Re: System user login fails if ldap goes down.

2011-02-04 Thread Meghanand Acharekar
Thanks for the information. But is not working for me. account required pam_unix.so broken_shadow account sufficientpam_localuser.so account sufficientpam_succeed_if.so uid 500 quiet account [default=bad success=ok user_unknown=ignore] pam_ldap.so account

Re: System user login fails if ldap goes down.

2011-02-04 Thread Buchan Milne
On Friday, 4 February 2011 09:57:36 Meghanand Acharekar wrote: Thanks for the information. But is not working for me. account required pam_unix.so broken_shadow account sufficientpam_localuser.so account sufficientpam_succeed_if.so uid 500 quiet account

Re: Which backend should I use?

2011-02-04 Thread Clément OUDOT
2011/2/4 Quanah Gibson-Mount qua...@zimbra.com: On Feb 3, 2011, at 9:16 AM, Emmanuel Lecharny elecha...@gmail.com wrote: On 2/3/11 5:45 PM, Quanah Gibson-Mount wrote: On Feb 3, 2011, at 1:11 AM, Clément OUDOTclem.ou...@gmail.com  wrote: Le 3 février 2011 09:39, Olivier PAVILLA

[Solved] Re: System user login fails if ldap goes down.

2011-02-04 Thread Meghanand Acharekar
Great !!!, Thats what I was looking for. Thanks. Regards, Meghanand N. Acharekar On Fri, Feb 4, 2011 at 1:58 PM, Buchan Milne bgmi...@staff.telkomsa.netwrote: On Friday, 4 February 2011 09:57:36 Meghanand Acharekar wrote: Thanks for the information. But is not working for me.

'Inheriting' an attribute from a group.

2011-02-04 Thread ian+openldap
Is there a recommended, 'production' way to inherit certain attributes from a group? Perhaps some kind of overlay? For example, if a user is in the 'users' group and the users group has the attribute userQuota=100 then the user will appear to have userQuota=100. If, on the other hand,

Re: 'Inheriting' an attribute from a group.

2011-02-04 Thread Christian Manal
Am 03.02.2011 21:46, schrieb ian+openl...@comtek.co.uk: Is there a recommended, 'production' way to inherit certain attributes from a group? Perhaps some kind of overlay? For example, if a user is in the 'users' group and the users group has the attribute userQuota=100 then the user will

Re: 'Inheriting' an attribute from a group.

2011-02-04 Thread Howard Chu
ian+openl...@comtek.co.uk wrote: Is there a recommended, 'production' way to inherit certain attributes from a group? Perhaps some kind of overlay? For example, if a user is in the 'users' group and the users group has the attribute userQuota=100 then the user will appear to have userQuota=100.

LDAP writes/second limit?

2011-02-04 Thread Diego Lima
Hello all, I'm running some load tests on an LDAP server using JMeter and as part of the tests I'm running a continuous loop of users trying to change their passwords. The problem is, there is a point where OpenLDAP stops responding requests and is unable to complete its current operations. This

Re: LDAP writes/second limit?

2011-02-04 Thread Dieter Kluenter
Am Fri, 4 Feb 2011 13:54:20 -0200 schrieb Diego Lima li...@diegolima.org: Hello all, I'm running some load tests on an LDAP server using JMeter and as part of the tests I'm running a continuous loop of users trying to change their passwords. The problem is, there is a point where OpenLDAP

Search with filter doesn't return any results?

2011-02-04 Thread Markku Tavasti
Hi! I have strange problem: I have newly built ldap database. System is running on Centos 5.5 (same as RHEL 5) # slapd -V @(#) $OpenLDAP: slapd 2.3.43 (Nov 29 2010 03:44:41) $ mockbu...@builder10.centos.org:/builddir/build/BUILD/openldap-2.3.43/openldap-2.3.43/build-servers/servers/slapd I

Re: Search with filter doesn't return any results?

2011-02-04 Thread Quanah Gibson-Mount
--On Friday, February 04, 2011 6:45 PM +0200 Markku Tavasti tava...@tavasti.fi wrote: On config I have 'loglevel filter config stats' Any ideas what on earth is going on? Did you add an index for the uid attribute in slapd.conf, and then fail to run slapindex to rebuild the indices? That

How to I verify SSL is working correctly

2011-02-04 Thread Rob Tanner
Hi, I’m adding SSL to an existing openLDAP server. My certificate is a 2048 bit from Comodo and I need to install both the certificate and and the intermediate chain, 5 certificates altogether. I bundled the chain into a single file in the order Comodo lists and in slapd.conf I added:

slapd.d syntax help for ldap proxy server

2011-02-04 Thread Anton Chu
I'm trying to setup a ldap proxy server for push based replication. I'm in need of help with providing the correct syntax on installing a ldap proxy using slapd.d instead of slapd.conf.The items in bold are the questionable syntax that can crossover to slapd.d. Here's my slapd.d

Re: slapd.d syntax help for ldap proxy server

2011-02-04 Thread Dieter Kluenter
Am Fri, 4 Feb 2011 11:45:36 -0800 schrieb Anton Chu anton@telecommand.com: I'm trying to setup a ldap proxy server for push based replication. I'm in need of help with providing the correct syntax on installing a ldap proxy using slapd.d instead of slapd.conf.The items in bold are the

RE: How to use LDAP_OPT_CONNECT_ASYNC?

2011-02-04 Thread Ian Puleston
-Original Message- From: masar...@aero.polimi.it [mailto:masar...@aero.polimi.it] Sent: Thursday, February 03, 2011 9:35 PM But ldap_send_initial_request() then gets a good return code from ldap_open_defconn(), and so it goes on to call ldap_send_server_request() to send the bind,