bdb_equality_candidates: cn=config

2013-02-08 Thread Denny Schierz
hi, I get lot of messages like: = bdb_equality_candidates: (ipHostNumber) not indexed = bdb_equality_candidates: (ipHostNumber) not indexed = bdb_equality_candidates: (memberUid) not indexed = bdb_equality_candidates: (title) not indexed [...] and some more. I don't know why it happens, because

Mirror mode difference from N-Way Multi-Master

2013-02-08 Thread Покотиленко Костик
Hi, I've red replication documentation many times, and also many related mailing list threads. Some aspects are still not clear. So: 1. Can Mirror Mode be setup across more than 2 servers, say 3 mirrors? I found one thread saying that mirror can only be setup for 2 master servers:

Re: Delta replication don't starts if consumer supports SSL?

2013-02-08 Thread paler cryptkeeper
Mmmm.. the fact is that is *in the consumer* that I had to disable ldaps, not on the provider, the provider is now supporting ldap and ldaps; if I enable ldaps in the consumer, replication does not start, even when specifying provider=ldap://provider-host:389.. One more thing that results strange

Re: Mirror mode difference from N-Way Multi-Master

2013-02-08 Thread John Madden
As far as I can see there is no difference in configuration. The only distinction I can see is the use case, as N-Way supposed to accept writes on all Masters, but Mirror only on one at a time. There are configuration differences (see the Admin Guide for the needed snippets; N-Way requires

Using multi-value attributes for ACLs

2013-02-08 Thread Andrew Heagle
Hi, At my work, we use LDAP as the backend for Puppet node definitions. Each host would have an LDAP entry specifying things like which puppet classes to apply, host specific variables, environment (which git branch to use for puppet manifests and a few other things. There are different teams

Re: Using multi-value attributes for ACLs

2013-02-08 Thread Andrew Heagle
After reading Philip Colmer's Access control (Jan 24) thread and trying out using sets on a test server, this solution will work out quite nicely. Just have to change/add any role with the an appropriate owner attribute pointing to the proper group. On Thu, Feb 7, 2013 at 11:22 AM, Andrew Heagle

Re: Using multi-value attributes for ACLs

2013-02-08 Thread Howard Chu
Andrew Heagle wrote: After reading Philip Colmer's Access control (Jan 24) thread and trying out using sets on a test server, this solution will work out quite nicely. Just have to change/add any role with the an appropriate owner attribute pointing to the proper group. Sets have a pretty high

Re: Mirror mode difference from N-Way Multi-Master

2013-02-08 Thread Покотиленко Костик
В Птн, 08/02/2013 в 09:47 -0500, John Madden пишет: As far as I can see there is no difference in configuration. The only distinction I can see is the use case, as N-Way supposed to accept writes on all Masters, but Mirror only on one at a time. There are configuration differences (see

Re: Mirror mode difference from N-Way Multi-Master

2013-02-08 Thread Quanah Gibson-Mount
--On Friday, February 08, 2013 8:12 PM +0200 Покотиленко Костик cas...@meteor.dp.ua wrote: В Птн, 08/02/2013 в 09:47 -0500, John Madden пишет: As far as I can see there is no difference in configuration. The only distinction I can see is the use case, as N-Way supposed to accept writes on

Re: Mirror mode difference from N-Way Multi-Master

2013-02-08 Thread Покотиленко Костик
В Птн, 08/02/2013 в 11:07 -0800, Quanah Gibson-Mount пишет: --On Friday, February 08, 2013 8:12 PM +0200 Покотиленко Костик cas...@meteor.dp.ua wrote: В Птн, 08/02/2013 в 09:47 -0500, John Madden пишет: As far as I can see there is no difference in configuration. The only distinction

Re: Mirror mode difference from N-Way Multi-Master

2013-02-08 Thread Howard Chu
Покотиленко Костик wrote: В Птн, 08/02/2013 в 11:07 -0800, Quanah Gibson-Mount пишет: --On Friday, February 08, 2013 8:12 PM +0200 Покотиленко Костик cas...@meteor.dp.ua wrote: В Птн, 08/02/2013 в 09:47 -0500, John Madden пишет: As far as I can see there is no difference in configuration.

Re: Mirror mode difference from N-Way Multi-Master

2013-02-08 Thread Quanah Gibson-Mount
--On Friday, February 08, 2013 10:00 PM +0200 Покотиленко Костик cas...@meteor.dp.ua wrote: Maybe somebody comment on number 4 from my initial post: 4. In Mirror mode, can I use UpdateRef on one mirror to direct writes to another so proxy/balancer will become not required? No. --Quanah

Re: bdb_equality_candidates: cn=config

2013-02-08 Thread Hallvard Breien Furuseth
Quanah Gibson-Mount wrote: --On Friday, February 08, 2013 10:53 AM +0100 Denny Schierz linuxm...@4lin.net wrote: (...) = bdb_equality_candidates: (title) not indexed [...] and some more. I don't know why it happens, because I have all attributes in my index: olcDbIndex: ipHostNumber eq

Re: Mirror mode difference from N-Way Multi-Master

2013-02-08 Thread John Madden
There is no configuration difference at this point. I think there was one initially ages ago. The only difference between MMR and mirror-mode MMR is that in the latter case, writes only go to a single master instead of any master in the cluster. Writes only go to one master in the cluster.

Re: Mirror mode difference from N-Way Multi-Master

2013-02-08 Thread Quanah Gibson-Mount
--On Friday, February 08, 2013 5:56 PM -0500 John Madden jmad...@ivytech.edu wrote: There is no configuration difference at this point. I think there was one initially ages ago. The only difference between MMR and mirror-mode MMR is that in the latter case, writes only go to a single master

How to create cn=config DIT

2013-02-08 Thread arantza serrano
Hello, I've installed my first openldap using the source downloaded in openldap web pages. when the make install finishs i don't find the cn=config DIT, it hasn't been created during intallation process. How can i created the cn=config directory after the installation? Sorry if i'm asking a