RE: sssvlv

2011-07-01 Thread Chris Card
When using the sssvlv overlay how does the client tell the server that the sort request can be thrown away, so that sort requests don't hang around until sssvlv-max or sssvlv-maxpercon are exceeded? There is no official mechanism for this. This is a flaw in the Sorting/VLV

Re: sssvlv

2011-07-01 Thread Sébastien Bahloul
Hi, As co-contributor of the latest piece of code about SSS/VLV, I will try and give some explanations : VLV does not give a clean way to destroy the server side sorted entries list. The SSS/VLV overlay implementation is using a limit in order to manage memory limits : a connection will be

Re: cn=config completely replacing slapd.conf

2011-07-01 Thread Michael Ströder
Howard Chu wrote: As of several months ago, only back-sql and back-meta remain incompatible. All of the overlays have already been converted. How about overlays under contrib/? Ciao, Michael.

Re: simple binds

2011-07-01 Thread Friedrich Locke
Quanah, thank you for your support and patience too; now i got it working as i wished. If you come to brasil, let me know and i'll pay you some beers. Fried. On Thu, Jun 30, 2011 at 7:38 PM, Quanah Gibson-Mount qua...@zimbra.com wrote: --On Thursday, June 30, 2011 7:22 PM -0300 Friedrich Locke

how to configure use of tls w/ rwm-rewritemap

2011-07-01 Thread Ron Peterson
Hi, I have a rewrite map configured like: databaseldap suffix ou=myou uri ldap://my.backend/; tls start tls_cacertdir=/my/ca/cert/dir rwm-rewriteMap ldap uid2adminDN ldap://my.backend/ou=yada,dc=yada?dn?sub; binddn=uid=someone,...

Re: how to configure use of tls w/ rwm-rewritemap

2011-07-01 Thread Ron Peterson
Should have mentioned the version: 2.4.23 -Ron- 2011-07-01_09:42:56-0400 Ron Peterson rpete...@mtholyoke.edu: Hi, I have a rewrite map configured like: databaseldap suffix ou=myou uri ldap://my.backend/; tls start

Re: how to configure use of tls w/ rwm-rewritemap

2011-07-01 Thread Ron Peterson
Using an ldaps://... URI works, so I'll just do that I guess. If there's a starttls way of doing this, that would be nice to know about, but at least I can create a secure connection. -Ron- 2011-07-01_09:42:56-0400 Ron Peterson rpete...@mtholyoke.edu: Hi, I have a rewrite map configured

schema

2011-07-01 Thread Friedrich Locke
Hi! Does anybody know where i could download the schema for simpleSecurityObject class ? Thanks in advance.

Re: schema

2011-07-01 Thread Michael Ströder
Friedrich Locke wrote: Does anybody know where i could download the schema for simpleSecurityObject class ? It's shipped with OpenLDAP source distribution: $ grep -ir simpleSecurityObject openldap-2.4.26/servers/slapd/schema/* openldap-2.4.26/servers/slapd/schema/core.ldif:olcObjectClasses: (

stange log

2011-07-01 Thread Friedrich Locke
I am seeing the log messages below on my openldap installation: @(#) $OpenLDAP: slapd 2.4.23 (Jun 28 2011 17:55:44) $ @gustav.cpd.ufv.br:/usr/ports/pobj/openldap-2.4.23/build-amd64/servers/slapd Backend ACL: access to dn.subtree=cn=monitor by dn.base=cn=oldap,dc=ufv,dc=br read

Re: stange log

2011-07-01 Thread Dieter Kluenter
Am Fri, 1 Jul 2011 15:15:05 -0300 schrieb Friedrich Locke friedrich.lo...@gmail.com: I am seeing the log messages below on my openldap installation: @(#) $OpenLDAP: slapd 2.4.23 (Jun 28 2011 17:55:44) $ @gustav.cpd.ufv.br:/usr/ports/pobj/openldap-2.4.23/build-amd64/servers/slapd

Re: how to configure use of tls w/ rwm-rewritemap

2011-07-01 Thread masarati
No matter what version, it's not possible (as far as I remember). This feature really needs to be rewritten to directly (and only) access in-directory data. p. Should have mentioned the version: 2.4.23 -Ron- 2011-07-01_09:42:56-0400 Ron Peterson rpete...@mtholyoke.edu: Hi, I have a

Re: Loading LDAP schema files into cn=config

2011-07-01 Thread Gavin Henry
zeno:/tmp# ldapadd -D 'cn=admin,dc=siriusit,dc=co,dc=uk' -f sirius-custom.ldif -xW Enter LDAP Password: adding new entry cn=schema,cn=config ldap_add: Constraint violation (19) additional info: structuralObjectClass: no user modification allowed Hi Mark, How did you generate your

Re: Loading LDAP schema files into cn=config

2011-07-01 Thread Chan Wilson
On Wed, Jun 29, 2011 at 5:26 AM, Mark Cave-Ayland mark.cave-ayl...@siriusit.co.uk wrote: Hi all, Having started to look at the changes required to migrate from a slapd.conf setup to a cn=config setup, one of things I'm struggling with is how to load new LDAP schemas into cn=config.