Re: [389-users] console vs nsslapd-allow-anonymous-access

2013-04-09 Thread Mark Reynolds

Hi Alberto,

What version of 389-ds-base, 389-admin, and 389-adminutil are you using?

This is a known issue, but it should be fixed with the latest builds.

Mark

On 04/09/2013 03:46 PM, Alberto Viana wrote:

Hi all,

Why when i set nsslapd-allow-anonymous-access to off, the ds console 
stop to work? (I cant login anymore at console)


The error message is:

Cannot connect to the directory server:
netscape.ldap.LDAPException: error result(32)

thanks

Alberto Viana


--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users


--
Mark Reynolds
Red Hat, Inc
mreyno...@redhat.com

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

[389-users] console vs nsslapd-allow-anonymous-access

2013-04-09 Thread Alberto Viana
Hi all,

Why when i set nsslapd-allow-anonymous-access to off, the ds console stop
to work? (I cant login anymore at console)

The error message is:

Cannot connect to the directory server:
netscape.ldap.LDAPException: error result(32)

thanks

Alberto Viana
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

[389-users] Initialization with fds 1.2.0 and 389-ds 1.2.10 failure

2013-04-09 Thread carne_de_passaro
Hello folks,

I have a test environment with a FDS version 1.2.0 on a Debian 5.0 x86 and
a 389-ds 1.2.10.12-1.el6.x86_64 on a CentOS 6.3 x86_64.

I have two suffix on the FDS, a root suffix and a subsuffix. I've
configured two replication agreements, one for suffix. When I'm try to
initialize the root suffix, which contains a few objects, it's works just
fine, but when I try to initialize the subsuffix, which contains about
90.000 objects, it's fails and give me the error "Total update aborted.
System error. Error code -2" on the FDS console.

Looking at the 389-ds error log file I gave this:

[09/Apr/2013:11:01:45 -0300] NSMMReplicationPlugin -
multimaster_be_state_change: replica dc=foo,dc=gov,dc=br is going offline;
disabling replication
[09/Apr/2013:11:01:45 -0300] NSMMReplicationPlugin - conn=0 op=0
repl="dc=foo,dc=gov,dc=br": Replica in use locking_purl=conn=2 id=3
[09/Apr/2013:11:01:45 -0300] NSMMReplicationPlugin -
replica_disable_replication: replica dc=foo,dc=gov,dc=br is acquired
[09/Apr/2013:11:01:45 -0300] - WARNING: Import is running with
nsslapd-db-private-import-mem on; No other process is allowed to access the
database
[09/Apr/2013:11:01:45 -0300] NSMMReplicationPlugin - conn=2 op=3
repl="dc=foo,dc=gov,dc=br": StartNSDS50ReplicationRequest: response=0 rc=0
[09/Apr/2013:11:02:06 -0300] - import foo: Processed 17727 entries --
average rate 886.4/sec, recent rate 886.3/sec, hit ratio 0%
[09/Apr/2013:11:02:29 -0300] - import foo: Processed 32924 entries --
average rate 765.7/sec, recent rate 765.7/sec, hit ratio 98%
[09/Apr/2013:11:02:43 -0300] - slapi_start_bulk_import: bulk import is not
supported by this (default) backend
[09/Apr/2013:11:02:46 -0300] NSMMReplicationPlugin - Error -12: could not
import entry dn (null) for total update operation conn=2 op=43381
[09/Apr/2013:11:02:46 -0300] - ERROR bulk import abandoned
[09/Apr/2013:11:02:46 -0300] - import foo: Aborting all Import threads...
[09/Apr/2013:11:02:51 -0300] - import foo: Import threads aborted.
[09/Apr/2013:11:02:53 -0300] - import foo: Closing files...
[09/Apr/2013:11:02:57 -0300] - libdb: foo/nsuniqueid.db4: unable to flush:
No such file or directory
[09/Apr/2013:11:02:57 -0300] - libdb: foo/objectclass.db4: unable to flush:
No such file or directory
[09/Apr/2013:11:02:57 -0300] - libdb: foo/cn.db4: unable to flush: No such
file or directory
[09/Apr/2013:11:02:57 -0300] - libdb: foo/mailAlternateAddress.db4: unable
to flush: No such file or directory
[09/Apr/2013:11:02:57 -0300] - libdb: foo/uniquemember.db4: unable to
flush: No such file or directory
[09/Apr/2013:11:02:57 -0300] - libdb: foo/telephoneNumber.db4: unable to
flush: No such file or directory
[09/Apr/2013:11:02:57 -0300] - libdb: foo/parentid.db4: unable to flush: No
such file or directory
[09/Apr/2013:11:02:57 -0300] - libdb: foo/mail.db4: unable to flush: No
such file or directory
[09/Apr/2013:11:02:57 -0300] - libdb: foo/sn.db4: unable to flush: No such
file or directory
[09/Apr/2013:11:02:57 -0300] - libdb: foo/givenName.db4: unable to flush:
No such file or directory
[09/Apr/2013:11:02:57 -0300] - libdb: foo/entryrdn.db4: unable to flush: No
such file or directory
[09/Apr/2013:11:02:57 -0300] - libdb: foo/uid.db4: unable to flush: No such
file or directory
[09/Apr/2013:11:02:58 -0300] - libdb: foo/id2entry.db4: unable to flush: No
such file or directory
[09/Apr/2013:11:02:58 -0300] - import foo: Import failed.
[09/Apr/2013:11:02:58 -0300] NSMMReplicationPlugin - Aborting total update
in progress for replicated area dc=foo,dc=gov,dc=br connid=2
[09/Apr/2013:11:02:58 -0300] - process_bulk_import_op: NULL target sdn
[09/Apr/2013:11:02:58 -0300] NSMMReplicationPlugin - conn=2 op=-1
repl="dc=foo,dc=gov,dc=br": Released replica

and at the end of the 389-ds access log I gave this:

[09/Apr/2013:11:02:43 -0300] conn=2 op=43380 EXT
oid="2.16.840.1.113730.3.5.6" name="Netscape Replication Total Update Entry"
[09/Apr/2013:11:02:43 -0300] conn=2 op=43380 RESULT err=0 tag=120
nentries=0 etime=0
[09/Apr/2013:11:02:43 -0300] conn=2 op=43381 EXT
oid="2.16.840.1.113730.3.5.6" name="Netscape Replication Total Update Entry"
[09/Apr/2013:11:02:46 -0300] conn=2 op=-1 fd=65 closed - B4

What does means that error B4 ?

Thanks in advance,

Danilo
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Re: [389-users] Extended control or extop

2013-04-09 Thread Rich Megginson

On 04/09/2013 07:31 AM, Andrey Ivanov wrote:

Hi,

I remember reading somewhere on 389 DS site or in dev commits or in 
trac a request or a realisation of the an extended control/operation 
that returns the LDAP entries referenced by some attribute.
Something like you make a search of a group with this extended 
control, the search takes all the 'uniqueMembers' and returns all the 
LDAP entries referenced by the values of 'uniqueMember'. Could you 
point to me the right control name or OID? Is it already present in 
some version  of 389DS?


This is the Dereference (deref) control.  It is basically an 
implementation of http://tools.ietf.org/html/draft-masarati-ldap-deref-00


It has been in the code for quite some time.



Thanks!


--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users


--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users