Hi guys,
we do have an apacheds/server-replication module which is empty. Do we
need this module at all ?
Ot should we use it as a container for the replication code we currently
have in ldap-protocol ?
(I'm bending toward the second option)
--
Regards,
Cordialement,
Emmanuel Lécharny
a determinated period of time, we simply delete
them (say, after 7 days).
This way, we don't store many entries for nothing, and we don't need to
send extra informations.
Does it sounds reasonnable ?
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
the consumer (ie, a
connection with a valid cookie).
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
?
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Le 1/14/13 5:25 AM, Kiran Ayyagari a écrit :
On Sun, Jan 13, 2013 at 11:17 PM, Emmanuel Lécharny
elecha...@gmail.comwrote:
Hi guys,
I'm currently working on a system to detect the staled replicas (ie
replicas that have been once connected, disconnected, and haven't be
reconnected, or have
Le 1/14/13 7:57 AM, Kiran Ayyagari a écrit :
On Mon, Jan 14, 2013 at 12:23 PM, Emmanuel Lécharny
elecha...@gmail.comwrote:
Le 1/14/13 5:25 AM, Kiran Ayyagari a écrit :
On Sun, Jan 13, 2013 at 11:17 PM, Emmanuel Lécharny elecha...@gmail.com
wrote:
Hi guys,
I'm currently working
Le 1/14/13 3:41 PM, Howard Chu a écrit :
Kiran Ayyagari wrote:
On Sun, Jan 13, 2013 at 11:17 PM, Emmanuel Lécharny elecha...@gmail.com
mailto:elecha...@gmail.com wrote:
Hi guys,
I'm currently working on a system to detect the staled replicas (ie
replicas that have been once
.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
store in the attribute. DirectoryString can obly be
a valid UTF-8 String, so if you try to store any byte which is not a
valid UTF-8 char then it will be rejected.
But again, you should use and OctetString syntax.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
modifications, but this is just a safety belt here : the way
we fixed the issue is orthogonal.
I'll keep ou inform today.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
a long time ago : the version
you are using is probably a 1.5.8 or earlier. We now are at 2.0.0-M9, 10
versions later.
I urge you to migrate to this latest version, and check if the problem
is still present.
Many thanks !
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Le 1/18/13 10:24 AM, Kiran Ayyagari a écrit :
On Fri, Jan 18, 2013 at 2:24 PM, Emmanuel Lécharny elecha...@gmail.comwrote:
Hi guys,
yesterday, while working on the issue we have when the server is
brutally shutdown, I noticed that we are using a version fo JDBM which
contains some code taht
://people.apache.org/~elecharny
[ ] +1 : release JDBM-2.0.0-M2
[ ] +/- 0 : I don't care
[ ] -1 : No, don't release JDBM-2.0.0-M2
I vote +1
Thanks !
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Hi guys,
FYI, I'll be MIA for one week - no internet, no computer, I'll see if I
can survice :) -.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
.
Thoughts?
Just cut a 2.0.0-M5. Not a big deal.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
,
Cordialement,
Emmanuel Lécharny
www.iktek.com
chunk of work for M11,
which hopefully should not take months.
wdyt ?
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
the functionality of
SSO + LDAP varification ?
with regards
karthik
Wrong mialing list. Post on httpd mailing list, please.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
,
Emmanuel Lécharny
www.iktek.com
this ?
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Hi guys,
I added the kerberos-client module as an ApacheDS sub-module. It has
been fixed by Kiran, and works just fine.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
a GUI instead of using pkinit...
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
?
3) We definitively need to add a plugin in Studio to allow a user to
change its password, using the changePassword protocol (and a shell
script based tool to do so)
Thoughts ?
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
are positive I'll take care to fix the site deployment.
Thanks for that
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
,
Cordialement,
Emmanuel Lécharny
www.iktek.com
,
Emmanuel Lécharny
www.iktek.com
Le 2/12/13 8:58 PM, Emmanuel Lécharny a écrit :
H,
I'm probably a bit too deep into the code atm, but it seems to me that
the system index are never updated, except ObjectClass, Rdn, entryCSN
and alias indexes. The entryUUID and AdministrativeRole indexes are
never updated, as far as I can
,
Cordialement,
Emmanuel Lécharny
www.iktek.com
and buggy compared to Indigo.
I'll wait for a RC. Good effort though
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
just wanted to share this information.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
try to get the Kerberos documentation updated, which
is quite a challenge...
Stay tuned !
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
of thousands entries, and the performances will be blazing fast).
I'd like to know what's your opinion.
Thanks !
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Le 2/17/13 2:53 AM, Howard Chu a écrit :
Emmanuel Lécharny wrote:
I the long term, I would favor Mavibot for a couple of reasons :
- first, it's a MVCC base, so we can conduct concurrent searches and
modifications (although we can't do many modifications at the same
time).
- second, we have
thik that JDBM will make us any favor here...
