[389-users] Re: Multimaster replication + one way replication Q

2017-10-04 Thread carne_de_passaro
We have 19 master servers and more than 150 slave servers replicating with
each other and all replication agreements are full replication, but only
one master server have the memberof plugin activated. We never have a
problem with this.



Em 4 de out de 2017 2:17 PM, "Mark Reynolds"  escreveu:



On 10/04/2017 12:43 PM, isabella.ghiu...@nrc-cnrc.gc.ca wrote:
>  William , thank you for feedback ,  2 years ago when I set up 389-DS
multi-mater replication with Memberof plugin I was advised by people on
this list to use fractional replication (we were seeing strange behavior)

Correct, you should use fractional replication if you are using memberOf
in a MMR env:

https://access.redhat.com/documentation/en-us/red_hat_
directory_server/10/html/administration_guide/advanced_
entry_management#memberof-topology

>  : to exclude Memberof plugin from replication,  your  reply  here
mentioned I do not need that  anymore , is this  correct ? I am a bit
confuse , if I should reconsider my replication configuration and use full
replication for multi -master ?
>  Here is my  present 389-DS version , your feedback much appreciate!
> 389-ds-base-libs-1.3.5.15-1.fc24.x86_64
> 389-ds-base-1.3.5.15-1.fc24.x86_64
> ___
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org


[389-users] Re: Locating syntax violations

2017-10-04 Thread Morgan Jones
Thanks Mark, I should have been able to find that.  

Is there a downside to leaving this on all the time? 

-morgan


> On Oct 4, 2017, at 3:53 PM, Mark Reynolds  wrote:
> 
> Hi Morgan,
> 
> On 10/04/2017 03:46 PM, Morgan Jones wrote:
>> I’m working on importing a Ldif from an older version of Redhat  and have a 
>> few dozen of the below: is there a way to increase debugging such that it 
>> tells me which attribute violates syntax? 
> Yes, set nsslapd-syntaxlogging to "on" under the cn=config entry
> 
> Regards,
> Mark
> 
> 
>> I’ve looked and can’t find anything.  We have a moderately complex custom 
>> schema and it’s tough to guess which attribute is a problem.
>> 
>> [02/Oct/2017:19:26:51.469805388 -0400] - WARN - import_producer - import 
>> userRoot: Skipping entry “uid=user1,ou=employees,dc=domain,dc=org" which 
>> violates attribute syntax, ending line 2988973 of file 
>> "/home/morgan/devldap03.ldif”
>> 
>> Thanks,
>> 
>> -morgan
>> ___
>> 389-users mailing list -- 389-users@lists.fedoraproject.org
>> To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
> 
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org


[389-users] Re: Locating syntax violations

2017-10-04 Thread Mark Reynolds
Hi Morgan,

On 10/04/2017 03:46 PM, Morgan Jones wrote:
> I’m working on importing a Ldif from an older version of Redhat  and have a 
> few dozen of the below: is there a way to increase debugging such that it 
> tells me which attribute violates syntax? 
Yes, set nsslapd-syntaxlogging to "on" under the cn=config entry

Regards,
Mark


>  I’ve looked and can’t find anything.  We have a moderately complex custom 
> schema and it’s tough to guess which attribute is a problem.
>
> [02/Oct/2017:19:26:51.469805388 -0400] - WARN - import_producer - import 
> userRoot: Skipping entry “uid=user1,ou=employees,dc=domain,dc=org" which 
> violates attribute syntax, ending line 2988973 of file 
> "/home/morgan/devldap03.ldif”
>
> Thanks,
>
> -morgan
> ___
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org


[389-users] Locating syntax violations

2017-10-04 Thread Morgan Jones

I’m working on importing a Ldif from an older version of Redhat  and have a few 
dozen of the below: is there a way to increase debugging such that it tells me 
which attribute violates syntax?  I’ve looked and can’t find anything.  We have 
a moderately complex custom schema and it’s tough to guess which attribute is a 
problem.

[02/Oct/2017:19:26:51.469805388 -0400] - WARN - import_producer - import 
userRoot: Skipping entry “uid=user1,ou=employees,dc=domain,dc=org" which 
violates attribute syntax, ending line 2988973 of file 
"/home/morgan/devldap03.ldif”

Thanks,

-morgan
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org


[389-users] Re: Multimaster replication + one way replication Q

2017-10-04 Thread Mark Reynolds


On 10/04/2017 12:43 PM, isabella.ghiu...@nrc-cnrc.gc.ca wrote:
>  William , thank you for feedback ,  2 years ago when I set up 389-DS 
> multi-mater replication with Memberof plugin I was advised by people on this 
> list to use fractional replication (we were seeing strange behavior) 

Correct, you should use fractional replication if you are using memberOf
in a MMR env:

https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/advanced_entry_management#memberof-topology

>  : to exclude Memberof plugin from replication,  your  reply  here mentioned 
> I do not need that  anymore , is this  correct ? I am a bit confuse , if I 
> should reconsider my replication configuration and use full replication for 
> multi -master ?
>  Here is my  present 389-DS version , your feedback much appreciate!
> 389-ds-base-libs-1.3.5.15-1.fc24.x86_64
> 389-ds-base-1.3.5.15-1.fc24.x86_64
> ___
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org


[389-users] Re: Multimaster replication + one way replication Q

2017-10-04 Thread isabella . ghiurea
 William , thank you for feedback ,  2 years ago when I set up 389-DS 
multi-mater replication with Memberof plugin I was advised by people on this 
list to use fractional replication (we were seeing strange behavior)  : to 
exclude Memberof plugin from replication,  your  reply  here mentioned I do not 
need that  anymore , is this  correct ? I am a bit confuse , if I should 
reconsider my replication configuration and use full replication for multi 
-master ?
 Here is my  present 389-DS version , your feedback much appreciate!
389-ds-base-libs-1.3.5.15-1.fc24.x86_64
389-ds-base-1.3.5.15-1.fc24.x86_64
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org


[389-users] Re: Ubuntu packages for 389

2017-10-04 Thread William Brown
On Wed, 2017-10-04 at 08:34 +0200, Michal Medvecky wrote:
> Hello,
> 
> I know it’s a bit weird question for something called “Fedora … “, but is 
> there any chance someone maintains Ubuntu/Debian packages for latest 389 
> versions?
> 
> I’m struggling hard with the historical version available in Ubuntu (1.3.4.9) 
> and for some reasons I can’t use any other distro :(
> 

I can put you in touch with the ubuntu/debian maintainer if you like in
IRC. :) 

-- 
Sincerely,

William Brown
Software Engineer
Red Hat, Australia/Brisbane



signature.asc
Description: This is a digitally signed message part
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org


[389-users] Ubuntu packages for 389

2017-10-04 Thread Michal Medvecky
Hello,

I know it’s a bit weird question for something called “Fedora … “, but is there 
any chance someone maintains Ubuntu/Debian packages for latest 389 versions?

I’m struggling hard with the historical version available in Ubuntu (1.3.4.9) 
and for some reasons I can’t use any other distro :(

Michal
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org


[389-users] Re: ldapcompare on cn=config

2017-10-04 Thread Michal Medvecky

> We need to raise it as an issue then. 

For the record, https://pagure.io/389-ds-base/issue/49390 


___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org