Unable to login on client nodes.

2011-11-28 Thread Jayavant Patil
Hi, I am using openLDAP-2.4.19-4 on fedora 12 machine. I have done all server and client configurations. The directory containing user information is getting available on client nodes(checked by $getent passwd) but I am unable to do $ssh user-name@client-node-name it shows

Re: Syncrepl error causes consumers to freeze

2011-11-28 Thread Nick Milas
Hello, Since I had no feedback on this problem, should I guess that the issue has been tackled in latest version? Would it be related to ITS 6892 (http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6892)? I would like to know if I should upgrade consumers to 2.4.27/28 with a high

Re: Syncrepl error causes consumers to freeze

2011-11-28 Thread Quanah Gibson-Mount
--On Monday, November 28, 2011 11:07 AM +0200 Nick Milas n...@eurobjects.com wrote: Hello, Since I had no feedback on this problem, should I guess that the issue has been tackled in latest version? Would it be related to ITS 6892

Re: Syncrepl error causes consumers to freeze

2011-11-28 Thread Nick Milas
On 28/11/2011 11:37 πμ, Quanah Gibson-Mount wrote: You've provided zero information on why they are freezing (i.e., a backtrace with debugging symbols enabled on the servers where slapd has frozen). Thanks Quanah, Unfortunately, such error has not ever appeared until now, so I doubt I'll

Re: Unable to login on client nodes.

2011-11-28 Thread Raffael Sahli
Hi but $cat /etc/shadow doesn't show any password information for user ldap_6. So, how do I know that userPassword attribute information is getting propagated to client nodes? /etc/shadow is only for local user accounts. su ldap_6 works? Pam LDAP libraries installed and configured?

Re: Security between server and client nodes.

2011-11-28 Thread Raffael Sahli
Hi I think you mean SSL connection or the STARTTLS Layer...? Please read the manual http://www.openldap.org/doc/admin24/tls.html And tree security: On my server, a client user can only see his own object: Maybe create a rule like this: access to filter=(objectClass=simpleSecurityObject)

Re: Unable to login on client nodes.

2011-11-28 Thread Raffael Sahli
On 11/28/2011 11:38 AM, Jayavant Patil wrote: On Mon, Nov 28, 2011 at 3:43 PM, Raffael Sahli pub...@raffaelsahli.com mailto:pub...@raffaelsahli.com wrote: Hi but $cat /etc/shadow doesn't show any password information for user ldap_6. So, how do I know that userPassword

Re: Syncrepl error causes consumers to freeze

2011-11-28 Thread Marc Patermann
Nick, Nick Milas schrieb (28.11.2011 11:04 Uhr): On 28/11/2011 11:37 πμ, Quanah Gibson-Mount wrote: Can I somehow run a (consumer) server in syncrepl debugging mode, in order to capture *in adequate detail* problems that MIGHT arise, despite a possible high debug logging volume (which would

Changing schema OID values in cn=config

2011-11-28 Thread Nick Milas
Hello, In my config there is: DN: cn={5}postfix,cn=schema,cn=config objectClass: olcSchemaConfig cn: {5}postfix olcAttributeTypes: {0}( 1.3.6.1.4.1.25260.1.000 NAME 'mailacceptinggeneralid' DESC 'Defines an address that we accept mail for' EQUALITY caseIgnoreMatch SUBSTR

Re: Changing schema OID values in cn=config

2011-11-28 Thread Quanah Gibson-Mount
--On Monday, November 28, 2011 7:09 PM +0200 Nick Milas n...@eurobjects.com wrote: When I try to change attribute OID value, for example: 1.3.6.1.4.1.25260.1.000 to 1.3.6.1.4.1.25260.1.0 (using a visual LDAP client) then the server hangs and will not restart. (I had to restore from backup and

Re: Changing schema OID values in cn=config

2011-11-28 Thread Nick Milas
On 28/11/2011 9:04 μμ, Quanah Gibson-Mount wrote: If you are using the latest OpenLDAP, I would suggest you get a backtrace of the hung process and file an ITS. I would note that changing an OID on an existing schema is a bit of an odd thing to do. I am using 2.4.26. I'll try to do a core

Re: Changing schema OID values in cn=config

2011-11-28 Thread Quanah Gibson-Mount
--On Monday, November 28, 2011 9:18 PM +0200 Nick Milas n...@eurobjects.com wrote: On 28/11/2011 9:04 μμ, Quanah Gibson-Mount wrote: If you are using the latest OpenLDAP, I would suggest you get a backtrace of the hung process and file an ITS. I would note that changing an OID on an existing

memberof overlay deployment

2011-11-28 Thread Asplund Marko
Hi, I'm planning on deploying the memberof overlay feature in our OpenLDAP v2.3 directory and I'd like to get some practical advice on this. So far, I've done some testing in my test environment. I've added an overlay directive in slapd.conf: overlay memberof and imported group info to

Re: memberof overlay deployment

2011-11-28 Thread Quanah Gibson-Mount
--On Monday, November 28, 2011 8:02 PM + Asplund Marko marko.aspl...@ixonos.com wrote: Hi, I'm planning on deploying the memberof overlay feature in our OpenLDAP v2.3 directory and I'd like to get some practical advice on this. So far, I've done some testing in my test environment. I've

Possible ACL Issue while try to read Root DSE

2011-11-28 Thread Axel Birndt
Hi @All, i'am new on this list and i have a question. While i'am using the tool web2ldap from Michael Stroeder and try to create a new entry with this tool. I'am using openldap with cn=config backend on ubuntu 10.04 Michael mentioned it could be a acl problem, because his tool couldn't

Re: Possible ACL Issue while try to read Root DSE

2011-11-28 Thread Axel Birndt
Am 28.11.2011 21:48, schrieb Quanah Gibson-Mount: --On Monday, November 28, 2011 9:34 PM +0100 Axel Birndt towerl...@gmx.de wrote: But if i use ldapsearch with the following command i got nothing: ldapsearch -b -s base 'objectclass=*' ldap_sasl_interactive_bind_s: No such object (32)

Re: Syncrepl error causes consumers to freeze

2011-11-28 Thread Howard Chu
Nick Milas wrote: On 28/11/2011 11:37 πμ, Quanah Gibson-Mount wrote: You've provided zero information on why they are freezing (i.e., a backtrace with debugging symbols enabled on the servers where slapd has frozen). Thanks Quanah, Unfortunately, such error has not ever appeared until now,

Re: Possible ACL Issue while try to read Root DSE

2011-11-28 Thread Quanah Gibson-Mount
--On Monday, November 28, 2011 10:07 PM +0100 Axel Birndt towerl...@gmx.de wrote: Am 28.11.2011 21:48, schrieb Quanah Gibson-Mount: --On Monday, November 28, 2011 9:34 PM +0100 Axel Birndt towerl...@gmx.de wrote: But if i use ldapsearch with the following command i got nothing:

Re: Changing schema OID values in cn=config

2011-11-28 Thread Nick Milas
On 28/11/2011 9:24 μμ, Quanah Gibson-Mount wrote: 2.4.26 is probably fine. You shouldn't need to take a core dump, just a full backtrace of the hung process. I.e., gdb /path/to/slapd pid OK, I hope I've done it right (I'm inexperienced with gdb). Please check whether sufficient

Re: Changing schema OID values in cn=config

2011-11-28 Thread Quanah Gibson-Mount
--On Tuesday, November 29, 2011 12:33 AM +0200 Nick Milas n...@eurobjects.com wrote: Here is the gdb output. First is a backtrace before the error occurs: Just to note, a backtrace from before an error occurs is almost never useful. ;)

Re: Changing schema OID values in cn=config

2011-11-28 Thread Nick Milas
On 29/11/2011 12:33 πμ, Nick Milas wrote: Please check whether sufficient information has been logged, so I can file a meaningful ITS. Also, until a bug fix is made and a release which includes the fix is published, is there a way we can change the OID values? It would not be easy for me

Re: Changing schema OID values in cn=config

2011-11-28 Thread Quanah Gibson-Mount
--On Tuesday, November 29, 2011 12:48 AM +0200 Nick Milas n...@eurobjects.com wrote: On 29/11/2011 12:33 πμ, Nick Milas wrote: Please check whether sufficient information has been logged, so I can file a meaningful ITS. Also, until a bug fix is made and a release which includes the fix is

Re: Unable to login on client nodes.

2011-11-28 Thread Raffael Sahli
On 11/29/2011 07:00 AM, Jayavant Patil wrote: On Mon, Nov 28, 2011 at 4:49 PM, Raffael Sahli pub...@raffaelsahli.com mailto:pub...@raffaelsahli.com wrote: On 11/28/2011 11:38 AM, Jayavant Patil wrote: On Mon, Nov 28, 2011 at 3:43 PM, Raffael Sahli pub...@raffaelsahli.com