Re: slapo-sock

2015-06-26 Thread Howard Chu
Howard Chu wrote: Michael Ströder wrote: Michael Ströder wrote: Lalot Dominique wrote: Hum, my version is 2.4.40, so that's the last version. Is there a mistake somewhere? Looking at [1] ITS#8048 was fixed for release 2.4.41 (tagged in git) but not officially packaged in a tar.gz yet

Re: slapo-sock

2015-06-24 Thread Howard Chu
to patch Hope this helps other people, or if I'm wrong please correct me Looks like you hit ITS#8048. This was already fixed back in February. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP

Re: Next Release of LMDB

2015-06-02 Thread Howard Chu
opensuse already does that. The robust mutex patch is still being tested and isn't slated for the next (0.9.15) release. Probably the one after. 0.9.15 is a bugfix-only release, the robust mutex code is a new feature (and may yet be unstable). -- -- Howard Chu CTO, Symas Corp

Re: relax rules control and MMR

2015-07-03 Thread Howard Chu
. Should updating the attributes 'authTimestamp' and 'pwdFailureTime' work with relax rules control also with MMR? authTimestamp is a non-replicated operational attribute, so not sure how that has any bearing on MMR. ?? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com

Re: A new open-source TLS implementation

2015-07-02 Thread Howard Chu
the modular framework for all of them). The world really didn't need another one. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: OpenLDAP and dynalogin (two-factor auth with HOTP)

2015-06-29 Thread Howard Chu
. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Segmentation fault when overwriting a k/v with MDB_RESERVE ?

2015-08-18 Thread Howard Chu
the size of the new record? Show sample code that demonstrates the problem? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Segmentation fault when overwriting a k/v with MDB_RESERVE ?

2015-08-21 Thread Howard Chu
in the persisted page ? I tried with the flags MDB_RESERVE|MDB_APPEND but it fails. On 18 August 2015 at 15:41, Simon Majou si...@majou.org mailto:si...@majou.org wrote: Oh ok it makes sense now. Thank you for the heads up On 18 August 2015 at 15:36, Howard Chu h...@symas.com

Re: Multi-master syncrepl config: excluding olcSaslHost from replication

2015-08-21 Thread Howard Chu
it can't see it on the node where the attribute was changed, but it can see it on the downstream nodes, it wipes the attribute out entirely. Any help / suggestions welcome. Thanks, --Kyle -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http

Re: Segmentation fault when overwriting a k/v with MDB_RESERVE ?

2015-08-21 Thread Howard Chu
there was something else I missed. But ok I understand this is not supported. For exactly the same reason as I already told you. On 21 August 2015 at 21:21, Howard Chu h...@symas.com mailto:h...@symas.com wrote: Simon Majou wrote: Correction, with the flags MDB_RESERVE|MDB_APPENDDUP

Re: 0.9.16 build problems for android

2015-08-18 Thread Howard Chu
the robust mutex support yet. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Segmentation fault when overwriting a k/v with MDB_RESERVE ?

2015-08-18 Thread Howard Chu
-mdb.c:43 It seems the mp_lower value of the page is set to 0 instead of a value inside the page. On 18 August 2015 at 13:58, Howard Chu h...@symas.com mailto:h...@symas.com wrote: Simon Majou wrote: Hello, I wonder, why do I get a Segmentation fault when I use mdb_put

Re: LMDB docs refresh?

2015-08-16 Thread Howard Chu
features are being deferred to 1.x anyway. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: LMDB docs unavailable: 403

2015-08-17 Thread Howard Chu
Kristoffer Sjögren wrote: Hi The link to the documentation for LMDB is broken. http://symas.com/mdb/doc Working now. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: Increasing memory usage on successive LMDB reads

2015-07-31 Thread Howard Chu
is less). If there is memory pressure, LMDB will use less. Memory used by LMDB grows and shrinks dynamically and automatically with the system load. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect

Re: question on write transaction

2015-08-03 Thread Howard Chu
this issue known to community or is there any way to work around? This is already documented. http://symas.com/mdb/doc/group__mdb.html#gad7ea55da06b77513609efebd44b26920 -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: Is Openldap a Authorization or Authentication system?

