openldap-technical

openldap-technical@openldap.org

3 participants
9937 discussions

Setup syncrepl on Redhat Fedora
by Daniel Qian 08 Jun '11

08 Jun '11

Hi, I used to be fine with slapd.conf way but now with slapd.d/ I am kind of lost. From the reading I did so far I have to load the syncprov module but I couldn't find a single document or example how to enable that on Redhat Fedora platform. The following list is all that comes with Redhat distribution: [root@ldaprov1 cn=config]# pwd /etc/openldap/slapd.d/cn=config [root@ldaprov1 cn=config]# ll total 72 drwx------. 2 ldap ldap 4096 Jun 6 02:21 cn=schema -rw-------. 1 ldap ldap 52268 Jun 6 02:21 cn=schema.ldif -rw-------. 1 ldap ldap 572 Jun 6 02:55 olcDatabase={0}config.ldif -rw-------. 1 ldap ldap 1377 Jun 6 02:54 olcDatabase={1}bdb.ldif -rw-------. 1 ldap ldap 525 Jun 6 02:21 olcDatabase={-1}frontend.ldif -rw-------. 1 ldap ldap 556 Jun 6 03:00 olcDatabase={2}monitor.ldif Can anyone point out to me how I can add the module required to do replication on the provider side? I will make a document if I am able to set it up eventually. Thanks, Daniel

8 27

OID orcluser, orcluserv2, orclgroup objectclasses openldap compatability
by Ali Okan YÜKSEL 08 Jun '11

08 Jun '11

oracle identity management has some objectclasses that i need for our openldap directory. (orcluser, orcluserv2, orclgroup) i want to export .schema .ldif files from OID and import them to openldap 2.4? if you have experience about this subject can you guide me? i don't want to use OID anymore but i need these objectclasses for our project, regards, -- http://www.siyahsapka.org

1 0

Schema definitions: from Sun DS to OpenLDAP
by Silvio Verrecchia 08 Jun '11

08 Jun '11

Hello gurus, I'm migrating a Sun DS to Openldap and I've an highly personalized 99user.ldif file with user defined objectclass and attributes (hundreds... :( :( ) Regarding personalized schema definitions, is there a way (script/batch/etc) to convert quickly and easly a Sun DS 99user.ldif file to the standard OpenLDAP schema files ? Any suggestion is highly appreciated ! Thank you very much! Silvano

6 6

How to reply with parent attributes ?
by Aurélien Lafranchise 07 Jun '11

07 Jun '11

Hi all, When I am doing a user search I would like to get an answer with parent attributes. In another way, I would like to get common attribute shared by people from the same group ? Do I have to look in menberOf or in Collective attribute in my schema ? or others ideas ? Thanks ! Aurélien Lafranchise | Consultant Tél. : +33 (0)1 75 43 55 12 | Fax : +33 (0)1 75 43 55 11 www.snype-consulting.com

2 1

Issue with memberof overlay
by sachin mishra 07 Jun '11

07 Jun '11

Hi all, I am facing problem with "memberof" overlay. I have followed following steps for installation on my CentOS release 5.5: env LIBS=-ldb ./configure --enable-overlays [I also tried with env LIBS=-ldb ./configure --enable-memberof] make depend make make install in my slapd.conf file, I have enable memberof overlay: include /usr/local/etc/openldap/schema/core.schema include /usr/local/etc/openldap/schema/cosine.schema include /usr/local/etc/openldap/schema/local.schema ... modulepath /usr/local/libexec/openldap moduleload memberof.la ... database bdb suffix "dc=mybrocade,dc=com" rootdn "cn=Manager,dc=xxx,dc=com" rootpw {SSHA}HL8uT5hPaWyIdcP6yAheMT8n0GoWubr3 index objectClass eq overlay memberof When I start slapd (slapd -d -1), it gives these lines in log: line 27 (modulepath /usr/local/libexec/openldap) /usr/local/etc/openldap/slapd.conf: line 27: keyword <modulepath> ignored line 31 (moduleload memberof.la) /usr/local/etc/openldap/slapd.conf: line 31: keyword <moduleload> ignored When I try searching for memberof Attribute, it doesn't return the value: ldapsearch -LL -D cn=Manager,dc=xxx,dc=com -w secret "cn=sachin" -b dc=xxx,dc=com memberOf version: 1 dn: cn=Sachin,cn=Users,dc=xxx,dc=com <there is no entry for memberof> I tried searching for memberof.la but I could not find any instance of it in the system. Am I missing something here? Here is the place, where I have specified the "member" attribute: ldapsearch -LL -D cn=Manager,dc=xxx,dc=com -w ***** "cn=admin" -b dc=xxx,dc=com version: 1 dn: cn=admin,ou=groups,dc=xxx,dc=com objectClass: groupOfNames cn: admin description: Members having admin permission member: cn=sachin,cn=Users,dc=xxx,dc=com Thanks, Sachin

2 1

olcAccess problem
by Aurélien Lafranchise 07 Jun '11

07 Jun '11

Hi, On my olcDatabase={1}bdb,cn=config I added an ACL : {0}to * by dn="cn=user1,dc=truc" write by dn="cn=user2,dc=mbqt" read by * auth I don't understand why I have to add by * auth to allow the two previous users to be logged in ? Thanks Aurélien Lafranchise | Consultant Tél. : +33 (0)1 75 43 55 12 | Fax : +33 (0)1 75 43 55 11 www.snype-consulting.com

2 2

Slapd 2.4 upgrade woes.
by ray klassen 06 Jun '11

06 Jun '11

I recently upgraded to debian squeeze and found that the slapd configuration had been completely revamped. It's now using the cn=config setup. I was authenticating against a locally replicated copy of my directory behind a firewall. I was using anonymous binding for my own purposes and I want to continue using it that way. I don't really want to enter into a prolonged discussion of why I shouldn't. I just want to know if there is a simple way of reconfiguring under the new regime so that it will work the same way it did before. Any Takers?

2 1

Novice problem
by Aurélien Lafranchise 06 Jun '11

06 Jun '11

Hi all, I am a very novice (less than a week) with OpenLDAP and I have some basics problems. First, I have the 2.4.25 version and I downloaded the Admin Guide as a documentation. I understood that the way to configure the server change from slapd.conf to cn=config and this change is not clear by reading the documention. My question is simple, how to create my own DIT without interfering with the default configuration ? The end goal of this server is to have a radius server interrogating the LDAP one to deliver IP address to a GGSN (GPRS équipement). Thanks for the help provided. Aurélien Lafranchise | Consultant Tél. : +33 (0)1 75 43 55 12 | Fax : +33 (0)1 75 43 55 11 www.snype-consulting.com

2 3

Re: Proper values for threads and tool-threads
by Mark 06 Jun '11

06 Jun '11

Does IIRC mean If I Remember Correctly? Each machine has 4 physical CPUs. Each CPU has 6 cores. ( http://ark.intel.com/Product.aspx?id=46491) So that's 24 real cores, correct?. So if I'm understanding you're suggestion: tool-threads = 24 threads <= 96 If I set threads above 32 I get the warning mentioned earlier (I assume YMMV means: Your Mileage May Vary). Should I be concerned? Thank you for replying on a weekend. On Sun, Jun 5, 2011 at 8:26 PM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote: > --On Sunday, June 05, 2011 5:41 PM -0500 Mark <mah042(a)gmail.com> wrote: > > I'm setting up a new installation of OpenLDAP 2.4.25 on RHEL machines >> each with 128GB RAM and 4 Intel Xeon E7530 CPUs (6 cores each, each core >> supporting two threads). /proc/cpuinfo shows there are 48 processors. The >> backend hdb database will eventually have millions of records with >> thousands of concurrent readers and writers. Is there a good equation to >> use for determining a value for threads and tool-threads? I'd like to >> take advantage of the hardware available. I get a warning if I set >> threads higher than 32: >> >> olcThreads: value #0: warning, threads=48 larger than twice the default >> (2*16=32); YMMV. >> >> I shouldn't be slapcat'ing and slapadd'ing it very often, but like to set >> tool-threads to an appropriate value for the hardware. >> > > How many real cores do you have? > > Generally tool-threads should be set to that number. > > Generally threads should be set to no more than 4 threads per real core > IIRC (8 is generally good for 1 or 2 cores, 16 for 4 cores, etc). > > --Quanah > > > -- > > Quanah Gibson-Mount > Sr. Member of Technical Staff > Zimbra, Inc > A Division of VMware, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration >

2 1

Proper values for threads and tool-threads
by Mark 06 Jun '11

06 Jun '11

I'm setting up a new installation of OpenLDAP 2.4.25 on RHEL machines each with 128GB RAM and 4 Intel Xeon E7530 CPUs (6 cores each, each core supporting two threads). /proc/cpuinfo shows there are 48 processors. The backend hdb database will eventually have millions of records with thousands of concurrent readers and writers. Is there a good equation to use for determining a value for threads and tool-threads? I'd like to take advantage of the hardware available. I get a warning if I set threads higher than 32: olcThreads: value #0: warning, threads=48 larger than twice the default (2*16=32); YMMV. I shouldn't be slapcat'ing and slapadd'ing it very often, but like to set tool-threads to an appropriate value for the hardware. Any suggestions? Thank you, Mark

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical