Antw: Re: Q: TLS support

2013-07-17 Thread Ulrich Windl
Quanah Gibson-Mount qua...@zimbra.com schrieb am 16.07.2013 um 18:08 in Nachricht 7D4A20353DA988409253CCDE@[192.168.1.22]: --On Tuesday, July 16, 2013 8:17 AM +0200 Ulrich Windl ulrich.wi...@rz.uni-regensburg.de wrote: Hi! I have some questions on TLS support in OpenLDAP: 1) How can I

Antw: Re: delete members in big groups with back_mdb

2013-07-17 Thread Ulrich Windl
Hi! It would be nice if there would exist a tool that reads (assuming those exist) slapd performance data and suggests modifications based on those. Of course that would requre timing statistics on specific attribute operations which do not exist ;-) Howard Chu h...@symas.com schrieb am

OpenLDAP syncrepl using SASL - GSSAPI

2013-07-17 Thread Quentin PETEL
Hi! I'm trying to implement a Kerberos server using an OpenLdap backend on a server called *ldap1.vm* and replicate those on an other called *ldap2.vm*. My first server is working fine. Each kerberos principal is stored in his own ldap entry (with the krbPrincipalName attribut). For exemple

Re: delete members in big groups with back_mdb

2013-07-17 Thread Marco Schirrmeister
On Jul 17, 2013, at 1:08 AM, Howard Chu h...@symas.com wrote: Marco Schirrmeister wrote: Hi, I have a problem with mdb and modify operations on very large groups. Specifically deleting members from those groups. Removing 10 members from a group with 25000 members takes 23 seconds. Which

Antw: Re: delete members in big groups with back_mdb

2013-07-17 Thread Ulrich Windl
Hi! Just want to know: How does sortvals work? Are entries sorted in RAM only, or are the database entries (being stored) sorted? In the second case the delay (insert instead of append) would be explainable. For the first case there is no need to use an array implementation for the attributes:

Upgrade to 2.4.35 Causes Instability, Errors

2013-07-17 Thread Tim Gustafson
I recently upgraded OpenLDAP to 2.4.35 and I'm now experiencing some instability issues, and also seeing a bazillion of the following error in my log file: bdb_dn2id_delete 0x108c68: delete failed: DB_LOCK_DEADLOCK: Locker killed to resolve a deadlock -30995 I'm using the BDB backend at the

olcPasswordHash

2013-07-17 Thread Nerijus Kislauskas
Hi community, We want implement password politics in our DIT, and are testing ppolicy and found issues using olcPasswordHash, Password Modify Extension and so. Here are my testings: 1) My cn=config with olcPasswordHash and olcSuffix values $ ldapsearch -D cn=admin,dc=ktu,dc=lt -W -x -b

Re: OpenLDAP syncrepl using SASL - GSSAPI

2013-07-17 Thread Quentin PETEL
I solved this issue. It was in fact a mistake in my ACL directives. For those who try to build a master-master replication between LDAP servers, for both cn=config DIT and dc=exemple,dc=com, my config DIT look like this : On ldap1.vm : = dn:

Re: Antw: Re: Q: TLS support

2013-07-17 Thread Howard Chu
Ulrich Windl wrote: Quanah Gibson-Mount qua...@zimbra.com schrieb am 16.07.2013 um 18:08 in Nachricht 7D4A20353DA988409253CCDE@[192.168.1.22]: --On Tuesday, July 16, 2013 8:17 AM +0200 Ulrich Windl ulrich.wi...@rz.uni-regensburg.de wrote: Hi! I have some questions on TLS support in

Re: unable to query rootdn on slave via external auth

2013-07-17 Thread Adrian Bridgett
On 16/07/13 21:19, Quanah Gibson-Mount wrote: --On Tuesday, July 16, 2013 6:53 PM +0100 Adrian Bridgett adr...@smop.co.uk wrote: On 16/07/13 18:36, Quanah Gibson-Mount wrote: are the olcAccess rules identical between the two? When you bind via ldapi, if you examine the logs at 256, is the

Re: unable to query rootdn on slave via external auth

2013-07-17 Thread Quanah Gibson-Mount
--On Wednesday, July 17, 2013 5:28 PM +0100 Adrian Bridgett adr...@smop.co.uk wrote: dn: dc=example,dc=com objectClass: glue structuralObjectClass: glue contextCSN: 20130716160414.209246Z#00#000#00 Why is this a glued object? Is it a glued object on your master? --Quanah --

Re: delete members in big groups with back_mdb

2013-07-17 Thread Quanah Gibson-Mount
--On Wednesday, July 17, 2013 11:32 AM +0200 Marco Schirrmeister ma...@schirrmeister.net wrote: On Jul 17, 2013, at 1:08 AM, Howard Chu h...@symas.com wrote: Marco Schirrmeister wrote: Hi, I have a problem with mdb and modify operations on very large groups. Specifically deleting members

Re: Upgrade to 2.4.35 Causes Instability, Errors

2013-07-17 Thread Quanah Gibson-Mount
--On Wednesday, July 17, 2013 7:34 AM -0700 Tim Gustafson t...@ucsc.edu wrote: I recently upgraded OpenLDAP to 2.4.35 and I'm now experiencing some instability issues, and also seeing a bazillion of the following error in my log file: bdb_dn2id_delete 0x108c68: delete failed:

mdb fixes for 2.4.35?

2013-07-17 Thread Patrick Lists
Hi, Quanah mentioned in another posting to the list that there are some mdb fixes for 2.4.35. Is there a patch available somewhere or a location where I can download the source containing those fixes? Regards, Patrick

Re: mdb fixes for 2.4.35?

2013-07-17 Thread Quanah Gibson-Mount
--On Wednesday, July 17, 2013 8:11 PM +0200 Patrick Lists openldap-l...@puzzled.xs4all.nl wrote: Hi, Quanah mentioned in another posting to the list that there are some mdb fixes for 2.4.35. Is there a patch available somewhere or a location where I can download the source containing those

Re: mdb fixes for 2.4.35?

2013-07-17 Thread Patrick Lists
On 07/17/2013 09:00 PM, Quanah Gibson-Mount wrote: --On Wednesday, July 17, 2013 8:11 PM +0200 Patrick Lists openldap-l...@puzzled.xs4all.nl wrote: Hi, Quanah mentioned in another posting to the list that there are some mdb fixes for 2.4.35. Is there a patch available somewhere or a location

Re: mdb fixes for 2.4.35?

2013-07-17 Thread Quanah Gibson-Mount
--On Wednesday, July 17, 2013 9:31 PM +0200 Patrick Lists openldap-l...@puzzled.xs4all.nl wrote: Thanks Quanah. I saw that the ITS7604.patch is already in openldap.git HEAD. This also seems to apply to the changes in your openldap-2.4.35.tgz tarball. Is it the same as openldap.git HEAD? The

Re: delete members in big groups with back_mdb

2013-07-17 Thread Marco Schirrmeister
On Jul 17, 2013, at 7:08 PM, Quanah Gibson-Mount qua...@zimbra.com wrote: --On Wednesday, July 17, 2013 11:32 AM +0200 Marco Schirrmeister ma...@schirrmeister.net wrote: On Jul 17, 2013, at 1:08 AM, Howard Chu h...@symas.com wrote: Marco Schirrmeister wrote: Hi, I have a problem

Re: Upgrade to 2.4.35 Causes Instability, Errors

2013-07-17 Thread Marco Schirrmeister
On Jul 17, 2013, at 7:14 PM, Quanah Gibson-Mount qua...@zimbra.com wrote: I recently upgraded OpenLDAP to 2.4.35 and I'm now experiencing some instability issues, and also seeing a bazillion of the following error in my log file: bdb_dn2id_delete 0x108c68: delete failed:

Q: referral issue

2013-07-17 Thread espeake
Okay my referral chaining was working and then stopped working. I get an error 10 when I submit a change to my clustered consumers that are setup to refer writes to my master LDAP server. In looking at the configuration help in the online documentation it shows how to setup the slapd.conf file

Re: Upgrade to 2.4.35 Causes Instability, Errors

2013-07-17 Thread Quanah Gibson-Mount
--On Wednesday, July 17, 2013 9:44 PM +0200 Marco Schirrmeister ma...@schirrmeister.net wrote: I would be interested in those patches. Or is it enough to run the latest RE24? See the bits I posted in the thread mdb fixes for 2.4.35. I wouldn't use current RE24 at the moment. --Quanah --

Re: mdb fixes for 2.4.35?

2013-07-17 Thread Michael Ströder
Quanah Gibson-Mount wrote: --On Wednesday, July 17, 2013 9:31 PM +0200 Patrick Lists openldap-l...@puzzled.xs4all.nl wrote: Thanks Quanah. I saw that the ITS7604.patch is already in openldap.git HEAD. This also seems to apply to the changes in your openldap-2.4.35.tgz tarball. Is it the same

Re: mdb fixes for 2.4.35?

2013-07-17 Thread Quanah Gibson-Mount
--On Wednesday, July 17, 2013 11:00 PM +0200 Michael Ströder mich...@stroeder.com wrote: Quanah Gibson-Mount wrote: --On Wednesday, July 17, 2013 9:31 PM +0200 Patrick Lists openldap-l...@puzzled.xs4all.nl wrote: Thanks Quanah. I saw that the ITS7604.patch is already in openldap.git HEAD.

Re: Upgrade to 2.4.35 Causes Instability, Errors

2013-07-17 Thread Tim Gustafson
When you say you upgraded, what all did you do? Did you only upgrade the openldap binaries? From what openldap release to what release? Did your upgrade also change the version of BDB? What version of BDB were you on? What one are you on now? What does your DB_CONFIG file look like? What

Re: Upgrade to 2.4.35 Causes Instability, Errors

2013-07-17 Thread Quanah Gibson-Mount
--On Wednesday, July 17, 2013 3:28 PM -0700 Tim Gustafson t...@ucsc.edu wrote: When you say you upgraded, what all did you do? Did you only upgrade the openldap binaries? From what openldap release to what release? Did your upgrade also change the version of BDB? What version of BDB were

Re: Upgrade to 2.4.35 Causes Instability, Errors

2013-07-17 Thread Tim Gustafson
So you didn't answer anything about the old version of OpenLDAP versus the current one. I would note that according to the db_stat output, you've experienced zero deadlocks. That seems somewhat in conflict with your earlier report. Did you run db_recover (resetting the stats)? Sorry; I

Re: Upgrade to 2.4.35 Causes Instability, Errors

2013-07-17 Thread Quanah Gibson-Mount
--On Wednesday, July 17, 2013 3:35 PM -0700 Tim Gustafson t...@ucsc.edu wrote: So you didn't answer anything about the old version of OpenLDAP versus the current one. I would note that according to the db_stat output, you've experienced zero deadlocks. That seems somewhat in conflict with

Re: mdb fixes for 2.4.35?

2013-07-17 Thread Marco Schirrmeister
On Jul 17, 2013, at 9:00 PM, Quanah Gibson-Mount qua...@zimbra.com wrote: Hi, Quanah mentioned in another posting to the list that there are some mdb fixes for 2.4.35. Is there a patch available somewhere or a location where I can download the source containing those fixes?

Re: mdb fixes for 2.4.35?

2013-07-17 Thread Quanah Gibson-Mount
--On Thursday, July 18, 2013 1:27 AM +0200 Marco Schirrmeister ma...@schirrmeister.net wrote: On Jul 17, 2013, at 9:00 PM, Quanah Gibson-Mount qua...@zimbra.com wrote: Hi, Quanah mentioned in another posting to the list that there are some mdb fixes for 2.4.35. Is there a patch