Re: Scaling LDAP

2012-03-20 Thread Hallvard B Furuseth
Gaurav Gugnani wrote: Actually, i want to know - how to scale out once you reach the limits to run openLdap in one single box? You said some million of records. That's nowhere near OpenLDAP's limits, nor near the multi-terabyte databases you mention, unless your LDAP entries are quite large -

error entry store failed

2012-03-20 Thread Wen, Nancy
Hi folks, Can anyone help me on this problem? Note we were trying to know what happen on a previous error - Sizelimit exceeded. However, after we turned the log level up, and we saw this: = id2entry_add( 322, uid=jason,ou=people,ou=0019,l=taiwan,dc=039,dc=com ) = ldbm_cache_open( id2entry.dbb,

Re: Concerns with OLC (cn=config) for editing schema, ACLs, and deleting entries

2012-03-20 Thread Nick Milas
On 20/3/2012 2:32 πμ, Chris Hiestand wrote: As far as the sysadmin is concerned, slapd.conf allowed multi-line strings for ACLs and schemas. This yielded great readability Although I also really totally respect project developers and appreciate every single effort for the fine OpenLDAP

Partial replication, remove branch

2012-03-20 Thread jehan procaccia
I would like to replicate only some OUs under the baseDN ; ou=people and ou=group,ou=system, but not the remaining of OUs below ou=system = ou=Hosts , ou=Networks, ou=Protocol. How can I remove those branches to replicate ? my actual syncrepl config that replicate all the subtree branches:

Re: Scaling LDAP

2012-03-20 Thread Howard Chu
Hallvard B Furuseth wrote: Gaurav Gugnani wrote: Actually, i want to know - how to scale out once you reach the limits to run openLdap in one single box? You said some million of records. That's nowhere near OpenLDAP's limits, nor near the multi-terabyte databases you mention, unless

Re: Concerns with OLC (cn=config) for editing schema, ACLs, and deleting entries

2012-03-20 Thread Howard Chu
Chris Hiestand wrote: Part 1: Readability I know you veterans are probably sick to death of us late-comers asking questions about cn=config. I understand but please hear me out because I feel I have done due diligence; but I still have some concerns with the transition. Workflow has been

Re: Partial replication, remove branch

2012-03-20 Thread anax
On 03/20/2012 10:54 AM, jehan procaccia wrote: I would like to replicate only some OUs under the baseDN ; ou=people and ou=group,ou=system, but not the remaining of OUs below ou=system = ou=Hosts , ou=Networks, ou=Protocol. How can I remove those branches to replicate ? my actual syncrepl

Re: Concerns with OLC (cn=config) for editing schema, ACLs, and deleting entries

2012-03-20 Thread btb
On 2012.03.19 14.39, Chris Hiestand wrote: Editing via an ldap client is easy if you're just editing an attribute here and there, but because of the interacting nature of ACLs and schema elements, poor readability (no newlines) makes editing via an ldap client more difficult (a gui with smart

Re: error entry store failed

2012-03-20 Thread Michael Ströder
Wen, Nancy wrote: Can anyone help me on this problem? Note we were trying to know what happen on a previous error - Sizelimit exceeded. However, after we turned the log level up, and we saw this: = id2entry_add( 322, uid=jason,ou=people,ou=0019,l=taiwan,dc=039,dc=com ) =

Re: Concerns with OLC (cn=config) for editing schema, ACLs, and deleting entries

2012-03-20 Thread Clément OUDOT
Le 20 mars 2012 09:32, Nick Milas n...@eurobjects.com a écrit : On 20/3/2012 2:32 πμ, Chris Hiestand wrote: As far as the sysadmin is concerned, slapd.conf allowed multi-line strings for ACLs and schemas. This yielded great readability Although I also really totally respect project

replication issues

2012-03-20 Thread Marvin Mundry
Hello everybody, i am experiencing 2 issues while using syncrepl. i am running slapd 2.4.20 shipping with SLES 11.2. 1. replication of an accesslog database. = the accesslog overlay does not assign an entryUUID to its logdb database. therefore replication of this

Re: replication issues

2012-03-20 Thread Michael Ströder
Marvin Mundry wrote: i am experiencing 2 issues while using syncrepl. i am running slapd 2.4.20 shipping with SLES 11.2. You should seriously consider updating. 2.4.20 was released almost 2,5 years ago and there have been many fixes to syncrepl since then. Ralf maintains a set of RPMs for

Re: mdb hmmm....

2012-03-20 Thread Quanah Gibson-Mount
--On Tuesday, March 20, 2012 2:44 PM -0400 Francis Swasey frank.swa...@uvm.edu wrote: I thought I'd give mdb a try to see if it will solve a performance problem I'm approaching with my current ldap servers. But, I have obviously missed some key step. I've read the slapd-mdb man page,

Re: Concerns with OLC (cn=config) for editing schema, ACLs, and deleting entries

2012-03-20 Thread Quanah Gibson-Mount
--On Tuesday, March 20, 2012 12:58 AM -0400 David N. Blank-Edelman d...@ccs.neu.edu wrote: To your original point: once those details are clear, I suspect it would be relatively straightforward to write a slapacl command/script that parsed the ACL .conf file format and then used Net::LDAP to

Re: Partial replication, remove branch

2012-03-20 Thread jehan procaccia
Le 20/03/2012 12:37, anax a écrit : On 03/20/2012 10:54 AM, jehan procaccia wrote: I would like to replicate only some OUs under the baseDN ; ou=people and ou=group,ou=system, but not the remaining of OUs below ou=system = ou=Hosts , ou=Networks, ou=Protocol. How can I remove those branches

OpenLDAP client and SSL handshaek

2012-03-20 Thread Jon Dufresne
Hi, I am using OpenLDAP as a client to connect to a 3rd party Oracle Internet Directory 10g. After recent updates, I have been unable to successfully bind with the LDAP server. I believe this is an error with the SSL handshake because the following command will not negotiate an SSL protocol: $

Re: OpenLDAP client and SSL handshaek

2012-03-20 Thread Quanah Gibson-Mount
--On Tuesday, March 20, 2012 3:51 PM -0700 Jon Dufresne j...@erezlife.com wrote: Hi, I am using OpenLDAP as a client to connect to a 3rd party Oracle Internet Directory 10g. After recent updates, I have been unable to successfully bind with the LDAP server. I believe this is an error with

Re: OpenLDAP client and SSL handshaek

2012-03-20 Thread Craig White
On Mar 20, 2012, at 3:51 PM, Jon Dufresne wrote: Hi, I am using OpenLDAP as a client to connect to a 3rd party Oracle Internet Directory 10g. After recent updates, I have been unable to successfully bind with the LDAP server. I believe this is an error with the SSL handshake because

Re: OpenLDAP client and SSL handshaek

2012-03-20 Thread Quanah Gibson-Mount
--On Tuesday, March 20, 2012 4:45 PM -0700 Jon Dufresne j...@erezlife.com wrote: On Tue, 2012-03-20 at 16:13 -0700, Quanah Gibson-Mount wrote: This is kind of a last resort as I am not maintaining the environment being used. Are you aware of known issues with this build configuration

Re: OpenLDAP client and SSL handshaek

2012-03-20 Thread Rich Megginson
On 03/20/2012 04:51 PM, Jon Dufresne wrote: Hi, I am using OpenLDAP as a client to connect to a 3rd party Oracle Internet Directory 10g. After recent updates, I have been unable to successfully bind with the LDAP server. I believe this is an error with the SSL handshake because the following

Re: OpenLDAP client and SSL handshaek

2012-03-20 Thread Rich Megginson
On 03/20/2012 04:51 PM, Jon Dufresne wrote: Hi, I am using OpenLDAP as a client to connect to a 3rd party Oracle Internet Directory 10g. After recent updates, I have been unable to successfully bind with the LDAP server. I believe this is an error with the SSL handshake because the following