Re: trouble when switching from bdb to mdb database

2013-11-13 Thread Howard Chu
will be in 2.4.38. — debug log last lines: — = mdb_entry_get: ndn: „o=test1” = mdb_entry_get: oc: (null), at: „contextCSN — But when I do ‚slapcat’ I can clearly see contextCSN for all o=test[123] databases... Is it bug or some possible replication configuration issue? — Olo -- -- Howard Chu CTO

Re: RE24 testing call (OpenLDAP 2.4.37)

2013-11-15 Thread Howard Chu
a number of their tools are broken compared to older MSYS releases. I haven't had the time to isolate all of the problems yet, may take a closer look after LDAPCon next week. (Reminder - LDAPCon in Paris next week: http://ldapcon.org/ ) -- -- Howard Chu CTO, Symas Corp. http

Re: Error while updating olcDbConfig

2013-11-18 Thread Howard Chu
doesn't tell you anything useful though, you need to use -d on slapd to see what the actual error was. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Openldap for proxy AD

2013-11-20 Thread Howard Chu
for authentication. Or he could just read up on slapo-pbind. You can check this how-to: http://ltb-project.org/wiki/documentation/general/sasl_delegation Clément. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: password hashes and simple binds

2013-11-23 Thread Howard Chu
is not an actual hash scheme. It's only handled by the SASL code. For Simple Binds, a cleartext password must not have any scheme specifier at all. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP

Re: Password Issues between provider and consumer

2013-11-25 Thread Howard Chu
, the license issue is somewhat irrelevant.) What can I do about this password issue? Am I missing come ACL or option that needs to be added? Siddharth Choure Senior Systems Engineer -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http

Re: Password Issues between provider and consumer

2013-11-25 Thread Howard Chu
Engineer On 11/25/13, 8:52 AM, Howard Chu h...@symas.com wrote: Choure, Sidd wrote: Here is the version info - slapd -V @(#) $OpenLDAP: slapd 2.4.23 (Apr 22 2013 05:03:41) $ mockbu...@x86-007.build.bos.redhat.com:/builddir/build/BUILD/openldap-2. 4. 23/openldap-2.4.23/build-servers

Re: OpenLDAP with ppolicy and SSSD configuration question.

2013-11-25 Thread Howard Chu
only gets the ppolicy info if it performs an LDAP Bind with the user's password. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: OpenLDAP with ppolicy and SSSD configuration question.

2013-11-25 Thread Howard Chu
- Ravi Nair 919-541-5467 - nair.r...@epa.gov High Performance Computing Subtask Lead - Durward Jones 919-541-5043 - jones.durw...@epa.gov Environmental Modeling and Visualization Lead - Heidi Paulsen 919-541-1834 - paulsen.he...@epa.gov From: Howard Chu h

Re: Different approaches to setup ldap client

2013-11-26 Thread Howard Chu
/pam_ldap.html [3] http://arthurdejong.org/nss-pam-ldapd/ [4] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=579647 [5] https://fedorahosted.org/sssd/ -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect

Re: Antw: Re: Q: monitoring attributes

2013-11-27 Thread Howard Chu
Ulrich Windl wrote: BTW: I noticed that there is no schema for entryCSN neither... See doc/drafts/draft-chu-ldap-csn-xx.txt -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: Antw: Re: Q: monitoring attributes

2013-11-27 Thread Howard Chu
is significant, you can probably have Joe OneSpace and Joe TwoSpaces as RDN. Read RFC4518, don't guess. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: OpenLDAP with ppolicy and SSSD configuration question.

2013-11-27 Thread Howard Chu
a check for something else (pwdAccountLockedTime) and based on that value returns True or False. I'm thinking in terms of a stored procedure offered on many SQL servers. Thanks, -Brad Viviano -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland

Re: OpenLDAP with ppolicy and SSSD configuration question.

