Simple way to check that MMR is in sync?

2014-02-07 Thread Philip Colmer
Hi I've got a 2-node setup for master-master replication. Other than creating or modifying a record on one node and then checking/waiting for that change to appear on the other node, is there a recommended way to check that the nodes are in sync and not encountering any problems? Thanks.

Re: Simple way to check that MMR is in sync?

2014-02-07 Thread Clément OUDOT
2014-02-07 10:44 GMT+01:00 Philip Colmer philip.col...@linaro.org: Hi I've got a 2-node setup for master-master replication. Other than creating or modifying a record on one node and then checking/waiting for that change to appear on the other node, is there a recommended way to check that

Re: Re: Re: Slow to add 1 million items

2014-02-07 Thread Andrew Eross
Thanks, Ulrich. That made me do a bit searching, there's a nice summary of some of the ext4 performance options here: http://blog.smartlogicsolutions.com/2009/06/04/mount-options-to-improve-ext4-file-system-performance/ Definitely cool ideas (but more academic for us specifically) - I'd be a bit

OpenLDAP static configuration

2014-02-07 Thread Ali Gholami
Hi list, I've an Ubuntu 12.04 and I'd like to install an static configraution using slapd.conf. I've created a slapd.conf under /etc/ldap where is the default directory to install OpenLDAP. But when I start my service through sudo service slapd start it doesn't start the service using the

RE: Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?

2014-02-07 Thread Aaron Richton
On Thu, 6 Feb 2014, Paul B. Henson wrote: Our servers do a nightly backup of cn=config via slapcat -n 0, and those are kept for a month. Since this is for clients, there's no revision control involved, but it would be trivial for someone to check in the resulting LDIF file into their

Re: OpenLDAP static configuration

2014-02-07 Thread Vikas Parashar
Ali, By default, it should start. You don't need to any change in any file. If you will see the bash script, there you can see, first it will check slapd.d then it will check slapd.conf file. Could you please let us know, how do you have installed openldap. On Fri, Feb 7, 2014 at 5:15 PM, Ali

Antw: Simple way to check that MMR is in sync?

2014-02-07 Thread Ulrich Windl
Hi! What about comparing the EntryCSN of the top-level object? You could also slapcat each node, sort the lines and compare the results (I guess the order of entries on each server is not predicable..) Regards, Ulrich Philip Colmer philip.col...@linaro.org schrieb am 07.02.2014 um 10:44 in

Re: OpenLDAP static configuration

2014-02-07 Thread Ali Gholami
Thanks Vikas for the reply. I removed the line to point to the slapd.conf and now I could run the service. But I get another error when I try to add structure of the entries using: $sudo ldapadd -Q -Y EXTERNAL -H ldapi:/// -f structure.ldif: adding new entry dc=x,dc=y ldap_add:

Re: Simple way to check that MMR is in sync?

2014-02-07 Thread Clément OUDOT
2014-02-07 14:15 GMT+01:00 Ulrich Windl ulrich.wi...@rz.uni-regensburg.de: Hi! What about comparing the EntryCSN of the top-level object? You could also slapcat each node, sort the lines and compare the results (I guess the order of entries on each server is not predicable..) You should

RE: Proper way to configure custom schemas

2014-02-07 Thread Chris Card
Hi, I've done this frequently - just create an LDIF file for ldapmodify which adds the new attribute type and replaces the object class definition. There's no need to delete the object class and add it again in my experience. Chris Date: Fri, 7 Feb 2014 16:55:03 +0200 From:

Recommended version of BDB package

2014-02-07 Thread Mark Cairney
Hi, Having recently experienced some issues with our Live server (2.4.38, Scientific Linux 6.4 64-bit) I was looking into possible causes and found the following Debian bug report which suggests that BDB 5.X is problematic with OpenLDAP. What's the best version of BDB to go with- I see

Re: Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?

