Re: Designing large environment

On Friday 23 December 2005 04:27, Don Hoover wrote: > I have started to put some though into how I would > deploy OpenLDAP for a largish environment and some > questions have come to mind. > > I am planning on having a single master and about 5-6 > or so read-only replicas. > > Hopefully someone wi

Re: Designing large environment

--On Thursday, December 22, 2005 6:27 PM -0800 Don Hoover <[EMAIL PROTECTED]> wrote: I have started to put some though into how I would deploy OpenLDAP for a largish environment and some questions have come to mind. I am planning on having a single master and about 5-6 or so read-only repli

Re: slurpd quits running

--On Thursday, December 22, 2005 9:43 PM -0600 [EMAIL PROTECTED] wrote: Let me ask this. This was my primary Samba/LDAP server. I have two others that are my slave servers. As long as slurpd has been doing what it is supposed to do, I could actually get on one of the slave servers, do a s

Designing large environment

I have started to put some though into how I would deploy OpenLDAP for a largish environment and some questions have come to mind. I am planning on having a single master and about 5-6 or so read-only replicas. Hopefully someone with experience can answer these: 1) Is it a good idea to also run

Re: slurpd quits running

>> >> >> --On Thursday, December 22, 2005 3:23 PM -0600 Scott Mayo >> <[EMAIL PROTECTED]> wrote: >> >>> I had my main ldap server get turned off this morning without being >>> properly shutdown. Now when it starts up, it looks like ldap starts >>> find, but does not seem to keep runnning. >>> >>>

Re: build problem

Here you go. On 12/22/05, Yingbo Qiu <[EMAIL PROTECTED]> wrote: > > post your config.log > > 2005/12/23, Mike Lindsey <[EMAIL PROTECTED]>: > > On 12/21/05, Yingbo Qiu <[EMAIL PROTECTED]> wrote: > > > You could set LDFLAGS as: > > > $ LDFLAGS="-L/usr/local/BerkeleyDB.4.4/lib > > -L/usr/local/lib/sa

Re: build problem

post your config.log 2005/12/23, Mike Lindsey <[EMAIL PROTECTED]>: > On 12/21/05, Yingbo Qiu <[EMAIL PROTECTED]> wrote: > > You could set LDFLAGS as: > > $ LDFLAGS="-L/usr/local/BerkeleyDB.4.4/lib > -L/usr/local/lib/sasl2 > > -Wl,-R/usr/local/BerkeleyDB.4.4/lib > -Wl,-R/usr/local/lib/sasl2" > > >

Re: build problem

On 12/21/05, Yingbo Qiu <[EMAIL PROTECTED]> wrote: > > You could set LDFLAGS as: > $ LDFLAGS="-L/usr/local/BerkeleyDB.4.4/lib -L/usr/local/lib/sasl2 > -Wl,-R/usr/local/BerkeleyDB.4.4/lib -Wl,-R/usr/local/lib/sasl2" > > gcc's "-Wl," option will pass follow string(as > -R/usr/local/BerkeleyDB.4.4..)

Re: slurpd quits running

> > > --On Thursday, December 22, 2005 3:23 PM -0600 Scott Mayo > <[EMAIL PROTECTED]> wrote: > >> I had my main ldap server get turned off this morning without being >> properly shutdown. Now when it starts up, it looks like ldap starts >> find, but does not seem to keep runnning. >> >> I can do a

Re: slurpd quits running

> >> I can do a 'service ldap start' and it tells me that slapd and slurpd >> both start 'OK', but then if I do a 'service ldap status' right >> afterwards, it tells me that slapd is stopped, and slurpd is running. > > > what happens when you start slapd manually? > If I start it with: slapd -d

Openldap setup with kerberos, openssl and cyrus-sasl

Hi Quanah, I am assuming that libtool is configured with no additional parameters in your list except --prefix=/usr/local. Do I have to make sure that /usr/local/lib is first in LD_LIBRARY_PATH and not /usr/lib for the building of other things like openssl, heimdal, cyrus-sasl to make use of the

Re: slurpd quits running

> I can do a 'service ldap start' and it tells me that slapd and slurpd > both start 'OK', but then if I do a 'service ldap status' right > afterwards, it tells me that slapd is stopped, and slurpd is running. what happens when you start slapd manually?

Re: slurpd quits running

--On Thursday, December 22, 2005 3:23 PM -0600 Scott Mayo <[EMAIL PROTECTED]> wrote: I had my main ldap server get turned off this morning without being properly shutdown. Now when it starts up, it looks like ldap starts find, but does not seem to keep runnning. I can do a 'service ldap st

slurpd quits running

I had my main ldap server get turned off this morning without being properly shutdown. Now when it starts up, it looks like ldap starts find, but does not seem to keep runnning. I can do a 'service ldap start' and it tells me that slapd and slurpd both start 'OK', but then if I do a 'service

Re: ACL Problem, Insufficient access (50)

On Thu, 2005-12-22 at 16:19 +0200, Amir Saad wrote: > i use openldap 2.3.11 , Heimdal Kerberos , Fedora 4 ... > here is my ACL files: (manager is my rootdn) > * > access to dn.r

Re: ppolicy acting strange

I think you'll find that the password history constraint only applies where the user is changing their own password. This is pretty much like using the passwd program, you may not be able to choose the password, but root can set it to anything. On Tue, 2005-12-20 at 11:17 -0800, Jim Boden wrote:

Re: asynchronous event notification?

[ Coming into this discussion rather late ] On Fri, Nov 04, 2005 at 11:23:24PM -0500, Phillip Rhodes wrote: > Thanks for all the replies. I think I've identified two > possible ways to do what I'm trying to do: It looks like > I can use the LDAP Content Sync stuff to do it "client side" > or pro

Authenticating with distributed tree(?)

Hi, I'm not sure if what I'm doing is even possible (if it isn't, it would explain why it doesn't work) so I'm after an idea if I have any chance of succeeding as much as a solution. I've got a distributed ldap tree running on 3 servers, with different parts of the tree as bases on different

Re: ACL Problem, Insufficient access (50)

At 06:19 AM 12/22/2005, Amir Saad wrote: >i use openldap 2.3.11 , Heimdal Kerberos , Fedora 4 > >login authenticated through kerberos and i use ldap for user info (instead of >NIS) > >the problem is i cannot change password for any authenticated user using >GSSAPI even with rootdn >i tried to u

ACL Problem, Insufficient access (50)

i use openldap 2.3.11 , Heimdal Kerberos , Fedora 4 login authenticated through kerberos and i use ldap for user info (instead of NIS) the problem is i cannot change password for any authenticated user using GSSAPI even with rootdn i tried to use -x and it worked only with the rootdn here i

Re: rfc2254 incompatibility

> Hi, list > > I try use > ldapsearch ... "(uidNumber>=222)" -- it not work. uidNumber, as per rfc 2307, does not have any ordering match > ldapsearch ... "(uidNumber=222)" -- work fine. > > uidNumber -- integer field and greaterOrEqual must work, I think. > > I find hint on IRC -- add > ORDERING

rfc2254 incompatibility

Hi, list I try use ldapsearch ... "(uidNumber>=222)" -- it not work. ldapsearch ... "(uidNumber=222)" -- work fine. uidNumber -- integer field and greaterOrEqual must work, I think. I find hint on IRC -- add ORDERING integerOrderingMatch in the nis.schema attributetype definition. I try this, b

Re: slapd won't start after reboot

On Thursday 22 December 2005 05:52, Robert Fitzpatrick wrote: > I have been implementing saslauthd to use ldap for cyrus, postfix, etc. > All working well with no problems for a couple of days now. After an > unrelated reboot, slapd process starts, but the pid file never gets > written and the slap