openldap-technical

openldap-technical@openldap.org

9897 discussions

Re: Syncrepl Questions
by Gavin Henry 15 Jan '09

15 Jan '09

----- "John Allgood" <jallgood(a)ohl.com> wrote: > Hello Again Hi, > Maybe by the end of this project I will be somewhat of an ldap expert > until them please bear with me. It will take many years to get there (I'm no where near), trust me ;-) > I think I have gotten a little more understanding to how this will > work. I have a provider and a consumer up and running and I am > pointing each application and or server to both the provider and the > consumer. Also there is something called referrals that are talked > about for the consumer. Is this something I will need to use. If you understand referrals you will be able to answer this yourself. Anyway, referrals "refer" a client to the Provider if it is trying to write a consumer that doesn't accept writes, think of it as "Go speak to the boss". > We started building the ldap server about a month ago. We have not > really had the time to do proper research due to time constraints. This can be a big problem. > We > just used the rpms that Redhat provided with RHEL5 which is openldap > 2.3. The rpms built from Redhat did not have the ppolicy overlay built > in. I found the overlays on the Beta channels from Redhat Network and > used those to get the ppolicy. I wish Redhat would stay a little more > up2date. Anyways if there is anymore advise that can be provided I > would appreciate it. Oh one more thing. When I was setting up syncprov > for the first time I missed the part about loading the module in the > slapd.conf. I did enter the overlay syncprov to my config and it > appears to work. Can syncprov be built into openldap and not loaded as > an module. Just wanted some verification on this issue. Build it how you like, it's best to build from source to start with to get a feel for everything. Then depending on how you company works you can move to a commercially supported version. I would never recommend the RHEL version, but please visit the list archives for why. Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/ Suretec Systems is a limited company registered in Scotland. Registered number: SC258005. Registered office: 13 Whiteley Well Place, Inverurie, Aberdeenshire, AB51 4FP. Subject to disclaimer at http://www.suretecgroup.com/disclaimer.html

1 0

Re: Re: N-Way Multi-Master replication - delete problem
by Adrien Futschik 15 Jan '09

15 Jan '09

It seems like I am not the only one facing this problem. Is this officially reported as a bug ? I found out that when deleting an entry on the master I added it to, it is removed only on this master and deleting is not replicated until I make some other operation on the other master. Seems like the delete is "queued". When deleting an entry on the "other" master (not the one I added the entry to), the delete works fine and is correctly replicated. Anyone to help me with N-Way Multi-Master replication ? Adrien Futschik ======================================== Message date : Jan 07 2009, 06:35 PM From : "jakjr" <joao.alfredo(a)gmail.com> To : adrien.futschik(a)atosorigin.com Copy to : Subject : Re: N-Way Multi-Master replication - delete problem Hello Adrien, I have the same problem deleting entries on N-Way MultiMaster. Did you resolved this problem ? Best Regards. On Mon, Dec 22, 2008 at 6:10 AM, Adrien Futschik < adrien.futschik(a)atosorigin.com> wrote: > OK, But then what did I do wrong ? delete an entry shouldn't be a problem > with N-Way Multi-Master replication ? should it ? > > Here is how I have setup-ed my masters : > > m1 -config : > dn: cn=config > objectClass: olcGlobal > cn: config > olcServerID: 1 > > dn: olcDatabase={0}config,cn=config > objectClass: olcDatabaseConfig > olcDatabase: {0}config > olcRootPW:< file://$CONFIGPWF > > m2 - config : > dn: cn=config > objectClass: olcGlobal > cn: config > olcServerID: 2 > > dn: olcDatabase={0}config,cn=config > objectClass: olcDatabaseConfig > olcDatabase: {0}config > olcRootPW:< file://$CONFIGPWF > > m1 - syncprov : > dn: cn=config > changetype: modify > replace: olcServerID > olcServerID: 1 $URI1 > olcServerID: 2 $URI2 > > dn: olcOverlay=syncprov,olcDatabase={0}config,cn=config > changetype: add > objectClass: olcOverlayConfig > objectClass: olcSyncProvConfig > olcOverlay: syncprov > > dn: olcDatabase={0}config,cn=config > changetype: modify > add: olcSyncRepl > olcSyncRepl: rid=001 provider=$URI1 binddn="cn=config" bindmethod=simple > credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist > retry="5 5 300 5" timeout=3 > olcSyncRepl: rid=002 provider=$URI2 binddn="cn=config" bindmethod=simple > credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist > retry="5 5 300 5" timeout=3 > - > add: olcMirrorMode > olcMirrorMode: TRUE > > m2 - syncrepl : > dn: olcDatabase={0}config,cn=config > changetype: modify > add: olcSyncRepl > olcSyncRepl: rid=001 provider=$URI1 binddn="cn=config" bindmethod=simple > credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist > retry="5 5 300 5" timeout=3 > olcSyncRepl: rid=002 provider=$URI2 binddn="cn=config" bindmethod=simple > credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist > retry="5 5 300 5" timeout=3 > - > add: olcMirrorMode > olcMirrorMode: TRUE > > m1 - schema : > include: file://$ABS_SCHEMADIR/core.ldif > include: file://$ABS_SCHEMADIR/cosine.ldif > include: file://$ABS_SCHEMADIR/inetorgperson.ldif > include: file://$ABS_SCHEMADIR/openldap.ldif > include: file://$ABS_SCHEMADIR/nis.ldif > > m1 - backend : > dn: olcDatabase={1}$BACKEND,cn=config > objectClass: olcDatabaseConfig > objectClass: olc${BACKEND}Config > olcDatabase: {1}$BACKEND > olcSuffix: $BASEDN > olcDbDirectory: ./openldap-data > olcRootDN: $MANAGERDN > olcRootPW: $PASSWD > olcSyncRepl: rid=004 provider=$URI1 binddn="$MANAGERDN" bindmethod=simple > credentials=$PASSWD searchbase="$BASEDN" type=refreshOnly > interval=$INTERVAL retry="5 5 300 5" timeout=3 > olcSyncRepl: rid=005 provider=$URI2 binddn="$MANAGERDN" bindmethod=simple > credentials=$PASSWD searchbase="$BASEDN" type=refreshOnly > interval=$INTERVAL retry="5 5 300 5" timeout=3 > olcMirrorMode: TRUE > > dn: olcOverlay=syncprov,olcDatabase={1}${BACKEND},cn=config > changetype: add > objectClass: olcOverlayConfig > objectClass: olcSyncProvConfig > olcOverlay: syncprov > > Did I miss something ? > Has anyone tested N-way Multi-master replication & encountered the same > problem as me ? > > Adrien > > ======================================== > Message date : Dec 19 2008, 07:11 PM > From : "Quanah Gibson-Mount" <quanah(a)zimbra.com> > To : adrien.futschik(a)atosorigin.com, openldap-technical(a)openldap.org > Copy to : "Miguel Jinez" <miguel.jinez(a)gmail.com> > Subject : Re: Re: N-Way Multi-Master replication - delete problem > > > > --On December 19, 2008 9:28:41 AM +0100 Adrien Futschik > <adrien.futschik(a)atosorigin.com> wrote: > > > Hy everyone, > > > > I have just tested the same procedure with OpenLDAP 2.4.13. The problem > > remains the same. > > > > Did I miss something ? Is this supposed to be like this ? > > > > I'm joining the modified script I'm using to setup both masters and the > > LDIF files I'm using to add and remove an entry (+ attributes). > > > > I did not use access-log, is this supposed to work with N-Way > > Multi-Master replication ? I thought it was only used in case of Delta > > Synchronization/Replication. > > Correct, delta-syncrepl and MMR are not currently supported together (that > may change in the future). > > --Quanah > > -- > > Quanah Gibson-Mount > Principal Software Engineer > Zimbra, Inc > -------------------- > Zimbra :: the leader in open source messaging and collaboration > > > > > Adrien Futschik >

2 1

ppolicy
by Allgood, John 15 Jan '09

15 Jan '09

Hey Guys I have another question in regards to using ppolicy. I have built my policy into ldap. How do I apply that policy to my existing user objects. Thanks John Allgood Senior Systems Administrator Turbo, division of OHL 2251 Jesse Jewell Pky. NE Gainesville, GA 30507 tel: (678) 989-3051 fax: (770) 531-7878 jallgood(a)ohl.com <mailto:jallgood@ohl.com> www.ohl.com <http://www.ohl.com>

3 2

Syncrepl Questions
by Allgood, John 14 Jan '09

14 Jan '09

Hey All I am working on setting up sync replication for ldap. I have it working but I am not sure exactly what I can do with it. How do I failover to it? I may be missing a piece that would help tie it all together. Thanks for any input. John Allgood Senior Systems Administrator Turbo, division of OHL 2251 Jesse Jewell Pky. NE Gainesville, GA 30507 tel: (678) 989-3051 fax: (770) 531-7878 jallgood(a)ohl.com <mailto:jallgood@ohl.com> www.ohl.com <http://www.ohl.com>

2 1

OpenLDAP centralized authentication with Active Directory
by Duong Pham Tung (FIM HN) 13 Jan '09

13 Jan '09

Hello, My company network have some different domains such as abc.net, abc.com and xyz.com (I don't use real domain name because of our company's security policy). Each domain is managed by a dedicated Active Directory server. Now, I want to use one OpenLDAP server to authenticate all users from these domains because we want manage services they use focusly (such as Mail, Portal). But now, I have'nt any solutions to solve this problem. Because the number of users is very large (approximately 10.000 users) so I can't build database by hand. Can anyone suggest me the solution to solve this problem. Thanks and Best regards, Duong Pham.

4 3

Re: AW: Question about the manager acccount for the openldap-database
by Quanah Gibson-Mount 09 Jan '09

09 Jan '09

--On Friday, January 09, 2009 8:43 AM +0100 Oliver Steffens <osteffens(a)gc-heat.de> wrote: > Thank you for your quick reply. We will check this solution. Please keep replies on the list. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Need information
by Buddhadeb Bhakta 09 Jan '09

09 Jan '09

Hi All, I would like to use the below C functions which is inside ldap.h header file. ldap_init() ldap_simple_bind_s() ldap_search_s() ldap_unbind() Could anyone please let me know to use these functions, what package should I install? I am using HP-UX B.11.00 version of OS. Please advise. Thanks Buddhadeb

1 0

OpenLDAP as a 'generic' hierarchical data store
by Lorenzo Pastrana 09 Jan '09

09 Jan '09

Hello list, I was wondering lately if I could use OpenLDAP as a 'generic' hierarchical data store for the application I'm planning, and tried to get any hint about feasibility. I found a blog post about OpenDS (http://blogs.sun.com/treydrake/entry/ldap_vs_relational_database), where the author states about Read/write performance parity ... That was the kind of news I just wanted to hear because I'm thinking about a persistence back-end, not just an almost static dataset, but I'm in a genuine PHP environment and Java is not an option; so I naturally tried to get some infos regarding OpenLDAP performance but found nothing recent, and the references I could find are quite discouraging on that matter ... However since 4 to 8 years have passed since the tests I've been reading, I'm still in the hope of a 'a pleasant surprise' as the sun guy sayz ... Does someone has an experience to share about that kind of (mis-)usage of OpenLDAP ? Any pointers to some good and recent reference on the matter are of course well come. Thanks in advance for any information. LP Lorenzo Pastrana - Happy End Vision -------------------------- Design web Conception multimédia Communication visuelle et édition -------------------------- Tél. : 01 42 47 83 09 Fax : 01 47 70 70 19 E-mail : lorenzo.pastrana(a)happyend.fr

5 9

Question about the manager acccount for the openldap-database
by Oliver Steffens 08 Jan '09

08 Jan '09

Hi together, Unfortunately the current (md5-encrypted) password is lost... Is it possible to change the "rootpw" in the "slapd.conf" from an md5-one into a new plain-text one without any problems respectively additional efforts? Thank you for your help in advance! Best regards Oliver Steffens

2 1

LDAP Host access best practices
by Mathew Rowley 07 Jan '09

07 Jan '09

I am fairly new to LDAP in general, so please excuse any syntax errors. I have a radius proxy which will query an LDAP data store to determine if a user has access to a host. I want to reuse the concept of how users are defined: Ou=users -> defines all users Ou=groups -> defines all groups Ou=groups,cn=groupname -> links the users to the group With hosts. My problem is that I cannot find any specific formal definition on how this is done (in terms of what each subtree¹s objectClass should be). Has anyone done this, or can point me in the right direction? All the user/groups based stuff is based on posixGroup, which im pretty sure is unix/linux concept can this be used for what I am trying to do with hosts? Basic architecutre: Ou=hosts -> defines a host Ou=hostGroups -> defines a group name (organizationlUnit?) Ou=hostGroups,cn=hostGroupName -> this will link what hosts are in the group Thanks for any help. -- MAT

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical