Re: mdb and memory size...

Thanks. What is the default maxsize ? f.g. > Le 10 sept. 2020 à 17:05, Quanah Gibson-Mount a écrit : > > > > --On Thursday, September 10, 2020 10:40 AM +0200 Frédéric Goudal > wrote: > >> Hello, >> >> As I understand mdb database should be in

Re: Resyncing basic question..

> Le 31 août 2020 à 21:22, Howard Chu a écrit : > > Quanah Gibson-Mount wrote: >> >> >> --On Wednesday, August 26, 2020 10:09 AM +0200 Frédéric Goudal >> wrote: >> >>> Hello, >>> >>> I'm wondering about the correc

how to clean old multiple CSN ?

Hello, I have an ldap master that from some reason has multiple CSN : contextCSN: 20130927152219.157851Z#00#001#00 contextCSN: 20131127140429.597497Z#00#002#00 contextCSN: 20141208130549.278599Z#00#004#00 contextCSN: 20200831094837.531411Z#00#00a#00 Some are

mdb and memory size...

Hello, As I understand mdb database should be in memory. Is there a way to calculate the correct amount of memory that should be allocated to a server so the database fit with no swap ? I guess the maxsize attribute should be set to a correct value too.. Thanks in advance f.g.

Resyncing basic question..

Hello, I’m wondering about the correct way to resync a directory in a push configuration… The setup is the following (as described in the documentation) : - on the master I have added a second suffix with the hidden property and the same suffix value. - this suffix have an ldap backend on

Context CSN timestamp

Hello, I have a strange problem of synchronization, since yesterday my slave servers have a small difference of 2 or 3 minutes with the master. I mean the context CSN of the slave is 3 mn earlier than contextCSN of the master. My first question is the following : how the timestamp of the

A bit of help for a master migration.

Hello, I’m in the way to replace our main ldap server with the moe nest recent version. As the OS of the current one is quite old we will host it on a new computer. For now the architecture is the following : master-ldap with two local replica via syncprov and another replica with a proxy

Re: ACL for sync reader

> Le 5 mars 2021 à 17:31, Quanah Gibson-Mount a écrit : > > > > --On Friday, March 5, 2021 10:03 AM +0100 Frédéric Goudal > wrote: > >> Hello, >> >> Thanks for the correction I understand better now. >> >> And than another quest

ACL for sync reader

Hello, I have a production ldap with some acl set. For historical reason the synchronizationn is done with the root dn which is bad. I want to add a user to perform synchronization it must have the right to read everytthing. is the acl : access to * by dn.exact= break added in first

Re: ACL for sync reader

unt a écrit : > > > > --On Thursday, March 4, 2021 5:44 PM +0100 Frédéric Goudal > wrote: > >> Hello, >> >> I have a production ldap with some acl set. For historical reason the >> synchronizationn is done with the root dn which is bad. I want to add

Re: Unable to change ssl version on openldap 2.6.0

son-Mount a écrit : > > > > --On Wednesday, February 23, 2022 6:07 PM +0100 Frédéric Goudal > wrote: > >> It works, I show you : >> >> against 2.4.0 openldap server >> >> nmap --script ssl-enum-ciphers -p 636 >> >> So… it still d

Re: Unable to change ssl version on openldap 2.6.0

> Le 22 févr. 2022 à 17:48, Quanah Gibson-Mount a écrit : > --On Tuesday, February 22, 2022 9:45 AM +0100 Frédéric Goudal > wrote: > >> Hello, >> >> For a legacy application we need to drop the ssl version available on our >> openldap server. >>

Unable to change ssl version on openldap 2.6.0

… What do I miss ? Or is it a feature ? Thanks in advance f.g. — Frédéric Goudal Ingénieur Système, DSI Bordeaux-INP +33 556 84 23 11

Re: Unable to change ssl version on openldap 2.6.0

0 modifiersName: cn=config modifyTimestamp: 20220222083441Z contextCSN: 20210308104755.920794Z#00#00e#00 contextCSN: 20211122120925.101869Z#00#018#00 contextCSN: 20220222083441.609985Z#00#019#00 So… it still does not work. What can I do ? f.g. — Frédéric Goudal Ingénieur Système, DSI Bordeaux-INP +33 556 84 23 11

Re: assert error + core dump slapd v 2.6.6

Hello, Well in fact I have found the problem : the access data base was corrupted due to a previous lack of disk space. Anyway I will fill a bugreport. f.g. > Le 13 sept. 2023 à 18:52, Quanah Gibson-Mount a écrit : > > > > --On Wednesday, September 13, 2023 6:19 PM +0200

assert error + core dump slapd v 2.6.6

L && (*a)->a_nvals == (*a)->a_vals ) || ( nvals != NULL && ( ( (*a)->a_vals == NULL && (*a)->a_nvals == NULL ) || ( (*a)->a_nvals != (*a)->a_vals ) ) )' failed. Aborted (core dumped) Is it a bug ? f.g. — Frédéric Goudal Ingénieur Système, DSI Bordeaux-INP +33 556 84 23 11

Re: contextCSN via slapcat outdated, despite having set syncprov-checkpoint

change our logging to query contextCSN through an > ldapsearch, but we see advantages (no network, no authentication, etc, etc) > in using slapcat as well. > > Is there anything we can do to update on-disk contextCSN more often..? > We would expect " syncprov-checkpoint 100 1&q

replacement of memberof by dynlist.. questions..

(objectclass=posixgroup) (memberuid=%uid%)) where %uid% would be the uid attribute value of the considered object. Or do I miss solething ? — Frédéric Goudal Ingénieur Système, DSI Bordeaux-INP +33 556 84 23 11

Re: replacement of memberof by dynlist.. questions..

of objectClass GroupOfNames that will be used to build the myMemberOf value (thus allowing to restrict the groups where to search for membership ? f.g. > Le 17 oct. 2022 à 16:25, Quanah Gibson-Mount a écrit : > > > > --On Monday, October 17, 2022 4:51 PM +0200 Frédéric G

How to debug out of sync servers ?

is very low. OS is ubuntu 20.04 I don’t know where to dig... Thanks in advance — Frédéric Goudal Ingénieur Système, DSI Bordeaux-INP +33 556 84 23 11

Re: How to debug out of sync servers ?

on the master. But I have a second problem on a more complex setup (replication in push mode) and I will try to see what slapd watcher can do for me. Thanks. Fred. > Le 13 oct. 2022 à 14:27, Shawn McKinney a écrit : > > > >> On Oct 12, 2022, at 9:25 AM, Frédéric

Re: upgrading openldap 2.4 to 2.5

aster in 2.5 and consumers in 2.4 work's fine ? > > Thank's in advance for your replies. > > Regards > > > Olivier — Frédéric Goudal Ingénieur Système, DSI Bordeaux-INP +33 556 84 23 11

Most efficient way to update multivalued attributes

. And to be a bit more precise, if we have a big number of values is one of the two way best ? Thanks in advance f.g. — Frédéric Goudal Ingénieur Système, DSI Bordeaux-INP +33 556 84 23 11

Re: Most efficient way to update multivalued attributes

17:29, Howard Chu a écrit : > > Frédéric Goudal wrote: >> Hello, >> >> >> I have to update records with mutlivalued attributes, and I wonder what is >> the best (fastest, or lighter for the server) to do : >> >> - either just set the value w

Strange search result in logs

ou have an explanation of the first anwser ? Is there any param that can be in the request to cause the err=4 ? Maybe I should rise the logLevel to find the difference between the two requests ? Thanks in advance for any hint... — Frédéric Goudal Ingénieur Système, DSI Bordeaux-INP +33 556 84 23 11

Re: Help debugging slave slapd issues

loadd isn’t ? Thanks. f.g. — Frédéric Goudal Ingénieur Système, DSI Bordeaux-INP +33 556 84 23 11

Re: Strange search result in logs

> Le 27 mars 2024 à 15:35, Quanah Gibson-Mount a écrit : > > > > --On Wednesday, March 27, 2024 11:28 AM +0100 Frédéric Goudal > wrote: > >> Hello, >> >> I'm trying to analyse the requests done to my ldapserver from a nas. >> While br