Re: impact on performance by adding jpeg file

2013-03-18 Thread Jignesh Patel
Thanks Howard, we are using MDB in our system. -Jignesh On Mar 17, 2013, at 8:37 PM, Howard Chu wrote: Jignesh Patel wrote: We have around 10 million users and trying to add images(only faces), is it wise to do that way? Or should I bring images from database? As databases go, OpenLDAP

Re: provider/consumer: entries have identical CSN

2013-03-18 Thread Walter Werner
hi everyone ok, i think i found it :-). It is the sizelimit parameter on the provider. 'The olcSizeLimit/sizelimit attribute/directive specifies the number of entries to return to a search request' Due to the website http://www.zytrax.com/books/ldap/ch6/ It says that 'If no sizelimit

Re: provider/consumer: entries have identical CSN

2013-03-18 Thread Howard Chu
Walter Werner wrote: hi everyone ok, i think i found it :-). It is the sizelimit parameter on the provider. 'The olcSizeLimit/sizelimit attribute/directive specifies the number of entries to return to a search request' Due to the website http://www.zytrax.com/books/ldap/ch6/ Zytrax are

openldap-2.4.32 su-ok, rlogin-fails

2013-03-18 Thread Joe Phan
Hi,  I configured a machine to be LDAP Server (openldap-2.4.32) on Solaris 10.  Adding users/groups to LDAP Server seems to be ok. From a second machine, I configured it to be LDAP Client using command ldapclient  manual -v  -a defaultsearchbase=dc=pg,dc=dtveng,dc=net -a

Re: ldap, kerberos and authorization by group membership

2013-03-18 Thread brendan kearney
in my reading of the admin guide (section 15.2.5 - .7), mapping of a username to a DN is a common configuration, and allows for other functionality. i am trying to use the below Authz RegExp to do the mapping: olcAuthzRegexp: {0}uid=([^,]+),cn=bpk2.com,cn=gssapi,cn=auth

Re: openldap-2.4.32 su-ok, rlogin-fails

2013-03-18 Thread brendan kearney
on linux, i had to install a package called nss-pam-ldapd that would do lookups in the directory for users, groups etc. Description : The nss-pam-ldapd daemon, nslcd, uses a directory server to look up name service information (users, groups, etc.) on behalf of a lightweight nsswitch module. not