2015-08-11 Thread Howard Chu
if you have GSSAPI. And vice versa, TLS can be used both for the actual authentication step (using X.509 certs, as noted above) as well as for securing the traffic. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: New Listmember with a olcAccess question

2015-08-06 Thread Howard Chu
somebody can help me? Or is such a thing not possible to do? Your rule uses group.exact, which means it is NOT doing regex evaluation. Read the slapd.access(5) manpage again. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com

Re: Adding Members to Groups

2015-08-06 Thread Howard Chu
. You missed the actual question. groupOfNames REQUIRES the member attribute, therefore it's not possible to create an empty group and add members to it later. There ought to be an FAQ article for this. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland

Re: ldap proxy to AD with local ACLs

2015-08-06 Thread Howard Chu
mode and only pass the the password change (modify: DEL/ADD)? You could use the denyop overlay to deny all write operations. I don't know of any way currently to allow only passwordModify exops, it would actually allow all extended operations. -- -- Howard Chu CTO, Symas Corp. http

Re: LMDB Replication

2015-07-22 Thread Howard Chu
planning to add incremental backup in LMDB 1.0. Other mechanisms could be built on top of that pretty easily. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Strategy for using ldapsearch and security

2015-07-17 Thread Howard Chu
and check if the group of interest's set of members includes the user's DN. e.g. ldapcompare cn=some group,ou=groups,dc=example,dc=com member:cn=Rhodes\, Neal A,ou=people,dc=example,dc=com -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http

Re: Columnar databases

2015-07-13 Thread Howard Chu
(logN) where N is the number of keys... -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: How to import user certificates in OpenLDAP?

2015-07-14 Thread Howard Chu
to load a binary value. You can load DER format certificates directly, this way. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: storing HA1 password hash for HTTP DIGEST, SIP, TURN

2015-07-16 Thread Howard Chu
solution for RADIUS, rlm_digest http://freeradius.org/radiusd/man/rlm_digest.txt I'm just wondering if anybody can give any more feedback about this issue before I look at coding anything for it? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun

Re: How to import user certificates in OpenLDAP?

2015-07-16 Thread Howard Chu
Vaclav Barta wrote: Hi, On 7/15/2015 7:34 PM, Howard Chu wrote: Sounds like your Windows build of OpenLDAP is broken. Your LDIF works fine on my Linux box. quite possibly - it's just the first thing I found with Google, after all... What is the recommended OpenLDAP binary package for Windows

Re: How to import user certificates in OpenLDAP?

2015-07-15 Thread Howard Chu
Vaclav Barta wrote: Hi, Sounds like your Windows build of OpenLDAP is broken. Your LDIF works fine on my Linux box. On 7/15/2015 4:55 PM, Howard Chu wrote: Vaclav Barta wrote: It fails: C:\OpenLDAP\ClientToolsldapmodify.exe -a -x -h localhost -p 389 -D cn=manager, dc=maxcrc,dc=com -f

Re: OpenLDAP and DH parameter size / LogJam vulnerability

2015-07-15 Thread Howard Chu
Jens Vagelpohl wrote: On 15 Jul 2015, at 17:35 , Howard Chu h...@symas.com wrote: No ITS needed, this code was already rewritten in HEAD, ITS#7506. Hi Howard, Since that ITS is several years old I guess the fix is not in OPENLDAP_REL_ENG_2_4? Surely you can read the ITS yourself. https

Re: OpenLDAP and DH parameter size / LogJam vulnerability

2015-07-15 Thread Howard Chu
rewritten in HEAD, ITS#7506. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: How to import user certificates in OpenLDAP?

2015-07-15 Thread Howard Chu
exactly should I write it? Use usercertificate;binary: file:///blahblahblah -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: LDAP over TLS

2015-07-14 Thread Howard Chu
#000#00 modifiersName: cn=config modifyTimestamp: 20150713211745Z -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: OpenLDAP and DH parameter size / LogJam vulnerability

2015-07-14 Thread Howard Chu
IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher: DHE-RSA-AES256-GCM-SHA384 ### What is your cert's public key size? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com

Re: How can I solve OpenLdap additional info:objectClass value#0 invalid per syntax Error?

2015-08-24 Thread Howard Chu
\+$// this will remove all trailing spaces. -Dieter -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Atribute Tags [was: multi-value attribute virtual view of single attribute]

2015-10-27 Thread Howard Chu
Marc Patermann wrote: Howard, Am 24.10.2015 um 07:24 Uhr schrieb Howard Chu: Quanah Gibson-Mount wrote: --On Friday, October 23, 2015 1:15 PM -0700 Jason Whitener <jwhit...@pcc.edu> wrote: If I had a multi-valued attribute like cn: var0:value cn: var2:value cn: var3:value I think

Re: multi-value attribute virtual view of single attribute

2015-10-23 Thread Howard Chu
f each of those are just arbitrary tags, and not for ordering purposes, then just using an attribute tag might be the better option. cn;var0: value cn;var2: value cn;var3: value -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.c

Re: Millions of users linked into a single group

2015-10-27 Thread Howard Chu
better off using a dynamic group instead. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Binding mdb_set_compare with Go

2015-10-29 Thread Howard Chu
n language is actually tolerable. Thanks for the consideration. Cheers, - Bryan [1] Go bindings -- https://github.com/bmatsuo/lmdb-go [2] Cgo pointer restrictions -- https://github.com/golang/proposal/blob/master/design/12416-cgo-pointers.md [3] Cgo documentation -- https://golang.org/cmd/cgo/ --

Re: Binding mdb_set_compare with Go

2015-10-29 Thread Howard Chu
on to call, the only one it knows about is the function pointer that you pass. If this is what you're referring to, adding a context pointer doesn't achieve anything. If this isn't what you're referring to, then please explain exactly what you hope to achieve with this context pointer. --

Re: RE24 testing call #3 (2.4.43) LMDB RE0.9 testing call #3 (0.9.17)

2015-11-11 Thread Howard Chu
Volker Lendecke wrote: On Wed, Nov 11, 2015 at 12:09:51AM +, Howard Chu wrote: Unfortunately, PTHREAD_MUTEX_ROBUST_NP is an enum, not a macro, so #ifdef won't work to detect it. The attached patch should work. Please report back; I won't merge it unless we know it actually helps

Re: modify ldap conn=-1

2015-11-10 Thread Howard Chu
Daniel Jung wrote: Hi, Typically conn represents external connection number? Sometimes i see conn=-1. Does this mean this is local or sycnrepl connection modification? It generally means an internal operation. It might be from syncrepl; it could be for other things too. -- -- Howard Chu

Re: Antw: Re: LMDB physical file size

2015-11-10 Thread Howard Chu
LMDB manages pages the way it does *because that is the optimal way to do so*. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: RE24 testing call #3 (2.4.43) LMDB RE0.9 testing call #3 (0.9.17)

2015-11-11 Thread Howard Chu
Volker Lendecke wrote: On Wed, Nov 11, 2015 at 09:49:49AM +, Howard Chu wrote: Volker Lendecke wrote: On Wed, Nov 11, 2015 at 12:09:51AM +, Howard Chu wrote: Unfortunately, PTHREAD_MUTEX_ROBUST_NP is an enum, not a macro, so #ifdef won't work to detect it. The attached patch should

Re: LMDB file size, again

2015-11-11 Thread Howard Chu
be stupid. 2. choose a large file size and reduce the size by doing a mdb_copy when the application shuts down No. That would be stupid. or maybe a combination of the two? How does SQLightning handle this (2. doesn't sound practical)? -- -- Howard Chu CTO, Symas Corp. http

Re: Problem making refint_nothing working

2015-11-17 Thread Howard Chu
that the refint overlay itself would make when trying to maintain integrity. It doesn't interfere with user modification requests at all. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: Integrate Openldap and Windows Active Directory Server

2015-11-17 Thread Howard Chu
-project.org/wiki/documentation/general/sasl_delegation I also often synchronize OpenLDAP and AD thanks to LSC project, see http://lsc-project.org/wiki/documentation/tutorial/openldaptoactivedirectory Clément. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director,

Re: Searches with dereferncing causing high CPU load.

2015-11-17 Thread Howard Chu
with back-hdb a couple of years ago. Not sure about back-mdb nowadays though. slapindex on back-mdb is faster than slapadd. But, for the problem being discussed here, slapindex is inadequate; you need a full reload with slapadd. -- -- Howard Chu CTO, Symas Corp. http

Re: LMDB physical file size

2015-11-09 Thread Howard Chu
ise for writable mmaps on POSIX systems. Read your operating system documentation. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Binding mdb_set_compare with Go

2015-10-30 Thread Howard Chu
break; } else { pa += la; pb += lb; } } } } return result;

Re: pwdHistory, encrypted passwords and selfservice application

2015-10-30 Thread Howard Chu
approach is to use the passwordModify operation. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Unable to build LMDB on SUSE Linux: undefined reference to pthread_mutexattr_setrobust / pthread_mutex_consistent

2015-10-30 Thread Howard Chu
this, stick with the actual release branch. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Ch

Re: OTP broken?

2015-11-06 Thread Howard Chu
and has nothing to do with SASL. It also works perfectly with google authenticator, what makes you say it's broken? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: OTP broken?

2015-11-07 Thread Howard Chu
}NBUEI6KEJMYDCNBTGI2TMQKCINCA' s='NBUEI6KEJMYDCNBTGI2TMQKCINCA'.decode('base64') len(s) 21 -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: val/integerMatch="0"

2015-11-07 Thread Howard Chu
val=0 val.regex="^0$" Can somebody help me? Thanks in advance. Ciao, Michael. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: library

2015-11-04 Thread Howard Chu
spec for free from the ITU-T. http://www.itu.int/rec/T-REC-X.690/en -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: ldapsearch over SSL can not bind

2015-11-02 Thread Howard Chu
86:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed (self signed certificate in certificate chain) The error message is quite explicit - "certificate verify failed" - this obviously means that it started a TLS handshake, which obviously makes your focus on -Z completely off base. -- -- Howard Chu

Re: retrieving information about deleted objects

2015-11-02 Thread Howard Chu
with this. There is no isDeleted attribute in OpenLDAP. Read RFC4533. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Binding mdb_set_compare with Go

2015-10-29 Thread Howard Chu
will be even slower. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: [LMDB] What pointer is returned with combination of MDB_WRITEMAP and MDB_RESERVE?

2015-10-30 Thread Howard Chu
Best regards, Victor On Sat, Oct 3, 2015 at 1:27 AM, Howard Chu <h...@symas.com <mailto:h...@symas.com>> wrote: Howard Chu wrote: Victor Baybekov wrote: Thank you! I understand this copy-on-write behavior, but am interested if I coul

Re: Developing modules

2015-11-04 Thread Howard Chu
. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Question from a LMDB user

2015-11-04 Thread Howard Chu
ng special about LMDB. Thank your for your time! Best Regards, Tao Chen -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Can a ppolicy be applied to a subtree?

2015-10-15 Thread Howard Chu
for. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Columnar databases

2015-07-12 Thread Howard Chu
or are there better, more efficient ways/formats? What makes you think LMDB is either row- or column-based? It has no concept of either, that's purely an abstraction created by higher level code. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http

Re: LMDB file size, again

2015-11-13 Thread Howard Chu
use case. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: LMDB file size, again

2015-11-13 Thread Howard Chu
space for the app's needs, or you don't. If you don't have enough space, you need to reconfigure your system environment. If you have enough space, allocate it and be done with it. thanks, Christian > Howard Chu <h...@symas.com> hat am 11. November 2015 um 22:51 ge

Re: AW: disable unique overlay from member attributes

2015-08-27 Thread Howard Chu
#1 invalid per syntax What is going wrong here? From man slapo-unique(5) Keywords strict and ignore have to be enclosed in quotes () together with the URI. -Dieter -- Dieter Klünter | Systemberatung http://sys4.de GPG Key ID: E9ED159B 53°37'09,95N 10°08'02,42E -- -- Howard Chu

Re: LMDB: Robust mutexes

2015-09-02 Thread Howard Chu
got merged into mdb.master quite a while ago. The recent mailinglist traffic shows that we still have portability issues to resolve. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.op

Re: ldapsearch blocks forever

2015-09-07 Thread Howard Chu
and tunnels), the data will not arrive and ldapsearch will 'hang'. I'd like to ask what was the intention to call ldap_result() with tv.tv_sec = -1 even if a timelimit (option -l) was applied at command line. Use git blame, read the commit logs. -- -- Howard Chu CTO, Symas Corp

Re: uniqueness constraint violated when using ldapadd -M

2015-08-25 Thread Howard Chu
, this is already explicitly documented in the slapo-unique(5) manpage. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Centos 7/openldap/samba

2015-08-25 Thread Howard Chu
the ldif(5) manpage. Read the comments in schema/openldap.ldif. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: SSHA hash are stores as '{ssha}......' and '{SSHA}......'