2014-02-07 Thread Quanah Gibson-Mount
--On Friday, February 07, 2014 2:25 PM +0100 Simone Piccardi picca...@truelite.it wrote: Not to mention that slapd.conf is still far more readable that any slapd.d ldif... Definitely not. slapd.conf allows people to put things in all sorts of random order that slapd fixes when it reads in

Re: Recommended version of BDB package

2014-02-07 Thread Quanah Gibson-Mount
--On Friday, February 07, 2014 5:17 PM + Mark Cairney mark.cair...@ed.ac.uk wrote: Hi, Having recently experienced some issues with our Live server (2.4.38, Scientific Linux 6.4 64-bit) I was looking into possible causes and found the following Debian bug report which suggests that BDB

Re: Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?

2014-02-07 Thread Christopher Wood
On Fri, Feb 07, 2014 at 02:25:45PM +0100, Simone Piccardi wrote: (SNIP) these last two are far usually done with a service restart, or, when the service support the online changes, with a service reload or a kill -HUP. Therein lies the issue with the text config file for some of us - we are

Re: OpenLDAP static configuration

2014-02-07 Thread Dan White
On 02/07/14 14:39 +0100, Ali Gholami wrote: Thanks Vikas for the reply. I removed the line to point to the slapd.conf and now I could run the service. But I get another error when I try to add structure of the entries using: $sudo ldapadd -Q -Y EXTERNAL -H ldapi:/// -f structure.ldif:

Re: Slow to add 1 million items

2014-02-07 Thread Brent Bice
On 02/05/2014 11:45 AM, Quanah Gibson-Mount wrote: Ok. I had some wierd perf issues with Ubuntu10 and Ubuntu12. I was able to resolve them on Ubuntu12 by upgrading to a newer 3.x kernel (currently 3.10.11-031011-generic on my Ubuntu12 box). Also, it isn't necessary to use ext4 (I use ext2 for

Re: Simple way to check that MMR is in sync?

2014-02-07 Thread Quanah Gibson-Mount
--On Friday, February 07, 2014 9:44 AM + Philip Colmer philip.col...@linaro.org wrote: Hi I've got a 2-node setup for master-master replication. Other than creating or modifying a record on one node and then checking/waiting for that change to appear on the other node, is there a

Re: Slow to add 1 million items

2014-02-07 Thread Brent Bice
On 02/04/2014 02:58 AM, Andrew Eross wrote: Hello all, I've been Google'ing around and searching the archives, but I haven't quite been able to find an answer, so I wanted to ask the list. I've been experimenting with OpenLDAP adds to see how quickly we can get data inserted into the DB.

slapd-meta exclude syntax; larger problem with rwm, collective attributes.

2014-02-07 Thread Dan Pritts
Hi folks - first, a simple, direct question. I'm trying to use the meta backend, and exclude part of the back-end directory (which is AD, if that matters). I tried the following config: -- include /usr/local/pkg/openldap-2.4.39/etc/openldap/schema/core.schema

Re: Simple way to check that MMR is in sync?

2014-02-07 Thread Michael Ströder
Ulrich Windl wrote: What about comparing the EntryCSN of the top-level object? No! You should read what entryCSN attribute really is! You have to compare the contextCSN values in the database's root entry. In case you're using slapo-memberof or slapo-refint you want to have release 2.4.37+

Re: Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?

2014-02-07 Thread Simone Piccardi
On 07/02/2014 18:36, Quanah Gibson-Mount wrote: --On Friday, February 07, 2014 2:25 PM +0100 Simone Piccardi picca...@truelite.it wrote: Not to mention that slapd.conf is still far more readable that any slapd.d ldif... Definitely not. slapd.conf allows people to put things in all sorts

Re: Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?

2014-02-07 Thread Michael Ströder
Christopher Wood wrote: On Fri, Feb 07, 2014 at 02:25:45PM +0100, Simone Piccardi wrote: these last two are far usually done with a service restart, or, when the service support the online changes, with a service reload or a kill -HUP. Therein lies the issue with the text config file for

Re: Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?

2014-02-07 Thread Michael Ströder
Quanah Gibson-Mount wrote: --On Friday, February 07, 2014 2:25 PM +0100 Simone Piccardi picca...@truelite.it wrote: Not to mention that slapd.conf is still far more readable that any slapd.d ldif... Definitely not. slapd.conf allows people to put things in all sorts of random order that

Re: Recommended version of BDB package

2014-02-07 Thread Mark Cairney
On 07/02/2014 17:38, Quanah Gibson-Mount wrote: --On Friday, February 07, 2014 5:17 PM + Mark Cairney mark.cair...@ed.ac.uk wrote: Hi, Having recently experienced some issues with our Live server (2.4.38, Scientific Linux 6.4 64-bit) I was looking into possible causes and found the

how to manage groups in different machines using LDAP

2014-02-07 Thread Daniel Szortyka
Hey guys, I'm new in the forum and new in the LDAP world. I have my environment set up and working fine so far. I have a LDAP server and few other stations which autenticate in my server, OK so far. However, I have applications running exclusively with a special group, let's say SAS and that's

Re: Slow to add 1 million items

2014-02-07 Thread Howard Chu
Brent Bice wrote: On 02/05/2014 11:45 AM, Quanah Gibson-Mount wrote: Ok. I had some wierd perf issues with Ubuntu10 and Ubuntu12. I was able to resolve them on Ubuntu12 by upgrading to a newer 3.x kernel (currently 3.10.11-031011-generic on my Ubuntu12 box). Also, it isn't necessary to use

Re: Recommended version of BDB package

2014-02-07 Thread Howard Chu
Mark Cairney wrote: On 07/02/2014 17:38, Quanah Gibson-Mount wrote: --On Friday, February 07, 2014 5:17 PM + Mark Cairney mark.cair...@ed.ac.uk wrote: Hi, Having recently experienced some issues with our Live server (2.4.38, Scientific Linux 6.4 64-bit) I was looking into possible

Re: slapd-meta exclude syntax; larger problem with rwm, collective attributes.

2014-02-07 Thread Howard Chu
Dan Pritts wrote: As I posted last week I am trying to put a proxy in front of Active Directory. AD has most of the required attributes for my application, but I need to fill in a couple that are missing. Translucent proxy makes sense, combined with the collect overlay. Unfortunately, slapd

Re: how to manage groups in different machines using LDAP

2014-02-07 Thread Choure, Sidd
Are you creating the groups in LDAP as well? It seems that you aren’t. Just get rid of local groups and create the group in LDAP with the same GID. This will the GID will be consistent across machines. Siddharth Choure Senior Systems Engineer Apartments.com | Apartment Home Living 175 W

Re: OpenLDAP static configuration

2014-02-07 Thread Ali Gholami
Dan, I followed the instructions to update my config file but still I get the same error. I used the debug option as well but there were no obvious error message more than: ** ld 0x7f3c527864b0 Outstanding Requests: * msgid 2, origid 2, status InProgress outstanding referrals 0,

Re: Slow to add 1 million items

2014-02-07 Thread Christopher Wood
On Fri, Feb 07, 2014 at 10:49:29AM -0700, Brent Bice wrote: (SNIP) I've got a few OpenLDAP instances that I use for writing log data to, so write performance is critical, but since I'm building it from log data, absitively, posolutely, guaranteed perfect DB consistency isn't. I can always

Re: slapd-meta exclude syntax; larger problem with rwm, collective attributes.

2014-02-07 Thread Dan Pritts
Howard Chu wrote: Dan Pritts wrote: As I posted last week I am trying to put a proxy in front of Active Directory. AD has most of the required attributes for my application, but I need to fill in a couple that are missing. Translucent proxy makes sense, combined with the collect overlay.

Openldap shutdown expectedly

2014-02-07 Thread Liu Yongjian
I have make a question on http://stackoverflow.com/questions/21619553/openldap-unexpectedly-shutdown Can anyone help me? -- Thank you

Re: Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?

2014-02-07 Thread harry . jede
Simone Piccardi wrote: On 07/02/2014 18:36, Quanah Gibson-Mount wrote: --On Friday, February 07, 2014 2:25 PM +0100 Simone Piccardi picca...@truelite.it wrote: Not to mention that slapd.conf is still far more readable that any slapd.d ldif... Definitely not. slapd.conf allows