openldap-technical

openldap-technical@openldap.org

21 participants
9802 discussions

Accesslog overlay access
by Hugo Deprez 10 Nov '11

10 Nov '11

Dear community, I configured accesslog overlay on a test server. Everything is working fine. But when I use my LDAP client (aka Ldap Admin) I get an error : "Size Limit Exceeded" The thing is I specified in the slapd.conf configuration file to rotate the data after 30 days. Does this message occur because there is too much data in the database ? Regards, Hugo

2 1

ldap_search: No such object
by Aaron Roberts 10 Nov '11

10 Nov '11

Hi all, I am trying to get openldap working with a mysql backend. Unfortunately, I always get "ldap_search: No such object" when I try to query. I am not familiar with LDAP and I am trying to get a simple phone directory up and running from a very small existing DB. I can see from my mysql query log that slapd is working with the first entry from the ldap_entries table and then never requesting any subsequent rows. I'm not sure what information will be needed for debugging this, I have start with debug output from slapd taken when running a search. Many thanks for any assistance, Aaron [root@test ~]# /usr/lib/mozldap/ldapsearch -x -b 'o=sql,c=RU' '(cn=*)' ldap_search: No such object /usr/sbin/slapd -d -1 -u ldap -h ldap:/// daemon: activity on 1 descriptor daemon: activity on: slap_listener_activate(8): daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 busy >>> slap_listener(ldap:///) daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL daemon: listen=8, new connection on 9 daemon: added 9r (active) listener=(nil) daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL conn=0 fd=9 ACCEPT from IP=127.0.0.1:51444 (IP=0.0.0.0:389) daemon: activity on 1 descriptor daemon: activity on: 9r daemon: read active on 9 daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL connection_get(9) connection_get(9): got connid=0 connection_read(9): checking for input on id=0 ber_get_next ldap_read: want=8, got=8 0000: 30 26 02 01 01 63 21 04 0&...c!. ldap_read: want=32, got=32 0000: 0a 6f 3d 73 71 6c 2c 63 3d 52 55 0a 01 02 0a 01 .o=sql,c=RU..... 0010: 00 02 01 00 02 01 00 01 01 00 87 02 63 6e 30 00 ............cn0. ber_get_next: tag 0x30 len 38 contents: ber_dump: buf=0x96cb690 ptr=0x96cb690 end=0x96cb6b6 len=38 0000: 02 01 01 63 21 04 0a 6f 3d 73 71 6c 2c 63 3d 52 ...c!..o=sql,c=R 0010: 55 0a 01 02 0a 01 00 02 01 00 02 01 00 01 01 00 U............... 0020: 87 02 63 6e 30 00 ..cn0. ber_get_next ldap_read: want=8 error=Resource temporarily unavailable daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL do_search ber_scanf fmt ({miiiib) ber: ber_dump: buf=0x96cb690 ptr=0x96cb693 end=0x96cb6b6 len=35 0000: 63 21 04 0a 6f 3d 73 71 6c 2c 63 3d 52 55 0a 01 c!..o=sql,c=RU.. 0010: 02 0a 01 00 02 01 00 02 01 00 01 01 00 87 02 63 ...............c 0020: 6e 30 00 n0. >>> dnPrettyNormal: <o=sql,c=RU> => ldap_bv2dn(o=sql,c=RU,0) <= ldap_bv2dn(o=sql,c=RU)=0 => ldap_dn2bv(272) <= ldap_dn2bv(o=sql,c=RU)=0 => ldap_dn2bv(272) <= ldap_dn2bv(o=sql,c=ru)=0 <<< dnPrettyNormal: <o=sql,c=RU>, <o=sql,c=ru> SRCH "o=sql,c=RU" 2 0 0 0 0 begin get_filter PRESENT ber_scanf fmt (m) ber: ber_dump: buf=0x96cb690 ptr=0x96cb6b0 end=0x96cb6b6 len=6 0000: 87 02 63 6e 30 00 ..cn0. end get_filter 0 filter: (cn=*) ber_scanf fmt ({M}}) ber: ber_dump: buf=0x96cb690 ptr=0x96cb6b4 end=0x96cb6b6 len=2 0000: 00 00 .. attrs: conn=0 op=0 SRCH base="o=sql,c=RU" scope=2 deref=0 filter="(cn=*)" ==> limits_get: conn=0 op=0 dn="[anonymous]" ==>backsql_search(): base="o=sql,c=ru", filter="(cn=*)", scope=2, deref=0, attrsonly=0, attributes to load: all ==>backsql_get_db_conn() ==>backsql_open_db_conn(0) <==backsql_open_db_conn(0) backsql_open_db_conn(0): connected, adding to tree. <==backsql_get_db_conn() ==>backsql_dn2id("o=sql,c=ru") matched expected backsql_dn2id("o=sql,c=ru"): id_query "SELECT id,keyval,oc_map_id,dn FROM ldap_entries WHERE dn LIKE CONCAT('%,',?)" backsql_dn2id("o=sql,c=ru"): id=800 keyval=800 oc_id=1 dn=cn=Facsimile,o=sql,c=RU >>> dnPrettyNormal: <cn=Facsimile,o=sql,c=RU> => ldap_bv2dn(cn=Facsimile,o=sql,c=RU,0) <= ldap_bv2dn(cn=Facsimile,o=sql,c=RU)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Facsimile,o=sql,c=RU)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=facsimile,o=sql,c=ru)=0 <<< dnPrettyNormal: <cn=Facsimile,o=sql,c=RU>, <cn=facsimile,o=sql,c=ru> <==backsql_dn2id("o=sql,c=ru"): err=0 ==>backsql_id2entry() backsql_id2entry(): retrieving all attributes ==>backsql_get_attr_vals(): oc="person" attr="cn" keyval=800 backsql_get_attr_vals(): number of values in query: 1 <==backsql_get_attr_vals() ==>backsql_get_attr_vals(): oc="person" attr="sn" keyval=800 backsql_get_attr_vals(): number of values in query: 1 <==backsql_get_attr_vals() ==>backsql_get_attr_vals(): oc="person" attr="objectClass" keyval=800 backsql_get_attr_vals(): number of values in query: 1 <==backsql_get_attr_vals() ==>backsql_get_attr_vals(): oc="person" attr="telephoneNumber" keyval=800 backsql_get_attr_vals(): number of values in query: 1 <==backsql_get_attr_vals() <==backsql_id2entry() send_ldap_result: conn=0 op=0 p=3 send_ldap_result: err=32 matched="" text="" send_ldap_response: msgid=1 tag=101 err=32 ber_flush: 14 bytes to sd 9 0000: 30 0c 02 01 01 65 07 0a 01 20 04 00 04 00 0....e... .... daemon: activity on 1 descriptor daemon: activity on: 9r daemon: read active on 9 daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL connection_get(9) ldap_write: want=14, written=14 0000: 30 0c 02 01 01 65 07 0a 01 20 04 00 04 00 0....e... .... connection_get(9): got connid=0 connection_read(9): checking for input on id=0 ber_get_next ldap_read: want=8, got=7 0000: 30 05 02 01 02 42 00 0....B. ber_get_next: tag 0x30 len 5 contents: ber_dump: buf=0x96ed058 ptr=0x96ed058 end=0x96ed05d len=5 0000: 02 01 02 42 00 ...B. ber_get_next ldap_read: want=8, got=0 ber_get_next on fd 9 failed errno=0 (Success) connection_read(9): input error=-2 id=0, closing. connection_closing: readying conn=0 sd=9 for close daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL connection_close: deferring conn=0 sd=9 do_unbind conn=0 op=1 UNBIND connection_resched: attempting closing conn=0 sd=9 connection_close: deferring conn=0 sd=9 conn=0 op=0 SEARCH RESULT tag=101 err=32 nentries=0 text= <==backsql_search() connection_resched: attempting closing conn=0 sd=9 connection_close: conn=0 sd=9 ==>backsql_connection_destroy() ==>backsql_free_db_conn() backsql_free_db_conn(): closing db connection 0 (0x96b8458) ==>backsql_close_db_conn(0) <==backsql_close_db_conn(0) <==backsql_free_db_conn() <==backsql_connection_destroy() daemon: removing 9 conn=0 fd=9 closed

