2.4.22 mirrormode syncrepl credential password encryption

2010-07-13 Thread Vernon Reilly
Hi, I have version 2.4.22 running with mirrormode enabled and it is working well. I have a question regarding the credentials field in the syncrepl part in slapd.conf. Must this be cleartext or can it be encrypted and what is considered good practise regarding which binddn to use. (e.g.

SHA2 in openldap 2.4.22

2010-07-13 Thread Vernon Reilly
Have anyone managed to compile SHA2 slapd-module in openldap version 2.4.22 I am getting all sorts of errors trying to compile it after modifying the Makefile as per the README file inside: contrib/slapd-modules/passwd/sha2/ I think this code was for version 2.3 and should not be packaged with

Re: Adding rfc schema clashes

2010-07-13 Thread Jonathan Clarke
On Tue, 13 Jul 2010 07:32:53 +, Stuart Cherrington stuart_cherring...@hotmail.co.uk wrote: Hi, Running OpenLDAP 2.4 on RHEL 5. In order for my SOlaris 10 clients to start using the OpenLDAP service I need the objectclass 'nisDomainObject' to be declared. I found this objecttype in the

Re: slapd goes down

2010-07-13 Thread Khalid Maslak
I use openldap2.4.x Openldap2 what? There is openldap 2.0.x, 2.1.x, 2.2.x, 2.3.x, and 2.4.x. Nothing here in your email gives any useful information that would allow us to provide you any type of help. --Quanah

RE: Adding rfc schema clashes

2010-07-13 Thread Stuart Cherrington
Hi, Think I fixed this one myself, I've replaced the nis.schema with rfc2307bis.schema as it contains everything and more that nis.schema does. Thanks, STuart. From: stuart_cherring...@hotmail.co.uk To: openldap-technical@openldap.org Subject: Adding rfc schema clashes Date: Tue, 13 Jul 2010

Re: bdb/hdb cachesize calculation

2010-07-13 Thread openldap-ml
On 07/12/2010 07:40 PM, Quanah Gibson-Mount wrote: --On Monday, July 12, 2010 5:01 PM +0200 openldap...@stresst.net wrote: Attached to this message you'll find a quick and dirty bash script that should determine the cachesize for an in-production bdb/hdb backend by taking dn2id and id2entry as

Re: bdb/hdb cachesize calculation

2010-07-13 Thread Jonathan Clarke
On Tue, 13 Jul 2010 11:19:06 +0200, openldap...@stresst.net wrote: On 07/12/2010 07:40 PM, Quanah Gibson-Mount wrote: --On Monday, July 12, 2010 5:01 PM +0200 openldap...@stresst.net wrote: Attached to this message you'll find a quick and dirty bash script that should determine the cachesize

DN failed to copy

2010-07-13 Thread Stuart Cherrington
Hi, Not sure if this is an issue with phpLDAPadmin 1.0.1 or Openldap2.4 (on rhel 5.3). I've created posixGroup's within my openLDAP and can see these within phpLDAPadmin, I was trying to copy the objects within my 'dc' prior to some invasive work, but I cannot copy the posixGroups. I have

ldap falls without logs

2010-07-13 Thread Márcio Luciano Donada
Hi list, I'm using debian lenny,[1], with openldap 2.4.11 and in many cases simply to LDAP, while not log information. My slapd.conf is: # Global Directives: # Features to permit allow bind_v2 # Schema and objectClass definitions include /etc/ldap/schema/core.schema include

need an overlay for rewriting attribute values

2010-07-13 Thread Thomas Wunder
Hi, I need some kind of overlay which allows me to rewrite attribute values. I.e. if there's an object cn=a,ou=src,dc=my,dc=com which has attributes like memberUid=uid=usrA,ou=rest,ou=of,dc=the,dc=dn and memberUid=uid=usrB,ou=rest,ou=of,dc=the,dc=dn I want that overlay to

Re: Adding rfc schema clashes

2010-07-13 Thread Buchan Milne
On Tuesday, 13 July 2010 09:53:39 Stuart Cherrington wrote: Hi, Think I fixed this one myself, I've replaced the nis.schema with rfc2307bis.schema as it contains everything and more that nis.schema does. But, not the same ... and you should check that all your clients support rfc2307bis

Re: Recommended way to modify cn=schema entries?

2010-07-13 Thread Ralf Haferkamp
Am Montag 12 Juli 2010, 18:00:29 schrieb Quanah Gibson-Mount: --On Monday, July 12, 2010 11:43 PM +1200 Ian Collins i...@ianshome.com wrote: On 07/ 6/10 02:12 PM, Ian Collins wrote: I would like to re-order two schema entries to resolve a dependency issue (our local schema, included

Re: 2.4.22 mirrormode syncrepl credential password encryption

2010-07-13 Thread Quanah Gibson-Mount
--On Tuesday, July 13, 2010 6:18 AM +0200 Vernon Reilly vernon...@hotmail.com wrote: Hi, I have version 2.4.22 running with mirrormode enabled and it is working well. I have a question regarding the credentials field in the syncrepl part in slapd.conf. Must this be cleartext I suggest you

Re: need an overlay for rewriting attribute values

2010-07-13 Thread Howard Chu
Thomas Wunder wrote: Hi, I need some kind of overlay which allows me to rewrite attribute values. I.e. if there's an object cn=a,ou=src,dc=my,dc=com which has attributes like memberUid=uid=usrA,ou=rest,ou=of,dc=the,dc=dn and memberUid=uid=usrB,ou=rest,ou=of,dc=the,dc=dn I want

Re: SHA2 in openldap 2.4.22

2010-07-13 Thread Quanah Gibson-Mount
--On Tuesday, July 13, 2010 6:37 AM +0200 Vernon Reilly vernon...@hotmail.com wrote: Have anyone managed to compile SHA2 slapd-module in openldap version 2.4.22 I am getting all sorts of errors trying to compile it after modifying the Makefile as per the README file inside:

Re: slapd goes down

2010-07-13 Thread Khalid Maslak
I use 2.4.22 I use openldap2.4.x 2.4.WHAT. 2.4.7? 2.4.12? 2.4.23? etc. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc Zimbra :: the leader in open source messaging and collaboration

Re: slapd goes down

2010-07-13 Thread Quanah Gibson-Mount
--On Tuesday, July 13, 2010 10:50 PM +0300 Khalid Maslak mas...@ihlas.net.tr wrote: I use 2.4.22 Ok. So what exactly do you mean by slapd goes down. The process goes away? The process is present, but not answering queries? etc. If the process goes away, make sure you have core files

Re: slapd goes down

2010-07-13 Thread Quanah Gibson-Mount
--On Tuesday, July 13, 2010 11:23 PM +0300 Khalid Maslak mas...@ihlas.net.tr wrote: the process goes away unexpectly. its service gets down. How can I enable core files? I enabled debug openldap and I have a debug log during the error. Thanks Well, debug logs probably won't help if it is

Max length of the attribute in UID attribute

2010-07-13 Thread Bryan Boone
Hi everyone. How or where do I find out the max string length that I can have in the UID attribute in the inetorgperson objectclass. I assume that the length is set by the limitations of the DB, but I cannot seem to find that information anywhere. Or is the length defined in RFC 2798

Re: slapd goes down

2010-07-13 Thread Priyesh Potdar
One more thing you can do is to start the slapd in debug mode and check for the errors which are coming. This is not such good idea for starting the ldap in production but is definitely useful for resolving the issues. To start in the debug mode with full information. Locate the slapd and start