Re: Copying trees from one consumer to another

2010-06-23 Thread Quanah Gibson-Mount
--On Tuesday, June 22, 2010 8:05 AM -0700 Chris Jacobs chris.jac...@apollogrp.edu wrote: Nick, I've done this a number of times - Dev on an 'in production' ldap infrastructure. I've managed to get the boxes out of sync a number of times. 1. Stop slapd. 2. Delete the contents of the db dir

Re: Copying trees from one consumer to another

2010-06-23 Thread Chris Jacobs
True, but then we don't know how big his set is. - chris Chris Jacobs, Systems Administrator Apollo Group | Apollo Marketing | Aptimus 2001 6th Ave Ste 3200 | Seattle, WA 98121 phone: 206.441.9100 x1245 | mobile: 206.601.3256 | fax: 206.441.9661 email: chris.jac...@apollogrp.edu -

Re: Copying trees from one consumer to another

2010-06-23 Thread Quanah Gibson-Mount
--On Tuesday, June 22, 2010 5:11 PM +0200 Jonathan Clarke jonat...@phillipoux.net wrote: I would instead recommend doing a slapcat on one consumer, copying over the file to second consumer, slapadd, then starting that consumer. This depends a lot on the size of the DB. I work with some in

Re: Copying trees from one consumer to another

2010-06-23 Thread Nick Urbanik
Dear Quanah, Thank you again for your very helpful replies. On 22/06/10 07:57 -0700, Quanah Gibson-Mount wrote: --On Tuesday, June 22, 2010 12:24 PM +1000 Nick Urbanik nick.urba...@optusnet.com.au wrote: If so, does that mean that with syncrepl, the above operation is reduced to the

Re: Unigueness of RID; changing RID

2010-06-23 Thread Nick Urbanik
Dear Howard, On 22/06/10 07:31 -0700, Howard Chu wrote: Nick Urbanik wrote: Dear Folks, I am trying to improve my understanding of the RID before making many large deployments of syncrepl. My understanding is that the replica ID (RID) is unique within one level of [provider] -- [consumer],

Re: Unigueness of RID; changing RID

2010-06-23 Thread Nick Urbanik
Dear Quanah, On 22/06/10 08:04 -0700, Quanah Gibson-Mount wrote: --On Tuesday, June 22, 2010 12:00 PM +1000 Nick Urbanik nick.urba...@optusnet.com.au wrote: Dear Folks, I am trying to improve my understanding of the RID before making many large deployments of syncrepl. The RID uniquely

Re: Copying trees from one consumer to another

2010-06-23 Thread Nick Urbanik
Dear Howard, Thank you for taking the time to answer. On 22/06/10 07:34 -0700, Howard Chu wrote: Nick Urbanik wrote: Dear Folks, With slurpd, copying a tree from one slave to another was like this: 1. stop slapd on both slaves. 2. netcat the directory across from one slave to the other. 3.

ldaprc with ldaps:// and ldap:// fallback

2010-06-23 Thread Emmanuel Dreyfus
Hello I would like to setup a ldaprc so that an application uses: - a localhost-base slapd without authentification (just relying on filesystem permission on the slapd socket) - if it is not available, a remote slapd, authenticating using client certificate Here is the desired ldaprc: BASE

Re: Configuring slapd.conf-less OpenLDAP

2010-06-23 Thread Braden McDaniel
On Tue, 2010-06-22 at 17:04 +0200, Benjamin Griese wrote: Hi, with slappasswd you can specify different password hash types. Try another one. If that still doesn't work, check if your slapd is able to decrypt that sort of hash. Is the crypt/md5/etc. algorithm implemented in your slapd

RE: PROBLEM: can't use SASL to authentication openldap client

2010-06-23 Thread LI Ji D
Hi, This is my comprehension: 1. The client is connecting to SLAPD requesting an SASL bind. 2. SLAPD uses the SASL subsystem (which checks the /usr/lib/sasl/slapd.conf file for settings) to tell the client how to authenticate. In this case, it tells the client to use DIGEST-MD5. 3. The

SASL auth not working

2010-06-23 Thread Diego Lima
Hello all, I'm trying to set up openldap to authenticate using my kerberos service, but I'm not having success so far. I've already set up MIT Kerberos V and I can successfully get tickets from it: r...@filesystem:~# kinit diego.lima Password for diego.l...@users: r...@filesystem:~# klist Ticket

Re: smbk5pwd: ldappassword hangs

2010-06-23 Thread Frank Van Damme
Op 16-06-10 21:40, Frank Van Damme schreef: I did so. I had some rough times trying to get through the compilation process (of version 2.4.21), because test 44 kept failing - then I disabled the dynlist overlay which tests the dynlist and compilation succeeded fine. The server works, too.

openldap pwdReset

2010-06-23 Thread Allgood, John
Hey All I have a question for you all. I am using openldap 2.4.31 on Centos 5.5 and using the ppolicy overlay. I have also compiled the smbk5 module to update the samba attr when the user password is updated. My problem is to change the password and have the samba password update I have to use

Re: Copying trees from one consumer to another

2010-06-23 Thread Quanah Gibson-Mount
--On Wednesday, June 23, 2010 2:26 PM +1000 Nick Urbanik nick.urba...@optusnet.com.au wrote: There is no need to stop the first consumer when running slapcat. This puzzles me; with hundreds of updates happening per minute, some changes will be missed during the slapcat. Will syncrepl cope

Re: Overlays and OpenLDAP multi-threading model

2010-06-23 Thread Lucas Brasilino
Hi Now I understand a bit more of your question.  OpenLDAP does not work as I presume you imagined.  There is one thread that listens for requests.  As soon as a request is received, an operation structure is created, and queued for execution.  As soon as one thread is available from a thread

Re: PROBLEM: can't use SASL to authentication openldap client

2010-06-23 Thread Dieter Kluenter
LI Ji D ji.d...@alcatel-lucent.com writes: Hi, This is my comprehension: 1. The client is connecting to SLAPD requesting an SASL bind. 2. SLAPD uses the SASL subsystem (which checks the /usr/lib/sasl/slapd.conf file for settings) to tell the client how to authenticate. In this case,

Re: ldaprc with ldaps:// and ldap:// fallback

2010-06-23 Thread Dieter Kluenter
m...@netbsd.org (Emmanuel Dreyfus) writes: Hello I would like to setup a ldaprc so that an application uses: - a localhost-base slapd without authentification (just relying on filesystem permission on the slapd socket) - if it is not available, a remote slapd, authenticating using client

Re: smbk5pwd: ldappassword hangs

2010-06-23 Thread Quanah Gibson-Mount
--On Wednesday, June 23, 2010 3:39 PM +0200 Frank Van Damme frank.vanda...@gmail.com wrote: Op 16-06-10 21:40, Frank Van Damme schreef: I did so. I had some rough times trying to get through the compilation process (of version 2.4.21), because test 44 kept failing - then I disabled the

Re: openldap pwdReset

2010-06-23 Thread SATOH Fumiyasu
Hi, At Wed, 23 Jun 2010 08:39:03 -0500, Allgood, John wrote: I have a question for you all. I am using openldap 2.4.31 on Centos 5.5 and using the ppolicy overlay. I have also compiled the smbk5 module to update the samba attr when the user password is updated. My problem is to change the

data for search_base and bind_dn in postfix config.

2010-06-23 Thread sam
Hi, With Openldap 24, postfix 2.8, I want to add the following entries in mydestination.cf file into my openldap database, Content of file mydestination.cf: server_host = 127.0.0.1 server_port = 389 search_base =

Re: Textual LDIF backup strategies for busy LDAP clusters

2010-06-23 Thread Quanah Gibson-Mount
--On Thursday, June 24, 2010 12:19 PM +1000 Nick Urbanik nick.urba...@optusnet.com.au wrote: Dear Folks, our old backup system for our LDAP clusters using slurpd is as follows: Just use slapcat. auditlog is not appropriate. --Quanah -- Quanah Gibson-Mount Principal Software Engineer