Re: ldap syncrepl issue.

2013-11-11 Thread Michael Ströder
Quanah Gibson-Mount wrote: I suggest you read the fixes between 2.4.31 and 2.4.36. There were plenty in those releases. --Quanah Sent from my iPad On Nov 10, 2013, at 11:13 PM, Ashok Kumar Shah ashok.s...@flipkart.com wrote: I don't see any fix done for syncrepl on 2.4.36.

dn: cn=admin,cn=config adding problem

2013-11-11 Thread Oleg
Hello. Our slapd listens on outer interfaces and i want to create an access rule for rootdn to allow admin access only from 127.0.0.1 ip. So, i try to add dn: cn=admin,cn=config record to config database: ~# cat admin.ldif dn: cn=admin,cn=config objectClass: person cn: admin sn: admin

Q: syntax 1.3.6.1.4.1.1466.115.121.1.51

2013-11-11 Thread Ulrich Windl
Hi! I see that core.schema defines: --- attributetype ( 2.5.4.22 NAME 'teletexTerminalIdentifier' DESC 'RFC2256: Teletex Terminal Identifier' SYNTAX 1.3.6.1.4.1.1466.115.121.1.51 ) --- However I cannot locate the syntax for the OID. It's mentioned in secion 6.5 of RFC 2256,

New objectClass

2013-11-11 Thread Merve Temizer
How can i add mailacceptinggeneralid and maildrop attirbutes to use postfix with openldap ? I tried to adding a schema like (into /etc/ldap/schema) # # postfix.schema - basic attributes based on default queries # postfix will make for alias and virtual account lookups # I don't think there is

Re: ldapmodify replace olcAccess

2013-11-11 Thread Покотиленко Костик
В Вто, 22/10/2013 в 18:37 -0700, Daniel Jung пишет: Hi all, Is it possible to use the replace the instead of delete then add again for olcAccess? dn: olcDatabase={2}hdb,cn=config changetype: modify replace: olcDbCacheSize olcDbCacheSize: 10240 - replace: olcAccess olcAccess: {0}to

Re: ldapmodify replace olcAccess

2013-11-11 Thread Howard Chu
Покотиленко Костик wrote: В Вто, 22/10/2013 в 18:37 -0700, Daniel Jung пишет: Hi all, Is it possible to use the replace the instead of delete then add again for olcAccess? Why didn't you just try it out and see for yourself? dn: olcDatabase={2}hdb,cn=config changetype: modify replace:

openldap syncrepl issue

2013-11-11 Thread Chris Card
Hi All, I am running openldap 2.4.36 with BDB for my main backend db, and multi-master replication setup using delta-syncrepl with MDB for the cn=accesslog db. I monitor the contextCSN to check that replication is in sync, but I've noticed what looks like a bug: If I try to delete a

Re: Q: syntax 1.3.6.1.4.1.1466.115.121.1.51

2013-11-11 Thread Michael Ströder
Ulrich Windl wrote: I see that core.schema defines: --- attributetype ( 2.5.4.22 NAME 'teletexTerminalIdentifier' DESC 'RFC2256: Teletex Terminal Identifier' SYNTAX 1.3.6.1.4.1.1466.115.121.1.51 ) --- However I cannot locate the syntax for the OID. It's mentioned in secion

Re: openldap syncrepl issue

2013-11-11 Thread Michael Ströder
Chris Card wrote: I am running openldap 2.4.36 with BDB for my main backend db, and multi-master replication setup using delta-syncrepl with MDB for the cn=accesslog db. I monitor the contextCSN to check that replication is in sync, but I've noticed what looks like a bug: If I try to

Re: dn: cn=admin,cn=config adding problem

2013-11-11 Thread Quanah Gibson-Mount
--On Monday, November 11, 2013 3:03 PM +0400 Oleg lego12...@yandex.ru wrote: Hello. Our slapd listens on outer interfaces and i want to create an access rule for rootdn to allow admin access only from 127.0.0.1 ip. So, i try to add dn: cn=admin,cn=config record to config database: ~# cat

RE: openldap syncrepl issue

2013-11-11 Thread Chris Card
Michael Ströder wrote Chris Card wrote: I am running openldap 2.4.36 with BDB for my main backend db, and multi-master replication setup using delta-syncrepl with MDB for the cn=accesslog db. I monitor the contextCSN to check that replication is in sync, but I've noticed what looks like

Re: dn: cn=admin,cn=config adding problem

2013-11-11 Thread Oleg
On Mon, Nov 11, 2013 at 08:08:39AM -0800, Quanah Gibson-Mount wrote: --On Monday, November 11, 2013 3:03 PM +0400 Oleg lego12...@yandex.ru wrote: Hello. Our slapd listens on outer interfaces and i want to create an access rule for rootdn to allow admin access only from 127.0.0.1 ip. So,

Re: dn: cn=admin,cn=config adding problem

2013-11-11 Thread Quanah Gibson-Mount
--On Monday, November 11, 2013 8:39 PM +0400 Oleg lego12...@yandex.ru wrote: ok. How can i place restrictions for admin access to cn=config db? According to docs i must add a user to a db to do this. I suggest looking at what Debian does in their default configurations, which restricts

Re: New objectClass

2013-11-11 Thread Quanah Gibson-Mount
--On Monday, November 11, 2013 2:05 PM +0200 Merve Temizer mervet2...@gmail.com wrote: /usr/share/slapd/slapd.conf include /etc/ldap/schema/inetorgperson.schema This is a schema file that is already shipped with OpenLDAP. Perhaps you included the wrong thing? --Quanah -- Quanah

Re: openldap syncrepl issue

2013-11-11 Thread Howard Chu
Michael Ströder wrote: Chris Card wrote: I am running openldap 2.4.36 with BDB for my main backend db, and multi-master replication setup using delta-syncrepl with MDB for the cn=accesslog db. I monitor the contextCSN to check that replication is in sync, but I've noticed what looks like a

Re: OpenLDAP on CF disk

2013-11-11 Thread richard lucassen
On Fri, 8 Nov 2013 10:41:00 +0100 (CET) Christian Kratzer ck-li...@cksoft.de wrote: set following in slapd.conf shm_key 100 Everything works well (thanks Christian and others!). I just want to know if these logs are just warnings or messages after a reboot (Note: shm_key is set

RE24 testing call (OpenLDAP 2.4.38)

2013-11-11 Thread Quanah Gibson-Mount
If you know how to build OpenLDAP manually, and would like to participate in testing the next set of code for the 2.4.38 release, please do so. Generally, get the code for RE24: http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=snapshot;h=refs/heads/OPENLDAP_REL_ENG_2_4;sf=tgz