Re: Query Log and stats?

2007-07-19 Thread Dieter Kluenter
Jay Lee <[EMAIL PROTECTED]> writes: > I am using OpenLDAP 2.3 as a proxy cache to our primary eDirectory > LDAP Server. The proxy is working but in order to optimize the cache, > I need to specify the search queries and attributes to index in > slapd.conf. Is there an easy way to log what querie

Re: "descriptor table size" errors?

2007-07-19 Thread Buchan Milne
On 7/16/07, Tony Earnshaw <[EMAIL PROTECTED]> wrote: Quanah Gibson-Mount skrev, on 15-07-2007 23:45: >> Kudos to Buchan: >> >> 2 surmises: >> >> 1: RHL5 and FC6 both have BDB 4.3 as standard; Buchan's srpm (and, >> believe me, I refuse to install *ANY* software without it being available >> as a

help adding a group

2007-07-19 Thread Adam Williams
I'm trying to add a group with 2 users to LDAP, but i'm running into problems. When I add my group and then search for it, it shows a userPassword, and garbles the memberUid of the first user I added to the group. Any ideas? testgroup.ldif: dn: cn=testgroup,ou=Group,dc=gomer,dc=mdah,dc=stat

moving ldap database and upgrading

2007-07-19 Thread Maria McKinley
Hi there, I am trying to move my ldap to a new machine to upgrade from openldap2.2 to openldap2.3. I moved all of my config files and created new certificates, but I am having difficulties. I am running on Debian, and if I start slapd by /etc/init.d/slapd start, I get: Starting OpenLDAP: slapd -

Re: moving ldap database and upgrading

2007-07-19 Thread Maria McKinley
I have had some success. Slapd seems to be running, but it appears slapadd did not add things to the database: maude:/etc/ldap# ldapsearch -x "uid=maria" # extended LDIF # # LDAPv3 # base <> with scope subtree # filter: uid=maria # requesting: ALL # # search result search: 2 result: 32 No such o

Re: moving ldap database and upgrading

2007-07-19 Thread Maria McKinley
Augh. scratch that last email. That isn't what i meant to do. Here is what I did (and meant it. ;-)) I stopped slapd, and tried to put stuff in the database: maude:/etc/ldap# slapadd -v -l ldif got no error messages, restarted slapd, tried to search on something that should be there, but couldn

Re: how to maintain OpenLDAP database ?

2007-07-19 Thread JOYDEEP
Dustin Puryear wrote: > As noted by others, you can use slapcat or ldapsearch to perform nightly > backups. If using ldapsearch, be sure your ACLs allow a full dump, > including userPassword. > > Also, be sure to put into place log monitoring for slapd (and possibly > slurpd if you are replicating)

how to extract information from bdb database ?

2007-07-19 Thread JOYDEEP
Dear list, I am using opnldap with bdb database. I like to extract the mail address from the bdb database. I have found the mail.bdb but it is a binary file. Could any one suggest how can I extract the mail address from the bdb database ? thanks

OpenLdap search does not return all result set

2007-07-19 Thread Srilakshmanan, Kumuthiny
Hi I have a OpenLDAP version 2.2 on ldbm database under unix with 2500 users. I'm aware upgrading is an option but it is not clear whether it would resolve my issue as stated below. A search query returns a subset of the expected results. I reindexed the data and there was no change in the res

Re: Connection timeout

2007-07-19 Thread Aaron Richton
On Thu, 19 Jul 2007, Dave Horsfall wrote: But the connection has yet to be made, so keepalives don't enter into it. Ah, I read "connection timeout" in the wrong sense here. As Philip's answer discussed, LDAP_OPT_NETWORK_TIMEOUT should result in ldap_connect_timeout: fd: 3 tm: -1 async: 0

Re: moving ldap database and upgrading

2007-07-19 Thread Aaron Richton
Jul 18 08:08:01 maude slapd[27079]: main: TLS init def ctx failed: -1 [but] If I then try to start slapd using slapd -d 16383, it seems to start up fine, but can't read the database. Are you starting it with -d at the command line (perhaps as root), but the init script uses -u slapd or simila

