Re: Empty Strings attributes in OpenLDAP

and it is crashing because of this. google site:www.openldap.org zero-length strings This has been hashed out numerous times. Your software is broken. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect

Re: one scope indexing for mdb

scope=one searches optimization for mdb? Feel free to submit a patch to the ITS. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: MDB Status

Jonathan Clarke wrote: On 28/09/12 02:38, Howard Chu wrote: For those who haven't been following along, support for OpenLDAP's MDB (memory-mapped database) library is also available for several other open source projects, including Cyrus SASL (sasldb mech), Heimdal Kerberos (hdb module

Re: ACI module

. They are intrinsically difficult to audit and difficult to track. Use of ACIs can make it impossible to prove that a given deployment correctly implements a formally defined security policy. IME, people who are fond of ACIs either don't understand the security risks, or don't care. -- -- Howard

Re: mdb_stat question

what you're looking for when you run mdb_stat. What did you expect to see? Page size: 4096 Tree depth: 2 Branch pages: 1 Leaf pages: 2 Overflow pages: 0 Entries: 59 -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: mdb_stat question

Frank Swasey wrote: Today at 4:42am, Howard Chu wrote: Huh? I'm wondering what you're looking for when you run mdb_stat. What did you expect to see? I guess I was expecting to see something more like the output of db_stat, which I ran looking for deadlocks and evidence that any limits were

Re: mdb_stat question

Roman Rybalko wrote: 17.10.2012 04:19, Howard Chu пишет: Have a look at mdb_stat in git mdb.master commit 617769bce5bcac809791adb11301e40d27c31566 Use options -e and -f, that should give you everything you want. Feedback appreciated, I doubt this is its final form yet. Thanks! Nice tool

Re: Using replication LDAP

, using default. How I can to resolve it ? Best regards, Rodrigo Faria -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: compile 2.4.33 on AIX 6.1 with IBM vac - mdb.c - mdb_cursor_pop fails

*/ Is this something particular to xlc? Sounds like it. It seems that your compiler/preprocessor doesn't support CPP macros with variable number of arguments. Thanks Howard Allison -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http

Re: Newbie question about host base authentication

nssov overlay does. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: max. numbers of subordinate databases

will also consume more memory in each thread's local stack; setting this to thousands would probably be a bad idea. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Memory usage with bdb

memory leaks in back-bdb/hdb in many years. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Index Add Failures

-- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland

Re: general protection fault when deleting members from a large group (mdb)

--enable-crypt=yes --enable-modules=yes --enable-rewrite=yes --enable-bdb=mod --enable-hdb=mod --enable-ldap=mod --enable-mdb=mod --enable-meta=mod --enable-monitor=mod --enable-overlays=mod --with-tls=openssl -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director

Re: OpenLDAP on SMP/multicore environment

to take full advantage of a SMP system ? Yes, OpenLDAP benefits from SMP. Whether or not OpenBSD supports SMP adequately, I can't say. Read the Admin Guide. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief

Re: Index Add Failures

what's in the MDB environment. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Index Add Failures

Quanah Gibson-Mount wrote: --On Tuesday, November 13, 2012 4:25 PM -0800 Howard Chu h...@symas.com wrote: I found that OSX acts different -- It actually allocates the entire size of the database on disk, regardless of how much is used. That may be common to all the BSDs. Sounds like

Re: DN matching rules

/private.cgi/Archive.Software%20Enhancements?id=3112;selectid=3112;usearchives=1 Nobody has asked for docs thus far, because everybody recognizes that subtree/onelevel/subordinate are the same as the corresponding LDAP search scopes, and their behavior is already specified. -- -- Howard Chu CTO

Re: DN matching rules

it happen. The fact that what you're asking for hasn't been written in the past 8 years indicates to me that no one is interested. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: slapo-rwm overlay and backend databases

ever implemented anything for the backend keyword, it is purely a no-op. Also No: overlays may only be configured on databases. Not backends. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP

Re: MSYS build and POSIX regex

: error: POSIX regex required. But the distribution contains precompiled pcre library and regex.h contains regfree function declaration. What is going wrong? Only you can answer that. Read the config.log file and see what error message was in it for the regfree test. -- -- Howard Chu CTO

Re: Announcing MDB C++ wrapper

on the main MDB page. Notice that there is an MDB issue triggered when using this wrapper ( http://www.openldap.org/its/index.cgi?findid=7448 ), use at your own risk. We will investigate this when a reproducible test case is available. -- -- Howard Chu CTO, Symas Corp. http

Re: MSYS build and POSIX regex

get on. Sergio. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Difference between 2.4.30 and 2.3.43 in certificateMatch.

there may be a bug in 2.4.x also, as the support for certificateMatch was removed in commit 4c64b8626d5b2b26256446dbc29f63ab45b5ec1d March 2006. Not sure why, would have to check the email archives or ask Kurt. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director

Re: Problems getting mdb_stat to work

. The OpenLDAP source tree already includes the MDB source code. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Difference between 2.4.30 and 2.3.43 in certificateMatch.

Mike Hulsman wrote: Quoting Howard Chu h...@symas.com: Mike Hulsman wrote: Hi, I stumbled upon an difference between openldap 2.4.30 and 2.3.43. This is my configuration. X509 certificates are stored in the directory and a search is done with: ((mail=aaa@a.b

Re: slapo-pcache seems broken in openldap-2.4.31

to be (objectclass=*) to support Presence filters. Besides, it is impossible to modify attributes olcPcacheTemplate/olcPcacheAttrset: modify/add: olcPcacheTemplate: no equality matching rule This is definitely a bug, please submit this to the ITS. Thanks. -- -- Howard Chu CTO, Symas Corp. http

Re: OpenLDAP as an address book for MS Outlook

and loading it into slapd. You would also need to populate the values. You can use the rootdse directive to do that. I would guess you only need the first capability, but I don't use Outlook so have no way to verify this. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director

Re: OpenLDAP as an address book for MS Outlook

Victor Sudakov wrote: Howard Chu wrote: You could fake this, by copying the schema definition of the supportedCapabilities attribute and loading it into slapd. You would also need to populate the values. You can use the rootdse directive to do that. I would guess you only need the first

Re: dnMatch flooding logs and access blocked

,dc=example,dc=com#012#011uid=user,ou=users,dc=example,dc=com slapd[20616]: dnMatch -2#012#011uid=item6,ou=users,dc=example,dc=com#012#011uid=user,ou=users,dc=example,dc=com * * *Al Dispennette* * * -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun

Re: DB_LOCK_DEADLOCK

release. You should consider upgrading to 2.4.33, and using back-mdb, which is simpler to configure and cannot deadlock. On Thu, Dec 6, 2012 at 9:31 PM, Howard Chu h...@symas.com mailto:h...@symas.com wrote: Pawan Kamboj wrote: Hi, We are getting bdb_idl_fetch_key: get

Re: slapd-meta configuration details

in the debug output. The only relevant change to back-meta from 2.4.25 to .26 is for ITS#6909. Perhaps you can retest your config with that patch reverted and see how it goes. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: OpenLDAP Sandbox on AWS/Eucalyptus

://go.eucalyptus.com/Sign-Up-for-Cloud-Computing-News.html?Offer=OtherOfferDetails=Sign%20Up%20for%20Cloud%20Computing%20NewsLeadSourceDetails=Eucalyptus%20WebsiteOfferURL=http%3A%2F%2Fgo.eucalyptus.com%2FSign-Up-for-Cloud-Computing-News.html *_* -- -- Howard Chu CTO

Re: DB_LOG_AUTOREMOVE not working

the server before adding the new data on the daily bases..? If so why is it so..? No, there's no need to restart. But you must configure a checkpoint. Read the slapd-bdb(5) manpage. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com

Re: nssov works fine, unable to set nssov-pam-session

- none. Does it mean that I am missed something to correctly set nssov-pam-session in slapd.conf? Sounds like a bug in nssov, please submit this to the ITS, thanks. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief

Re: olcToolthreads and slapadd -n0

output but was capable to stop working by Ctrl-C handler. Setting olcToolThreads to 0 or 1 has solved this problem. I dont know is this a bug or my misconfiguration? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: Multi-Master OpenLDAP Replication for 3 nodes -- slapadd command failing

syncprov.la: null module registered* Surely the above message signifies an error? No, it is normal. [...] -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Multi-Master OpenLDAP Replication for 3 nodes -- slapadd command failing

LDIF file be provided, please, for this important replication design, n-way multi-master? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Bind failing with critical extension is unavailable error when used with pagedresultscontrol

it. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: back-sql documentation (was: SELinux woes)

suggest you submit a request to the ITS and list all of the places you see that you think need updating. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: don't get running the slapd while using mdb backend

read(11, , 4096) = 0 mmap(NULL, 10737418240, PROT_READ, MAP_SHARED, 11, 0) = -1 ENOMEM (Cannot allocate memory) close(11) = 0 munmap(0x7fe3941e4000, 8192) = 0 close(9)= 0 . -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director

Re: don't get running the slapd while using mdb backend

/presentations. http://symas.com/mdb/ -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: openldap 2.4.33 from source, can't find slapd.d directory

-config. See the man page for any of these subjects for details. Not quite. The *contents* of slapd.d ar ecreated by those tools. The directory itself has to be created explicitly. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com

Re: Preoperation Plugin Questions

and pull the client IP address out of there. The smbk5pwd module already uses this trick so it should be trivial to copy/paste that code into radius.c. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect

Re: Preoperation Plugin Questions

Julius Plenz wrote: Hi Howard, hi Dan, thanks for your reply. * Howard Chu h...@symas.com [2013-01-23 18:38]: I would just take the current radius.c checker and modify it to stash the Operation pointer somewhere it can be retrieved, then grab it in the password check function and pull

Re: missing entry in slapcat backup

while running other slap* tools. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: missing entry in slapcat backup

of what is in the DB. It doesn't try to tell you what isn't in the DB. Your DB must have been in this state for a long time, probably ever since its initial import. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: Search speed regarding BDB_IDL_LOGN and order in search filter

a filter term that matches zero entries, it is beneficial to evaluate that first in an AND clause. But it would make no difference in an OR clause. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP

Re: meta backend and bad configuration file

slapd.conf. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Using multi-value attributes for ACLs

by * read Thanks, Andrew -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Mirror mode difference from N-Way Multi-Master

. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: openLDAP is not working with MySQL cluster

. (Of course, the source code is still there if any interested hackers are looking for a project to adopt.) On a related note, the Project will also be dropping support for BerkeleyDB since OpenLDAP's Lightning MDB has proven to be superior. -- -- Howard Chu CTO, Symas Corp. http

Re: new module overlay modtrigger

in the openldap distribution, in the overlay section or contrib section. Thanks for the effort but I don't believe it would be a good idea to include this code for the above reasons. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http

Re: RE24 testing call (OpenLDAP 2.4.34)

writes_per_commit to 500 from the current value of 1000.) -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: new module overlay modtrigger

is just doing a notification, not actually handling the queries itself, it's not a backend. or am i misunderstanding this? Re-read the manpage. This module may also be used as an overlay -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http

Re: ppolicy overlay with sasl bind

General Stone wrote: Hello, can I use the ppolicy overlay wtih sasl binds? It seems, that it dosn't work?! No. The spec for interaction of ppolicy with SASL (and other) authentication methods was never completed. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com

Re: slapd, SASL passthrough and changing passwords smashing userPassword

for any ideas. Tim -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: internal_modify in overlays

without having actually read what's in front of you. If your first instinct is *not* naturally to read the source tree, your programming habits need sharpening. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief

Re: additional info: objectClasses: value #0 invalid per syntax

recommendation for debugging further? Regards, Jimmy Royer -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Combining AD and Local DB into single 'virtual' tree

from AD, is that possible? Anything is possible. Dunno if it makes sense though. Any guidance, example solutions, or suggested reading is greatly appreciated. -Dave -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: SASL/PLAIN Passthrough auth

using SASL/PLAIN to actually talk to saslauthd, nothing inside slapd is relevant. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: ldap_add: Invalid syntax (21)

garbling the input. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Adding samba schema to OpenLDAP2.4

question: How do I import the samba (3.6.9) schema (previously in an include schema file) to the new 2.4 server? Why would you need to do this as an explicit step? When you convert slapd.conf to a database, everything included in the config is converted at the same time. -- -- Howard Chu CTO

Re: Adding samba schema to OpenLDAP2.4

Wes Modes wrote: On 3/14/2013 5:50 AM, Howard Chu wrote: Wes Modes wrote: Previously, I was running 2.3 and then 2.4 using all the 2.3 config files. I am building a new 2.4 server the right way using OpenLDAP native database and config schema. As I migrate the functionality of the old server

Re: Encryption or hash for password?

-- Le papier est un support de communication naturel, renouvelable et recyclable. Si vous devez imprimer ce mail, n’oubliez pas de le recycler. -- Gerhardus Geldenhuis -- -- Howard Chu CTO, Symas Corp. http

Re: Lua wrapper for LMDB

to it on the LMDB main page. Cheers, Shmul -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: LMDB - growing the database

, and last_pgno is maxed out. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: impact on performance by adding jpeg file

efficient than BerkeleyDB. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: provider/consumer: entries have identical CSN

-- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: object class values in a read or search result

as a general rule the X.500 data model requires that a server store and return exactly what the user provided. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: LMDB vs FastDB

Tobias Oberstein wrote: Am 21.03.2013 21:58, schrieb Howard Chu: Tobias Oberstein wrote: Hello, I have read the - very interesting - performance comparison http://symas.com/mdb/microbench/ I'd like to ask if someone did benchmark LMDB (and/or the others) against http://www.garret.ru

Re: shadowLastChange can't be read

be going on here? Looks like it's behaving exactly as you specified. As admin you have write access. When you searched anonymously, you got no access. (You gave anonymous auth access, but a search is obviously not an auth request.) -- -- Howard Chu CTO, Symas Corp. http

Re: object class values in a read or search result

/lists/openldap-software/200208/msg00721.html Search the archives. There's no point carrying this one on again. Am 22.03.2013 21:02, schrieb Howard Chu: Michael Ströder wrote: Manuel Gaupp wrote: I don't think so, because RFC 4512, section 3.3 says: When creating an entry or adding

Re: [LMDB] Append To Value

a straight adjacency list, but similar concepts hold. Based solely on the description here, I would use MDB_DUPFIXED and MDB_APPENDDUP or MDB_MULTIPLE. You could later use MDB_GET_MULTIPLE to read the values and reconstruct the vector. -- -- Howard Chu CTO, Symas Corp. http

Re: [LMDB] Append To Value

. Thanks, Yucheng On Tue, Mar 26, 2013 at 11:35 AM, Howard Chu h...@symas.com mailto:h...@symas.com wrote: Yucheng Low wrote: Hi, I am considering using LMDB to store a dynamic graph structure, and it will be very helpful to support append to value having

Re: LMDB vs FastDB

database.) -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: I can't delete a shell DB

delete operation by default. You can enable delete support by compiling with CFLAGS=.. -DSLAP_CONFIG_DELETE Not sure whether that's officially supported/recommended by OpenLDAP developers though. Not yet. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland

Re: I can't delete a shell DB

are making requests to a backend that gets removed is totally undefined. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: I can't delete a shell DB

-atomically would invariably result in inexplicable client error messages as they send requests to an LDAP server that was working fine before but suddenly replies no global superior knowledge. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http

Re: How to improve performance with MDB backend?

, the maxsize *must* be larger than the DB size. Also, what OpenLDAP version are you using? That's always important to note. The maxsize should always be larger than the DB, regardless of writemap. That is, if you expect the DB to grow over time. -- -- Howard Chu CTO, Symas Corp

Re: How to improve performance with MDB backend?

actual RAM. Nonsense. Set the size to as large as you need to allow the DB to grow. Period. Writemap has no bearing on this. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: slapd terminates with error read_config: no serverID / URL match found. Check slapd -h arguments

, but when slapd starts with -h option, it always fails. This means your olcServerID IDs are *not* configured properly. In particular, none of the URLs in your IDs match any of the URLs in your -h option. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland

Re: How to improve performance with MDB backend?

is knowledge that serves you the rest of your life. As a starting point - what does vmstat tell you? Don't just paste its output here, learn what it means. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief

Re: disabling user account

clients. access to attrs=userpassword filter=(globalLock=off) by anonymous auth -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: How to improve performance with MDB backend?

asking a stupid question? Sasa On Mon, Apr 8, 2013 at 4:40 PM, Quanah Gibson-Mount qua...@zimbra.com mailto:qua...@zimbra.com wrote: --On Monday, April 08, 2013 4:49 AM -0700 Howard Chu h...@symas.com mailto:h...@symas.com wrote: There's nothing particular to LMDB to tune

Re: slapd-meta as a proxy for a monolithic namespace

meta_back_bind: no target for dn uid=admin,ou=rsp1,c=de,o=mno (32). -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: hdb and mdb dereferencing aliases differently

exactly the same content, and so the results for searches should also be identical. Regards Jürgen Sprenger -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org

Re: Debian Squeeze: Slapd subtree disappears, but ldapsearch finds it | unable to allocate memory for mutex; resize mutex region

that something is not working fine, at least on the user end of OpenLDAP distribution. Simone -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Checking that a change has reached all servers

request, to read the entryCSN of the change. Then use an assert control on the following request, assuming it references the same entry. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: cleaning HDB after an unclean shutdown

than to wait for Windows to eventually notice the process is gone. The smarter solution of course is to quit using such a braindead OS as a server platform. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief

Re: cleaning HDB after an unclean shutdown

away. Le 06/05/2013 20:25, Howard Chu a écrit : Benin Technologies wrote: Hi, I'm doing some tests on a perl backend, which causes sometimes my OpenLDAP to hang. I then kill the process, but when I try to restart openldap it won't, because of my HDB backend. I get the following message

Re: SSH Gateway

server to the remote servers. Can anyone help? Sounds more like a question for the OpenSSH mailing lists. The last I knew, they refused to integrate patches providing LDAP key lookup support. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http

Re: Unable to login applications using LDAP alias

-- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: getting bindDN in perl script

is the 2nd parameter. How else would you expect it to be passed? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: olcAccess replication - error 80 attributes not within database namespace

on the olcDatabase={1}mdb database lets you replicate the *content* of that database. To replicate the *configuration* of that database your consumer must be set where that configuration is stored. The configuration is stored in olcDatabase={0}config. -- -- Howard Chu CTO, Symas Corp. http

Re: translucent overlay - bogus local entries

the local mdb instance? Adds only work when performed by the rootDN. Likewise for Deletes. If your clients are using the rootDN for routine operation, you're doing something wrong. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http

Re: Deadlock problem on objectClass.bdb

page286 -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: MaxDBs

machine. Yes, you can change the number if you close and reopen the env, it's not persisted on disk. It's just sizing an array in your MDB_env. Ben Johnson b...@skylandlabs.com mailto:b...@skylandlabs.com -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director

Re: [lmdb]

Johnson b...@skylandlabs.com mailto:b...@skylandlabs.com Ben Johnson b...@skylandlabs.com mailto:b...@skylandlabs.com -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: [lmdb]

but just allocating to a different place. That's treated as a failure since mtest uses the FIXEDMAP flag. In most applications you won't be using FIXEDMAP so you can ignore this error. Ben Johnson b...@skylandlabs.com mailto:b...@skylandlabs.com On May 23, 2013, at 4:55 PM, Howard Chu h

<    1   2   3   4   5   6   7   8   9   10   >