2012/11/14 Quanah Gibson-Mount <quanah(a)zimbra.com&gt; --On Wednesday, November 14, 2012 10:03 PM +0100 Clément OUDOT <clem.oudot(a)gmail.com&gt; wrote: Your OpenLDAP configuration will be compatible between 2.4.23 and 2.4.33. But LTB project install OpenLDAP in /usr/local, not in the default location, so you need to move your configuration in the new location. Why would they have to move the location of the configuration? The point of the -F flag to slapd is that you can use a location of your choosing any time you want to... Right. In LTB package, this can be done in /etc/default/slapd Clément.

--On Wednesday, November 14, 2012 4:55 PM -0500 Jignesh Patel <jignesh(a)icare.com&gt; wrote: > So if I update to 2.4.33? Do I still need to get LTB package or new > version has a last bind overlay? > > > And just for curiosity, what significant benefit we will get by this > upgrade? a) You are confusing "new version options" with "compile choices". RedHat, by choice, does not compile or ship the lastbind module in the "contrib" section of the OpenLDAP source. The LTB project does compile and include that contrib code. b) I think it is important you understand software versioning. For example, 2.4.33 means Major version 2, Minor version 4, patch level 33. I.e., 2.4.23 vs 2.4.33 is just a later release of the 2.4 series of OpenLDAP software, with significant bug fixes. A full list of fixes made to OpenLDAP between versions can always be found at <http://www.openldap.org/software/release/changes.html>;. c) I would note that RedHat's 2.4.23 build is nearly 2.5 years old. It is lacking many critical and significant fixes, as you can see from the above change log. d) I would note that RedHat's 2.4 build is linked to NSS, which is fairly problematic. See <http://www.openldap.org/lists/openldap-devel/201204/msg00019.html> and <http://www.openldap.org/its/index.cgi/?findid=7367>;. I do not know if the LTB project makes this same mistake or not. e) If you feel you require having actual support, I would advise you have a support contract with Symas (http://www.symas.com), and use their builds of OpenLDAP. f) In relation to your question about back-bdb and back-hdb. With OpenLDAP 2.4.33 (and later) you may wish to consider back-mdb, a new database backend written by Howard Chu, chief architect of the OpenLDAP project and CTO of Symas. More information on back-mdb can be found at <http://www.symas.com/mdb/> Hope that helps! --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

--On Wednesday, November 14, 2012 4:55 PM -0500 Jignesh Patel <jignesh(a)icare.com&gt; wrote: > So if I update to 2.4.33? Do I still need to get LTB package or new > version has a last bind overlay? > > > And just for curiosity, what significant benefit we will get by this > upgrade? a) You are confusing "new version options" with "compile choices". RedHat, by choice, does not compile or ship the lastbind module in the "contrib" section of the OpenLDAP source. The LTB project does compile and include that contrib code. b) I think it is important you understand software versioning. For example, 2.4.33 means Major version 2, Minor version 4, patch level 33. I.e., 2.4.23 vs 2.4.33 is just a later release of the 2.4 series of OpenLDAP software, with significant bug fixes. A full list of fixes made to OpenLDAP between versions can always be found at <http://www.openldap.org/software/release/changes.html>;. c) I would note that RedHat's 2.4.23 build is nearly 2.5 years old. It is lacking many critical and significant fixes, as you can see from the above change log. d) I would note that RedHat's 2.4 build is linked to NSS, which is fairly problematic. See <http://www.openldap.org/lists/openldap-devel/201204/msg00019.html> and <http://www.openldap.org/its/index.cgi/?findid=7367>;. I do not know if the LTB project makes this same mistake or not. e) If you feel you require having actual support, I would advise you have a support contract with Symas (http://www.symas.com), and use their builds of OpenLDAP. Please give me rough idea for pricing for support? And does that mean we have to download a version for Symas? Shouldn't there be open sourced version for Redhat from openLDAP community? f) In relation to your question about back-bdb and back-hdb. With OpenLDAP 2.4.33 (and later) you may wish to consider back-mdb, a new database backend written by Howard Chu, chief architect of the OpenLDAP project and CTO of Symas. More information on back-mdb can be found at <http://www.symas.com/mdb/> Is MDB database part of openLDAP package or required separate installation. Hope that helps! --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

--On Thursday, November 15, 2012 3:50 PM -0500 Jignesh Patel <jignesh(a)icare.com&gt; wrote: > Thanks. > > My comment inline. >> e) If you feel you require having actual support, I would advise you >> have a support contract with Symas (http://www.symas.com), and use their >> builds of OpenLDAP. > Please give me rough idea for pricing for support? And does that mean we have > to download a version for Symas? Shouldn't there be open sourced version for > Redhat from openLDAP community? Please learn how to properly comment inline, what you did made it extremely difficult to find what you were asking. a) I don't work for Symas, so I can't say what their support pricing would be. You would need to contact them, which is why I provided you the link to their website. b) Yes, you would use a build of OpenLDAP provided by Symas, since that is what they are supporting. c) The OpenLDAP foundation does not provide builds of OpenLDAP for any operating system. It provides the source. In general, there is nothing "special" about the generated binaries that tie them to a particular OS, so the concept of a "supported RedHat" build is nonsensical. Hope that helps, Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

After further research seems it installed dir /usr/local/etc/openldap instead of updating /etc/openldap. I also see it has not installed cn=config dir.

Thanks Quanah, I don't know what it has to do for creating slapd.d/cn=config dir and compilation. It has created schema dir so i assume it should create slapd.d/cn=config dir, something came as default in core installation of

Quanah, Thanks for the guidance. I will follow your suggestions and will try to install LDAP at its default location /usr/local/etc/openldap. I tried to google for setup doc which will provide directory setup on cent OS 6 but couldn't find one. Is there any standardization setup doc- if you can point then it will be helpful.

Here is a nice sample setup to install openldap with mdb. http://blogs.mindspew-age.com/2012/06/11/overlays-mdb-openldap-fun/