2 2

Compile Error for ldapc++ library
by sim123 10 Nov '11

10 Nov '11

I am trying to compile ldapc++ library distributed with openldap-2.4.26 and getting following error during make: ../src/LDAPAsynConnection.h: In function ‘int main(int, char**)’: ../src/LDAPAsynConnection.h:310: error: ‘LDAPAsynConnection::LDAPAsynConnection(const LDAPAsynConnection&)’ is private startTls.cpp:43: error: within this context make[1]: *** [startTls.o] Error 1 make[1]: Leaving directory `/opt/source/openldap-2.4.26/contrib/ldapc++/examples' make: *** [all-recursive] Error 1 I am attaching my config log as well, is there anything which I am missing here? Another thing, I would like to know does this library have Referral Chasing capability during bind, also is it thread safe or its caller's responsibility to make it thread safe? Thanks for the help, I appreciate it very much.

2 1

AW: OpenLDAP 2.4 and cn=config replication
by Michael Kolowicz 10 Nov '11

10 Nov '11

In a book about Openldap i have read the way to replicate the cn=config-data. But the author descripte the slapd.conf method. My OpenLDAP use the database-backend. so I try to combine it and most of them works fine On the Master I have import following LDIF dn: cn=config changetype: modify add: olcReferral olcReferral: "ldap://ldap.example.de" dn: cn=module{0},cn=config changetype: modify add: olcModuleLoad olcModuleLoad: syncprov dn: olcOverlay=syncprov,olcDatabase={0}config,cn=config changetype: add objectClass: olcOverlayConfig objectClass: olcSyncProvConfig olcOverlay: syncprov dn: olcOverlay=syncprov,olcDatabase={1}hdb,cn=config changetype: add objectClass: olcOverlayConfig objectClass: olcSyncProvConfig olcOverlay: syncprov dn: olcDatabase={0}config,cn=config changetype: modify add: olcSyncrepl olcSyncrepl: rid=002 provider=ldap://ldap.example.de type=refreshAndPersist retry="5 +" searchbase="cn=config" filter="(!(olcDatabase={0}config))" bindmethod=simple binddn="cn=admin,dc=example,dc=de" credentials=secret add: olcUpdateRef olcUpdateRef: ldap://ldap.example.de dn: olcDatabase={1}hdb,cn=config changetype: modify add: olcSyncRepl olcSyncRepl: rid=001 provider=ldap://ldap.example.de type=refreshAndPersist retry="5 +" searchbase="dc=example,dc=de" bindmethod=simple binddn="cn=admin,dc=example,dc=de" credentials=secret add: olcUpdateRef olcUpdateRef: <ldap://ldap.example.de> ldap://ldap.example.de On the Client-LDAP I import the following LDIF dn: cn=config #objectClass: olcGlobal #cn: config changetype: modify add: olcReferral olcreferral: ldap://ldap.example.de dn: olcDatabase={0}config,cn=config objectClass: olcDatabaseConfig olcDatabase: {0}config olcSyncRepl: rid=002 provider="ldap://ldap.example.de" binddn="cn=admin,dc=example,dc=de" bindmethod=simple credentials=secret searchbase="cn=config" filter="(!olcDatabase={0}config)" type=refreshAndPersist retry="10 +" olcRootDN: cn=admin,dc=example,dc=de olcUpdateRef: <ldap://ldap.example.de> ldap://ldap.example.de As result the complete ldap will be replicated. But when i restart the Slave-LDAP-Server then come up following error: Starting OpenLDAP: slapd - failed. The operation failed but no output was produced. For hints on what went wrong please refer to the system's logfiles (e.g. /var/log/syslog) or try running the daemon in Debug mode like via "slapd -d 16383" (warning: this will create copious output). Below, you can find the command line options used by this script to run slapd. Do not forget to specify those options if you want to look to debugging output: slapd -h 'ldap:/// ldapi:///' -g openldap -u openldap -F /etc/ldap/slapd.d/ And in syslog i find following entry: Nov 9 20:54:03 SMS002092 slapd[3376]: @(#) $OpenLDAP: slapd 2.4.21 (Jun 2 2011 19:36:19) $#012#011buildd@allspice:/build/buildd/openldap-2.4$ Nov 9 20:54:03 SMS002092 slapd[3376]: config error processing olcDatabase={2}config,cn=config: Nov 9 20:54:03 SMS002092 slapd[3376]: slapd stopped. Nov 9 20:54:03 SMS002092 slapd[3376]: connections_destroy: nothing to destroy. I can understand this error: ALL data will replicated and on the Slave another config [olcDatatbase={2}config) will be created. How can I avoid the creation of the second , incomplete database? Freundliche Grüße / Best regards Michael

1 0

Need help with failing test
by Gabriella Turek 09 Nov '11

09 Nov '11

Hello, I have built openldap 2.4.23 (with Berkeley DB 5.2.36) on a Suse SLES11 64bit machine and I am trying to verify the install by running the tests. The following test fails: >>>>> Starting test005-modrdn for bdb... running defines.sh Running slapadd to build slapd database... Starting slapd on TCP/IP port 9011... Testing slapd modrdn operations... Testing modrdn(deleteoldrdn=0)... ./scripts/test005-modrdn: line 65: 2291 Segmentation fault $SLAPD -f $CONF1 -h $URI1 -d $LVL $TIMING > $LOG1 2>&1 ldapmodrdn failed (255)! ./scripts/test005-modrdn: line 70: kill: (2291) - No such process >>>>> ./scripts/test005-modrdn failed for bdb (exit 255) make: *** [bdb-yes] Error 255 The log output for this test is: >>> slap_listener(ldap://localhost:9011/) conn=1001 fd=21 ACCEPT from IP=127.0.0.1:60661 (IP=127.0.0.1:9011) connection_get(21) connection_get(21): got connid=1001 connection_read(21): checking for input on id=1001 ber_get_next ber_get_next: tag 0x30 len 46 contents: op tag 0x60, time 1320032341 ber_get_next conn=1001 op=0 do_bind ber_scanf fmt ({imt) ber: ber_scanf fmt (m}) ber: >>> dnPrettyNormal: <cn=Manager,dc=example,dc=com> => ldap_bv2dn(cn=Manager,dc=example,dc=com,0) <= ldap_bv2dn(cn=Manager,dc=example,dc=com)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Manager,dc=example,dc=com)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=manager,dc=example,dc=com)=0 <<< dnPrettyNormal: <cn=Manager,dc=example,dc=com>, <cn=manager,dc=example,dc=com> conn=1001 op=0 BIND dn="cn=Manager,dc=example,dc=com" method=128 do_bind: version=3 dn="cn=Manager,dc=example,dc=com" method=128 ==> bdb_bind: dn: cn=Manager,dc=example,dc=com conn=1001 op=0 BIND dn="cn=Manager,dc=example,dc=com" mech=SIMPLE ssf=0 do_bind: v3 bind: "cn=Manager,dc=example,dc=com" to "cn=Manager,dc=example,dc=com" send_ldap_result: conn=1001 op=0 p=3 send_ldap_result: err=0 matched="" text="" send_ldap_response: msgid=1 tag=97 err=0 ber_flush2: 14 bytes to sd 21 conn=1001 op=0 RESULT tag=97 err=0 text= connection_get(21) connection_get(21): got connid=1001 connection_read(21): checking for input on id=1001 ber_get_next ber_get_next: tag 0x30 len 104 contents: op tag 0x6c, time 1320032341 ber_get_next conn=1001 op=1 do_modrdn ber_scanf fmt ({mmb) ber: do_modrdn: dn (cn=James A Jones 1, ou=Alumni Association, ou=People, dc=example, dc=com) newrdn (cn=James A Jones III) n ewsuperior () ber_scanf fmt (}) ber: >>> dnPrettyNormal: <cn=James A Jones 1, ou=Alumni Association, ou=People, >>>dc=example, dc=com> => ldap_bv2dn(cn=James A Jones 1, ou=Alumni Association, ou=People, dc=example, dc=com,0) <= ldap_bv2dn(cn=James A Jones 