... Using ldapadd to populate server 1... Waiting 15 seconds for syncrepl to receive changes... Using ldapsearch to read config from server 1... Using ldapsearch to read config from server 2... Using ldapsearch to read config from server 3... ... It's been hanging at this point for quite a while. There were no build or compilation errors that I could notice. Lucio.

1 0

Can't query contextCSN ?
by Sander Smeenk 07 Oct '22

07 Oct '22

Hi, I have one master, one slave LDAP server. Syncprov is active and running. On the master or the slave (2.5), if i `slapcat` i get: | dn: dc=example,dc=nl | objectClass: top | objectClass: dcObject | objectClass: organization | o: example | dc: example | structuralObjectClass: organization | entryUUID: f55086bc-adb9-103c-9c47-456ab09d92ea | creatorsName: cn=admin,dc=example,dc=nl | createTimestamp: 20220811120747Z | entryCSN: 20220811120747.388919Z#000000#000#000000 | modifiersName: cn=admin,dc=example,dc=nl | modifyTimestamp: 20220811120747Z | contextCSN: 20221007075756.114574Z#000000#000#000000 | | [ .. ] So there is a 'contextCSN' in there, but i can't seem to query it: | # ldapsearch -xLLL -H ldaps://127.0.0.1 -b 'dc=example,dc=nl' -s 'base' contextCSN | dn: dc=example,dc=nl | | # While on a different set of servers (2.4), that ldapsearch does work: | # ldapsearch -xLLL -H ldap://127.0.0.1 -b 'dc=anotherexample,dc=nl' -s 'base' contextCSN | dn: dc=anotherexample,dc=nl | contextCSN: 20221007080803.057248Z#000000#000#000000 | | # What could be wrong here? Regards, -Sander. -- | On the other hand, you have different fingers. | 4096R/20CC6CD2 - 6D40 1A20 B9AA 87D4 84C7 FBD6 F3A9 9442 20CC 6CD2

1 1

RE26 testing call #1 (2.6.4)
by Quanah Gibson-Mount 06 Oct '22

06 Oct '22

This is the first testing call for OpenLDAP 2.6.4. Depending on the results, this may be the only testing call. Generally, get the code for RE26: <https://git.openldap.org/openldap/openldap/-/archive/OPENLDAP_REL_ENG_2_6/o…> Extract, configure, and build. Execute the test suite (via make test) after it is built. Optionally, cd tests && make its to run through the regression suite. Thanks! OpenLDAP 2.6.4 Engineering Fixed client tools to remove 'h' and 'p' options (ITS#9917,ITS#8618) Fixed ldapsearch memory leak with controls (ITS#9860) Fixed libldap ldif_open_urlto check for failure (ITS#9904) Fixed libldap ldap_url_parsehosts check for failure (ITS#9904) Fixed lloadd memory leaks (ITS#9907) Fixed lloadd shutdown code to protect memory correctly (ITS#9913) Fixed slapd memory leak with olcAuthIDRewrite (ITS#6035) Fixed slapd free of config item (ITS#9912) Fixed slapd transactions extended operations cleanup after write (ITS#9892) Fixed slapd-mdb max number of index databases to 256 (ITS#9895) Fixed slapd-monitor memory leaks with lloadd (ITS#9906) Fixed slapd-monitor to free remembered cookies (ITS#9339) Fixed slapo-deref memory leak (ITS#9924) Fixed slapo-dynlist to ignore irrelevant objectClasses (ITS#9897) Fixed slapo-remoteauth memory leaks (ITS#9438) Fixed slapo-rwm memory leaks (ITS#9817) Build Environment Fixed build process to not use gmake specific features (ITS#9894) Fixed slapo-otp testdir creation (ITS#9437) Fixed slapd-tester memory leak (ITS#9908) Fixed usage of non-standard C syntax (ITS#9898, ITS#9899, ITS#9901) Fixed usage of bashism (ITS#9900) Documentation Fixed slapo-unique(5) to clarify when quoting should be used (ITS#9915) Regards, Quanah

4 3

LMDB key marshalling functions
by Søren Holm 28 Sep '22

28 Sep '22

Hi I am working on utilizing LMDB in a project of mine. However I am struggling a bit on how to manage marshalling of keys. - packing of C structure into array - and unpacking - handling parrtial keys for range traversals. Som months ago I read an article named "Shine and poverty key value database LMDB in applications for iOS". It contained some clever techniques. However the article is not longer to be found. I feel like if I do the handling in a wrong way it will be a nightmare. How to you handling your keys? /Søren Holm

1 0

slapo constraint - uri constraint on object DN
by Benjamin Renard 27 Sep '22

27 Sep '22

Hello, I try to affect an uri constraint on an attribute that storing the DN of another object but I don't know what I have to put on the attribute field of the URI. Have any of you already implemented such a constraint? Constraint example for a attribute that storing another attribute value: olcConstraintAttribute: title uri ldap:///dc=catalog,dc=example,dc=com?title?sub?(objectClass=titleCatalog) Thank you in advance, -- Benjamin Renard - Easter-eggs 44-46 rue de l'Ouest - 75014 Paris - France - Métro Gaité Phone: +33 (0) 1 43 35 00 37 - mailto:brenard@easter-eggs.com

2 2

how to add index in replication scenario
by Uwe Sauter 17 Sep '22

17 Sep '22

Dear list, I need to add an index for a new attribute in an active-active replication scenario. I know I need to run slapindex to create the index for existing entries after I changed the configuration file (yes, still on 2.4 with slapd.conf). But what is the correct procedure to update both servers? I'm a bit worried that the setup will become out-of-sync if I just update one server at a time. Would it be better to stop the service on both servers and re-index the databases at the same time before going online again? Regards, Uwe

4 8

no accesslog record on "delete" sync state control
by Zeus Panchenko 13 Sep '22

13 Sep '22

hi I face a weird situation with my LDAP syncrepl consumer [1], please advise ... on "delete" sync state control receiving, I'm trying to search for accesslog object with the just deleted object to use it in further processing, but it is not available yet though if I set delay (sleep) for 1 sec just before the search, then I successfully receive the object so, is it intended behavior? here is this search: https://github.com/z-eos/regather/blob/master/lib/App/Regather.pm#L439 [1] https://github.com/z-eos/regather -- Zeus V. Panchenko . jid:zeus@im.ibs.dn.ua IT Dpt., I.B.S. LLC ..: GMT+2 (EET)

2 1

Re: Antw: [EXT] Re: LMDB 1.0 data.mdb format stability
by Howard Chu 09 Sep '22

09 Sep '22

Ulrich Windl wrote: >>>> Howard Chu <hyc(a)symas.com> schrieb am 08.09.2022 um 01:34 in Nachricht > <4bc80e7e-17f9-b385-6b11-2aab806edc43(a)symas.com>: >> Steffen Michels wrote: >>> Hi, >>> >>> We are considering using the mdb.master3 branch of LMDB, but it is not clear >> to me whether the data.mdb format will remain stable. Is there a chance that >>> another migration of all databases will be required in the future when >> switching now? >> >> Yes. It is still unreleased because additional changes to the freelist >> format are planned, >> and possibly a few other changes. >> >> In any case, mdb_dump/mdb_load will always work for migrating to a new >> version. > > I think at some point an inplace upgrade would be the way to go. > On Linux filesystems, you could even upgrade yout ext3 to btrfs ;-) That will never happen here. Supporting an in-place upgrade requires the library to support old and new formats simultaneously, which is a waste of RAM. Anything that pushes the object code size of the hot path over 64KB is a non-starter. > > Regards, > Ulrich > >> >>> >>> regards, >>> >>> Steffen >> >> >> -- >> -- Howard Chu >> CTO, Symas Corp. http://www.symas.com >> Director, Highland Sun http://highlandsun.com/hyc/ >> Chief Architect, OpenLDAP http://www.openldap.org/project/ > > > > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

4 7

LMDB 1.0 data.mdb format stability
by Steffen Michels 08 Sep '22

08 Sep '22

Hi, We are considering using the mdb.master3 branch of LMDB, but it is not clear to me whether the data.mdb format will remain stable. Is there a chance that another migration of all databases will be required in the future when switching now? regards, Steffen

2 1

RE: Openldap policy not working on Ubuntu 22.04
by Mehmet Sağdıç 06 Sep '22

06 Sep '22

Hi, Is there anyone who can help on this issue? -- -- -- -- -- İyi Çalışmalar -- -- -- Mehmet Sağdıç Technical Support Expert | Computer Center Directorate +90 (392) 671 11 11 | 2829 - Gsm : 0548 858 95 43 <https://ciu.edu.tr/> Cyprus International University <https://www.facebook.com/CIUOfficial> <https://www.instagram.com/ciu.official/> <https://twitter.com/CIUOfficial> <https://www.youtube.com/user/uluslararasikibris> <https://www.linkedin.com/company/cyprus-international-university> <https://scholar.google.com/citations?view_op=view_org&hl=tr&org=39727957745 3037268> From: Mehmet Sağdıç [mailto:msagdic@ciu.edu.tr] Sent: Monday, August 22, 2022 4:30 PM To: 'openldap-technical(a)openldap.org' Subject: Openldap policy not working on Ubuntu 22.04 Hi, I am using openldap version 2.4.49 on ubuntu 20.04. I did the ubuntu 20.04 - 22.04 version update from the command line using the address below. <https://jumpcloud.com/blog/how-to-upgrade-ubuntu-20-04-to-ubuntu-22-04> https://jumpcloud.com/blog/how-to-upgrade-ubuntu-20-04-to-ubuntu-22-04 After the Ubuntu 22.04 update was finished, the Ldap version automatically changed to the openldap version 2.5.12 and the ldap service did not work. I made the Ldap service run by doing the following: <https://discourse.ubuntu.com/t/service-migrating-from-openldap-2-4-x-to-2-5 -x/23807> https://discourse.ubuntu.com/t/service-migrating-from-openldap-2-4-x-to-2-5- x/23807 But I saw that there is no policy.ldif in cn=config and the policy does not take action. The ldap service is running, but the policy is not working. How can I run policy on Openldap version 2.5.12.

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical