Re: Strange ACL evaluation depending on AttributeSelection?

2013-01-17 Thread Michael Ströder
Michael Ströder wrote: Today I made a strange observation tested with release 2.4.32 and git-build RE24 6f33e2c both with same results. But when requesting to use the authz-DN with which the Samba demon binds the attribute is not shown which one might consider an ACL issue. Note that

Re: Strange ACL evaluation depending on AttributeSelection?

2013-01-17 Thread harry . jede
Michael Ströder wrote: Michael Ströder wrote: Today I made a strange observation tested with release 2.4.32 and git-build RE24 6f33e2c both with same results. But when requesting to use the authz-DN with which the Samba demon binds the attribute is not shown which one might consider an

Re: Strange ACL evaluation depending on AttributeSelection?

2013-01-17 Thread Michael Ströder
harry.j...@arcor.de wrote: This seems to be a bug: http://www.openldap.org/its/index.cgi?findid=7495 Any chance to see a fix for this in 2.4.34? access to dn.subtree=o=example attrs=sambaNTPassword filter=(organizationalStatus=0) by group=uid=samba_dc,o=example write

Re: [OT] SELinux woes

2013-01-17 Thread Benin Technologies
As of version 2.4.27, I believe back-sql supports dynamic configuration, so there's no need to switch to slapd.conf see http://www.openldap.org/software/release/changes.html : OpenLDAP 2.4.27 Release (2011/11/24) Added slapd-sql dynamic config support Le 17/01/2013 07:11, Ori

back-sql documentation (was: SELinux woes)

2013-01-17 Thread Ori Bani
Trying to switch to slapd.conf instead of dynamic configuration in order to test the back-sql backend As of version 2.4.27, I believe back-sql supports dynamic configuration, so there's no need to switch to slapd.conf see http://www.openldap.org/software/release/changes.html : OpenLDAP

Re: slapd crashes with ch_realloc of X bytes failed

2013-01-17 Thread Meike Stone
2013/1/12 Meike Stone meike.st...@googlemail.com: What I see, that slapd had reserved Total: 7350688K (overcommitted?), but only referenced 4900700K. Why does slapd reserve so much memory and use it not? Because of this, I changed the default values for memory overcomittment from:

Re: back-sql documentation (was: SELinux woes)

2013-01-17 Thread Howard Chu
Ori Bani wrote: Trying to switch to slapd.conf instead of dynamic configuration in order to test the back-sql backend As of version 2.4.27, I believe back-sql supports dynamic configuration, so there's no need to switch to slapd.conf see http://www.openldap.org/software/release/changes.html :

Re: slapd crashes with ch_realloc of X bytes failed

2013-01-17 Thread Quanah Gibson-Mount
--On Thursday, January 17, 2013 6:23 PM +0100 Meike Stone meike.st...@googlemail.com wrote: I was wondering, why it crashed in spite of overcommitting . The solution sometimes is simple, but far away ;-) ...: ~# ulimit -v 7353440 Ah, yes... This is an idiotic setting I've seen on SLES

Re: back-sql documentation (was: SELinux woes)

2013-01-17 Thread Quanah Gibson-Mount
--On Thursday, January 17, 2013 9:17 AM -0800 Ori Bani orib...@gmail.com wrote: Oh! Thanks for the pointer. Anyone know if there's any chance the documentation is going to be updated? It's over a year later and the docs (and everything I saw in the list archives) say I must use slapd.conf

Re: ldap update ( 2.2 to 2.4)

2013-01-17 Thread Dan White
On 01/17/13 17:10 -0200, Bruno Furtado wrote: On Fri, Jan 11, 2013 at 6:09 PM, Dan White dwh...@olp.net wrote: On 01/11/13 17:29 -0200, Bruno Furtado wrote: On Thu, Jan 10, 2013 at 12:34 PM, Dan White dwh...@olp.net wrote: On 01/10/13 12:04 -0200, Bruno Furtado wrote: Hi Folks! I'm newbie

Re: ldap update ( 2.2 to 2.4)

2013-01-17 Thread Dan White
On Thu, Jan 17, 2013 at 5:20 PM, Dan White dwh...@olp.net wrote: What is the output of: slapcat -n0 -s olcDatabase={1}bdb,cn=config (remove any passwords or sensitive information) Increase your debug level to see if you get any more specific information. On 01/17/13 18:37 -0200, Bruno