Re: slapd.conf ldap.conf - Re: LDAP guide, manuals

2012-02-21 Thread stefano
thanks! i downloaded Mastering OpenLDAP. i will follow it hope to improve competence thanks

Re: delta-syncrepl and mirrormode problem (2.4.29)

2012-02-21 Thread frank . offermanns
Hello Quanah, I am double checking my configuration right now. I notice you've configured via slapd.conf, but set up your replication as if you were replicating cn=config, which doesn't really make much sense. I have no syncrepl - directives in my config-database configured:

Re: Controlling access based on group membership

2012-02-21 Thread Buchan Milne
On Monday, 20 February 2012 23:57:17 Nick Milas wrote: On 20/2/2012 11:14 μμ, Dieter Klünter wrote: The AdminGuide (and slapd.,access(5) clearly say [dnattr=attrname] that is, attribute name is commonName or telephoneNumber, but not an attribute value like AdminGroups. Thanks Dieter,

Re: DEL don't get synced

2012-02-21 Thread Buchan Milne
On Tuesday, 21 February 2012 11:25:22 Marc Patermann wrote: Howard, Howard Chu schrieb (31.01.2012 14:22 Uhr): Marc Patermann wrote: Howard Chu schrieb (31.01.2012 12:08 Uhr): Marc Patermann wrote: under some circumstances DEL don't get replicated to the consumers (SyncRepl). I think

Re: DEL don't get synced

2012-02-21 Thread Marc Patermann
Buchan, Buchan Milne schrieb (21.02.2012 11:38 Uhr): As far as I have read in changelogs and ITS, anything from OPENLDAP_REL_ENG_2_4 (including 2.4.29) before: commit 10c81e2a46c9b603ba1dfcf53422573d5068ba04 Author: Howard Chu h...@openldap.org Date: Sun Feb 12 21:07:25 2012 -0800

Re: DEL don't get synced

2012-02-21 Thread Buchan Milne
On Tuesday, 21 February 2012 12:41:40 Marc Patermann wrote: Buchan, Buchan Milne schrieb (21.02.2012 11:38 Uhr): As far as I have read in changelogs and ITS, anything from OPENLDAP_REL_ENG_2_4 (including 2.4.29) before: commit 10c81e2a46c9b603ba1dfcf53422573d5068ba04 Author: Howard

Re: Controlling access based on group membership

2012-02-21 Thread Nick Milas
On 21/2/2012 12:28 μμ, Buchan Milne wrote: If you were to bind as the 'group' cn=someAdmins,ou=Groups,dc=example,dc=com, this would work. But, not if you bind as a 'member' of this group (which I believe is what you want). Buchan, Dieter, thank you for your feedback. Yes, I would like to be

Re: LDAP guide, manuals

2012-02-21 Thread Liam Gretton
On 20/02/2012 11:52, Emmanuel Lécharny wrote: Mastering OpenLDAP. Really good. Agreed. It's a little out of date though, a revised edition that covers more recent features would be useful. -- Liam Grettonliam.gret...@le.ac.uk HPC Architect

Re: DEL don't get synced

2012-02-21 Thread Marc Patermann
Buchan, Buchan Milne schrieb (21.02.2012 12:48 Uhr): On Tuesday, 21 February 2012 12:41:40 Marc Patermann wrote: Buchan Milne schrieb (21.02.2012 11:38 Uhr): As far as I have read in changelogs and ITS, anything from OPENLDAP_REL_ENG_2_4 (including 2.4.29) before: commit

Re: adding new databases and olc*dbconfig must attributes

2012-02-21 Thread Howard Chu
ben thielsen wrote: i was experimenting a bit with adding new databases to the config, and found that if the olcsuffix attribute was not provided, it would fail: providing an olcSuffix attribute in the ldif allowed the new database to be added without error: this behavior wasn't really all