1, ou=Alumni Association, ou=People, dc=example, dc=com)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=James A Jones 1,ou=Alumni Association,ou=People,dc=example,dc=com)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=james a jones 1,ou=alumni association,ou=people,dc=example,dc=com)=0 <<< dnPrettyNormal: <cn=James A Jones 1,ou=Alumni Association,ou=People,dc=example,dc=com>, <cn=james a jones 1,ou=alumn i association,ou=people,dc=example,dc=com> >>> dnPrettyNormal: <cn=James A Jones III> => ldap_bv2dn(cn=James A Jones III,0) <= ldap_bv2dn(cn=James A Jones III)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=James A Jones III)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=james a jones iii)=0 <<< dnPrettyNormal: <cn=James A Jones III>, <cn=james a jones iii> conn=1001 op=1 MODRDN dn="cn=James A Jones 1,ou=Alumni Association,ou=People,dc=example,dc=com" bdb_dn2entry("cn=james a jones 1,ou=alumni association,ou=people,dc=example,dc=com") ==>bdb_modrdn(cn=James A Jones 1,ou=Alumni Association,ou=People,dc=example,dc=com,cn=James A Jones III,NULL) slap_queue_csn: queing 0x2b3f483d6210 20111031033901.351643Z#000000#000#000000 bdb_dn2entry("cn=james a jones 1,ou=alumni association,ou=people,dc=example,dc=com") => bdb_dn2id_children("cn=james a jones 1,ou=alumni association,ou=people,dc=example,dc=com") <= bdb_dn2id_children("cn=james a jones 1,ou=alumni association,ou=people,dc=example,dc=com"): no (-30988) bdb_modrdn: wr to children of entry ou=alumni association,ou=people,dc=example,dc=com OK bdb_modrdn: parent dn=ou=Alumni Association,ou=People,dc=example,dc=com >>> dnNormalize: <cn=James A Jones III,ou=Alumni >>>Association,ou=People,dc=example,dc=com> => ldap_bv2dn(cn=James A Jones III,ou=Alumni Association,ou=People,dc=example,dc=com,0) <= ldap_bv2dn(cn=James A Jones III,ou=Alumni Association,ou=People,dc=example,dc=com)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=james a jones iii,ou=alumni association,ou=people,dc=example,dc=com)=0 <<< dnNormalize: <cn=james a jones iii,ou=alumni association,ou=people,dc=example,dc=com> bdb_modrdn: new ndn=cn=james a jones iii,ou=alumni association,ou=people,dc=example,dc=com => bdb_dn2id("cn=james a jones iii,ou=alumni association,ou=people,dc=example,dc=com") <= bdb_dn2id: get failed: BDB0073 DB_NOTFOUND: No matching key/data pair found (-30988) => bdb_dn2id_delete 0xc: "cn=james a jones 1,ou=alumni association,ou=people,dc=example,dc=com" Any ideas what may be wrong? Is this a significant failure? Thank you Gaby -- Gabriella Turek Sr. Software Engineer National Institute for Water & Atmospheric Research (NIWA)

2 2

Re: How to configure Unique Overlay in cn=config
by Quanah Gibson-Mount 09 Nov '11

