Re: [Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread Michael Ströder
Ryan Braun [ADS] wrote: > Here's an easy perl script you can run, it will do a sub search on a given > suffex and output the total entries returned. On FDS I'd prefer to search for (hasSubordinates=TRUE) and sum up the values of the numSubordinates attribute in the entries found. Other LDAP ser

Re: [Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread Ryan Braun [ADS]
On Tuesday 10 March 2009 17:38:33 Branimir wrote: > David Boreham wrote: > > Branimir wrote: > >> well, I know that I can perform search and count them. I hoped that > >> there is some shell command implemented in FDS that could provide this > >> number. I administer commercial LDAP solution that p

Re: [Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread Branimir
Rich Megginson wrote: Branimir wrote: Rich Megginson wrote: Branimir wrote: David Boreham wrote: Branimir wrote: so there is no way to find the number of total LDAP entries stored in FDC? Obviously that's a ridiculous statement. You could at the very least perform a search that returns all

Re: [Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread Rich Megginson
Branimir wrote: Rich Megginson wrote: Branimir wrote: David Boreham wrote: Branimir wrote: so there is no way to find the number of total LDAP entries stored in FDC? Obviously that's a ridiculous statement. You could at the very least perform a search that returns all entries and count them

Re: [Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread Branimir
David Boreham wrote: Branimir wrote: well, I know that I can perform search and count them. I hoped that there is some shell command implemented in FDS that could provide this number. I administer commercial LDAP solution that provides such command. In my case this commercial solution charges

Re: [Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread Branimir
Rich Megginson wrote: Branimir wrote: David Boreham wrote: Branimir wrote: so there is no way to find the number of total LDAP entries stored in FDC? Obviously that's a ridiculous statement. You could at the very least perform a search that returns all entries and count them ! The server ho

Re: [Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread David Boreham
Nalin Dahyabhai wrote: Assuming you only care about entries that get stored on disk (which is what I'd prefer if I were a customer), you could find the id2entry database file run 'db_stat -d' against it, and use the number of unique keys and data items it returns as your count. This does essen

Re: [Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread Nalin Dahyabhai
On Tue, Mar 10, 2009 at 04:14:28PM +0100, Branimir wrote: > well, I know that I can perform search and count them. I hoped that > there is some shell command implemented in FDS that could provide this > number. I administer commercial LDAP solution that provides such > command. In my case thi

Re: [Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread David Boreham
Rich Megginson wrote: Assuming your entry cache contains every entry (that is, assuming you have enough RAM to cache every entry), you can query the entry cache count and that should be the number of entries in your directory server. This is the (apparently) undocumented attribute called curr

Re: [Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread Rich Megginson
Branimir wrote: David Boreham wrote: Branimir wrote: so there is no way to find the number of total LDAP entries stored in FDC? Obviously that's a ridiculous statement. You could at the very least perform a search that returns all entries and count them ! The server however does not maintain

Re: [Fedora-directory-users] Default Password Encryption Scheme

2009-03-10 Thread Chun Tat David Chu
Great! Thank you very much! - David On Tue, Mar 10, 2009 at 11:06 AM, Rich Megginson wrote: > Chun Tat David Chu wrote: > >> Rich, thanks for your info. >> >> I have one more question. Is the salt used for the SSHA generated every >> time when a new user is added into the LDAP? What I meant is

[Fedora-directory-users] Unable to properly login with cached password using libpam-ccreds

2009-03-10 Thread Ryan Braun [ADS]
This isn't exactly fds specific, but I figure someone might have run into this aswell here. I'm trying to setup my ldap clients to cache their passwords so they are able to login if the network connection to the ldap servers go down. All servers and clients are running etch. But I'm having

Re: [Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread David Boreham
Branimir wrote: well, I know that I can perform search and count them. I hoped that there is some shell command implemented in FDS that could provide this number. I administer commercial LDAP solution that provides such command. In my case this commercial solution charges per directory entry s

Re: [Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread Branimir
David Boreham wrote: Branimir wrote: so there is no way to find the number of total LDAP entries stored in FDC? Obviously that's a ridiculous statement. You could at the very least perform a search that returns all entries and count them ! The server however does not maintain a running count

Re: [Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread David Boreham
Rich Megginson wrote: You might also be able to extract that information from the information in cn=monitor or one of the cn=monitor entries under the database entries - Unless something has changed recently, there's no entry count information maintained or readable via cn=monitor. The director

Re: [Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread Chun Tat David Chu
The search might not be a good way to do it if the number of entries exceeded the number you have set in the size limit in the Fedora LDAP. On Tue, Mar 10, 2009 at 10:59 AM, Rocio Quirantes wrote: > I,m not sure, but if you perform a search that returns all entries it > will show you the number.

Re: [Fedora-directory-users] Default Password Encryption Scheme

2009-03-10 Thread Rich Megginson
Chun Tat David Chu wrote: Rich, thanks for your info. I have one more question. Is the salt used for the SSHA generated every time when a new user is added into the LDAP? What I meant is that there is an unique salt generated per user password, am I correct? Yes. Thanks, David On Tue, Ma

Re: [Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread Rich Megginson
David Boreham wrote: Branimir wrote: so there is no way to find the number of total LDAP entries stored in FDC? Obviously that's a ridiculous statement. You could at the very least perform a search that returns all entries and count them ! The server however does not maintain a running count

Re: [Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread Rocio Quirantes
I,m not sure, but if you perform a search that returns all entries it will show you the number. For example: In the command line: ldapsearch -LLL -x -D bindDn -W -H ldaps://ldap.example.com:636 -b ou=users, dc=example,dc=com objectClass=* in the ldap log you get: conn=2853323 fd=276 ACCEPT from

Re: [Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread David Boreham
Branimir wrote: so there is no way to find the number of total LDAP entries stored in FDC? Obviously that's a ridiculous statement. You could at the very least perform a search that returns all entries and count them ! The server however does not maintain a running count itself. So one way or

Re: [Fedora-directory-users] Default Password Encryption Scheme

2009-03-10 Thread Chun Tat David Chu
Rich, thanks for your info. I have one more question. Is the salt used for the SSHA generated every time when a new user is added into the LDAP? What I meant is that there is an unique salt generated per user password, am I correct? Thanks, David On Tue, Mar 10, 2009 at 10:47 AM, Rich Megginso

[Fedora-directory-users] Re: Total number of LDAP entries

2009-03-10 Thread Branimir
Branimir wrote: Hi list, can someone tell me where to find the total number of LDAP entries stored in FDC? I looked up in Console "Status" tab but I could not find the number. If someone can give me a hint... Thank you in advance! Hi, so there is no way to find the number of total LDAP

Re: [Fedora-directory-users] Default Password Encryption Scheme

2009-03-10 Thread Rich Megginson
Chun Tat David Chu wrote: Hi All, Just curious, the default password encryption scheme for LDAP is SSHA. What is the number of bits it is using? Is it SSSH256, SSSH384, SSSH512? It's the SHA-1 140 bits algorithm Thanks, David -

[Fedora-directory-users] Default Password Encryption Scheme

2009-03-10 Thread Chun Tat David Chu
Hi All, Just curious, the default password encryption scheme for LDAP is SSHA. What is the number of bits it is using? Is it SSSH256, SSSH384, SSSH512? Thanks, David -- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory

Re: [Fedora-directory-users] Too many FDS open

2009-03-10 Thread Diwakoe
On Thu, Feb 26, 2009 at 4:46 AM, Chavez, James R. wrote: > Hello Rich, list, > > > Earlier today we started getting this error in our FDS error log > repeatedly. Obviously connections were being refused at this point. I > had to restart the directory server for the server to function again. > Prio