Re: Got error while enabling SASL

2012-02-02 Thread Gaurav Gugnani
Hello All, After some more research into it and reading some more links: http://www.linuxtopia.org/online_books/network_administration_guides/ldap_administration/sasl_SASL_Authentication.html http://tldp.org/HOWTO/LDAP-HOWTO/sasl.html I did some more steps like- *Step-1:* In the file slapd.conf

Re: DEL don't get synced

2012-02-02 Thread Emmanuel Lecharny
On 2/1/12 7:16 PM, Quanah Gibson-Mount wrote: --On Wednesday, February 01, 2012 1:40 PM +0100 Michael Ströder mich...@stroeder.com wrote: Nick Milas wrote: On 1/2/2012 12:19 μμ, Emmanuel Lecharny wrote: Any direction on how to test the build and to check out the branch in order to run the

Re: Got error while enabling SASL

2012-02-02 Thread Raffael Sahli
On 02/02/2012 10:40 AM, Gaurav Gugnani wrote: Hello All, After some more research into it and reading some more links: http://www.linuxtopia.org/online_books/network_administration_guides/ldap_administration/sasl_SASL_Authentication.html http://tldp.org/HOWTO/LDAP-HOWTO/sasl.html I did some

Re: Got error while enabling SASL

2012-02-02 Thread Gaurav Gugnani
Hello, I too suppose that my package is missing for cyrus-sasl DIGEST MD5. I'm working on linux 86_64 machine and want to implement DIGEST MD5 mechanism. Following packages are installed: /u01/app/openldap/product/2.4.26/etc/openldaprpm -qa | grep cyrus-sasl cyrus-sasl-devel-2.1.22-5.el5_4.3

Re: openldap 2.4.28 and allow bind_v2

2012-02-02 Thread Francis Swasey
On 2/1/12 12:56 PM, Francis Swasey wrote: On 2/1/12 11:49 AM, Hallvard B Furuseth wrote: On Wed, 01 Feb 2012 10:36:36 -0500, Francis Swasey frank.swa...@uvm.edu wrote: slapd[4434]: conn=115331 op=0 do_extended: protocol version (2) too low (...) Where should I start looking? At ITS#7107,

Re: Got error while enabling SASL

2012-02-02 Thread Dan White
On 02/02/12 16:24 +0530, Gaurav Gugnani wrote: Hello, I too suppose that my package is missing for cyrus-sasl DIGEST MD5. I'm working on linux 86_64 machine and want to implement DIGEST MD5 mechanism. Following packages are installed: /u01/app/openldap/product/2.4.26/etc/openldaprpm -qa |

Re: Directory Manager (cn=config) ACLs

2012-02-02 Thread Buchan Milne
On Wednesday, 1 February 2012 21:52:56 Andy Carlson wrote: Are there any ACLs that control what cn=directory manager,cn=config can modify or is it a LDAP superuser sort-of account? I only ask because I want to blow away my ACLs (olcAccess attributes in olcDatabase={2}bdb) and re-add updated

Re: Got error while enabling SASL

2012-02-02 Thread Gaurav Gugnani
Hello, Thks for helping me out. Yes, the package is missing. The O/P of plugin viewer: /u01/app/openldap/product/2.4.26/etc/openldappluginviewer Installed SASL (server side) mechanisms are: ANONYMOUS PLAIN LOGIN EXTERNAL And clearly it is not displaying any MD5 SASL mechanism. Now, i'll try to

BayLISA OpenLDAP talk

2012-02-02 Thread Howard Chu
For any folks in the San Francisco area who haven't already heard, I'll be giving a talk on OpenLDAP's new memory-mapped database and backend (back-mdb) there on February 16. http://www.baylisa.org/ -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun

Re: DEL don't get synced

2012-02-02 Thread Quanah Gibson-Mount
--On Thursday, February 02, 2012 10:46 AM +0100 Emmanuel Lecharny elecha...@gmail.com wrote: emmanuel-lecharnys-MacBook-Pro:openldap-git elecharny$ git archive --format=tar --remote=git-master.openldap.org:~git/git/openldap.git OPENLDAP_REL_ENG_2_4 openldap-2.4.26.tar Permission denied