2015-09-29 Thread Howard Chu
the hashing. Again, that is not a good practice. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: basic ldap functions

2015-09-28 Thread Howard Chu
are the RFC for this function (of course i will implement in ANSI C) ? How to organize data to be sent to the ldap server ? How to decode the data from the ldap server ? etc . Read the ldap(3) manpage. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun

Re: Complex multi-master topology

2015-10-04 Thread Howard Chu
Michael Ströder wrote: Howard Chu wrote: Yeah, replicating cn=config is only viable if all servers work with identical configuration. Making this configuration work would require adding a qualifier to the syncrepl config to restrict which server nodes it activates on. I think it would

Re: Complex multi-master topology

2015-10-04 Thread Howard Chu
tème Kronos Technologies - http://www.kronos-web.com tel: 418 877-5400 p.216 -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: [LMDB] What pointer is returned with combination of MDB_WRITEMAP and MDB_RESERVE?

2015-10-02 Thread Howard Chu
nside the single big mmap. This could be more convenient than creating and opening hundreds of temporary memory mapped files and keeping open handles to them. For example, Aeron terms could be stored like this: a stream id per an LMDB db and a term id for a key in the db. Thanks! Victor --

Re: [LMDB] What pointer is returned with combination of MDB_WRITEMAP and MDB_RESERVE?

2015-10-02 Thread Howard Chu
that this won't change in the future. The documentation tells you what promises we are willing to make. Relying on any non-documented behavior is your own responsibility. On Fri, Oct 2, 2015 at 4:38 PM, Howard Chu <h...@symas.com <mailto:h...@symas.com>> wrote: Victor Ba

Re: BP build OpenLDAP and lmdb packages

2015-09-27 Thread Howard Chu
ckages? This would probably also require to build separate version of the mdb tools. OpenLDAP should only ever be statically linked to the version of liblmdb it ships with. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.c

Re: Building OpenLDAP for Windows

2015-09-09 Thread Howard Chu
love Win 10 PRO as compared to Win 8.1 PRO. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: disable TLS compression with openssl?

2015-12-07 Thread Howard Chu
in OpenLDAP-2.5 -Dieter -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: RE24 testing call #3 (2.4.43) LMDB RE0.9 testing call #3 (0.9.17)

2015-12-02 Thread Howard Chu
; #12 0x004060d6 in test_clientfirst () > > #13 0x00406405 in foreach_mechanism () > > #14 0x00733d1f in main () > > (gdb) > > > > > > Building SASL against Berkeley DB does not show the same issue. > > > > Any pointers will be greatly appreciated. > > > > Thanks. > > > > Sergio. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Fwd: (ITS#8331) Download mirror list needs updating

2015-12-04 Thread Howard Chu
A number of the mirror sites have gone offline over the years. Anyone interested in running a new mirror for us? Forwarded Message Subject: (ITS#8331) Download mirror list needs updating Date: Fri, 04 Dec 2015 10:01:12 + From: andrew.find...@skills-1st.co.uk To:

Re: disable TLS compression with openssl?

2015-12-08 Thread Howard Chu
Paul B. Henson wrote: From: Howard Chu Sent: Monday, December 07, 2015 6:26 AM OpenLDAP does not enable compression so there is nothing to disable. Hmm, that's not what I am seeing. Using the latest sslscan: --- $ sslscan ldap.cpp.edu:636 Version: 1.10.6 OpenSSL 1.0.1p 9

Re: RE24 testing call (2.4.43)

2015-12-03 Thread Howard Chu
advices. best regards, Jephté CLAIN ITS#8330 was filed on this same issue. A fix is now in git. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (LMDB) read-only transactions and DBI handles

2015-12-11 Thread Howard Chu
Viacheslav Usov wrote: On Fri, Dec 11, 2015 at 3:37 AM, Howard Chu <h...@symas.com <mailto:h...@symas.com>> wrote: > abort is the way to end *any* transaction whose operations you wish to discard. > commit is the way to end *any* transaction whose operations you wish t

Re: (LMDB) read-only transactions and DBI handles

2015-12-11 Thread Howard Chu
Viacheslav Usov wrote: On Fri, Dec 11, 2015 at 2:51 PM, Howard Chu <h...@symas.com <mailto:h...@symas.com>> wrote: > A DBI handle is simply a slot in an in-memory array. Read-only transactions are read-only with respect to the database. That is fine with me. It was you who t

Re: (LMDB) Correct use of mdb_env_sync

2015-12-16 Thread Howard Chu
concurrently with writes? Can it be called concurrently with another mdb_env_sync in another thread? Try it and see. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: (LMDB) read-only transactions and DBI handles

2015-12-10 Thread Howard Chu
to end *any* transaction whose operations you wish to discard. commit is the way to end *any* transaction whose operations you wish to persist. If you open a DBI in a read-only transaction and you want that DBI to persist after ending the transaction, then commit the transaction. -- -- Howard Chu

Re: Checksum query

2015-12-10 Thread Howard Chu
79 bdb_cf_gen, "( OLcfgDbAt:1.16 NAME 'olcDbChecksum' " 80 "DESC 'Enable database checksum validation' " I tried olcDbChecksum: true, olcDbChecksum: TRUE, olcDbChecksum: 1, olcDbChecksum: ON without any success. Do you have any ideas on how I get around t

Re: (LMDB) read-only transactions and DBI handles

2015-12-11 Thread Howard Chu
must use a write transaction, since you are actually altering the underlying DB environment. If you are simply accessing an existing Sub-DB then there is no reason to require a write transaction. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun

Re: Can't open env with required mapsize on windows .

2015-12-29 Thread Howard Chu
Viacheslav Usov wrote: On Mon, Dec 28, 2015 at 8:27 PM, Howard Chu <h...@symas.com <mailto:h...@symas.com>> wrote: > You can't address more than 2GB of memory in 32 bit code. This is generally not true. A Win32 executable with the*IMAGE_FILE_LARGE_ADDRESS_AWARE *option set c

Re: LMDB ITS 8324 WriteMap performance on Windows

2015-12-30 Thread Howard Chu
use cases. On Wed, Dec 30, 2015 at 11:32 PM, Howard Chu <h...@symas.com <mailto:h...@symas.com>> wrote: Victor Baybekov wrote: Hi, Thanks a lot for ITS#8324! For embedded, not server, use case that change adds much convenience. I have

Re: LMDB ITS 8324 WriteMap performance on Windows

2015-12-30 Thread Howard Chu
nversation stays with the ticket. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Knowing free mdb space

2016-01-07 Thread Howard Chu
://tools.ltb-project.org/projects/ltb/repository/entry/nagios-plugins/trunk/check_lmdb_usage.pl We had plans to put the mdb_stats into cn=monitor. I guess that'll be a 2.5 feature. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http

Re: LMBD questions (stat & copy)

2016-01-07 Thread Howard Chu
e 19. Is it expected given my program? Best regards, Bruno. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Regarding Transactions that span Multiple files

2015-12-21 Thread Howard Chu
(txn_staff) -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: LMDB: question about MDB_RESERVE

2015-12-21 Thread Howard Chu
am doubting.. Where is the MDB_RESERVE doc inconsistent? Point it out and we'll clarify it. thanks + happy holidays, Chris -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Attribute pwdPolicySubentry

2015-12-18 Thread Howard Chu
web2ldap has also full schema support it deliberately does not implement client-side schema checks for this very reason (guiding instead of enforcing). BTW: That's why I asked in my first response: "Which component does produce this error message?" Ciao, Michael. -- -- Howard Chu

Re: lmdb Handle Leak with VL32 on Windows

2015-12-28 Thread Howard Chu
me_fmh) CloseHandle(env->me_fmh); if (env->me_rpmutex) CloseHandle(env->me_rpmutex); #else pthread_mutex_destroy(>me_rpmutex); -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/

Re: Can't open env with required mapsize on windows .

2015-12-28 Thread Howard Chu
you gotten a stack trace from such a hang? That's the obvious first step that any application developer should know to do. Both the above questions concerns just Windows. Everything is fine with linux. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Su

Re: Can't open env with required mapsize on windows .

2015-12-28 Thread Howard Chu
should already know how your OS works. So the quesstion really is how to get it working when compiled on a 32-bit compiler and executed on both 32 and 64 bit Windows? Note: I am not referring to vl32 branch because I don't want to have to use more than 2GB as the size of my env file.

Re: Bug in last LMDB GitHub commit (Windows + VL32)

2015-12-21 Thread Howard Chu
be useful in reproducing and fixing. -Jer -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

<    7   8   9   10   11   12   13   14   15   16   >