Q: Multi-Master setup

2013-07-16 Thread Ulrich Windl
Hi! I have a few questions for multi-master mode: 1) olcServerID (two arguments): if a node's salpd binds to some interface alias address, do I need an olcServerID for that interface alias, do I need an olcServerID for the physical host, or do I need both? 2) What is the correct syntax for

Re: Q: TLS support

2013-07-16 Thread Quanah Gibson-Mount
--On Tuesday, July 16, 2013 8:17 AM +0200 Ulrich Windl ulrich.wi...@rz.uni-regensburg.de wrote: Hi! I have some questions on TLS support in OpenLDAP: 1) How can I find out which cipher suite had been configured (when using the distribution-supplied version)? From ldd I guess my slapd is

unable to query rootdn on slave via external auth

2013-07-16 Thread Adrian Bridgett
This has been driving me up the wall and I wondered if someone could point out the bit I'm missing - the desk is getting badly damaged by my head bashing it :-) On our master server I can query the rootdb no problem, but I can't do this on the slaves - this applies whether I use external or

Re: unable to query rootdn on slave via external auth

2013-07-16 Thread Quanah Gibson-Mount
--On Tuesday, July 16, 2013 6:12 PM +0100 Adrian Bridgett adr...@smop.co.uk wrote: This has been driving me up the wall and I wondered if someone could point out the bit I'm missing - the desk is getting badly damaged by my head bashing it :-) On our master server I can query the rootdb no

Re: unable to query rootdn on slave via external auth

2013-07-16 Thread Adrian Bridgett
On 16/07/13 18:36, Quanah Gibson-Mount wrote: are the olcAccess rules identical between the two? When you bind via ldapi, if you examine the logs at 256, is the search being mapped to the same DN on both master and replicas? Hi Quanah, yes, the olcAccess is identical (I've even diffed them).

Problems with ACLs

2013-07-16 Thread Leonardo Bacha Abrantes
Hi guys, I configured ACL (below) and am trying to log on the console with a ldap's user I receive the error ldap_search_s No such object' on /var/log/secure. If I comment acls the user is able to logon. Here my configuration: == olcDatabase={2}bdb.ldif olcRootDN: cn=Manager,dc=foo,dc=local

Re: Problems with ACLs

2013-07-16 Thread Leonardo Bacha Abrantes
:p Many thanks Michael!! On Tue, Jul 16, 2013 at 4:44 PM, Michael Proto michael.pr...@tstllc.net wrote: Correct me if I'm wrong, but you also need to allow userPassword to be authenticated by anonymous: olcAccess: to attrs=userPassword by anonymous auth -Michael Proto On Tue, Jul

Re: unable to query rootdn on slave via external auth

2013-07-16 Thread Quanah Gibson-Mount
--On Tuesday, July 16, 2013 6:53 PM +0100 Adrian Bridgett adr...@smop.co.uk wrote: On 16/07/13 18:36, Quanah Gibson-Mount wrote: are the olcAccess rules identical between the two? When you bind via ldapi, if you examine the logs at 256, is the search being mapped to the same DN on both

delete members in big groups with back_mdb

2013-07-16 Thread Marco Schirrmeister
Hi, I have a problem with mdb and modify operations on very large groups. Specifically deleting members from those groups. Removing 10 members from a group with 25000 members takes 23 seconds. Which also means, all other clients that want to do something hang. Deleting a user from multiple big

Re: delete members in big groups with back_mdb

2013-07-16 Thread Howard Chu
Marco Schirrmeister wrote: Hi, I have a problem with mdb and modify operations on very large groups. Specifically deleting members from those groups. Removing 10 members from a group with 25000 members takes 23 seconds. Which also means, all other clients that want to do something hang.