openldap-technical

openldap-technical@openldap.org

13 participants
9794 discussions

Maximum length of a value
by Aaron Bennett 07 May '21

07 May '21

Hi, What is the maximum length of an value? Is it defined in the schema, per-value, or is there a global maximum in OpenLDAP? Thanks, Aaron --- Aaron Bennett Manager of Systems Administration Clark University ITS

2 1

Re: Migrating From DSEE7 to OpenLDAP; Base64 Values Fail To Import Using ldapadd
by Felix Schmitt 06 May '21

06 May '21

Hi, The issues might come from the fact that ODSEE has implemented RFC 2307bis - which aimed to improve on the old RFC 2307. As far as I know this never got a real standard - even though some companies adopted it. RFC 2307bis defines some things slightly different. from RFC2307. One of those cases is the gecos field which is a Directory String (SYNTAX 1.3.6.1.4.1.1466.115.121.1.15) and can take UTF-8 character. Have a look here https://docs.ldap.com/specs/draft-howard-rfc2307bis-02.txt Regards Felix -- Felix Schmitt Ingenieur für IT/TK Systemberatung Blumenweg 24 phone: +49 8092 20796 D-85567 Grafing mobile: +49 172 842 99 12 Germany <mailto:Felix-Schmitt@t-online.de> mailto:Felix-Schmitt@t-online.de

4 5

Re: idletimeout setting is not working
by aRaviNd 06 May '21

06 May '21

Yes, It was not using slapd.conf and I was making changes on slapd.conf. It was my mistake. Thanks Quanah On Thu, May 6, 2021 at 8:42 PM Quanah Gibson-Mount <quanah(a)symas.com> wrote: > > > --On Thursday, May 6, 2021 1:46 PM +0530 aRaviNd <ambadiaravind(a)gmail.com> > > wrote: > > > > > Hi, > > > > > > Eventhough we have configured idletimeout as 0 in our slapd.conf , every > > 5 mins slapd is closing the connection. > > > > Why the idletimeout setting is not taking effect? > > Did you restart slapd after making the change? Does your system even use > slapd.conf, or is it actually using cn=config? etc. > > --Quanah > > > -- > > Quanah Gibson-Mount > Product Architect > Symas Corporation > Packaged, certified, and supported LDAP solutions powered by OpenLDAP: > <http://www.symas.com> >

1 0

Migrating From DSEE7 to OpenLDAP; Base64 Values Fail To Import Using ldapadd
by harklib＠protonmail.com 06 May '21

06 May '21

Hi, I am in the process of migrating away from our ancient Oracle DSEE7 directory servers to OpenLDAP 2.4.44-23.el7_9.x86_64. One problem I'm experiencing when importing entries with attribute values encoded in base64 is: adding new entry "cn=LastName,ou=People,dc=cs,dc=university,dc=edu" ldap_add: Invalid syntax (21) additional info: gecos: value #0 invalid per syntax dn: cn=nis,cn=schema,cn=config objectClass: olcSchemaConfig cn: nis olcAttributeTypes: ( 1.3.6.1.1.1.1.2 NAME 'gecos' DESC 'The GECOS field; the common name' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ) In this example, the "gecos" attribute has the first name "Jérémie", e.g., "gecos:: SsOpcsOpbWll". When I decode it using `base64 -d` it decodes just fine. Why can I not import this base64 encoded value, and others, using ldapadd? I'm binding as olcRootDN which has the appropriate permission, manage, as far as I can tell but have also used SASL EXTERNAL--same results. Do I need to decode these values in my LDIF file first? I've scoured the internet and the archives here, so forgive me if I've missed a glaringly obvious thread. Another note, I've used `./dsconf export --no-repl [...]` to avoid the DSEE7 sync-repl operational cruft. I still had some cleaning up to do, but I still don't understand why the base64 values are a hard stop. Thanks in advance, Brian

3 2

idletimeout setting is not working
by aRaviNd 06 May '21

06 May '21

Hi, Eventhough we have configured idletimeout as 0 in our slapd.conf , every 5 mins slapd is closing the connection. May 06 06:54:07 example1 slapd[4919]: conn=10016 fd=731 closed (idletimeout) May 06 06:54:07 example1 slapd[4919]: conn=10017 fd=732 closed (idletimeout) May 06 06:54:07 example1 slapd[4919]: conn=10018 fd=734 closed (idletimeout) May 06 06:54:07 example1 slapd[4919]: conn=10019 fd=735 closed (idletimeout) Why the idletimeout setting is not taking effect? Operating system: Red Hat Enterprise Linux Server release 7.8 (Maipo) Openldap version: openldap-2.4.44-22.el7.x86_64 Regards, Aravind M D

2 1

SyncProv checkpointing
by thomaswilliampritchard＠gmail.com 06 May '21

06 May '21

Hi, Through testing we have discovered restoring from backup is most accurate when we have the syncprov checkpointing at "1 1". Or checkpoint after 1 operation or 1 minute (olcSpCheckpoint: 1 1). Are there any concerns with having this frequent of checkpointing? Thanks, Thomas

3 11

OpenLDAP 2.5.4 WARNING: Could not locate systemd
by Nick Folino 01 May '21

01 May '21

Configuring OpenLDAP 2.5.4 on Fedora 33: $ ./configure --prefix /apps/openldap -q Configuring OpenLDAP 2.5.4-Release ... configure: WARNING: Could not locate systemd configure: WARNING: systemd service notification not supported! This didn't happen with 2.5.2beta, but does with 2.5RC. I missed it during my testing. Any ideas? Nick

2 2

loading slapo-vc does not work
by Michael Ströder 01 May '21

01 May '21

HI! Trying to understand Verify Credentials operation I'd like to initialize slapo-vc but it fails (see simple config below). 608d43ae.18d5fdad 0x7f6e38b66740 slapd.conf: line 13 (overlay vc) 608d43ae.18d623b1 0x7f6e38b66740 overlay "vc" not found 608d43ae.18d6dd5c 0x7f6e38b66740 slapd.conf: line 13: <overlay> handler exited with 1! Also tried to load it in global section but this also does not work. The following files are installed (and other overlays from this directory load just fine): # ls -al /opt/openldap-ms/lib64/openldap/vc* -rw-r--r-- 1 root root 1008 May 1 02:40 /opt/openldap-ms/lib64/openldap/vc.la lrwxrwxrwx 1 root root 11 May 1 02:40 /opt/openldap-ms/lib64/openldap/vc.so -> vc.so.0.0.0 lrwxrwxrwx 1 root root 11 May 1 02:40 /opt/openldap-ms/lib64/openldap/vc.so.0 -> vc.so.0.0.0 -rwxr-xr-x 1 root root 18824 May 1 02:40 /opt/openldap-ms/lib64/openldap/vc.so.0.0.0 Find build config herein: https://build.opensuse.org/package/view_file/home:stroeder:openldap25/openl… What's wrong here? Ciao, Michael. ------------------ snip ----------------- moduleload back_mdb moduleload vc include /opt/openldap-ms/etc/openldap/schema/core.schema database mdb directory data/test suffix o=test rootdn cn=root,o=test rootpw secret overlay vc

2 2

Spec for LDAP Verify Credentials operation
by Michael Ströder 01 May '21

01 May '21

HI! Is there a spec for client-side implementation of LDAP Verify Credentials operation? I assume that one has to grant auth access to 'userPassword' to the entity sending the VC operation. Ciao, Michael.

2 1

multival member ...
by Michael Ströder 30 Apr '21

30 Apr '21

HI! Experimenting with 2.5.4 I wonder what are reasonable values for applying multival to attribute 'member' in group entries. I guess this depends on length of member DN values. Is there a clear way to calculate this? Or how to find out the effect of current settings. Ciao, Michael. P.S.: Yes, I know I have to reload the database when adding multival config option.

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical