Re: replication of databases with different backends???

2014-01-08 Thread Dieter Klünter
Am Tue, 7 Jan 2014 20:32:15 + schrieb lux-integ lux-in...@btconnect.com: Greetings, I have two computers with these:- host 1: --cpu amd64 3 cores --os blfs linux-3.10.24, openldap-2.4.33 with bdb backend host 2: --cpu amd64 3 cores --os blfs linux-3.10.24, openldap-2.4.33 with

Re: optimal mdb flags

2014-01-08 Thread Dieter Klünter
Am Tue, 7 Jan 2014 19:15:07 -0800 schrieb Paul B. Henson hen...@acm.org: So if it's not obvious, we're working on migrating our openldap deployment to mdb from hdb :), I apologize for the flurry of questions, this will be the last, at least for today ;). I'm trying to evaluate the optimal

Re: replication of databases with different backends???

2014-01-08 Thread Michael Ströder
Mauricio Tavares wrote: On Tue, Jan 7, 2014 at 3:32 PM, lux-integ lux-in...@btconnect.com wrote: Greetings, I have two computers with these:- host 1: --cpu amd64 3 cores --os blfs linux-3.10.24, openldap-2.4.33 with bdb backend host 2: --cpu amd64 3 cores --os blfs linux-3.10.24,

Port 636 and SLAPD(8)

2014-01-08 Thread jumpgroup
Hello Experts, In need of a little guidance please. I'm installed OpenLdap 2.4.23 on RHEL in a sandbox and would like to enable SSL on port 636. All documentation references SLAPD(5), but since I'm using SLAPD(8), I do not know have the slapd.conf file. Looking for the current SLAPD(8)

Re: Port 636 and SLAPD(8)

2014-01-08 Thread Michael Proto
Look at /etc/sysconfig/ldap. There's a line in there SLAPD_LDAPS=no. Change to yes and restart slapd and you should have a listener on 636. On Wed, Jan 8, 2014 at 10:10 AM, jumpgr...@aol.com wrote: Hello Experts, In need of a little guidance please. I'm installed OpenLdap 2.4.23 on RHEL in

Re: Port 636 and SLAPD(8)

2014-01-08 Thread jumpgroup
Thank you, Michael. That helps. I think I found what I was looking for here: https://wiki.debian.org/LDAP/OpenLDAPSetup Specifically, the attributes to add to an LDIF to specify the location of the certificate files: dn: cn=config add: olcTLSCACertificateFile olcTLSCACertificateFile:

Re: mdb_stat

2014-01-08 Thread Quanah Gibson-Mount
--On Tuesday, January 07, 2014 6:39 PM -0800 Paul B. Henson hen...@acm.org wrote: Where does one typically acquire the mdb_stat binary for use with openldap? It appears to be part of liblmdb. openldap includes a bundled copy of liblmdb, but does not actually build mdb_stat. Is the intention

Re: optimal mdb flags

2014-01-08 Thread Quanah Gibson-Mount
--On Tuesday, January 07, 2014 7:15 PM -0800 Paul B. Henson hen...@acm.org wrote: So if it's not obvious, we're working on migrating our openldap deployment to mdb from hdb :), I apologize for the flurry of questions, this will be the last, at least for today ;). I'm trying to evaluate the

Re: Problem with back-mdb

2014-01-08 Thread Gregory T.
Hello, thanks for the reply. The script works fine with the use of a 2nd connection for the modify request but ... during the execution of my script, the file data.mdb grows up considerably. First time, I configured maxsize value with a 3GB in slapd.conf. Then I modified the script to use 2

Re: mdb searchstack parameter

2014-01-08 Thread Howard Chu
Paul B. Henson wrote: From reading the documentation, it sounds like when configuring this parameter you need to strike a balance between potential performance impact if it is too low, and wasted memory if it is too high. While running, is there any way to tell whether or not a search exceeded

Re: Port 636 and SLAPD(8)

2014-01-08 Thread Michael Ströder
jumpgr...@aol.com wrote: Thank you, Michael. That helps. I think I found what I was looking for here: https://wiki.debian.org/LDAP/OpenLDAPSetup Since OpenLDAP 2.4.23 is linked against libnss you will likely run into trouble regarding TLS when following configuration guides for an OpenLDAP

Re: Re: Port 636 and SLAPD(8) --- Low Sensitivity/Aerospace Internal Use Only

2014-01-08 Thread Warron S French
Low Sensitivity/Aerospace Internal Use Only That sounds an awful lot like what I was guided to do about 3 weeks ago. I still haven't had the chance to get back to it yet. Warron French, MBA, SCSA From: Michael Ströder mich...@stroeder.com To: jumpgr...@aol.com, Cc:

Re: replicating central NSS data

2014-01-08 Thread Mark R Bannister
On 06/01/2014 22:03, Michael Ströder wrote: (I take this point toopenldap-techni...@openldap.org since it discusses OpenLDAP-specific things.) Howard Chu wrote: The discussion of caching here http://www.ietf.org/id/draft-bannister-dbis-mapping-02.txt is one such example - this is purely a

RE: mdb_stat

2014-01-08 Thread Paul B. Henson
From: Quanah Gibson-Mount [mailto:qua...@zimbra.com] Sent: Wednesday, January 08, 2014 8:21 AM I build out the mdb_* utilities when I build OpenLDAP. Yeah, that probably seems best, to make sure it is the same version as the library openldap is using. Hopefully I can get a Gentoo dev to agree

RE: optimal mdb flags

2014-01-08 Thread Paul B. Henson
From: Quanah Gibson-Mount [mailto:qua...@zimbra.com] Sent: Wednesday, January 08, 2014 8:22 AM I use writemap and nometasync. I've never encountered corruption because of using writemap. Excellent. Do you use nometasync because otherwise the performance isn't good enough for your use case?

RE: mdb searchstack parameter

2014-01-08 Thread Paul B. Henson
From: Howard Chu [mailto:h...@symas.com] Sent: Wednesday, January 08, 2014 9:21 AM Since you mention that you're migrating from hdb, you can most likely ignore this parameter. It has the identical meaning in hdb after all, and if you never had to change it under hdb there's no reason to

Re: configuring mdb maxsize

2014-01-08 Thread Howard Chu
Paul B. Henson wrote: From: Quanah Gibson-Mount [mailto:qua...@zimbra.com] Sent: Wednesday, January 08, 2014 8:20 AM I change the maxsize of my db all the time, while slapd is running, without issue, as long as the maxsize is not attempted to be set to less than value of the actual size of

Re: Port 636 and SLAPD(8)

2014-01-08 Thread Vikas Parashar
Hi, You don't need to worry about the slapd.d configuration at all. If you are familiar with slapd.conf then you can go with below steps. Just get the configuration file provides by package(rpm) with below commands. rpm -qc openldap-servers Once you get slapd.conf then make the changes and