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
the server to work this way, if you have better ideas,
I'm listening !
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Le 2/22/13 5:04 AM, Kiran Ayyagari a écrit :
On Thu, Feb 21, 2013 at 11:44 PM, Emmanuel Lécharny
elecha...@gmail.comwrote:
Hi guys,
currently, when we do a search, we try to evaluate the number of
candidates each node in the filter expression will return. For instance,
such a filter
, and add the scope
*only* if the number is below a certain threshold (5, 10 whatever).
Very good suggestion ! Brillant !
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Le 2/22/13 9:11 AM, Kiran Ayyagari a écrit :
On Thu, Feb 21, 2013 at 11:29 PM, Emmanuel Lécharny
elecha...@gmail.comwrote:
Le 2/21/13 6:54 PM, Kiran Ayyagari a écrit :
On Thu, Feb 21, 2013 at 11:10 PM, Emmanuel Lécharny elecha...@gmail.com
wrote:
Le 2/21/13 5:25 PM, Kiran Ayyagari a écrit
irrelevant then.
So checking the scope first adds processing of no value.
Just my 2 cents.
I made a JIRA out of it :
https://issues.apache.org/jira/browse/DIRSERVER-1808
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Le 2/22/13 12:34 PM, Kiran Ayyagari a écrit :
On Fri, Feb 22, 2013 at 3:08 PM, Emmanuel Lécharny elecha...@gmail.comwrote:
Le 2/22/13 9:11 AM, Kiran Ayyagari a écrit :
On Thu, Feb 21, 2013 at 11:29 PM, Emmanuel Lécharny elecha...@gmail.com
wrote:
Le 2/21/13 6:54 PM, Kiran Ayyagari a écrit
// To be done
start the Kerberos server
create the KDC server
// To be done
start the HTTP server
// To be done
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
=*).
We then can get rid of the (ObjectClass=*) node in the filter,
irrespective to the complexity of this filter.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
.
It will take quite a while to fix that, as it's used everywhere, so I'd
liek first to have a release done.
Thoughts ?
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Hi,
just to be sure : is anyone having a pb in one of the server-integ
replication test (moddn) ?
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
/orgapachedirectory-303/
- Distribution packages:
http://people.apache.org/~elecharny
[ ] +1 : release Apache Directory LDAP API 1.0.0-M16
[ ] ± 0 : I don't care
[ ] -1 : No, don't release Apache Directory LDAP API 1.0.0-M16
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
be minimal for an important effort.
Just FTR...
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
and RDN are also heavily depending on String
- the gain won't be enormous : once converted, serializing a String on
disk is just a matter of storing some few extra informations.
So, I decided to stop there.
FUI.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
gain, but the more I read about
AIO, the more I'm convinced we need to spend some time on a prototype to
get valid numbers.
In any case, would we implement a layer on top of AIO, the upper API
should not be different, and that's were we have to be careful !
--
Regards,
Cordialement,
Emmanuel
The vote was successful with 4 binding votes :
Emmanuel
Felix
Kiran
Pierre-Arnaud
I will update the site, publish the sources and binary and announce the
news in the next two days.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
The vote is now close with 3 binding +1 :
Emmanuel
Kiran
Pierre-Arnaud
I'll push the packages on the distribution area, update the web site and
announce the release tomorrow.
Thanks guy !
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
ou=attributeTypes,cn=adsconfig,ou=schema
If i want my custom classes to have byte array attributes, how should i
define these custom attributes?
Pick the OctetString syntax. This is what it's used for.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
-Arnaud has @Ignored it atm).
We need to investigate those breakages.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
with the encryption algorithm (the order in which they
are sent is not the same on linux and mac, plus the selected algo is not
the same too).
I'm continuing my investigations...
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
: Release Apache Directory Studio 2.0.0-M6 (2.0.0.v20130308)
[ ] +/- 0 : I don't care
[ ] -1 : No, don't release Apache Directory Studio 2.0.0-M6 (2.0.0.v20130308)
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
?
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
on, but in the mean
time, I think I will update the site with this critical information.
Java on Mac sucks. Really...
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Le 3/8/13 6:22 PM, Kiran Ayyagari a écrit :
On Fri, Mar 8, 2013 at 10:29 PM, Emmanuel Lécharny elecha...@gmail.comwrote:
Hi guys,
today, I spent hours trying to get Studio on Mac connecting to a
kerberos server on linux, with no success :/
As soon as Studio was installed on a linux box
a
great name !
[1] http://svn.apache.org/repos/asf/labs/mavibot/
[2] https://cwiki.apache.org/confluence/display/labs/Mavibot
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
, we need a better documentation.
All in all, I think we are pretty much ready, and we can get a 2.0 done
by end of april or mid may.
thoughts ?
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
present in the administrators branch atm.
Won't it make sense to get rid of such a distinction, and to uses ACI
instead ?
[1] https://issues.apache.org/jira/browse/DIRSERVER-1812
[2] https://issues.apache.org/jira/browse/DIRSERVER-1813
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
org.apache.directory.api.ldap.model.password.PasswordUtil.encryptPassword()
It should not take too long to implement it.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
, sorry if I haven't mentionned what you have done on
Studio, so please, feel free to add your progress !
Many thanks guys !
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
to consider is the version used by tools like IBM RAD or
Oracle Enterprise pack.
I have no idea which Eclipse version they are both based...
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
,
Cordialement,
Emmanuel Lécharny
www.iktek.com
by default in the standard J2SE installation. You
have to install JCE in order to be able to use AES 256.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
, and that it only hashes the
userPassword for the entries stored under those places.
wdyt ? (see https://issues.apache.org/jira/browse/DIRSERVER-1819 too)
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Le 4/8/13 7:08 PM, Kiran Ayyagari a écrit :
On Mon, Apr 8, 2013 at 10:00 PM, Emmanuel Lécharny elecha...@gmail.comwrote:
Hi guys,
currently, there are two parts of the server that requires to know where
the user entry should be read from. We use the searchBaseDN, which is
configured
AES256.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
used to encrypt the password on
the cient side is not the one used to decrypt it on the server side.
I'm pretty sure that it has been fixed in trunk 2 weeks ago.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
,
Emmanuel Lécharny
www.iktek.com
Le 4/9/13 2:02 PM, Pierre-Arnaud Marcelot a écrit :
Hi Emmanuel,
On 8 avr. 2013, at 18:30, Emmanuel Lécharny elecha...@gmail.com wrote:
Hi guys,
currently, there are two parts of the server that requires to know where
the user entry should be read from. We use the searchBaseDN, which
Le 4/9/13 2:16 PM, Pierre-Arnaud Marcelot a écrit :
On 9 avr. 2013, at 14:13, Emmanuel Lécharny elecha...@gmail.com wrote:
ATM, here is what I suggest :
- make the hash password interceptor use the kerberos SearchBaseDN
But what if we don't have a KDC server defined but still want passwords
.
Are you *sure* that the password is the one stored in the entry ?
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
,
Cordialement,
Emmanuel Lécharny
www.iktek.com
/service
Just run apacheds.sh there
You can also build the installer for your platform :
mvn clean install -Pinstallers -DskipTests
The installers should be found in the installers/target/installers
directory.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
against a MITM attack.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
version.
I will cancel the vote for 2.0-RC1, and mobe the certificate to config,
if nobody objects.
thoughts ?
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
here http://people.apache.org/~elecharny/
FYI, this release will not be public, as we detected some more issues
that need to be fixed, but still, it can be worthfull to try it.
Thanks for your patience !
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Hi guys,
I don't know why, but just as I cut a release for those two packages,
issues and bugs report are raining :/
I will rollback the release, and move back to M11 and M17.
Let's fix the nex issues, and get a new release done in the next few days !
--
Regards,
Cordialement,
Emmanuel
the implementation of such a feature ?
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
?
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
,
Emmanuel Lécharny
www.iktek.com
without having to provide the
old password
- Nobody can reset his/her password to blank
- A user can't change another user's password (except Admin)
- Of course, the modification will be done accordingly to the ACIs and
PasswordPolicy.
wdyt ?
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
to improve this initialization part, it's way too complex.
This is also true for controls, comparators, syntaxCheckers, etc...
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
,
Cordialement,
Emmanuel Lécharny
www.iktek.com
to a couple of months).
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
potentially breakig the underlying database.
I have to check if there is not another solution...
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
in
this area, as it has a lot of potential impact all over the server.
But defintively something we have to work out..
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
,
Cordialement,
Emmanuel Lécharny
www.iktek.com
,
Cordialement,
Emmanuel Lécharny
www.iktek.com
, with
a 24h notice, instead of a 72h). This release would replace M11.
I think it would be better to name it M12, even if we are on our way to
RC1, because I don't want to see many users installing M11 and have a
bad experience...
Wdyt ?
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Shared/LDAP API 1.0.0-M17
[ ] 0 abstain
[ ] -1 Do not release Shared/LDAP API 1.0.0-M17
Emmanuel
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
/
- Distribution packages:
http://people.apache.org/~elecharny http://people.apache.org/%7Eelecharny
[ ] +1 : release ApacheDS 2.0.0-M12
[ ] ± 0 : I don't care
[ ] -1 : No, don't release ApacheDS 2.0.0-M12
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
the site and publish the announcement tomorrow.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
,
Emmanuel Lécharny
www.iktek.com
,
Cordialement,
Emmanuel Lécharny
www.iktek.com
.
This is the reason we have this distinction, and I think it's good to
keep it this way.
For the few classes I mentionned, it does not make sense to have them in
extra - and part of this is my fault, I created the pwdModify classes in
the worng place -
--
Regards,
Cordialement,
Emmanuel Lécharny
501 - 600 of 2502 matches
Mail list logo