2.4.28 cn=config replication trouble

2012-02-02 Thread Aaron Bennett
Hello, I've got two 2.4.28 boxes and I'm trying to get two-way multimaster replication set up - first for cn=config, and then for the entire tree. I can attach more of config.ldif if needed, but here are what I think are the relevant snippets: First thing that leaps out is, of course, the

Re: 2.4.28 cn=config replication trouble

2012-02-02 Thread Howard Chu
Aaron Bennett wrote: Hello, I’ve got two 2.4.28 boxes and I’m trying to get two-way multimaster replication set up – first for cn=config, and then for the entire tree. I can attach more of config.ldif if needed, but here are what I think are the relevant snippets: First thing that leaps out

RE: 2.4.28 cn=config replication trouble

2012-02-02 Thread Aaron Bennett
I'm sorry for wasting your time - this is working after all. From: openldap-technical-boun...@openldap.org [mailto:openldap-technical-boun...@openldap.org] On Behalf Of Aaron Bennett Sent: Thursday, February 02, 2012 2:20 PM To: openldap-technical@openldap.org Subject: 2.4.28 cn=config

RE: 2.4.28 cn=config replication trouble

2012-02-02 Thread Aaron Bennett
Ok... so I thought I was losing my mind. I had seen it fail before, and then shortly after posting this message, found it was working. However, running with olcLogLevel = sync, I see this in the ldap log: Feb 2 15:32:55 zoot slapd[10509]: slapd starting Feb 2 15:32:55 zoot slapd[10509]:

Re: DEL don't get synced

2012-02-02 Thread Hallvard B Furuseth
On Thu, 02 Feb 2012 11:19:30 -0800, Quanah Gibson-Mount qua...@zimbra.com wrote: --On Thursday, February 02, 2012 10:46 AM +0100 Emmanuel Lecharny elecha...@gmail.com wrote: emmanuel-lecharnys-MacBook-Pro:openldap-git elecharny$ git archive --format=tar

Re: DEL don't get synced

2012-02-02 Thread Quanah Gibson-Mount
--On Thursday, February 02, 2012 9:41 PM +0100 Hallvard B Furuseth h.b.furus...@usit.uio.no wrote: On Thu, 02 Feb 2012 11:19:30 -0800, Quanah Gibson-Mount qua...@zimbra.com wrote: --On Thursday, February 02, 2012 10:46 AM +0100 Emmanuel Lecharny elecha...@gmail.com wrote:

Re: DEL don't get synced

2012-02-02 Thread Hallvard B Furuseth
I wrote: As for git archive --remote=git://git.openldap.org/openldap.git, man git-daemon says this requires 'git config daemon.uploadarch true'. Requires it on the daemon side, that is. -- Hallvard

RE: 2.4.28 cn=config replication trouble

2012-02-02 Thread Quanah Gibson-Mount
--On Thursday, February 02, 2012 3:37 PM -0500 Aaron Bennett abenn...@clarku.edu wrote: But I can make changes to one machine and see them go to the other, and the syncrepl lines are clearly not asking for sasl. All binds are SASL binds. You're probably using SASL SIMPLE, which most people

RE: 2.4.28 cn=config replication trouble

2012-02-02 Thread Aaron Bennett
-Original Message- From: Quanah Gibson-Mount [mailto:qua...@zimbra.com] Sent: Thursday, February 02, 2012 4:02 PM To: Aaron Bennett; openldap-technical@openldap.org Subject: RE: 2.4.28 cn=config replication trouble All binds are SASL binds. You're probably using SASL SIMPLE, which most

RE: 2.4.28 cn=config replication trouble

2012-02-02 Thread Quanah Gibson-Mount
--On Thursday, February 02, 2012 1:02 PM -0800 Quanah Gibson-Mount qua...@zimbra.com wrote: --On Thursday, February 02, 2012 3:37 PM -0500 Aaron Bennett abenn...@clarku.edu wrote: But I can make changes to one machine and see them go to the other, and the syncrepl lines are clearly not