Re: asynchronous event notification?

Phillip Rhodes wrote: Hi all, I have a question regarding OpenLDAP and asynchronous events. Does OpenLDAP currently support any form of event notification? I spent a lot of time Google'ing and searching the archives of this list and saw some old discussion from back in 1999 on this subject, bu

Re: asynchronous event notification?

> In case it matters, what I'm seeking is the ability > to receive notification of events such as: adding > an entry, deleting an entry, modifying an entry, etc. Try playing with the accesslog and auditlog overlay. (slapo-accesslog/slapo-auditlog man page is a good place to start.) It's unlikely t

Re: asynchronous event notification?

--On Thursday, November 03, 2005 11:22 PM -0500 Phillip Rhodes <[EMAIL PROTECTED]> wrote: Hi all, I have a question regarding OpenLDAP and asynchronous events. Does OpenLDAP currently support any form of event notification? I spent a lot of time Google'ing and searching the archives of this

asynchronous event notification?

Hi all, I have a question regarding OpenLDAP and asynchronous events. Does OpenLDAP currently support any form of event notification? I spent a lot of time Google'ing and searching the archives of this list and saw some old discussion from back in 1999 on this subject, but nothing current. In

Re: openldap build problem

Howard Chu wrote: Al Lilianstrom wrote: We have been using Openldap on a old Tru64 machine for a couple of years to glue our Oracle database and W2K Active Directory together. We're moving the database to a Linux machine. I rebuilt the Openldap software and it almost works. The Unix machines

Re: big delete, big performance drop

> At a guess, it is doing what many DB's do -- Not compressing the deleted > space, which I bet is leaving empty regions for slapd to troll through. > Probably worthy of some more investigation to see what BDB's doing. Gotcha. I didn't see any reference to any sort of "vacuum" and a db_recover di

Re: openldap build problem

Al Lilianstrom wrote: We have been using Openldap on a old Tru64 machine for a couple of years to glue our Oracle database and W2K Active Directory together. We're moving the database to a Linux machine. I rebuilt the Openldap software and it almost works. The Unix machines are in a MIT Kerbero

Tuning BerkeleyDB

Just a bit of an FYI for folks using OpenLDAP with BerkeleyDB on a multi-processor machine - there's some pretty useful hints here http://www.sleepycat.com/docs/ref/transapp/tune.html starting with the section "mutex selection." (The information in the previous sections is already accounted f

Hi,

Hi, I have two distinct openldap directory, one for the network authentification , and one for the identification. For the same person I have the same uid in the two directory. like example : Directory A -> pers X -> uid XX = uid XX <- pers X <- Directory B. So is it possible to have a sort o

openldap build problem

We have been using Openldap on a old Tru64 machine for a couple of years to glue our Oracle database and W2K Active Directory together. We're moving the database to a Linux machine. I rebuilt the Openldap software and it almost works. The Unix machines are in a MIT Kerberos Realm and a trust ex

Re: big delete, big performance drop

--On Thursday, November 03, 2005 10:30 AM -0500 John Madden <[EMAIL PROTECTED]> wrote: I had stuffed my directory with a bunch of test data that I've now cleaned out with a massive ldapdelete (killing 1 million entries). I noticed two things today: 1) The id2entry.bdb database didn't chang

Re: number of entries

Derek Yarnell wrote: > Is there anyway to just query the number of entries currently in the > LDAP? Something like you can query the supportedSASLMechinisms? There's no such thing in OpenLDAP at the moment. I'd also like to have operational attributes such as numSubordinates and numAllSubordinat

Re: group acl permissions

thanks for replying. :) however it still doesn't allow access to write for 'account operators', unless i specify 'by * write' instead of read! having checked my account operators group, the memberUid contains the uid of the user, not the uidnumber. is there some query i can run as manager to

number of entries

Is there anyway to just query the number of entries currently in the LDAP? Something like you can query the supportedSASLMechinisms? Thanks for the help. -- Derek T. Yarnell University of Maryland Institute for Advanced Computer Studies

big delete, big performance drop

I had stuffed my directory with a bunch of test data that I've now cleaned out with a massive ldapdelete (killing 1 million entries). I noticed two things today: 1) The id2entry.bdb database didn't change in size, remaining at 1.2GB. After a slapcat/delete everything/slapadd, that file's 4.3MB.

Re: 2.3.11/BDB bdb_cache_find_id deadlock

> I notice that this code has disappeared with revision 1.106 of cache.c > though, so perhaps that clears the issue I'm seeing as well. As you've noted, that area has been largely reworked (see ITS#4088). You can grab fixes from CVS, or hopefully we'll see it in the next RE23.

Re: group acl permissions

On Thu, 2005-11-03 at 06:43 -0500, John Halfpenny wrote: > hi everyone. > > i'm trying to get to grips with acls on ldap, could someone glance over this > snippet of config and tell me why my members in 'Account operators' are only > being granted read permission to user attributes? > > thanks

2.3.11/BDB bdb_cache_find_id deadlock

Hey, Server: OpenLDAP 2.3.11 Backend: BDB 4.2.52 + patches Server is replicated to from a master, and otherwise used for read-operations only. I'm looking at a deadlock we're currently suffering from. Some threads are still serving, but the majority are stuck, with this backtrace: Thread 47 (T

Re: Need to authenticate non-existent users.

Hello... I have other problem that seems to be related to yours... I'm also dealing with back-sql. I have to access a legacy database for person objects. In this other scenario, users (person objects) already exist but they still don't have a "uid" attribute (there will be an external process fo

group acl permissions

hi everyone. i'm trying to get to grips with acls on ldap, could someone glance over this snippet of config and tell me why my members in 'Account operators' are only being granted read permission to user attributes? thanks! access to dn.base="" by * read access to dn.base="cn=Subschema" by