Re: Unable to start

2010-08-18 Thread Dieter Kluenter
VANTASSLE, GEORDON M (ATTSI) gv2...@att.com writes: I finally got everything compiled, and the make test worked like a charm. However, when I try to manually start LDAP via the rc.openldap script, I get: $ ./test.rc.openldap start Starting test.rc.openldap service(s)

Maximum ldap search filter string length ?

2010-08-18 Thread Arjan Filius
Hello openldap-technical ML. Is there a clear answer to the question about the maximum ldap search filter length ? Dit hava a look at the ldapsearch code (2.4.19) and all seems dynamicaly allocated, and therefore no hard/fixed limit. ldap_search_ext/ldap_search (manpage) doesn't talk about

Re: Openldap2.4.16 performance issue

2010-08-18 Thread Dieter Kluenter
Singh, Devender (GE Capital, consultant) devender.sin...@ge.com writes: Hi Dieter, I need to tune any parameter in DB_CONFIG file for this or not? Because I am using default DB_CONFIG file. Just edit DB_CONFIG set_log_dir /mountpoint/path/to/ -Dieter -- Dieter Klünter |

Re: replication from child to Parent domain

2010-08-18 Thread owen nirvana
parent is customer suffix dc=SCNCA,dc=ROOTCA rootdncn=admin,dc=SCNCA,dc=ROOTCA rootpwsecret checkpoint 512 30 overlay syncprov syncprov-checkpoint 100 10 syncprov-sessionlog 100 ServerID 000 syncrepl rid=001

RE: Openldap2.4.16 performance issue

2010-08-18 Thread Singh, Devender (GE Capital, consultant)
Hi Dieter, I need to tune any parameter in DB_CONFIG file for this or not? Because I am using default DB_CONFIG file. Thanks Regards, Devender Singh Senior Unix Administrator, (SOA Support Team)

ldap_add: Invalid syntax (21)

2010-08-18 Thread Cole
Hello. I'm trying to set up a computer cluster for a school project, and I am following a guide at debianclusters.org http://www.debianclusters.org. I'm trying to set up LDAP and I've followed the tutorial, but I keep getting this error. I saw this error in the FAQ, but I'm not sure how to fix

Re: ldap_add: Invalid syntax (21)

2010-08-18 Thread Dieter Kluenter
Cole colewash...@gmail.com writes: Hello.  I'm trying to set up a computer cluster for a school project, and I am following a guide at debianclusters.org.  I'm trying to set up LDAP and I've followed the tutorial, but I keep getting this error.  I saw this error in the FAQ, but I'm not

multi / standby master: incomplete replication after downtime (?)

2010-08-18 Thread Elmar Marschke
Hi all, i set up a multi master scenario using 2.4.21 on two servers. Online config (slapd.d) and ldap content is replicated fine, as long as both servers are up (means: i can change objects using ANY of the servers; and changes are transferred immediately to the other one. (Later in

Re: multi / standby master: incomplete replication after downtime (?)

2010-08-18 Thread Oliver Liebel
Am 18.08.2010 11:01, schrieb Elmar Marschke: Hi all, i set up a multi master scenario using 2.4.21 on two servers. Online config (slapd.d) and ldap content is replicated fine, as long as both servers are up (means: i can change objects using ANY of the servers; and changes are transferred

Re: multi / standby master: incomplete replication after downtime (?)

2010-08-18 Thread Elmar Marschke
Hello Jonathan Oliver, thanks for your answers... because you both are asking about config details, i'll try to answer but you can find my complete slapd.conf below, so that you can take a look by yourself. On 18.08.2010 11:57, Jonathan Clarke wrote: Hi, Does your config also contain

Re: multi / standby master: incomplete replication after downtime (?)

2010-08-18 Thread Oliver Liebel
the mmr config was tested many times and should work as expected, but your clockskew below may be to great for mmr to work as intended are your servers are physical/paravirt vms or full emulated vms? if they are full emulated (eg vmware server), you will always run into major clock skews. check

Re: multi / standby master: incomplete replication after downtime (?)

2010-08-18 Thread Elmar Marschke
On 18.08.2010 15:10, Oliver Liebel wrote: the mmr config was tested many times and should work as expected, but your clockskew below may be to great for mmr to work as intended are your servers are physical/paravirt vms or full emulated vms? if they are full emulated (eg vmware server), you

Re: multi / standby master: incomplete replication after downtime (?)

2010-08-18 Thread Jonathan CLARKE
On 18/08/2010 16:28, Elmar Marschke wrote: On 18.08.2010 15:10, Oliver Liebel wrote: the mmr config was tested many times and should work as expected, but your clockskew below may be to great for mmr to work as intended are your servers are physical/paravirt vms or full emulated vms? if they

Re: multi / standby master: incomplete replication after downtime (?)

2010-08-18 Thread Oliver Liebel
please sync the time first as exact as possible, and make an initial resync with a fresh test-database Am 18.08.2010 16:28, schrieb Elmar Marschke: On 18.08.2010 15:10, Oliver Liebel wrote: the mmr config was tested many times and should work as expected, but your clockskew below may be to

Re: multi / standby master: incomplete replication after downtime (?)

2010-08-18 Thread Elmar Marschke
Am 18.08.2010 17:16, schrieb Rein Tollevik: On 08/18/2010 04:28 PM, Elmar Marschke wrote: Here's the logfile of MASTER: ===_BEGIN_CHANGES_WHILE_BOTH_UP_=== Aug 18 15:30:04 ldapmaster slapd[8017]: slap_queue_csn: queing

Notification of userPassword change in OpenLDAP?

2010-08-18 Thread Tom Leach
I'm trying to work on a password sync scheme between OpenLDAP and some systems that use flat Unix passwd/shadow files. I have been able to update the LDAP server when someone changes their password on the standalone Unix systems, but I'm having problems trying to get any kind of notification

Re: Re: pwdMustChange and pwdExpireWarning

2010-08-18 Thread weigao88
Hello Buchan I am running the rpm package openldap server 2.3 that comes with CentOS 5.4 and my ldap client is CentOS 4. Looks like there is no ldapwhoami -e ppolicy option on CentOS4 client, as you can see below. I also copy and paste the client's /etc/pam.d/system-auth below.

Re: pwdMustChange and pwdExpireWarning

2010-08-18 Thread Buchan Milne
On Wednesday, 18 August 2010 22:26:38 weiga...@gmail.com wrote: Hello Buchan I am running the rpm package openldap server 2.3 that comes with CentOS 5.4 So test this client from the server. and my ldap client is CentOS 4. Looks like there is no ldapwhoami -e ppolicy option on CentOS4

Re: Notification of userPassword change in OpenLDAP?

2010-08-18 Thread Howard Chu
Tom Leach wrote: I'm trying to work on a password sync scheme between OpenLDAP and some systems that use flat Unix passwd/shadow files. I have been able to update the LDAP server when someone changes their password on the standalone Unix systems, but I'm having problems trying to get any kind

Re:

2010-08-18 Thread Buchan Milne
On Tuesday, 17 August 2010 17:35:49 VANTASSLE, GEORDON M (ATTSI) wrote: I'm at a loss as to what to do next. I'm running on RHEL 5 There are pre-built packages of OpenLDAP 2.4 for RHEL5 available. They might not be absolutely current, but they are much newer than 2.4.11, and more or less work

Re: Unable to start

2010-08-18 Thread Buchan Milne
On Tuesday, 17 August 2010 20:48:22 VANTASSLE, GEORDON M (ATTSI) wrote: I finally got everything compiled, and the make test worked like a charm. However, when I try to manually start LDAP via the rc.openldap script, I get: $ ./test.rc.openldap start Where did you get this init script? It

Re: Openldap2.4.16 performance issue

2010-08-18 Thread Howard Chu
Singh, Devender (GE Capital, consultant) wrote: Hi Chu, Please help me on my below issue. It’s very urgent. If you have a support contract with us, you can contact us at supp...@symas.com for help. Otherwise, people help on this list as their time and interest allows. Thanks Regards,//

RE: Openldap2.4.16 performance issue

2010-08-18 Thread Siddhartha Jain
Off the top of my head: 1. What indexes have been created? Do they match the attributes that your applications use most often? 2. In this age of cheap RAM, 2GB RAM for a server seems puny. Latest Dell R710s come packed with 32-64GB RAM. Consider a hardware upgrade. 3.

RE: Openldap2.4.16 performance issue

2010-08-18 Thread Chris Jacobs
Devender, You did see this email reply, right: Singh, Devender (GE Capital, consultant) devender.sin...@ge.commailto:devender.sin...@ge.com writes: Hi Dieter, I need to tune any parameter in DB_CONFIG file for this or not? Because I am using default DB_CONFIG file. Just edit

RE: Openldap2.4.16 performance issue

2010-08-18 Thread Singh, Devender (GE Capital, consultant)
Yes I did it, but not getting good performance. I restart slapd every time when cpu goes 200%. Thanks Regards, Devender Singh Senior Unix Administrator, From: Chris Jacobs [mailto:chris.jac...@apollogrp.edu] Sent: Thursday, August 19, 2010 4:17 AM To: Singh, Devender (GE Capital,

RE: Openldap2.4.16 performance issue

2010-08-18 Thread Quanah Gibson-Mount
--On August 19, 2010 4:23:31 AM +0530 Singh, Devender (GE Capital, consultant) devender.sin...@ge.com wrote: Yes I did it, but not getting good performance. I restart slapd every time when cpu goes 200%. What is the size of your *.bdb files? Are you on a 32-bit or 64-bit server?

RE: Openldap2.4.16 performance issue

2010-08-18 Thread Singh, Devender (GE Capital, consultant)
Please find the below answers: [r...@abc openldap-data-ge_cw]# du -sh *.bdb 3.6Mbr.bdb 72K cn.bdb 32K displayName.bdb 234Mdn2id.bdb 104Kgr.bdb 419Mid2entry.bdb 56K mail.bdb 1.4MobjectClass.bdb 2.9Mpf.bdb 212Kpr.bdb 72K sn.bdb 72K uid.bdb [r...@abc

RE: Openldap2.4.16 performance issue

2010-08-18 Thread Singh, Devender (GE Capital, consultant)
Please find the answers: 1. What indexes have been created? Do they match the attributes that your applications use most often? --- All required attributes related application indexed(equality) 2. In this age of cheap RAM, 2GB RAM for a server seems puny. Latest Dell R710s come

RE: Openldap2.4.16 performance issue

2010-08-18 Thread Quanah Gibson-Mount
--On August 19, 2010 4:41:14 AM +0530 Singh, Devender (GE Capital, consultant) devender.sin...@ge.com wrote: 5. Upgrade from 2.4.16 to 2.4.xx?---I don’t think that up gradation will solve this issue. I disagree, I think it could have a significant result in your issue. Here my

RE: Openldap2.4.16 performance issue

2010-08-18 Thread Singh, Devender (GE Capital, consultant)
If you want any other information, I can give you. I need permanent solution:) Thanks Regards, Devender Singh Senior Unix Administrator, (SOA Support Team) SDG Software India

RE: Openldap2.4.16 performance issue

2010-08-18 Thread Singh, Devender (GE Capital, consultant)
As per the client requirement there is no need of substring indexing Thanks Regards, Devender Singh Senior Unix Administrator, (SOA Support Team) SDG Software India Pvt. Ltd

RE: Openldap2.4.16 performance issue

2010-08-18 Thread Siddhartha Jain
In that case, you should ask the *client* to give you a solution. Seriously, if you do not have complete control over LDAP configuration or if *client* dictates certain config parameters then it is best to report this as a bug to your application team. Do you have a test instance to do test

RE: Openldap2.4.16 performance issue

2010-08-18 Thread Singh, Devender (GE Capital, consultant)
Before migration, the application was running fine without any issue on IBM Tivoli directory server 5.2. Yes we have a test server. Please suggest me configuration level changes. Thanks Regards, Devender Singh Senior Unix Administrator, (SOA Support Team)

RE: Openldap2.4.16 performance issue

2010-08-18 Thread Quanah Gibson-Mount
1) You seriously need to use OpenLDAP 2.4.23. I don't care if you don't think that'll solve the issue or not. ;) 2) You need to state which backend you are using (back-hdb, back-bdb, etc) 3) You need to state your updated DB_CONFIG, based on the cachesize info I suggested earlier 4) You