openldap-technical

openldap-technical@openldap.org

9897 discussions

Start a nNew thread

Question regarding dnattr for auth
by cyril.stoll＠uzh.ch 03 Jun '21

03 Jun '21

2 2

Replication between 2.4.x 2.5.x versions
by Nick Milas 02 Jun '21

02 Jun '21

Hello, We are running a (small) number of OpenLDAP instances with v2.4.58. There is a single master and 4 syncrepl consumers (all on CentOS 7 boxes), all running with back-mdb. We are planning our migration from 2.4 to 2.5.x My question: Would it be OK if we migrate our master server to 2.5.latest, and leave consumers to 2.4.58 for a while? Would any implications be expected? Or it is strongly suggested to shutdown all the servers, migrate to 2.5 in parallel and then restart? (Obviously, the latter approach is more demanding in admin and maintenance planning.) Finally: Is there a script or other way to check possible config incompatibilities with 2.5.x (in order to avoid surprises)? (Note: Our master uses cn=config, while consumers still use slapd.conf.) I will appreciate your advice. Thanks, Nick.

3 2

LMDB MAP_LOCK flag on readers to minimize major page faults
by Vitaly Zuevsky 31 May '21

31 May '21

Hi MAP_LOCK flag to mmap() on LMDB readers should populate page cache from the file being mapped and preclude those pages from eviction. I was wondering if that was ever tested, especially with frequent writes to the underlying file. And is there a standard way (a compile option) to include that flag without modifying source code directly? I see quite a few major faults with perf stat, and I am looking if they could be avoided. I am new to LMDB and I guess this discussion may have taken place before, if you could point me out to the right place.. Thank you. Vitaly

4 10

RE24 testing call #1 (OpenLDAP 2.4.59)
by Quanah Gibson-Mount 31 May '21

31 May '21

his is the first testing call for OpenLDAP 2.4.59. Depending on the results, this may be the only testing call. Generally, get the code for RE24: <https://git.openldap.org/openldap/openldap/-/archive/OPENLDAP_REL_ENG_2_4/o…> Extract, configure, and build. Execute the test suite (via make test) after it is built. Optionally, cd tests && make its to run through the regression suite. Thanks! OpenLDAP 2.4.59 Engineering Fixed libldap TLSv1.3 cipher suites with OpenSSL 1.1.1 (ITS#9521) Fixed libldap double free of LDAP_OPT_DEFBASE (ITS#9530) Fixed slapd syncrepl handling of add+delete on single value attr (ITS#9295) Fixed slapd-mdb cursor init check (ITS#9526) Fixed slapd-mdb deletion of context entry (ITS#9531) Fixed slapo-pcache locking during expiration (ITS#9529) Contrib Fixed slapo-autogroup to not thrash thead context (ITS#9494) Documentation ldap_modify(3) - Delete non-existent mod_next parameter (ITS#9559) Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

5 7

Configure autoca in slapd.d
by Stefan Kania 31 May '21

31 May '21

Hallo, I try to get autoca running using the configuration via slapd.d. With slapd.conf it'S working with this configuration: ------- overlay autoca caKeybits 4096 userKeybits 4096 serverKeybits 4096 ------- When I try to configure it with the following settings: --------- dn: olcOverlay={1}autoca,olcDatabase={2}mdb,cn=config objectClass: olcOverlayConfig olcserverKeybits: 4096 olccaKeybits: 4096 olcuserKeybits: 4096 --------- I'll getting: ------------- additional info: olcserverKeybits: attribute type undefined ------------- If I try to configure autoca with the default values, it works. I use OpenLDAP 2.5.4 on a Debian10 Is there any documentation, more then the manpage? Stefan

