Re: How to improve performance with MDB backend?

2013-04-19 Thread Howard Chu
Quanah Gibson-Mount wrote: --On Thursday, April 18, 2013 3:59 PM + Chris Card ctc...@hotmail.com wrote: Maybe MDB performance relative to BDB degrades as the database get bigger. From your wiki page: This particular client has 25,208 entries in their LDAP database. My test database has

Re: How to improve performance with MDB backend?

2013-04-19 Thread Howard Chu
Quanah Gibson-Mount wrote: --On Thursday, April 18, 2013 8:18 PM + Chris Card ctc...@hotmail.com wrote: I'll give that a try. I had perhaps been taking the advice given in the slapd-mdb man page too seriously: Heh, yes, it seems so. ;) With writemap, you definitely do not want to exceed

Re: Alias dereferencing

2013-04-19 Thread Saša-Stjepan Bakša
Compiled from source, version current OpenLDAP RE24 (from GIT) ./configure --prefix=/opt/openldap Data was added with same ldapadd progy, schema is the same version. Here it is - config, slapcat from slapd.d (lengthy schema omitted): dn: cn=config objectClass: olcGlobal cn: config

Re: slapd terminates with error read_config: no serverID / URL match found. Check slapd -h arguments

2013-04-19 Thread Howard Chu
Joe Phan wrote: Hi, When I configure N-Way Multi-Master configuration with cn=config, slapd terminates with the error: module syncprov.la: null module registered and read_config: no serverID / URL match found. Check slapd -h arguments. olcServerID IDs are already added and configured properly,

database meta and overlay memberof

2013-04-19 Thread David Bonnafous
hi, I have a meta directory with two uri (one is openldap directory, used by Linux, and the other is Mac OS X directory). This meta-directory is used for authentication and it works. I try to use the memberof overlay in the meta directory to build some groupOfNames... but it doesn't work: the

LDAP proxy

2013-04-19 Thread Šerých Jakub
Dear group, I manage the school network in which we have two separate MS-AD servers (one for teachers and the other for students). We also have mySQL database of our alumni. I would like to connect this three information bases to one virtual LDAP server (for authentication purposes on various

RE: How to improve performance with MDB backend?

2013-04-19 Thread Chris Card
Date: Fri, 19 Apr 2013 00:03:30 -0700 From: h...@symas.com To: qua...@zimbra.com; ctc...@hotmail.com; openldap-technical@openldap.org Subject: Re: How to improve performance with MDB backend? Quanah Gibson-Mount wrote: --On Thursday, April 18, 2013

Re: How to improve performance with MDB backend?

2013-04-19 Thread Nick Milas
On 19/4/2013 2:00 μμ, Chris Card wrote: I tried reducing the maxsize, but it made no difference to the performance. So I'm still at the point where writes to BDB are roughly 4 times faster than writes to MDB. Any more suggestions? Could it be possibly related to the OS / filesystem used?

Re: How to improve performance with MDB backend?

2013-04-19 Thread Saša-Stjepan Bakša
First test with your sugestions. I am using Phyton program writen by me to add data to server. Server is Centos 6.2 based (hardware described in my first post) Python runs on separeate dual core PC with 1Gb connection to servers. Servers are configured as N-way Multymaster Test startTest stop

Re: How to improve performance with MDB backend?

2013-04-19 Thread Nick Milas
On 18/4/2013 6:16 μμ, Quanah Gibson-Mount wrote: For me, MDB writes are a minimum of 65 times faster than writes with BDB/HDB, even when BDB/HDB use an SHM key. Can you please share your compilation options (or spec file, if applicable) and test setup complete configuration so interested

Re: How to improve performance with MDB backend?

2013-04-19 Thread Saša-Stjepan Bakša
For second test I have changed I/O scheduler only Nothing changed in terms of adding speed! Test startTest stop Test durationNum usersUser/sec 19.4.2013 19.4.2013min 5759,00742837128,99 14:37:45 16:13:34 sec 95,98333 [root@spr1 /]# cat

Re: disabling user account

2013-04-19 Thread Liam Gretton
On 16/04/2013 19:49, Jignesh Patel wrote: Does openldap has a provision like active directory to disable a user? useraccountcontrol 544 At our site I created a new attribute 'globalLock' for every account and filter on that at the service end. For example in /etc/ldap.conf for PAM:

Re: LDAP proxy

2013-04-19 Thread Andrew Findlay
On Fri, Apr 19, 2013 at 09:49:36AM +, Šerých Jakub wrote: I manage the school network in which we have two separate MS-AD servers (one for teachers and the other for students). We also have mySQL database of our alumni. I would like to connect this three information bases to one

Re: How to improve performance with MDB backend?

2013-04-19 Thread Howard Chu
Saša-Stjepan Bakša wrote: First test with your sugestions. I am using Phyton program writen by me to add data to server. Server is Centos 6.2 based (hardware described in my first post) Python runs on separeate dual core PC with 1Gb connection to servers. Servers are configured as N-way

Re: disabling user account

2013-04-19 Thread Chris Jacobs
And at our site we use a disabled OU now. We used to simply 'scramble' their passwords (only works if you don't have a forgot password functionality setup somewhere, which we don't.) Many different ways to get the job done. - chris - Original Message - From:

Re: disabling user account

2013-04-19 Thread Clément OUDOT
2013/4/16 Jignesh Patel jign...@icare.com Does openldap has a provision like active directory to disable a user? useraccountcontrol 544 You can use ppolicy overlay and manually set pwdAccountLockedTime to lock the user account. Clément.

Re: disabling user account

2013-04-19 Thread Howard Chu
Liam Gretton wrote: On 16/04/2013 19:49, Jignesh Patel wrote: Does openldap has a provision like active directory to disable a user? useraccountcontrol 544 At our site I created a new attribute 'globalLock' for every account and filter on that at the service end. For example in

Re: disabling user account

2013-04-19 Thread Michael Ströder
Liam Gretton wrote: On 16/04/2013 19:49, Jignesh Patel wrote: Does openldap has a provision like active directory to disable a user? useraccountcontrol 544 At our site I created a new attribute 'globalLock' for every account and filter on that at the service end. For example in

Re: How to improve performance with MDB backend?

2013-04-19 Thread Howard Chu
Saša-Stjepan Bakša wrote: How do you measure or compare speed? I have a Python program which add a predefined number of users (1mil and each user consists of 8 DNs and 3 alias DNs) and for Modify test I have also Python program which modify 1 attribute with random value under one DN changed

Re: disabling user account

2013-04-19 Thread Liam Gretton
On 19/04/2013 17:20, Howard Chu wrote: Better to do this in a slapd ACL and enforce from the server side, than to rely on correctness of multiple clients. access to attrs=userpassword filter=(globalLock=off) by anonymous auth We don't use LDAP for passwords, and that

Re: How to improve performance with MDB backend?

2013-04-19 Thread Saša-Stjepan Bakša
Ok. I see your point and lesson is learned. Will do as suggested. On Fri, Apr 19, 2013 at 6:07 PM, Howard Chu h...@symas.com wrote: You really need to learn something more about system administration; you clearly don't know what to investigate but this is all fundamental sysadmin