2013-11-27 Thread Howard Chu
. It's their broken software designs you're dealing with. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Memory leak question

2013-12-03 Thread Howard Chu
packages shipped with a distribution? Ciao, Michael. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Q: empty groups (groupOfNames, member)

2013-12-06 Thread Howard Chu
UUID) more the value of DN rather than the structural objectClass... It is an X.500 requirement. Read the specs instead of asking what LDAP requires. Insights? Regards, Ulrich -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http

Re: Max length allowed for a password

2013-12-09 Thread Howard Chu
, McMinnville Oregon *ITS will never ask you for your password. Please don’t share yours with anyone! * -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Fwd: Linux kernel performance regressions

2013-12-11 Thread Howard Chu
Original Message Subject: Linux kernel performance regressions Date: Wed, 11 Dec 2013 04:33:06 -0800 From: Howard Chu h...@symas.com To: openldap-de...@openldap.org openldap-de...@openldap.org We upgraded from kernel 3.5 to 3.12.3 to update some of our benchmark numbers

Re: MDB_BAD_RSLOT while executing slapacl

2013-12-11 Thread Howard Chu
}mdb,config ... olcDbNoSync: FALSE olcDbMaxSize: 1073741824 olcDbMode: 0600 olcDbSearchStack: 16 Two questions: 0. What might cause this error? 1. Should I worry about this? You should upgrade to get the fix for #7662. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director

Re: MDB_BAD_RSLOT while executing slapacl

2013-12-12 Thread Howard Chu
Igor Zinovik wrote: 2013/12/12 Howard Chu h...@symas.com mailto:h...@symas.com You should upgrade to get the fix for #7662. I upgraded my slapd to 2.4.38, but I still see error message when I execute slapacl. I also removed data.mdb and lock.mdb, imported data back to ldap using backup

Re: Running slapcat and slapd at the same time

2013-12-12 Thread Howard Chu
: steps to efficiently corrupt a BDB environment deleted Is there a way to run slapcat with a different memory configuration to slapd? No. Nor is there any reason to try. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: ldapsearch limit of 500 entries

2013-12-12 Thread Howard Chu
...@luthresearch.com wrote: My ldapsearch command is only returning a max of 500 entries, while I know I have over 9,000 entries in the database. If I do not have a slapd.conf file, how can I increase the sizelimit, to display all my entries? -- -- Howard Chu CTO, Symas Corp

Re: ldapsearch limit of 500 entries

2013-12-12 Thread Howard Chu
. Brandt Systems Administrator Bradley University (309) 677-2958 -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Antw: Re: Max length allowed for a password

2013-12-12 Thread Howard Chu
Ulrich Windl wrote: Howard Chu h...@symas.com schrieb am 09.12.2013 um 21:46 in Nachricht 52a62c26.8080...@symas.com: Rob Tanner wrote: Hi, We are looking at extending the allowed length of passwords we allow people to use (the theory being that a short phrase is easier to remember than

Re: Antw: Re: Max length allowed for a password

2013-12-13 Thread Howard Chu
Hallvard Breien Furuseth wrote: On 2013-12-13 08:57, Hallvard Breien Furuseth wrote: On 2013-12-13 08:17, Ulrich Windl wrote: Howard Chu h...@symas.com schrieb am 09.12.2013 There are no maximum lengths in LDAP. Limits imposed by other applications depend on the particular application. Right

Re: ldapsearch limit of 500 entries

2013-12-13 Thread Howard Chu
Christian Kratzer wrote: Hi, On Thu, 12 Dec 2013, Howard Chu wrote: Clint Petty wrote: Thanks Jason, I resolved this issue by adding: olcSizeLimit: -1 to the etc/ldap/slapd.d/cn=config.ldif file. You are not supposed to manually edit the config database files. You should have fed your

Re: Linux kernel performance regressions

2013-12-16 Thread Howard Chu
Aris Setyawan wrote: Is this mean, that we can't use all of CPU's power with 3.12 kernel? It looks like the bug may have been fixed in 3.12.4 or 3.12.5. At least, I haven't seen it happen again after upgrading. On 12/11/13, Howard Chu h...@symas.com wrote: Original Message

Re: Storing graph data structure with MDB_FIXEDMAP

2013-12-16 Thread Howard Chu
will be removed? Do you have a plan about it? No definite plans. It's something of a wishlist item for now. On 11/30/13, Howard Chu h...@symas.com wrote: Aris Setyawan wrote: Hi, I'm new in this list. I plan to store graph data structure (vertex and edge) in LMDB. The edge data value of a record

Re: Replicate cn=config between masters and slaves?

2013-12-17 Thread Howard Chu
Christian Kratzer wrote: Hi, On Mon, 16 Dec 2013, Howard Chu wrote: Christian Kratzer wrote: Hi, On Mon, 16 Dec 2013, Karsten Heymann wrote: Hi, when setting up a cluster with 1+x masters and 1+x slaves, is it possible to use a single cn=config replicated between all of these? Or do

Re: Question about search performance

2013-12-17 Thread Howard Chu
/$$. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: MDB_BAD_RSLOT while executing slapacl

2013-12-21 Thread Howard Chu
. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: MDB_PAGE_FULL

2013-12-23 Thread Howard Chu
. Is there something obvious that I am doing wrong to cause a MDB_PAGE_FULL exception? Thanks Pieter -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Oracle OpenLDAP PPolicy ppolicy and the hierarchy

2013-12-25 Thread Howard Chu
me to it. Reiterating all the points Michael made. There is no good reason to use memberUid or uniqueMember in LDAP, both of these schema elements are deeply flawed. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: Oracle OpenLDAP PPolicy ppolicy and the hierarchy

2013-12-26 Thread Howard Chu
attributes in users. Would it be difficult to make a memberuid overlay that populates memberUid attributes in the group? That would be counterproductive. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect

Re: Ldap password policy not throwing different errors

2014-01-05 Thread Howard Chu
any part of this message or attachments. If you have received this e-mail in error please notify the sender immediately [by clicking 'Reply'] and delete this e-mail. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief

Re: DBIS - new IETF drafts to replace NIS and RFC2307

2014-01-06 Thread Howard Chu
be most appropriate. I have several comments regarding this proposal but I'll post them to the ldapext list. Best regards, Mark Bannister. e: d...@proseconsulting.co.uk -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: Problem with back-mdb

2014-01-06 Thread Howard Chu
- use a 2nd connection for your modify requests. Thanks, -- Grégory Trucy Ingénieur système et réseau Aix-Marseille Université -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: mdb searchstack parameter

2014-01-08 Thread Howard Chu
this parameter. It has the identical meaning in hdb after all, and if you never had to change it under hdb there's no reason to change it for mdb. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect

Re: configuring mdb maxsize

2014-01-08 Thread Howard Chu
large number at init time (e.g. some percentage of the disk partition size) and never has to worry about it again. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: mdb expected growth

2014-01-12 Thread Howard Chu
while the search is in progress. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: MDB_BAD_RSLOT while executing slapacl

2014-01-13 Thread Howard Chu
/libexec/slapd -V @(#) $OpenLDAP: slapd 2.4.38 (Dec 4 2013 11:26:00) $ francesco@c1:/usr/local/src/openldap-2.4.38/servers/slapd -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP

Re: mdb expected growth

2014-01-13 Thread Howard Chu
Paul B. Henson wrote: From: Howard Chu [mailto:h...@symas.com] Sent: Sunday, January 12, 2014 1:41 PM From the sound of your quite vague test description, sure. As it states in the LMDB doc, long-lived reader transactions prevent reuse of freed pages. http://symas.com/mdb/doc/ You have

Re: BDB fine grained lock manager

2014-01-14 Thread Howard Chu
Chris Card wrote: Hi All, We are running openldap 2.4.36 and Berkeley DB 4.6.21 (+ 4 patches) on centos 6.3 64 bit. Does anyone know if building Berkeley DB with --enable-fine_grained_lock_manager is likely to make any difference to slapd performance? Try it and see... -- -- Howard Chu

Re: java API for SAML integration

2014-01-14 Thread Howard Chu
similar functionality? Jignesh Patel Chief Architect * -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: lmdb memory usage when writing lots of data with memorymap option

2014-01-15 Thread Howard Chu
a suggestion what might be wrong and what causes such different behaviour with and without using the memorymap option? There is nothing wrong. It is simply writing to the shared memory map. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http

Re: lmdb memory usage when writing lots of data with memorymap option

2014-01-16 Thread Howard Chu
...@softwareinnovations.nl url: www.softwareinnovations.nl http://www.softwareinnovations.nl/ On Wed, Jan 15, 2014 at 11:10 PM, Howard Chu h...@symas.com mailto:h...@symas.com wrote: Luc Vlaming wrote: Hi, Currently I am creating support for using LMDB as a new storage

Re: Antw: Re: lmdb memory usage when writing lots of data with memorymap option

2014-01-16 Thread Howard Chu
. You're the worst kind of fool, one who believes he knows more than he actually does, in a world where it's trivially easy to acquire the actual facts. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect

Re: Access of entryUUID in an overlay module

2014-01-17 Thread Howard Chu
/qB0VSACfanVbcP79n3gEnH0zivWSThGA dxUAnj+2NaKhLweCFjFMtGoHPdHzByQZ =DHYq -END PGP SIGNATURE- -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: providing a default value for an attribute (w/ translucent proxy)

2014-01-20 Thread Howard Chu
attribute instead. thanks -- Dan Pritts ICPSR Computing Network Services University of Michigan +1 (734)615-7362 -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: LMDB database size

2014-01-25 Thread Howard Chu
-files has about 20 GB.This particular database is a kind of archive - hardly read and hardly written (maybe once per minute). Is it possible to mmap() a 20 GB database into the RAM? Yes. If yes, will the server start swapping? No. Thanks a lot Markus -- -- Howard Chu CTO, Symas Corp

Re: Antw: Re: LMDB database size

2014-01-27 Thread Howard Chu
Ulrich Windl wrote: Howard Chu h...@symas.com schrieb am 25.01.2014 um 19:07 in Nachricht 52e3fd6e.9070...@symas.com: Markus Doppelbauer wrote: Hello, We are using BerkeleyDB since a decade - but we are searching for something more lightweight. LMDB is what we are looking

Re: MDB_BAD_VALSIZE error

2014-01-29 Thread Howard Chu
MDB_MAXKEYSIZE) and if so, what is the longest DN which can be supported by the MDB backend? The longest DN supported is 8192 bytes. The longest RDN would be something close to one half of MDB_MAXKEYSIZE. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun

Re: MDB_BAD_VALSIZE error

2014-01-29 Thread Howard Chu
Chris Card wrote: Howard Chu wrote: Subject: Re: MDB_BAD_VALSIZE error Chris Card wrote: Hi All, I'm running openldap 2.4.36 on centos 6.3, 64 bit. I'm finally trying out MDB as a replacement for BDB in our openldap setup, and I've noticed that I'm getting MDB_BAD_VALSIZE errors when

Re: Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?

2014-01-30 Thread Howard Chu
Gavin Henry wrote: http://searchdatacenter.techtarget.com/feature/IT-pros-suffer-OpenLDAP-configuration-headaches Any one been in touch with them? I saw some of this on twitter before, ignored it since none of the parties involved have any clue what they're talking about. -- -- Howard

Re: Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?

2014-01-30 Thread Howard Chu
Turbo Fredriksson wrote: On Jan 30, 2014, at 5:35 PM, Howard Chu wrote: I saw some of this on twitter before, ignored it since none of the parties involved have any clue what they're talking about. Personally, I think it's spot on. It IS hard to configure an LDAP server, and even harder

Re: Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?

2014-01-30 Thread Howard Chu
what one could take from this - that people 'out there') actually thinks that this should be easy. But it's not (technically) wrong... -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?

2014-01-31 Thread Howard Chu
. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?

2014-01-31 Thread Howard Chu
. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: slapd.d and back-sql

2014-01-31 Thread Howard Chu
back to using slapd.conf, how can I generate one from my slapd.d setup ? Many thanks Alan -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: slapd.d and back-sql

2014-01-31 Thread Howard Chu
simply don't have them available on that install. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Deprecation of back-bdb

2014-02-03 Thread Howard Chu
-in-openldap Indeed. We disabled back-bdb in HEAD September 2008. commit 6dfa7b760e14a051ee15ea6fac5cc1784ef0883b Apparently that was not propagated to the RE24 configure.in. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com

Re: Slow to add 1 million items

2014-02-07 Thread Howard Chu
. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Recommended version of BDB package

2014-02-07 Thread Howard Chu
even bother to implement them. You might be able to revive interest in that ITS by providing a complete test case (config+data) that demonstrates the issue. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief

Re: slapd-meta exclude syntax; larger problem with rwm, collective attributes.

2014-02-07 Thread Howard Chu
crashes when it encounters a DN from AD that has one of the collect attributes (its 7797). Not just a lookup failure, a hard crash. :( That's expected, the collective attribute is not allowed to already exist. Crash reports without stack traces are also less than helpful... -- -- Howard Chu

Re: Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?

2014-02-08 Thread Howard Chu
you to insert new ACLs in the precise spot where they belong. So in fact, human or machine, they are necessary. We wouldn't throw things in there for no reason. Otherwise, to insert one rule in front of existing rules, you would need to delete and reinsert all of the rules. -- -- Howard Chu

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Howard Chu
docs for pwcheck_method. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-09 Thread Howard Chu
looks up whatever attribute names SASL passed in. If there's no schema definition for these attributes, naturally those lookups will fail but the failure is ignored, the auxprop just returns as much as it knows about. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com

Re: TLS authentication broken in Ubuntu 12.04

2014-02-11 Thread Howard Chu
-- Quanah Gibson-Mount Architect - Server Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP

Re: slapo-accesslog

2014-02-12 Thread Howard Chu
. It will work better than the RedHat build anyway, since they've crippled theirs so much. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Antw: Re: Use the current date/timestamp in filters

2014-02-14 Thread Howard Chu
://tools.ietf.org/html/draft-pluta-ldap-srv-side-current-time-match Maybe you should dig in the ITS. Ciao, Michael. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: LMDB test assertion failures on Linux/MIPS

2014-02-14 Thread Howard Chu
it? Any help would be much appreciated. Martin -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: ldap/pwd complexity and PAM?

2014-02-15 Thread Howard Chu
. Thanks for your time. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: LMDB test assertion failures on Linux/MIPS

2014-02-18 Thread Howard Chu
the commits that introduced the problem. I just did a fresh build of 32 bit SPARC Solaris 10 with gcc 4.4.0 and mtest works fine. I get a number of warnings if I use -Wcast-align but in this case they're irrelevant. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director

Re: strategy for getting groupOfNames (AD) and posixAccount (Unix) to coexist?

2014-02-24 Thread Howard Chu
all support RFC2307bis. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: dynlist groups not usable in ACLs?

2014-02-24 Thread Howard Chu
. This is already documented in the manpage. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: LMDB - growing the database

2014-02-24 Thread Howard Chu
would use FFS, since it supports sparse files. On Windows, Linux, and FreeBSD, there's no problem increasing the mapsize and preserving the existing data. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief

Re: Replication from OpenLDAP to Fedora 389 DS

2014-02-25 Thread Howard Chu
lastmod on). I'm using the same ideia from OpenLDAP replication document (proxy mode). Syncrepl requires entryCSN and entryUUID, it cannot work without them. You must add them to your 389DS schema if you want to attempt this. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com

Re: memberOf values case

2014-02-26 Thread Howard Chu
case a client use ldap attribute values in a case sensitive way. Your client should use attributes that are actually defined as case sensitive then. Fix your schema or fix your clients. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http

Re: LMDB get value

2014-03-01 Thread Howard Chu
mdb_dbi_open(). Thanks a lot Markus -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Fwd: Re: Aw: Re: LMDB get value

2014-03-01 Thread Howard Chu
Original Message Subject: Re: Aw: Re: LMDB get value Date: Sat, 01 Mar 2014 13:39:47 -0800 From: Howard Chu h...@symas.com To: Markus Doppelbauer doppelba...@gmx.net CC: Markus Doppelbauer wrote: You are right. Thanks a lot! An other question. Is there a define-option

Re: NEW LDAP PROJECT

2014-03-04 Thread Howard Chu
) Linux/Unix Systems Administrator MIT Lincoln Laboratory Surveillance Systems Group 244 Wood St Lexington, MA 02420 Email: john.borre...@ll.mit.edu -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect

Critical GnuTLS bug ...

2014-03-04 Thread Howard Chu
http://arstechnica.com/security/2014/03/critical-crypto-bug-leaves-linux-hundreds-of-apps-open-to-eavesdropping/ Perhaps folks will take us more seriously the next time we say don't use GnuTLS ... http://www.openldap.org/lists/openldap-devel/200802/msg00072.html -- -- Howard Chu CTO

Re: Restricting access based on IP Address

2014-03-04 Thread Howard Chu
seen what I am looking for. I am guessing that what I am looking for probably deals with 'sockname' or 'sockurl', but I don't know how to use those statements to properly configure slapd. Thanks, Kevin -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun

Re: Critical GnuTLS bug ...

2014-03-04 Thread Howard Chu
Michael Ströder wrote: Howard Chu wrote: http://arstechnica.com/security/2014/03/critical-crypto-bug-leaves-linux-hundreds-of-apps-open-to-eavesdropping/ Perhaps folks will take us more seriously the next time we say don't use GnuTLS ... http://www.openldap.org/lists/openldap-devel/200802

Re: Slapd TLS issue

2014-03-06 Thread Howard Chu
://bugzilla.redhat.com/__show_bug.cgi?id=707599 https://bugzilla.redhat.com/show_bug.cgi?id=707599 --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com -- -- Howard Chu CTO, Symas Corp. http://www.symas.com

Re: User-Managed Groups

2014-03-07 Thread Howard Chu
[44745]: = slap_access_allowed: write access denied by add(=arscxd) slapd[44745]: = access_allowed: no more rules What am I missing? Read the Operation Requirements section of slapd.access(5). -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http

Re: How get more detailed error information than the provided by ldap_err2string?

2014-03-08 Thread Howard Chu
, ldap_err2string( rc )); exit( 1 ); } rc = ldap_simple_bind_s( ld, auth_dn, auth_pw ); if ( rc != LDAP_SUCCESS ) { fprintf( stderr, ldap_simple_bind_s() Failed: %s [%d]\n, ldap_err2string(rc), rc); ldap_unbind_s(ld); /* try unbind the failed connection anyway */ exit ( 1 ); } -- -- Howard Chu

Re: Fwd: Works with ldapsearch, but can't get it to work with ldap_search_ext_s()

2014-03-08 Thread Howard Chu
=example,DC=dc) [1 result] Any suggestion/help very appreciated on how i could avoid that the search tries to follow the referrals? Copy the code that the ldapsearch tool uses. You're using obsolete APIs in your code. thx -werner -- -- Howard Chu CTO, Symas Corp. http

Re: user can't login via LDAP

2014-03-09 Thread Howard Chu
--keyserver pool.sks-keyservers.net http://pool.sks-keyservers.net --recv-keys F186197B -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: open(ldap|ssh) interaction

2014-03-10 Thread Howard Chu
...@olearycomputers.com (w) 630-904-6098 (c) 630-248-2749 linkedin: http://www.linkedin.com/in/dkoleary resume: http://www.olearycomputers.com/resume.html -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect

Re: Antw: Re: LMDB test assertion failures on Linux/MIPS

2014-03-11 Thread Howard Chu
the equation. Now that I think about the output, there is a fairly obvious explanation for the numbers - 1 means the writer thread got scheduled first. However I'm still not sure why the # of iterations on MIPS is so high - scheduling resolution on the box maybe? Martin -- -- Howard Chu CTO, Symas

Re: Antw: Re: Regarding LDAP structure

2014-03-14 Thread Howard Chu
idea where to post these?? Best, Alejandro Imass Yabarana Corporation -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Antw: Re: Regarding LDAP structure

2014-03-14 Thread Howard Chu
Ulrich Windl wrote: Howard Chu h...@symas.com schrieb am 14.03.2014 um 10:36 in Nachricht 5322cd84.4080...@symas.com: Ulrich Windl wrote: Hi! I have a question on entryUUID: Most (comonly used) group-like structures use DNs for members. Are there any examples how to use entryUUID for group

Re: Planning migration to mdb

2014-03-14 Thread Howard Chu
in the olcMdbConfig objectclass. The schema has everything you need to know. Use it. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: slapd shuts down for no reason

2014-03-17 Thread Howard Chu
#if defined(HAVE_NT_SERVICE_MANAGER). -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Antw: Re: mdb and bdb

2014-03-20 Thread Howard Chu
Ulrich Windl wrote: Howard Chu h...@symas.com schrieb am 19.03.2014 um 18:29 in Nachricht 5329d3dc.3060...@symas.com: Quanah Gibson-Mount wrote: --On Wednesday, March 19, 2014 9:16 AM -0300 Friedrich Locke friedrich.lo...@gmail.com wrote: Hi folks! I wonder if, with the increased

Re: Antw: Re: mdb and bdb

2014-03-20 Thread Howard Chu
Ulrich Windl wrote: Howard Chu h...@symas.com schrieb am 20.03.2014 um 08:14 in Nachricht 532a9562.6070...@symas.com: Ulrich Windl wrote: Howard Chu h...@symas.com schrieb am 19.03.2014 um 18:29 in Nachricht 5329d3dc.3060...@symas.com: Quanah Gibson-Mount wrote: --On Wednesday, March 19

Re: Antw: Re: mdb and bdb

2014-03-20 Thread Howard Chu
they accidentally opened the same DB from multiple programs at once. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Build mdb tools

2014-03-20 Thread Howard Chu
. Thanks, -- *Frederic Poisson* -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: Build mdb tools

2014-03-21 Thread Howard Chu
Michael Ströder wrote: Christian Kratzer wrote: On Thu, 20 Mar 2014, Howard Chu wrote: POISSON Frédéric wrote: Hello, I'm trying to build mdb tools (mdb_stat and mdb_copy inside libraries/liblmdb directory) on a Solaris 10 SPARC operating system with OpenLDAP 2.4.39. Is there some

<    3   4   5   6   7   8   9   10   11   12   >