[389-users] Re: Chain on Update problem

2021-03-04 Thread William Brown
> On 5 Mar 2021, at 12:03, Grant Byers wrote: > > Hi All, > > Version: 1.3.10 > > In our environment, we'd like to use a chaining backend to push BIND > operations up to masters by way of the consumer (rather than client > referral). We'd like to do this to ensure password lockout

[389-users] Chain on Update problem

2021-03-04 Thread Grant Byers
Hi All, Version: 1.3.10 In our environment, we'd like to use a chaining backend to push BIND operations up to masters by way of the consumer (rather than client referral). We'd like to do this to ensure password lockout attributes are propagated to all consumers equally via our standard

[389-users] Re: Error while trying to add Object -> unknown object class "olcSchemaConfig"

2021-03-04 Thread William Brown
> On 4 Mar 2021, at 15:55, dd4321 Dey wrote: > > Hi > I am trying to use LDAP service which is installed in the IPA server to > authenticate Guacamole users. Guacamole and LDAP integration specifies that i > need to create an additional object called guacConfigGroup. > > To accomplish

[389-users] Re: [EXTERNAL] Re: Replication delay, connection blocking ending in closed - B1

2021-03-04 Thread Colin Tulloch
I tried it just now but it was way too verbose - we filled up 500mb of error logs in 15 minutes. We have a lot more space, but it could take hours before we see another failure (these delays intermittently cause an application to fail). Unfortunately we can't re-produce on demand.

[389-users] Re: Unindexed search even on indexed database

2021-03-04 Thread Mark Reynolds
On 3/4/21 7:24 AM, Pierre Rogier wrote: Hi Jan, IMHO the allids threshold has been reached for the "issued" value for entryStatus  index  (in other words: too many entries have  entryStatus: issued: ) You may want to grep for "conn=115 op=1" in access log and check how many entries where

[389-users] Re: Error while trying to add Object -> unknown object class "olcSchemaConfig"

2021-03-04 Thread Pierre Rogier
Hi Dey, I think that the problem is that the schema ldif is written for OpenLDAP and not 389 ... Removing the olc prefix from the ldif will probably be enough to fix the issue. FYI: there is a discussion about such problem in

[389-users] Re: Unindexed search even on indexed database

2021-03-04 Thread Pierre Rogier
Hi Jan, IMHO the allids threshold has been reached for the "issued" value for entryStatus index (in other words: too many entries have entryStatus: issued: ) You may want to grep for "conn=115 op=1" in access log and check how many entries where returned by the search If the value is higher

[389-users] Unindexed search even on indexed database

2021-03-04 Thread Jan Tomasek
Hello, I'm worrying about log lines: [04/Mar/2021:10:08:47.982170561 +0100] - NOTICE - ldbm_back_search - Unindexed search: search base="o=tcs2,o=apps,dc=cesnet,dc=cz" scope=2 filter="(entryStatus=issued)" conn=115 op=1 Index is defined: # dsconf -D "cn=Directory Manager" -w "$pswd"