Re: slapd crashes with ch_realloc of X bytes failed

to implement it. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Permissions, users, startup when install from source

own startup script that works with chkconfig. http://linuxcommand.org/man_pages/chkconfig8.html --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Permissions, users, startup when install from source

/securing/chap26sec214.html This one is clearly a bit old since it looks for slapd.conf and slurpd, but the basic concepts are there. or you could just look at the one that ships with RHEL/CentOS... --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware

Re: uninstall?

install everything into the path you want? Otherwise, no, no particularly easy way to uninstall. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: SHA-2 support (was: Permissions, users, startup when install from source)

--On Wednesday, January 16, 2013 7:39 AM +0100 Michael Ströder mich...@stroeder.com wrote: Quanah Gibson-Mount wrote: --On Tuesday, January 15, 2013 2:35 PM -0800 Ori Bani orib...@gmail.com wrote: Why hasn't the sha2 module been migrated out of the contrib directory The core of OpenLDAP

Re: Using policy overlay

to moduleload it first. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Replication not working

don't understand your statement/question. Delta-Syncrepl MMR uses refresh and persist, and it is the best option to use for replication in OpenLDAP. Particularly with multi-master replication. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware

Re: Replication not working

accesslog  start the master   2. Take backup with mdb_copyand restore it on other master servers.   3. Enable accesslog configure to new consumers(work as providers as well) That sounds about right. I assume you are using current RE24 OpenLDAP, and not 2.4.33. --Quanah -- Quanah Gibson-Mount

Re: Replication not working

of the accesslog DB in the middle of your existing DB configuration, which is going to cause you all sorts of problems. I prefer to list the accesslog db prior to the main db. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc

Re: slapd crashes with ch_realloc of X bytes failed

systems. We wrote a wrapper around slapd, slapadd, and slapcat, that forces ulimit -v unlimited --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: back-sql documentation (was: SELinux woes)

Feel free to supply at patch updating the documentation at http://www.openldap.org/its Or at least file an ITS on the fact it needs updating. ITSes with patches tend to get processes more quickly, as this is a community driven product. Thanks, Quanah -- Quanah Gibson-Mount Sr. Member

Re: don't get running the slapd while using mdb backend

BDB_IDL_LOGN? Yes. back-mdb is ~60% the same code as back-bdb/hdb, its indexing functions are basically identical. However, I never got mdb to work successfully by modifying these values. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc

Re: don't get running the slapd while using mdb backend

it to 17 from 16. Also, MDB has changed substantially since I did that testing. ;) I was ok with not modifying it given the read speed improvements in mdb vs bdb. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra

Re: don't get running the slapd while using mdb backend

-mdb configuration: olcDbEnvFlags: writemap olcDbEnvFlags: nometasync Also, I would advise using current RE24 for your testing. Keep in mind too that there is a database format change coming for mdb to fix ITS#7473. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc

Re: slapd segfaults with mdb

=0x7f738b11a828) at id2entry.c:666 666 a-a_desc = mdb-mi_ads[*lp++]; (gdb) How can I solve this? File an ITS (http://www.openldap.org/its/) with a full backtrace of all threads from gdb. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division

Re: about Too many executing

-software/200702/msg00201.html The problem is the client, not the server. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

RE: Replication not working

it. ;) --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: slapcat output is truncated every now and then

to get a read lock failed, probably because slapd already had a conflicting write lock on it and the deadlock detector chose slapcat to lose and slapcat doesn't retry on lock errors, unlike slapd. The solution, of course, is to use back-mdb. --Quanah -- Quanah Gibson-Mount Sr. Member

Re: slapd-ldap: second search operation always generates error LdapErr: DSID-0C0906E8

2.4.23? Upgrade to a current release. If you are not able to build OpenLDAP yourself, try the packages at http://ltb-project.org/wiki/download#openldap --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra

RE: slapd-ldap: second search operation always generates error LdapErr: DSID-0C0906E8

on a current release. Regards, Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: slapcat output is truncated every now and then

/devel/contributing.html --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: syncrepl issue

random events. The reason I call it random because I could not find any patter yet. This happens almost every day. a) Always note the version of OpenLDAP you are using b) Use delta-syncrepl --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc

Re: using back-sql with cn=config

--On Wednesday, January 23, 2013 9:01 PM +0100 Benin Technologies benintechnolog...@yahoo.fr wrote: Please stop posting to openldap-b...@openldap.org. That list is only for following up to existing ITSes. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc

Re: syncrepl issue

to be problematic, particularly with MMR. If you want reliable replication, use delta-syncrepl. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: slapcat output is truncated every now and then

--On Friday, January 25, 2013 3:26 PM -0800 Quanah Gibson-Mount qua...@zimbra.com wrote: 7503 is a duplicate of 7502, it will be closed. I noticed that while you submitted a patch with 7504 for the documentation, you did not submit a patch for 7502, even though you had posted one to the list

Re: replication between a back-sql master and back-hdb slave

to the Oracle DB, would trigger ldap writes to the master of the changes as well (using the same program, it could run in a one-off LDIF mode or as an event driven program pushing updates to LDAP). --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc

Re: syncrepl issue

, and it has never had the abundance of issues present in syncrepl. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: TLS problem

available at http://ltb-project.org/wiki/download#openldap that should meet your needs. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: ldapsearch question

attr if you need to. Like: myOrgRole: secretary You may find https://itservices.stanford.edu/service/directory/datadefs/people enlightening. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader

Re: slapd-meta and tls_reqcert=allow

advise you consider using a current release. RedHat's packages are some 2 years out of date, and missing numerous fixes. If compiling OpenLDAP yourself is not something you want to do, then check out the packages at http://ltb-project.org/wiki/download#openldap --Quanah -- Quanah Gibson

Re: TLS problem

ldapsearch -x -Z -b'dc=flamengro,dc=co,dc=za' uid=izak ldap_start_tls: Protocol error (2) additional info: unsupported extended operation Are you using startTLS (extended operation) or ldaps? These are two different things, and yet it seems you are trying to use both. --Quanah -- Quanah Gibson

Re: Fwd: Error from MOD referral containing spaces

if you use UnboundID's SDK rather than JLDAP? --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Enforce TLS?

-- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Mirror mode difference from N-Way Multi-Master

strongly advise using delta-syncrepl based MMR with the most current OpenLDAP release (2.4.33). --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Mirror mode difference from N-Way Multi-Master

-- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Mirror mode difference from N-Way Multi-Master

to the load-balance name, and never have an issue if one of the masters in the cluster goes down. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: weighted valsort for telephone Numbers

when the RFC 3296 manageDSAit control is used. As Bill noted, this is already possible if you supply the VALSORT control. No need to mess with manageDSAit. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra

Re: weighted valsort for telephone Numbers

. Fixed via ITS#7523. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: openLDAP is not working with MySQL cluster

request tou to help me. It will be great if u share me sample slapd.conf file that has the NDB configuration. Did you configure with --enable-ndb? I would note NDB support was never finished. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc

Re: modifying cn=config - Invalid credentials (49)

your cn=config DB to use SASL/EXTERNAL auth, with mapping from the root user to the rootdn. However, your ldapsearch command is not using SASL/EXTERNAL. This would explain the error. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc

RE: modifying cn=config - Invalid credentials (49)

=config ldap_modify: Insufficient access (50) You need to do a SASL/EXTERNAL bind using your rootdn as the root user on the system. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source

RE: modifying cn=config - Invalid credentials (49)

. Looks like you've busted something somehow. You could dump your cn=config db via slapcat, add an olcRootPassword value, and then reload it, so you can bind with -x -D -w --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc

Re: Indices is missing?

and that issue will not occur. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: N-Way Multimaster with syncrepl and delta-repl -- slapd stops responding

has happened since Feb 1. Did you build openldap with debugging symbols? (-g) Did you disable optimization? (-O0) If so, I would advise submitting an ITS, with a full backtrace from gdb: http://www.openldap.org/faq/data/cache/59.html --Quanah -- Quanah Gibson-Mount Sr. Member of Technical

Re: N-Way Multimaster with syncrepl and delta-repl -- slapd stops responding

--On Thursday, February 21, 2013 9:27 AM -0800 Quanah Gibson-Mount qua...@zimbra.com wrote: --On Thursday, February 21, 2013 8:35 AM -0500 Robert W. Smith bob.sm...@o3bnetworks.com wrote: Hi, I am running a 4-way multi-master configuration with a number of slaves in remote locations. I am

RE24 testing call (OpenLDAP 2.4.34)

Configure build. Execute the test suite (via make test) after it is built. Thanks! --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: RE24 testing call (OpenLDAP 2.4.34)

--On Friday, February 22, 2013 2:02 AM +0100 Patrick Lists openldap-l...@puzzled.xs4all.nl wrote: Hi Quanah, On 02/22/2013 12:24 AM, Quanah Gibson-Mount wrote: If you know how to build OpenLDAP manually, and would like to participate in testing the next set of code for the 2.4.34 release

Re: RE24 testing call (OpenLDAP 2.4.34)

. But that doesn't seem true if you're using the same config as another machine. Stanford's replicas have a few hundred more indices than the master. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader

Re: RE24 testing call (OpenLDAP 2.4.34)

-- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: additional info: objectClasses: value #0 invalid per syntax

#openldap as an alternative to the broken bits shipped by rhel/centos. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: OpenLDAP slave-master synchronization problem

the replication section of the admin guide. In particular, you are missing any syncrepl statement(s) for the replica, thus it still believes it is a master. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader

Re: OpenLDAP slave-master synchronization problem

--On Thursday, February 28, 2013 6:35 PM -0800 Quanah Gibson-Mount qua...@zimbra.com wrote: You clearly have not correctly configured your replica. I advise you to read the replication section of the admin guide. In particular, you are missing any syncrepl statement(s) for the replica, thus

Re: Mirror mode and cn=config replication

. The *only* difference is that with mirror mode you use some sort of balancer so that only a single server is available for writes at a given time. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader

Re: Mirror mode and cn=config replication

about it until you get to a current build, given all the MMR related fixes since 2.4.28. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Mirror mode and cn=config replication

--On Monday, March 04, 2013 2:03 PM -0800 Quanah Gibson-Mount qua...@zimbra.com wrote: --On Monday, March 04, 2013 4:45 PM -0500 John Baker john...@marlboro.edu wrote: Thanks for the reply, gnutls is a pain but we've been able to make it work and the boss hates it when we use source so I'm

Re: How to build OpenLDAP against specific OpenSSL install?

OpenSSL. The new OpenSSL 1.0.1e header files are located under /usr/local/include/openssl and the libs are in /usr/local/lib64. https://github.com/Zimbra-Community/zimbra-sources/blob/master/main/ThirdParty/openldap/Makefile --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc

Re: ldapsearch returning failure to import cert

would suggest using the packages from the LTB project: http://ltb-project.org/wiki/download#openldap Until you do, you're essentially wasting your time anyone else's by asking questions while using the mess that RedHat ships. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra

Re: Re[4]: Synchronization of OpenLDAP with other application

--Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: about openldap over udp

a lot. http://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg678526.html --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Quick setup replica with openldap-2.4.33

Generally, you can use the mdb_copy utility. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Quick setup replica with openldap-2.4.33

it. There's certainly nothing wrong with doing that (for the MDB db). --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

RE24 testing call (OpenLDAP 2.4.35)

Configure build. Execute the test suite (via make test) after it is built. Thanks! --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: rid tracking

on each replica using the same provider? That is correct, you can use the same RID on all 20 replicas. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Loosing existing entries when implementing syncrepl N-Way Multi-Master Replication (openldap-2.4.32)

have been fixed since the 2.4.32 release. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: openLDAP storing passwords in plain text

SDK if you are going to be using Java to talk to LDAP. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: How to improve performance with MDB backend?

issue fixed since the 2.4.35 release (ITS#7565). --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: What can I use for pwdCheckModule?

--On Wednesday, April 10, 2013 9:30 AM -0400 D C dc12...@gmail.com wrote: Server is openldap 2.4.23 Seriously? You're using a version of OpenLDAP that is nearly 3 years old? Why would you do that to yourself? --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc

Re: Alias dereferencing

? OpenLDAP version? Example configuration? --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: I can't delete a shell DB

. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Stable schema definition for dynlist overlay?

as experimental. There are more reliable schemas? There is nothing unreliable about the one provided. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: I can't delete a shell DB

--On Thursday, April 18, 2013 4:58 PM +0200 Michael Ströder mich...@stroeder.com wrote: Quanah Gibson-Mount wrote: --On Thursday, April 18, 2013 7:18 AM -0300 Diego Woitasen di...@woitasen.com.ar wrote: I know that I could remove it from the filesystem, but I wouldn't. You can use slapcat

RE: How to improve performance with MDB backend?

noted the other day? For me, MDB writes are a minimum of 65 times faster than writes with BDB/HDB, even when BDB/HDB use an SHM key. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source

RE: How to improve performance with MDB backend?

Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

RE: How to improve performance with MDB backend?

than the DB size. Also, what OpenLDAP version are you using? That's always important to note. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

RE: How to improve performance with MDB backend?

-- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

RE: How to improve performance with MDB backend?

have no need to exceed your total RAM. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

RE: How to improve performance with MDB backend?

-- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

RE: hashed credentials for idassert-bind?

it in the slapd.conf file? You could use the cn=config backend, then it would be in slapd.d or whatever you named it. But it is still going to exist on-disk. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra

Re: ldap with TLS

to work with an IP address. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: odd multi-master inconsistency

to their customers. Otherwise, use a current build of OpenLDAP on your servers. Hope that helps! --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Issue with delta-sync multimaster

. Is this a candidate for an ITS? Please file it as an ITS. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Chaining stops working after slapd restart

=com credentials=** mode=self This works until I have to restart the slave ldap server. Can anyone help me fix this problem? Are you using slapd.conf and then modifying an instantiated cn=config from inside of it, rather than fully using cn=config? --Quanah -- Quanah Gibson

RE: Chaining stops working after slapd restart

this with OpenLDAP 2.4.35. Thanks, Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Modern Password Hashes in Openldap?

? If so, what kind of backend are you using to store hashes? I would suggest you look at the contrib password module, which supports a number of schemes. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader

Re: Debian Squeeze: Slapd subtree disappears, but ldapsearch finds it | unable to allocate memory for mutex; resize mutex region

with it, and significant problems with the way in which they build their BDB package too. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Debian Squeeze: Slapd subtree disappears, but ldapsearch finds it | unable to allocate memory for mutex; resize mutex region

-- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc Zimbra :: the leader in open source messaging and collaboration

Re: Need help to configure OpenLDAP!!

. Fix your input LDIF. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc Zimbra :: the leader in open source messaging and collaboration

Re: Debian Squeeze: Slapd subtree disappears, but ldapsearch finds it | unable to allocate memory for mutex; resize mutex region

, worked and didn't crash for me. I never use distribution software for OpenLDAP except gcc. I.e., I build openssl, heimdal, cyrus-sasl, etc, all myself. And now with MDB, I no longer have to build BDB. ;) --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division

Re: Debian Squeeze: Slapd subtree disappears, but ldapsearch finds it | unable to allocate memory for mutex; resize mutex region

is out and I hope, that the BDB files are not broken as you said. Debian's BDB libs will always be broken. I filed a bug report with them on it ages ago, and they declined to fix it. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc

Re: Debian Squeeze: Slapd subtree disappears, but ldapsearch finds it | unable to allocate memory for mutex; resize mutex region

--On Thursday, May 02, 2013 5:52 PM +0200 Simone Piccardi picca...@truelite.it wrote: On 05/02/2013 04:08 PM, Quanah Gibson-Mount wrote: --On Thursday, May 02, 2013 8:32 AM +0200 Denny Schierz linuxm...@4lin.net wrote: but than you have to download, patch and update security fixes by your

Re: Debian Squeeze: Slapd subtree disappears, but ldapsearch finds it | unable to allocate memory for mutex; resize mutex region

, which are quite often extremely flawed. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Debian Squeeze: Slapd subtree disappears, but ldapsearch finds it | unable to allocate memory for mutex; resize mutex region

two lists of Do this:… and Don't do this: … would probably go a long way. The distribution maintainers are quite aware of the objections to the way in which they build their software. Their decisions have little to do with needs of the end users. --Quanah -- Quanah Gibson-Mount Sr. Member

Re: Debian Squeeze: Slapd subtree disappears, but ldapsearch finds it | unable to allocate memory for mutex; resize mutex region

--On Thursday, May 02, 2013 8:18 PM +0200 Simone Piccardi picca...@truelite.it wrote: On 05/02/2013 06:10 PM, Quanah Gibson-Mount wrote: Sorry, as someone who used to maintain some 600 servers for a major university running a very wide variety of services, I disagree. If you can't figure out

Re: Debian Squeeze: Slapd subtree disappears, but ldapsearch finds it | unable to allocate memory for mutex; resize mutex region

--On Thursday, May 02, 2013 12:58 PM -0400 David Blank-Edelman d...@ccs.neu.edu wrote: On May 2, 2013, at 12:53 PM, Quanah Gibson-Mount qua...@zimbra.com wrote: The distribution maintainers are quite aware of the objections to the way in which they build their software. Their decisions

Re: Debian Squeeze: Slapd subtree disappears, but ldapsearch finds it | unable to allocate memory for mutex; resize mutex region

to set two flags for mdb: olcDbEnvFlags: writemap olcDbEnvFlags: nometasync I set them myself. You can get the current source via: http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=snapshot;h=refs/heads/OPENLDAP_REL_ENG_2_4;sf=tgz --Quanah -- Quanah Gibson-Mount Sr. Member

Re: Questions about multiple identical values in a field

-- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Questions about multiple identical values in a field

--On Friday, May 03, 2013 7:01 PM +0200 Erwann Abalea eaba...@gmail.com wrote: 2013/5/3 Quanah Gibson-Mount qua...@zimbra.com --On Friday, May 03, 2013 6:24 PM +0200 Erwann Abalea eaba...@gmail.com wrote: Can't you use the postalAddress attribute? With your examples, it should

Re: Unable to use TLS in a 2-WayMaster/MirrorMode Setup

of OpenLDAP is even worse. Build OpenLDAP yourself. Link it to OpenSSL. Get a current release. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: cleaning HDB after an unclean shutdown

. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

Re: Using LDAP how to restrict users to certain applications only

the service(s) they had access to (such as zabbix). --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. Zimbra :: the leader in open source messaging and collaboration

<    3   4   5   6   7   8   9   10   11   12   >