Re: Bind with alternative DN pattern

On Friday, 13 January 2012 01:30:59 Mathias wrote: Hi, I have trouble understanding a rather simple LDAP config issue that I'm sure someone on this list can easily help with: How do I add a (or change the) pattern of the bind DN that slapd lets me authenticate with? I have a working

Copy ldap to another with different schema

Hi, I have two ldap, one full of users, with gosa open source project specific schema (https://oss.gonicus.de/labs/gosa), and one which is empty, without this schema. I want to make a clean copy of my users into the first ldap to the second ldap, because my version of gosa installed is not

RE: OpenLDAP replciation issue with MirrorMode

--On Thursday, January 12, 2012 9:14 AM -0500 Aaron Richton rich...@nbcs.rutgers.edu wrote: Actually, I'm starting to wonder if this should be an option you can pass as a syncrepl (really libldap) configuration directive. There's something to be said for having aggressive-ish keepalives on

Re: OpenLDAP replciation issue with MirrorMode

Aaron Richton wrote: On Mon, 9 Jan 2012, ZHOU Eric JP wrote: This issue only happens when power-off/power cut-off one of the mirror servers, and could be probably prevented by ?sending heart beat? to verify the established connections. [cutting out openldap-devel; this is usage] Sure; see

Re: OpenLDAP 2.4.28 causing Apache 2.2 to hang

On 01/12/2012 03:55 PM, Kyle Smith wrote: I recently upgraded OpenLDAP 2.4.26 to 2.4.28. When I did that, a separate server running apache 2.2 and php 5 started to hang every 10-15 minutes. It freezes to the point that it no longer accepts requests. This apache server is using a wildcard cert

Re: Modify or add information after conversion of slapd.conf to cn=config with fresh install of OpenLdap

mån 2012-01-09 klockan 12:29 +0100 skrev rey sebastien: Hi! I start with a fresh installation of openldap 2.4.28 on debian. They are some problem with the debian package, and with gnuTLS, so i compile a version with opennSSL library. It's hard to understand with the official

openldap admin guide and 'slapd from scratch'

Howdy. I wonder if the ldif sample example the end of chapter 5 is correct ? See below: 1.# example config file - global configuration entry 2.dn: cn=config 3.objectClass: olcGlobal 4.cn: config 5.olcReferral: ldap://root.openldap.org 6. Line 1 is a comment.

Re: Bind with alternative DN pattern

On 01/13/12 00:30 +0100, Mathias wrote: Hi, I have trouble understanding a rather simple LDAP config issue that I'm sure someone on this list can easily help with: How do I add a (or change the) pattern of the bind DN that slapd lets me authenticate with? I have a working slapd setup that I

what is the pretty function and the validate function in OpenLDAP?

Hi, all, I'm trying to understand the internal workflow of the attribute type checking and syntax validation in OpenLDAP. For example, if I use an attribute whose syntax is not implemented like presentationAddress, the log message no validator for syntax will occur. I trace this message in the

Re: How to enable monitoring in OpenLdap with cn=config Backend

Hi and good evening, Am 09.01.2012 14:42, schrieb Buchan Milne: I need the documentation for the cn=config backend. I don't have an slapd.conf! add something like dn: olcdatabase=monitor,cn=config objectclass: olcDatabaseConfig olcDatabase: monitor

Re: Heavy load problems

--On Friday, January 13, 2012 10:55 AM +0100 Angel L. Mateo ama...@um.es wrote: Now we have migrated to two openldap (2.4.21, ubuntu lucid 64btis) farms. One with 4 nodes (xen vm with two cpu cores, Xeon E5450 3GHz, 2 GB of RAM) for the authentication database, and other with 2 nodes

Changing ACLs in dynamic configuration off-line

When we want to do some non-trivial re-engineering in ACLs, on-line configuration using ldapmodify might be cumbersome. So I think we could slapcat the config database, change ACLs in the output, and slapadd it while the server is offline. So, if we have a set of 100 ACL rules and we want to

Re: Changing ACLs in dynamic configuration off-line

--On Friday, January 13, 2012 11:11 PM +0200 Nick Milas n...@eurobjects.com wrote: When we want to do some non-trivial re-engineering in ACLs, on-line configuration using ldapmodify might be cumbersome. So I think we could slapcat the config database, change ACLs in the output, and slapadd it

Re: Heavy load problems

On Fri, 13 Jan 2012, Angel L. Mateo wrote: ... The only difference between the old and the new farm is that the old farm was replicating information with slurpd. The new one is a multimaster configuration. The configuration of the replica is: ... This configuration is in the 4 farm

Re: what is the pretty function and the validate function in OpenLDAP?

Hi, all, I'm trying to understand the internal workflow of the attribute type checking and syntax validation in OpenLDAP. For example, if I use an attribute whose syntax is not implemented like presentationAddress, the log message no validator for syntax will occur. I trace this message in

View or filter based on ldaps://FQDN

Hello, I need to be able to restrict ldap ou's access based on the ldaps://FQDN used to query the ldap server. Let say I have the following in my ldap server: ou=domain ou=raincoatcompany.com ou=umbrellacompany.com Considering that both ldap.raincoatcompany.com and

Password Policy pwdFailureTime count limits?

Hello Everyone, I'm having trouble enforcing our password policy for login attempts within a particular time frame. After looking into the issue a little further it seems to stem from the fact that the operational attribute pwdFailureTime can only resolve time down to the second. so if there are