09 Nov '11

--On Thursday, November 10, 2011 3:07 AM +0800 Stewart Walters <stewart.walters(a)gmail.com> wrote: > Hi Quanah, > > Could you please elaborate a bit more on what you mean by serious issues? > > Are you talking about missing features or just general bugs in the 2.4.23 > code base? Bugs. <http://www.openldap.org/software/release/changes.html> --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

How to configure Unique Overlay in cn=config
by Igor Blanco 09 Nov '11

09 Nov '11

Hello everyone, I'm trying to configure the uniqueness overlay in Debian Squeeze (OpenLDAP 2.4.23) using "cn=config" but I can't figure how to do it and can't find any good doc about it, the FAQ-O-Matic wasn't very helpful this time. I've added a new "olcModuleLoad=unique" attribute in "cn=module{0},cn=config" and it hasn't complained, but how and where do I set "olcUniqueURI" ? in "olcDatabase={1}hdb,cn=config" ? This attribute does not seem to be present in my OpenLDAP installation, do I have to add any new schema? Any reference to documentation explaining how to configure "unique" overlay within "cn=config" would be much appreciated. A dump of a "cn=config" branch correctly configured would be fantastic. Thanks. -- Igor Blanco González Binovo IT Human Project e-mail: iblanco(a)binovo.es Telf. : 943 493611 - 690229375 Dirección: Astigarraga Bidea 2 Planta 6. - Ofi. 3-2 20180 Oiartzun ( Gipuzkoa )

2 1

Help needed chaining to active directory for authentication
by Gabriella Turek 09 Nov '11

09 Nov '11

Hello, I've set up an openLDAP server (2.4.23) which chains to an Active Directory (2008). I can successfully search for users, it will find them in Active Directory if they are not in openLDAP, but I cannot authenticate the Active Directory users. The error is "Invalid credentials (49)" Everything is currently configured with clear text ldapSearch works fine when pointed directly to the Active Directory. The chaining configuration in the slapd.conf is: overlay chain chain-uri ldap://aucwdfp01.niwa.local:389 chain-rebind-as-user TRUE chain-idassert-bind bindmethod="simple" binddn="cn=SDT Tester,ou=NIWA Staff Accounts,ou=User Accounts, dc=niwa,dc=local" credentials=xxxxxxx mode="self" flags=non-prescriptive chain-return-error TRUE Any tips would be greatly appreciated. Cheers Gaby

2 1

loadbalancer in OopenLDAP environment
by Meike Stone 09 Nov '11

09 Nov '11

Hello, does anywhere use loadbalancer in his OpenLDAP setup? I have two locations (data center). In each location I want install a OpenLDAP server who replicate with the other (MM N-Way) Then I want install a few (depends on the load) OpenLDAP ro replicas (replicate from the local OpenLDAP). - In the location are setup loadbalancers who are asked from the local clients. - The loadbalancer direct the searches to the local ro replicas and writes/modifies to the local "rw Master". - Only if all local ro resources are down or have a long response time, the loadbalancer redirects the searches to the remote ro replicas. - Same way with write access, if local rw master is down, write/modify access is redirect to the remote rw master. Is this a possible setup? What are the experiences with such setups, can you share them? Are there snares? I saw one example in the admin guide, but it shows 4 loadbalancers. Thats to much for my budget. Thanks for help, Meike

3 5

Base64 Attribute Encryption
by Scot Hollingsworth 09 Nov '11

09 Nov '11

Hi. I'm upgrading from RHEL 5 to RHEL 6. I'm having no problem in RHEL 5. In RHEL 6 I'm using openldap-2.4.23-15.el6_1.3.x86_64. I have the master/slave setup and working. Now, I use ldapmodify to edit an entry and instead of plain text, I getting the attribute as base64. I don't want this. I'm looking everyone but haven't found where to disable this. Anyone know? Thanks. Scot This message may contain confidential and/or proprietary information, and is intended for the person/entity to whom it was originally addressed. Any use by others is strictly prohibited.

3 3

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical