openldap-technical

openldap-technical@openldap.org

11 participants
9876 discussions

OID orcluser, orcluserv2, orclgroup objectclasses openldap compatability
by Ali Okan YÜKSEL 08 Jun '11

08 Jun '11

oracle identity management has some objectclasses that i need for our openldap directory. (orcluser, orcluserv2, orclgroup) i want to export .schema .ldif files from OID and import them to openldap 2.4? if you have experience about this subject can you guide me? i don't want to use OID anymore but i need these objectclasses for our project, regards, -- http://www.siyahsapka.org

1 0

Schema definitions: from Sun DS to OpenLDAP
by Silvio Verrecchia 07 Jun '11

07 Jun '11

Hello gurus, I'm migrating a Sun DS to Openldap and I've an highly personalized 99user.ldif file with user defined objectclass and attributes (hundreds... :( :( ) Regarding personalized schema definitions, is there a way (script/batch/etc) to convert quickly and easly a Sun DS 99user.ldif file to the standard OpenLDAP schema files ? Any suggestion is highly appreciated ! Thank you very much! Silvano

6 6

How to reply with parent attributes ?
by Aurélien Lafranchise 07 Jun '11

07 Jun '11

Hi all, When I am doing a user search I would like to get an answer with parent attributes. In another way, I would like to get common attribute shared by people from the same group ? Do I have to look in menberOf or in Collective attribute in my schema ? or others ideas ? Thanks ! Aurélien Lafranchise | Consultant Tél. : +33 (0)1 75 43 55 12 | Fax : +33 (0)1 75 43 55 11 www.snype-consulting.com

2 1

Issue with memberof overlay
by sachin mishra 07 Jun '11

07 Jun '11

Hi all, I am facing problem with "memberof" overlay. I have followed following steps for installation on my CentOS release 5.5: env LIBS=-ldb ./configure --enable-overlays [I also tried with env LIBS=-ldb ./configure --enable-memberof] make depend make make install in my slapd.conf file, I have enable memberof overlay: include /usr/local/etc/openldap/schema/core.schema include /usr/local/etc/openldap/schema/cosine.schema include /usr/local/etc/openldap/schema/local.schema ... modulepath /usr/local/libexec/openldap moduleload memberof.la ... database bdb suffix "dc=mybrocade,dc=com" rootdn "cn=Manager,dc=xxx,dc=com" rootpw {SSHA}HL8uT5hPaWyIdcP6yAheMT8n0GoWubr3 index objectClass eq overlay memberof When I start slapd (slapd -d -1), it gives these lines in log: line 27 (modulepath /usr/local/libexec/openldap) /usr/local/etc/openldap/slapd.conf: line 27: keyword <modulepath> ignored line 31 (moduleload memberof.la) /usr/local/etc/openldap/slapd.conf: line 31: keyword <moduleload> ignored When I try searching for memberof Attribute, it doesn't return the value: ldapsearch -LL -D cn=Manager,dc=xxx,dc=com -w secret "cn=sachin" -b dc=xxx,dc=com memberOf version: 1 dn: cn=Sachin,cn=Users,dc=xxx,dc=com <there is no entry for memberof> I tried searching for memberof.la but I could not find any instance of it in the system. Am I missing something here? Here is the place, where I have specified the "member" attribute: ldapsearch -LL -D cn=Manager,dc=xxx,dc=com -w ***** "cn=admin" -b dc=xxx,dc=com version: 1 dn: cn=admin,ou=groups,dc=xxx,dc=com objectClass: groupOfNames cn: admin description: Members having admin permission member: cn=sachin,cn=Users,dc=xxx,dc=com Thanks, Sachin

2 1

olcAccess problem
by Aurélien Lafranchise 07 Jun '11

07 Jun '11

Hi, On my olcDatabase={1}bdb,cn=config I added an ACL : {0}to * by dn="cn=user1,dc=truc" write by dn="cn=user2,dc=mbqt" read by * auth I don't understand why I have to add by * auth to allow the two previous users to be logged in ? Thanks Aurélien Lafranchise | Consultant Tél. : +33 (0)1 75 43 55 12 | Fax : +33 (0)1 75 43 55 11 www.snype-consulting.com

2 2

Slapd 2.4 upgrade woes.
by ray klassen 06 Jun '11

06 Jun '11

I recently upgraded to debian squeeze and found that the slapd configuration had been completely revamped. It's now using the cn=config setup. I was authenticating against a locally replicated copy of my directory behind a firewall. I was using anonymous binding for my own purposes and I want to continue using it that way. I don't really want to enter into a prolonged discussion of why I shouldn't. I just want to know if there is a simple way of reconfiguring under the new regime so that it will work the same way it did before. Any Takers?

2 1

Novice problem
by Aurélien Lafranchise 06 Jun '11

06 Jun '11

Hi all, I am a very novice (less than a week) with OpenLDAP and I have some basics problems. First, I have the 2.4.25 version and I downloaded the Admin Guide as a documentation. I understood that the way to configure the server change from slapd.conf to cn=config and this change is not clear by reading the documention. My question is simple, how to create my own DIT without interfering with the default configuration ? The end goal of this server is to have a radius server interrogating the LDAP one to deliver IP address to a GGSN (GPRS équipement). Thanks for the help provided. Aurélien Lafranchise | Consultant Tél. : +33 (0)1 75 43 55 12 | Fax : +33 (0)1 75 43 55 11 www.snype-consulting.com

2 3

Re: Proper values for threads and tool-threads
by Mark 05 Jun '11

05 Jun '11

Does IIRC mean If I Remember Correctly? Each machine has 4 physical CPUs. Each CPU has 6 cores. ( http://ark.intel.com/Product.aspx?id=46491) So that's 24 real cores, correct?. So if I'm understanding you're suggestion: tool-threads = 24 threads <= 96 If I set threads above 32 I get the warning mentioned earlier (I assume YMMV means: Your Mileage May Vary). Should I be concerned? Thank you for replying on a weekend. On Sun, Jun 5, 2011 at 8:26 PM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote: > --On Sunday, June 05, 2011 5:41 PM -0500 Mark <mah042(a)gmail.com> wrote: > > I'm setting up a new installation of OpenLDAP 2.4.25 on RHEL machines >> each with 128GB RAM and 4 Intel Xeon E7530 CPUs (6 cores each, each core >> supporting two threads). /proc/cpuinfo shows there are 48 processors. The >> backend hdb database will eventually have millions of records with >> thousands of concurrent readers and writers. Is there a good equation to >> use for determining a value for threads and tool-threads? I'd like to >> take advantage of the hardware available. I get a warning if I set >> threads higher than 32: >> >> olcThreads: value #0: warning, threads=48 larger than twice the default >> (2*16=32); YMMV. >> >> I shouldn't be slapcat'ing and slapadd'ing it very often, but like to set >> tool-threads to an appropriate value for the hardware. >> > > How many real cores do you have? > > Generally tool-threads should be set to that number. > > Generally threads should be set to no more than 4 threads per real core > IIRC (8 is generally good for 1 or 2 cores, 16 for 4 cores, etc). > > --Quanah > > > -- > > Quanah Gibson-Mount > Sr. Member of Technical Staff > Zimbra, Inc > A Division of VMware, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration >

2 1

Proper values for threads and tool-threads
by Mark 05 Jun '11

05 Jun '11

I'm setting up a new installation of OpenLDAP 2.4.25 on RHEL machines each with 128GB RAM and 4 Intel Xeon E7530 CPUs (6 cores each, each core supporting two threads). /proc/cpuinfo shows there are 48 processors. The backend hdb database will eventually have millions of records with thousands of concurrent readers and writers. Is there a good equation to use for determining a value for threads and tool-threads? I'd like to take advantage of the hardware available. I get a warning if I set threads higher than 32: olcThreads: value #0: warning, threads=48 larger than twice the default (2*16=32); YMMV. I shouldn't be slapcat'ing and slapadd'ing it very often, but like to set tool-threads to an appropriate value for the hardware. Any suggestions? Thank you, Mark

2 1

when use overlay translucent error
by daydayeat 03 Jun '11

03 Jun '11

openldap-2.4.23 man slapo-translucent says: If neither translucent_local nor translucent_remote are specified, the default behavior is to search the remote database with the complete search filter. If only translucent_local is specified, searches will only be run on the local database. Likewise, if only translu- cent_remote is specified, searches will only be run on the remote database. In any case, both the local and remote entries corresponding to a search result will be merged before being returned to the client. but when i test： local proxy conf: ####################################################### # Primary database definitions ####################################################### ###################################################### #databse bdb ##################################################### database bdb suffix "dc=test,dc=com" rootdn "cn=Manager,dc=test,dc=com" rootpw "123456" directory /usr/local/ldap/var/openldap-data index objectClass eq ###################################################### #overlays ###################################################### overlay translucent #translucent_remote street #translucent_local street uri ldap://remote:388 lastmod off idassert-bind bindmethod=simple binddn="cn=Manager,dc=test,dc=com" ###################################################### remote conf: ####################################################### # Primary database definitions ####################################################### database bdb suffix "dc=test,dc=com" rootdn "cn=Manager,dc=ec,dc=com" rootpw "123456" directory "/usr/local/ldap1/var/openldap-data" index objectClass eq ####################################################### remote database have a entry: # 111, GF3, ec.com dn: o=111,o=GF3,dc=test,dc=com objectClass: organization o: 111 street: remote and in the local database change the street value: # 111, GF3, ec.com dn: o=111,o=GF3,dc=test,dc=com objectClass: organization o: 111 street: local then change the value "translucent_remote and translucent_local" in the local proxy conf。Do search in local: 1 set "translucent_local street" "ldapsearch -D "cn=Manager,dc=test,dc=com" -x -w 123456 -b "dc=test,dc=com" street=local" the result is: # extended LDIF # # LDAPv3 # base <dc=test,dc=com> with scope subtree # filter: street=local # requesting: ALL # # 111, GF3, ec.com dn: o=111,o=GF3,dc=ec,dc=com objectClass: organization o: 111 street: local It is right. 2 set "translucent_remote street" "ldapsearch -D "cn=Manager,dc=test,dc=com" -x -w 123456 -b "dc=test,dc=com" street=local" have no result. "ldapsearch -D "cn=Manager,dc=test,dc=com" -x -w 123456 -b "dc=test,dc=com" street=remote" have no result why? 3 do not set any "ldapsearch -D "cn=Manager,dc=test,dc=com" -x -w 123456 -b "dc=test,dc=com" street=local" have no result. "ldapsearch -D "cn=Manager,dc=test,dc=com" -x -w 123456 -b "dc=test,dc=com" street=remote" have no result why?

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical