Re: [389-users] nsslapd-listen-backlog-size on 1.2.11.30

2014-09-03 Thread Noriko Hosoi

Hi Michael,

I'm having the same problem.  We thought the problem was fixed by this 
ticket, but it was not for epel6.

https://fedorahosted.org/389/ticket/47875

Investigating...
--noriko


Michael Gettes wrote:

Hi Noriko,

following instructions from the port389.org  site 
and your email - i got the code


./configure --host=x86_64-redhat-linux-gnu 
--build=x86_64-redhat-linux-gnu --program-prefix= --prefix=/usr 
--exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin 
--sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include 
--libdir=/usr/lib64 --libexecdir=/usr/libexec --localstatedir=/var 
--sharedstatedir=/var/lib --mandir=/usr/share/man 
--infodir=/usr/share/info --enable-autobind --with-selinux 
--with-openldap --with-tmpfiles-d=/etc/tmpfiles.d


(the above was from an rpmbuild of a prior version).   then
make USE_64=1

everything compiles but…

/bin/sh ./libtool  --tag=CC   --mode=link gcc  -g -O2   -o ldif-bin 
ldap/servers/slapd/tools/ldif_bin-ldif.o -lplc4 -lplds4 -lnspr4 -lssl3 
-lnss3 -lldap  -llber -lsasl2
libtool: link: gcc -g -O2 -o ldif-bin 
ldap/servers/slapd/tools/ldif_bin-ldif.o  -lplc4 -lplds4 -lnspr4 
-lssl3 -lnss3 -lldap -llber -lsasl2
ldap/servers/slapd/tools/ldif_bin-ldif.o: In function 
`ldif_type_and_value':
/home/gettes/ds/ldap/servers/slapd/tools/ldif.c:73: undefined 
reference to `ldif_sput'

collect2: ld returned 1 exit status

uname -a
Linux  2.6.32-431.23.3.el6.x86_64 #1 SMP Wed Jul 16 06:12:23 EDT 
2014 x86_64 x86_64 x86_64 GNU/Linux


sorry for the hassle.

/mrg

On Sep 3, 2014, at 12:23 PM, Noriko Hosoi > wrote:



Michael Gettes wrote:

Hi,

I realize I am on the bleeding edge and accept responsibility for doing so - 
but I’d like to try and plan accordingly.  When might we see 1.2.11.31?  I 
assume if I build from source this build problem will still occur, yes?
If you checkout from the git repository (branch name: 
389-ds-base-1.2.11 or tag: 389-ds-base-1.2.11.31), it should have the 
config parameter.

|git clonegit://git.fedorahosted.org/389/  
|ds.git  

We will let you know when our build is ready.

Thanks,
--noriko

Is my only option to downgrade to 11.29?  If 11.31 will be out in the next day 
or so then I will wait.

thank you so much!

/mrg

On Sep 2, 2014, at 8:12 PM, Noriko Hosoi  wrote:


There was a backport error.  We will release 1.2.11.31 as soon as possible.  
Sorry about this inconvenience.
--noriko

Michael Gettes wrote:

I’m trying to set nsslapd-listen-backlog-size which is documented to change the 
listen queue backlog.
I have net.core.somaxconn = 8192 and I am trying to set listen-backlog to 4096.

dn: cn=config
cn: config
objectClass: top
objectClass: extensibleObject
objectClass: nsslapdConfig
nsslapd-listen-backlog-size: 4096
…

I get the following:

[02/Sep/2014:18:49:33 -0400] config - Unknown attribute 
nsslapd-listen-backlog-size will be ignored
[02/Sep/2014:18:49:33 -0400] - 389-Directory/1.2.11.30 B2014.219.205 starting up
[02/Sep/2014:18:49:33 -0400] - slapd started.  Listening on All Interfaces port 
389 for LDAP requests
[02/Sep/2014:18:49:33 -0400] - Listening on All Interfaces port 636 for LDAPS 
requests

Why am I getting the Unknown attribute error?  (i feel like i am doing 
something really stupid here).

/mrg

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users


--
389 users mailing list
389-users@lists.fedoraproject.org 


https://admin.fedoraproject.org/mailman/listinfo/389-users




--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users


--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Re: [389-users] nsslapd-listen-backlog-size on 1.2.11.30

2014-09-03 Thread Michael Gettes
Hi Noriko,

following instructions from the port389.org site and your email - i got the code

./configure --host=x86_64-redhat-linux-gnu --build=x86_64-redhat-linux-gnu 
--program-prefix= --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin 
--sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share 
--includedir=/usr/include --libdir=/usr/lib64 --libexecdir=/usr/libexec 
--localstatedir=/var --sharedstatedir=/var/lib --mandir=/usr/share/man 
--infodir=/usr/share/info --enable-autobind --with-selinux --with-openldap 
--with-tmpfiles-d=/etc/tmpfiles.d

(the above was from an rpmbuild of a prior version).   then
make USE_64=1

everything compiles but…

/bin/sh ./libtool  --tag=CC   --mode=link gcc  -g -O2   -o ldif-bin 
ldap/servers/slapd/tools/ldif_bin-ldif.o -lplc4 -lplds4 -lnspr4 -lssl3 -lnss3 
-lldap  -llber -lsasl2 
libtool: link: gcc -g -O2 -o ldif-bin ldap/servers/slapd/tools/ldif_bin-ldif.o  
-lplc4 -lplds4 -lnspr4 -lssl3 -lnss3 -lldap -llber -lsasl2
ldap/servers/slapd/tools/ldif_bin-ldif.o: In function `ldif_type_and_value':
/home/gettes/ds/ldap/servers/slapd/tools/ldif.c:73: undefined reference to 
`ldif_sput'
collect2: ld returned 1 exit status

uname -a
Linux  2.6.32-431.23.3.el6.x86_64 #1 SMP Wed Jul 16 06:12:23 EDT 2014 
x86_64 x86_64 x86_64 GNU/Linux

sorry for the hassle.

/mrg

On Sep 3, 2014, at 12:23 PM, Noriko Hosoi  wrote:

> Michael Gettes wrote:
>> Hi,
>> 
>> I realize I am on the bleeding edge and accept responsibility for doing so - 
>> but I’d like to try and plan accordingly.  When might we see 1.2.11.31?  I 
>> assume if I build from source this build problem will still occur, yes? 
> If you checkout from the git repository (branch name: 389-ds-base-1.2.11 or 
> tag: 389-ds-base-1.2.11.31), it should have the config parameter.
> git clone git://git.fedorahosted.org/389/ds.git
> We will let you know when our build is ready.
> 
> Thanks,
> --noriko
>> Is my only option to downgrade to 11.29?  If 11.31 will be out in the next 
>> day or so then I will wait.
>> 
>> thank you so much!
>> 
>> /mrg
>> 
>> On Sep 2, 2014, at 8:12 PM, Noriko Hosoi  wrote:
>> 
>>> There was a backport error.  We will release 1.2.11.31 as soon as possible. 
>>>  Sorry about this inconvenience.
>>> --noriko
>>> 
>>> Michael Gettes wrote:
 I’m trying to set nsslapd-listen-backlog-size which is documented to 
 change the listen queue backlog.
 I have net.core.somaxconn = 8192 and I am trying to set listen-backlog to 
 4096.
 
 dn: cn=config
 cn: config
 objectClass: top
 objectClass: extensibleObject
 objectClass: nsslapdConfig
 nsslapd-listen-backlog-size: 4096
 …
 
 I get the following:
 
 [02/Sep/2014:18:49:33 -0400] config - Unknown attribute 
 nsslapd-listen-backlog-size will be ignored
 [02/Sep/2014:18:49:33 -0400] - 389-Directory/1.2.11.30 B2014.219.205 
 starting up
 [02/Sep/2014:18:49:33 -0400] - slapd started.  Listening on All Interfaces 
 port 389 for LDAP requests
 [02/Sep/2014:18:49:33 -0400] - Listening on All Interfaces port 636 for 
 LDAPS requests
 
 Why am I getting the Unknown attribute error?  (i feel like i am doing 
 something really stupid here).
 
 /mrg
 
 --
 389 users mailing list
 389-users@lists.fedoraproject.org
 https://admin.fedoraproject.org/mailman/listinfo/389-users
>>> --
>>> 389 users mailing list
>>> 389-users@lists.fedoraproject.org
>>> https://admin.fedoraproject.org/mailman/listinfo/389-users
>> --
>> 389 users mailing list
>> 389-users@lists.fedoraproject.org
>> https://admin.fedoraproject.org/mailman/listinfo/389-users
> 
> --
> 389 users mailing list
> 389-users@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Re: [389-users] nsslapd-listen-backlog-size on 1.2.11.30

2014-09-03 Thread Noriko Hosoi

Michael Gettes wrote:

Hi,

I realize I am on the bleeding edge and accept responsibility for doing so - 
but I’d like to try and plan accordingly.  When might we see 1.2.11.31?  I 
assume if I build from source this build problem will still occur, yes?
If you checkout from the git repository (branch name: 389-ds-base-1.2.11 
or tag: 389-ds-base-1.2.11.31), it should have the config parameter.


|git clone git://git.fedorahosted.org/389/|ds.git

We will let you know when our build is ready.

Thanks,
--noriko

Is my only option to downgrade to 11.29?  If 11.31 will be out in the next day 
or so then I will wait.

thank you so much!

/mrg

On Sep 2, 2014, at 8:12 PM, Noriko Hosoi  wrote:


There was a backport error.  We will release 1.2.11.31 as soon as possible.  
Sorry about this inconvenience.
--noriko

Michael Gettes wrote:

I’m trying to set nsslapd-listen-backlog-size which is documented to change the 
listen queue backlog.
I have net.core.somaxconn = 8192 and I am trying to set listen-backlog to 4096.

dn: cn=config
cn: config
objectClass: top
objectClass: extensibleObject
objectClass: nsslapdConfig
nsslapd-listen-backlog-size: 4096
…

I get the following:

[02/Sep/2014:18:49:33 -0400] config - Unknown attribute 
nsslapd-listen-backlog-size will be ignored
[02/Sep/2014:18:49:33 -0400] - 389-Directory/1.2.11.30 B2014.219.205 starting up
[02/Sep/2014:18:49:33 -0400] - slapd started.  Listening on All Interfaces port 
389 for LDAP requests
[02/Sep/2014:18:49:33 -0400] - Listening on All Interfaces port 636 for LDAPS 
requests

Why am I getting the Unknown attribute error?  (i feel like i am doing 
something really stupid here).

/mrg

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users


--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Re: [389-users] Configuring interfaces?

2014-09-03 Thread David Barr
Thank you!

David

On Sep 2, 2014, at 18:10, Rich Megginson  wrote:

> On 09/02/2014 06:56 PM, David Barr wrote:
>> Good Morning!
>> 
>> I’m having a bad time finding documentation on how I would set up my 389-ds 
>> to only listen to localhost:389, and require all other connections to happen 
>> on port 636. The server is headless, so using the console is less than 
>> optimum.
>> 
>> Has anything like that been written?
> https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Configuration_Command_and_File_Reference/Core_Server_Configuration_Reference.html#cnconfig-nsslapd_listenhost_Listen_to_IP_Address
> 
> https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Configuration_Command_and_File_Reference/Core_Server_Configuration_Reference.html#cnconfig-nsslapd_securelistenhost
> 
> You might also be interested in using ldapi + autobind instead of localhost
> https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Configuration_Command_and_File_Reference/Core_Server_Configuration_Reference.html#nsslapd-ldapilisten
> https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Configuration_Command_and_File_Reference/Core_Server_Configuration_Reference.html#nsslapd-ldapiautobind
> 
> use starttls instead of ldaps, and use nsslapd-minssf to require secure 
> connections
> https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Configuration_Command_and_File_Reference/Core_Server_Configuration_Reference.html#nsslapd-minssf
> 
>> Thanks!
>> David
>> 
>> --
>> 
>> David - Offbeat  http://dafydd.livejournal.com
>> dafydd - Online  http://pgp.mit.edu/
>> Battalion 4 - Black Rock City Emergency Services Department
>>  Integrity*Commitment*Communication*Support
>> 
>> 51525354555657--
>> 
>> Dr. Viktor Frankenstein enters into a body building competition
>> only to find he has seriously misunderstood the objective.
>> 
>> 
>> 
>> 
>> 
>> --
>> 389 users mailing list
>> 389-users@lists.fedoraproject.org
>> https://admin.fedoraproject.org/mailman/listinfo/389-users
> 
> --
> 389 users mailing list
> 389-users@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users

--

David - Offbeat http://dafydd.livejournal.com
dafydd - Online http://pgp.mit.edu/
Battalion 4 - Black Rock City Emergency Services Department
Integrity*Commitment*Communication*Support

51525354555657--

Dr. Viktor Frankenstein enters into a body building competition
only to find he has seriously misunderstood the objective.





signature.asc
Description: Message signed with OpenPGP using GPGMail
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Re: [389-users] nsslapd-listen-backlog-size on 1.2.11.30

2014-09-03 Thread Michael Gettes
Hi,

I realize I am on the bleeding edge and accept responsibility for doing so - 
but I’d like to try and plan accordingly.  When might we see 1.2.11.31?  I 
assume if I build from source this build problem will still occur, yes?  Is my 
only option to downgrade to 11.29?  If 11.31 will be out in the next day or so 
then I will wait.

thank you so much!

/mrg

On Sep 2, 2014, at 8:12 PM, Noriko Hosoi  wrote:

> There was a backport error.  We will release 1.2.11.31 as soon as possible.  
> Sorry about this inconvenience.
> --noriko
> 
> Michael Gettes wrote:
>> I’m trying to set nsslapd-listen-backlog-size which is documented to change 
>> the listen queue backlog.
>> I have net.core.somaxconn = 8192 and I am trying to set listen-backlog to 
>> 4096.
>> 
>> dn: cn=config
>> cn: config
>> objectClass: top
>> objectClass: extensibleObject
>> objectClass: nsslapdConfig
>> nsslapd-listen-backlog-size: 4096
>> …
>> 
>> I get the following:
>> 
>> [02/Sep/2014:18:49:33 -0400] config - Unknown attribute 
>> nsslapd-listen-backlog-size will be ignored
>> [02/Sep/2014:18:49:33 -0400] - 389-Directory/1.2.11.30 B2014.219.205 
>> starting up
>> [02/Sep/2014:18:49:33 -0400] - slapd started.  Listening on All Interfaces 
>> port 389 for LDAP requests
>> [02/Sep/2014:18:49:33 -0400] - Listening on All Interfaces port 636 for 
>> LDAPS requests
>> 
>> Why am I getting the Unknown attribute error?  (i feel like i am doing 
>> something really stupid here).
>> 
>> /mrg
>> 
>> --
>> 389 users mailing list
>> 389-users@lists.fedoraproject.org
>> https://admin.fedoraproject.org/mailman/listinfo/389-users
> 
> --
> 389 users mailing list
> 389-users@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Re: [389-users] Attribute with Boolean issue

2014-09-03 Thread Ludwig Krispenz


On 09/02/2014 06:36 PM, Chase Miller wrote:

userPasswordNeverExpires: false

ds checks boolean values according to the RFC:

/* Per RFC4517:
 *
 * Boolean =  "TRUE" / "FALSE"
 */

and it does a case sensitive match.



On Tue, Sep 2, 2014 at 9:57 AM, Rob Crittenden > wrote:


Chase Miller wrote:
> Hello,
>
> I have an old fedora directory server, and I'm migrating it to a new
> server, and on the new server, I have installed the latest version.
>
> I had a custom attribute with a Boolean data type in the old
one, and
> now, when I try to ldif import into the new server, I receive an
error
> "value #0 invalid per syntax"
>
> However, I changed the data type to Directory String, and it
imports.
>
> Thoughts?

More strict syntax checking has been implemented which is probably the
issue.

I think the only legal values are TRUE and FALSE. What is it
blowing up on?

rob

--
389 users mailing list
389-users@lists.fedoraproject.org

https://admin.fedoraproject.org/mailman/listinfo/389-users




--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users


--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users