Re : Chaining or Referral

Hi, I have in my slapd.conf something like: overlay chain chain-uri serverIP chain-idassert-bind bindmethod="simple" binddn="myUser" credentials="myPwd" mode="self" then I have created an referal object on my directory like : dn:o=myOrg,dc=myCompagny,dc=fr objectClass:referral objectC

Re: Problem with file descriptors limit

HI Guilherme, It's a limit that could be changed using the ulimit command. ulimit -a show all the default settings. Increase the open files number using -n. On 6/21/06, Guilherme Mundim Torres <[EMAIL PROTECTED]> wrote: Hello, I have a SuSE 9.3 server with openldap2-2.2.23-6 and I'm getting e

SyncRepl limitations

Howdy, I'm currently writing a report to justify to the powers above that we should upgrade OpenLDAP and move to SyncRepl from slurpd. A couple of questions: * Using SyncRepl, what are the time limitations as far as slave refreshing goes? i.e. master & slave are in sync at the moment, can I s

Problem with file descriptors limit

Hello, I have a SuSE 9.3 server with openldap2-2.2.23-6 and I'm getting errors like: slapd[21431]: warning: cannot open /etc/hosts.deny: Too many open files When it happens, the server crashes. The hardware is powerfull, a Dual Xeon With 5 GB RAM and SCSI hd's. I tryed to recompile the openlda

Re: Re-initializing master when syncrepl is used

On 6/20/06, Aleksandar Milivojevic <[EMAIL PROTECTED]> wrote: If I wipe out all database files from /var/lib/ldap directory on one LDAP server (master) that had data replicated (using syncrepl) to several slaves, then use ldapadd to add all the entries back, You don't want to use ldapadd to put

Re: Database deadlock when adding new entry

On 6/20/06, Aleksandar Milivojevic <[EMAIL PROTECTED]> wrote: Hi, I'm experiencing database deadlocks when adding new entry into the directory. In short, all works fine for some time, than I attempt to add new entry into the directory, and LDAP server (slapd) simply hangs. If this is not asso

Re: Configuring Password Policy - Control not working

[EMAIL PROTECTED] wrote: I checked if the password policy control was supported ldapsearch -x -b "" -s base "" supportedFeatures supportedControl supportedExtension and got something like: supportedControl: 1.3.6.1.4.1.4203.1.9.1.1 supportedControl: 2.16.840.1.113730.3.4.18 supportedContr

Re: LDAP+SASL

At 06:26 AM 6/21/2006, Robert Fitzpatrick wrote: >Trying to get a clear understanding of the possibilities with OpenLDAP. >I have used OpenLDAP for a while now, but only with PLAIN login within >secure environments and simple security objects. I also use Cyrus IMAPd >and have 'saslauthd -a ldap' ha

use of the domain acl control

I have all my machines listed as 'cxhost' objects within: ou=Hosts,dc=cityxpress,dc=com I'd like to store some host specific information in my 'cxhost' object. I'd like to allow hosts to connect to the directory anonymously but only read information specific to themselves. For example the host

Re: kill ldap: -INT or -HUP

At 08:08 AM 6/21/2006, Lise Didillon wrote: >what is the best to kill ldap in a bash script: >kill -INT or kill -HUP >I see "kill -INT" in "LDAP admin guide" but allways "kill -HUP" is used in the >openLdap test scripts. I prefer -INT, but either is fine. >I was thinking that -HUP is used when y

Re: kill ldap: -INT or -HUP

One big difference would be that HUP could trigger the gentlehup option (if configured), whereas INT never will. slapd doesn't support re-read of config through HUP; you can change config real-time with cn=config.

Configuring Password Policy - Control not working

Hi, I've installed openldap-2.3.20 but password policy does not appear to be working as I expect. I initially installed openldap with the following configuration ./configure -q --enable-syncprov=no --enable-ppolicy=yes --enable-accesslog=yes --with-cyrus-sasl=yes This I believe installed ope

kill ldap: -INT or -HUP

hello, what is the best to kill ldap in a bash script: kill -INT or kill -HUP I see "kill -INT" in "LDAP admin guide" but allways "kill -HUP" is used in the openLdap test scripts. I was thinking that -HUP is used when you want to read again the configuration file Thank you Lise Didillon

Re: access control

Perhaps "slapd -d acl" would be good? On Wed, 21 Jun 2006, Dmitriy Kirhlarov wrote: > Problem is -- access to sshPublicKey for anonymous does not work.

LDAP+SASL

Trying to get a clear understanding of the possibilities with OpenLDAP. I have used OpenLDAP for a while now, but only with PLAIN login within secure environments and simple security objects. I also use Cyrus IMAPd and have 'saslauthd -a ldap' handling the authentication. Now comes the part I am un

access control

Hi, list I'm using openldap 2.3.21 on rhel3. For authorization I use several fields: userPassword sambaLMPassword sambaNTPassword sshPublicKey I want to limit access to this fields. anonymous auth, self write, none for others for password fields. anonymous read access to sshPublicKey. write acce