2 4

Re: RE25 testing call #1 (OpenLDAP 2.5.5)
by Nick Folino 29 May '21

29 May '21

Make test and make its successful on Fedora 34. Nick On Fri, May 28, 2021 at 5:39 PM Quanah Gibson-Mount <quanah(a)symas.com> wrote: > This is the first testing call for OpenLDAP 2.5.55. Depending on the > results, this may be the only testing call. > > Generally, get the code for RE25: > > < > https://git.openldap.org/openldap/openldap/-/archive/OPENLDAP_REL_ENG_2_5/o… > > > > Extract, configure, and build. > > Execute the test suite (via make test) after it is built. Optionally, cd > tests && make its to run through the regression suite. > > Thanks! > > OpenLDAP 2.5.5 Engineering > Added libldap LDAP_OPT_TCP_USER_TIMEOUT support (ITS#9502) > Added lloadd tcp-user-timeout support (ITS#9502) > Added slapd-asyncmeta tcp-user-timeout support (ITS#9502) > Added slapd-ldap tcp-user-timeout support (ITS#9502) > Added slapd-meta tcp-user-timeout support (ITS#9502) > Fixed incorrect control OIDs for AuthZ Identity (ITS#9542) > Fixed libldap typo in util-int.c (ITS#9541) > Fixed libldap double free of LDAP_OPT_DEFBASE (ITS#9530) > Fixed libldap better TLS1.3 cipher suite handling (ITS#9521, > ITS#9546) > Fixed lloadd multiple issues (ITS#8747) > Fixed slapd slap_op_time to avoid duplicates across restarts > (ITS#9537) > Fixed slapd typo in daemon.c (ITS#9541) > Fixed slapd slapi compilation (ITS#9544) > Fixed slapd to handle empty DN in extended filters (ITS#9551) > Fixed slapd syncrepl searches with empty base (ITS#6467) > Fixed slapd syncrepl refresh on startup (ITS#9324, ITS#9534) > Fixed slapd-asyncmeta quarantine handling (ITS#8721) > Fixed slapd-asyncmeta to have a default operations timeout > (ITS#9555) > Fixed slapd-ldap quarantine handling (ITS#8721) > Fixed slapd-mdb deletion of context entry (ITS#9531) > Fixed slapd-meta quarantine handling (ITS#8721) > Fixed slapo-accesslog to record reqNewDN for modRDN ops (ITS#9552) > Fixed slapo-pcache locking during expiration (ITS#9529) > Fixed slappw-argon2 module installation (ITS#9548) > Contrib > Update ldapc++/ldaptcl to use configure.ac (ITS#9554) > Documentation > ldap_first_attribute(3) - Document ldap_get_attribute_ber > (ITS#8820) > ldap_modify(3) - Delete non-existent mod_next parameter (ITS#9559) > > Regards, > Quanah > > -- > > Quanah Gibson-Mount > Product Architect > Symas Corporation > Packaged, certified, and supported LDAP solutions powered by OpenLDAP: > <http://www.symas.com> >

1 0

RE25 testing call #1 (OpenLDAP 2.5.5)
by Quanah Gibson-Mount 29 May '21

29 May '21

This is the first testing call for OpenLDAP 2.5.55. Depending on the results, this may be the only testing call. Generally, get the code for RE25: <https://git.openldap.org/openldap/openldap/-/archive/OPENLDAP_REL_ENG_2_5/o…> Extract, configure, and build. Execute the test suite (via make test) after it is built. Optionally, cd tests && make its to run through the regression suite. Thanks! OpenLDAP 2.5.5 Engineering Added libldap LDAP_OPT_TCP_USER_TIMEOUT support (ITS#9502) Added lloadd tcp-user-timeout support (ITS#9502) Added slapd-asyncmeta tcp-user-timeout support (ITS#9502) Added slapd-ldap tcp-user-timeout support (ITS#9502) Added slapd-meta tcp-user-timeout support (ITS#9502) Fixed incorrect control OIDs for AuthZ Identity (ITS#9542) Fixed libldap typo in util-int.c (ITS#9541) Fixed libldap double free of LDAP_OPT_DEFBASE (ITS#9530) Fixed libldap better TLS1.3 cipher suite handling (ITS#9521, ITS#9546) Fixed lloadd multiple issues (ITS#8747) Fixed slapd slap_op_time to avoid duplicates across restarts (ITS#9537) Fixed slapd typo in daemon.c (ITS#9541) Fixed slapd slapi compilation (ITS#9544) Fixed slapd to handle empty DN in extended filters (ITS#9551) Fixed slapd syncrepl searches with empty base (ITS#6467) Fixed slapd syncrepl refresh on startup (ITS#9324, ITS#9534) Fixed slapd-asyncmeta quarantine handling (ITS#8721) Fixed slapd-asyncmeta to have a default operations timeout (ITS#9555) Fixed slapd-ldap quarantine handling (ITS#8721) Fixed slapd-mdb deletion of context entry (ITS#9531) Fixed slapd-meta quarantine handling (ITS#8721) Fixed slapo-accesslog to record reqNewDN for modRDN ops (ITS#9552) Fixed slapo-pcache locking during expiration (ITS#9529) Fixed slappw-argon2 module installation (ITS#9548) Contrib Update ldapc++/ldaptcl to use configure.ac (ITS#9554) Documentation ldap_first_attribute(3) - Document ldap_get_attribute_ber (ITS#8820) ldap_modify(3) - Delete non-existent mod_next parameter (ITS#9559) Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

2 1

Openldap trying to setup mozillaAbPersonAlpha.schema
by bob＠gunas.co.uk 29 May '21

29 May '21

I don't know if this is the best place to ask for help but I can only try please don't shoot me down. I'm new to openldap and find it hard going so any help would great. Trying to setup an Address book to work with Thunderbird. Trying to Include mozillaAbPersonAlpha.schema in to Ldap 2.4.7 on Ubuntu server 20.04.2 The steps I have taken 1) mkdir /tmp/ldapworkingdir 2) cd /tmp/ldapworkingdir/ 3) touch ldap.conf 4) echo "include /etc/ldap/schema/mozillaAbPersonAlpha.schema" > ldap.conf 5) slaptest -f ldap.conf -F . 6) the error message 60b0fc5f /etc/ldap/schema/mozillaAbPersonAlpha.schema: line 148 objectclass: AttributeType not found: "c" slaptest: bad configuration directory! I have tried look for example of how to setup Thunderbird address book but with no look. I do hope someone can help. Thanks Bob H

2 4

radlib.h: No such file or directory - passwd slapd-module
by rguichardspam＠Gmail.com 28 May '21

28 May '21

Hi, while compile passwd slapd-modules, I've got error on Radius compilation. gcc -DOPENLDAP_FD_SETSIZE=4096 -O2 -g -DSLAP_SCHEMA_EXPOSE -g -O2 -I/usr/kerberos/include -I../../../include -I../../../include -I../../../servers/slapd -c radius.c -fPIC -DPIC -o .libs/radius.o radius.c:27:20: fatal error: radlib.h: No such file or directory #include <radlib.h> I've searched which package could provide the radlib file but I didn't found it. Please confirm which package should be used .. or link to the source.. I'm on CentOS

2 1

Using the openldap c api
by matt_hannay1＠yahoo.com.au 26 May '21

26 May '21

We are in the throw of migrating to openldap however we have a problem. we currently have the 2.4 release of the client libraries. I have a problem in the mean time. we have a ldap repository that does not support TLS but only supports the SSL v1.3 standard .....yes I know about the security risks that's why we are migrating. Currently the Old Mozilla C api is in use which I have to replace. From looking at the 2.4 API docs would I be correct in saying the API does not support SSL v1.3 ? Would the Deprecated API calls get me over the line in replacing the mozilla and establishing a SSL connection, Or should I look at going to an older openldap API version? Thanks Matt

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical