checking syncrepl consistency

2007-01-31 Thread Andreas Hasenack
Hi all, I want to be able to check for the syncrepl consistency between a provider and a consumer with this database layout: provider (OL 2.3.30) consumer (OL 2.3.32) + dc=example,dc=com+ dc=example,dc=com / \/ \ ... +

2.3.33 back_meta test failure

2007-01-31 Thread Andreas Hasenack
Hello, while running make test on a 2.3.33 build, I get an error in test030-relay when using the meta backend: (...) Using meta backend... Starting slapd on TCP/IP port 9011... Using ldapsearch to check that slapd is running... Using ldapadd to populate the database... Searching

Re: 2.3.33 back_meta test failure

2007-01-31 Thread Pierangelo Masarati
Andreas Hasenack wrote: Hello, while running make test on a 2.3.33 build, I get an error in test030-relay when using the meta backend: (...) Using meta backend... Starting slapd on TCP/IP port 9011... Using ldapsearch to check that slapd is running... Using ldapadd to populate the database...

Re: 2.3.33 back_meta test failure

2007-01-31 Thread Pierangelo Masarati
Andreas Hasenack wrote: On Wed, Jan 31, 2007 at 07:52:26PM +0100, Pierangelo Masarati wrote: The log shows: $ tail testrun/slapd.1.log conn=3 op=1 meta_search_dobind_init[0] conn=3 op=1 meta_search_dobind_init[0]=1 == rewrite_context_apply [depth=1] string='o=Example,c=US' ==

Re: 2.3.33 back_meta test failure

2007-01-31 Thread Andreas Hasenack
On Wed, Jan 31, 2007 at 07:52:26PM +0100, Pierangelo Masarati wrote: The log shows: $ tail testrun/slapd.1.log conn=3 op=1 meta_search_dobind_init[0] conn=3 op=1 meta_search_dobind_init[0]=1 == rewrite_context_apply [depth=1] string='o=Example,c=US' == rewrite_rule_apply

Re: 2.3.33 back_meta test failure

2007-01-31 Thread Andreas Hasenack
/home/andreas/updates-svn/openldap/BUILD/openldap-2.3.33/servers/slapd/.libs/lt-slapd: symbol lookup error: ../servers/slapd/back-meta/.libs/back_meta-2.3.so.0: undefined symbol: ldap_back_proxy_authz_ctrl Anybody else with the same problem? You should build and load the back_ldap.la

Re: 2.3.33 back_meta test failure

2007-01-31 Thread Quanah Gibson-Mount
--On Wednesday, January 31, 2007 4:55 PM -0200 Andreas Hasenack [EMAIL PROTECTED] wrote: On Wed, Jan 31, 2007 at 07:52:26PM +0100, Pierangelo Masarati wrote: The log shows: $ tail testrun/slapd.1.log conn=3 op=1 meta_search_dobind_init[0] conn=3 op=1 meta_search_dobind_init[0]=1 ==

Re: 2.3.33 back_meta test failure

2007-01-31 Thread Pierangelo Masarati
Andreas Hasenack wrote: /home/andreas/updates-svn/openldap/BUILD/openldap-2.3.33/servers/slapd/.libs/lt-slapd: symbol lookup error: ../servers/slapd/back-meta/.libs/back_meta-2.3.so.0: undefined symbol: ldap_back_proxy_authz_ctrl Anybody else with the same problem? You should build and

Simulating search filter

2007-01-31 Thread Don Hoover
Ok. Here is an interesting problem. We have purchased one of those remote serial console access devices, and it supports ldap. On our servers we use search filters to control who has access to which of our servers... such as sub?|(gid=55) etc. BUT, this little thing only supports proving a

Re: Simulating search filter

2007-01-31 Thread Aaron Richton
database relay, database meta, and ACLs (especially if it supports a bindDN) come to mind first. On Wed, 31 Jan 2007, Don Hoover wrote: Ok. Here is an interesting problem. We have purchased one of those remote serial console access devices, and it supports ldap. On our servers we use

Notes on LDAP Performance, docs

2007-01-31 Thread Howard Chu
In a recent blog entry http://www.connexitor.com/blog/pivot/entry.php?id=103 I discussed how LDAP gets misused in some applications, using sendmail as an example. Gavin Henry commented that some of that material ought to go in the FAQ-o-Matic. And I replied with the usual the FAQ-o-Matic is

Re: Notes on LDAP Performance, docs

2007-01-31 Thread Gavin Henry
quote who=Howard Chu In a recent blog entry http://www.connexitor.com/blog/pivot/entry.php?id=103 I discussed how LDAP gets misused in some applications, using sendmail as an example. Gavin Henry commented that some of that material ought to go in the FAQ-o-Matic. And I replied with the

SASL GSSAPI authentication with Sun Java Directory Server 5.2P4

2007-01-31 Thread Andrew Deason
I am trying to use OpenLDAP's ldapsearch to connect to a Sun DS 5.2 server using SASL/GSSAPI to authenticate. The setup works perfectly fine on Solaris clients, but not on Linux ones using OpenLDAP's ldapsearch (Debian sid on x86). Instead, it always gives the following error: SASL/GSSAPI

Re: SASL GSSAPI authentication with Sun Java Directory Server 5.2P4

2007-01-31 Thread Howard Chu
Andrew Deason wrote: I am trying to use OpenLDAP's ldapsearch to connect to a Sun DS 5.2 server using SASL/GSSAPI to authenticate. The setup works perfectly fine on Solaris clients, but not on Linux ones using OpenLDAP's ldapsearch (Debian sid on x86). Instead, it always gives the following

Re: SASL GSSAPI authentication with Sun Java Directory Server 5.2P4

2007-01-31 Thread Quanah Gibson-Mount
--On Wednesday, January 31, 2007 9:18 PM -0800 Howard Chu [EMAIL PROTECTED] wrote: Andrew Deason wrote: I am trying to use OpenLDAP's ldapsearch to connect to a Sun DS 5.2 server using SASL/GSSAPI to authenticate. The setup works perfectly fine on Solaris clients, but not on Linux ones