Re: Replication architecture

2007-07-19 Thread Michael Ströder
Gavin Henry wrote: > >> Gavin Henry wrote: >>> >>> i have a request from a customer about 2 replication architectures and i would like to know if it's possible to implement them: 1 - Master Server -> "hub" Server -> Slave Server >>> Expand on what you mean by "hub"? >>> >

Re: moving ldap database and upgrading

2007-07-19 Thread John Drescher
On 7/18/07, Maria McKinley <[EMAIL PROTECTED]> wrote: Hi there, I am trying to move my ldap to a new machine to upgrade from openldap2.2 to openldap2.3. I moved all of my config files and created new certificates, but I am having difficulties. I am running on Debian, and if I start slapd by /etc

Re: how to extract information from bdb database ?

2007-07-19 Thread mikee
On Thu, 19 Jul 2007, JOYDEEP might have said: > Dear list, > > I am using opnldap with bdb database. I like to extract the mail address > from the bdb database. > I have found the mail.bdb but it is a binary file. Could any one > suggest how can I extract the mail address > from the bdb database

Re: help adding a group

2007-07-19 Thread Jon Roberts
Adam Williams wrote: I'm trying to add a group with 2 users to LDAP, but i'm running into problems. When I add my group and then search for it, it shows a userPassword, What are your ACLs? If they allow reading the userPassword attribute for groups, you'll see the values as expected. and g

Re: moving ldap database and upgrading

2007-07-19 Thread Ralph Rößner
Hello! On Wed, Jul 18, 2007 at 05:45:06PM -0700, Maria McKinley wrote: > Augh. scratch that last email. That isn't what i meant to do. Here is > what I did (and meant it. ;-)) > > I stopped slapd, and tried to put stuff in the database: > > maude:/etc/ldap# slapadd -v -l ldif > > got no error mess

Re: OpenLdap search does not return all result set

2007-07-19 Thread matthew sporleder
On 7/19/07, Srilakshmanan, Kumuthiny <[EMAIL PROTECTED]> wrote: Hi I have a OpenLDAP version 2.2 on ldbm database under unix with 2500 users. I'm aware upgrading is an option but it is not clear whether it would resolve my issue as stated below. A search query returns a subset of the expected

Re: moving ldap database and upgrading

2007-07-19 Thread Todd Lyons
On Wed, Jul 18, 2007 at 05:45:06PM -0700, Maria McKinley wrote: > maude:/etc/ldap# slapadd -v -l ldif > > got no error messages, restarted slapd, tried to search on something > that should be there, but couldn't find it: > > maude:/etc/ldap# ldapsearch -x "uid=ichbin" Typically you specify the ba

log.000xx files?

2007-07-19 Thread Tim Tyler
Openldap experts, We are running openldap 2.3.30 on Fedora core 6. Everything seems to be working fine since we started it up in February. However, I have noticed that in /var/lib/ldap there are a lot of log.0x files incrementing from 1 through 58 so far and they are all the same siz

Re: help adding a group

2007-07-19 Thread Todd Lyons
On Thu, Jul 19, 2007 at 08:24:08AM -0500, Adam Williams wrote: > I'm trying to add a group with 2 users to LDAP, but i'm running into > problems. When I add my group and then search for it, it shows a > userPassword, and garbles the memberUid of the first user I added to the > group. Any idea

Re: how to extract information from bdb database ?

2007-07-19 Thread Dieter Kluenter
JOYDEEP <[EMAIL PROTECTED]> writes: > Dear list, > > I am using opnldap with bdb database. I like to extract the mail address >>from the bdb database. > I have found the mail.bdb but it is a binary file. Could any one > suggest how can I extract the mail address >>from the bdb database ? The ma

Re: log.000xx files?

2007-07-19 Thread Dieter Kluenter
Tim Tyler <[EMAIL PROTECTED]> writes: >Openldap experts, >We are running openldap 2.3.30 on Fedora core 6. Everything seems >to be working fine since we started it up in February. However, I >have noticed that in /var/lib/ldap there are a lot of log.0x >files incrementing

Re: help adding a group

2007-07-19 Thread Howard Chu
Jon Roberts wrote: Adam Williams wrote: I'm trying to add a group with 2 users to LDAP, but i'm running into problems. When I add my group and then search for it, it shows a userPassword, What are your ACLs? If they allow reading the userPassword attribute for groups, you'll see the values

Re: moving ldap database and upgrading

2007-07-19 Thread Howard Chu
Ralph Rößner wrote: Hello! On Wed, Jul 18, 2007 at 05:45:06PM -0700, Maria McKinley wrote: Augh. scratch that last email. That isn't what i meant to do. Here is what I did (and meant it. ;-)) I stopped slapd, and tried to put stuff in the database: maude:/etc/ldap# slapadd -v -l ldif got no

Re: OpenLdap search does not return all result set

2007-07-19 Thread Howard Chu
matthew sporleder wrote: On 7/19/07, Srilakshmanan, Kumuthiny <[EMAIL PROTECTED]> wrote: Hi I have a OpenLDAP version 2.2 on ldbm database under unix with 2500 users. I'm aware upgrading is an option but it is not clear whether it would resolve my issue as stated below. Well, if your searc

Re: Connection timeout

2007-07-19 Thread Howard Chu
Dave Horsfall wrote: On Wed, 18 Jul 2007, Aaron Richton wrote: As of 2.3.28, libldap's connections use TCP keepalives. You should be able to configure your networking stack to get the desired behavior. But the connection has yet to be made, so keepalives don't enter into it. We're a homogeno

ldapsearch on local attributes with slapo-translucent

2007-07-19 Thread Gavin Henry
Dear All, I'm doing some work with Asterisk and translucent, trying to overlay some attributes to an existing remote account, locally. These attributes have been added by entries in the local database before being presented to me via ldapsearch, whilst searching for attributes present in the rem

Error message while starting service

2007-07-19 Thread Simon Renshaw
Hi, I installed OpenLDAP 2.2.29 on a Win2003 SP2 server that is already an AD DC (so that might be the problem). When I start the service, I get the following error message: service-specific error 16. If I run sc query openldap-slapd, I get: SERVICE_NAME: openldap-slapd TYPE

RE: ldapsearch on local attributes with slapo-translucent

2007-07-19 Thread Gavin Henry
> Are you missing a bracket? > "(&(object Class=AsteriskSIPUser)(AstAccountName=600))" ;-) I'm pretty confident that's a copy paste error from my console. Will check in the morning, as I'm sure it's as above. The search filter is generated from another program. Gavin.

RE: ldapsearch on local attributes with slapo-translucent

2007-07-19 Thread Srilakshmanan, Kumuthiny
Are you missing a bracket? "(&(object Class=AsteriskSIPUser)(AstAccountName=600))" -Original Message- From: [EMAIL PROTECTED] g [mailto:[EMAIL PROTECTED] nLDAP.org] On Behalf Of Gavin Henry Sent: Friday, 20 July 2007 7:26 AM To: openldap-software@openldap.org Subject: ldapsearch on local a

Re: ldapsearch on local attributes with slapo-translucent

2007-07-19 Thread Norman Gaywood
On Thu, Jul 19, 2007 at 10:25:51PM +0100, Gavin Henry wrote: > A filter like: > > "(&(objectClass=AsteriskSIPUser)(AstAccountName=600)" > > returns: > > ldapsearch: ldap_search_ext: Bad search filter (-7) Is that a cut and paste? If so then you are missing a bracket on the end of the filter.

Re: moving ldap database and upgrading

2007-07-19 Thread Maria McKinley
On 7/19/07, John Drescher <[EMAIL PROTECTED]> wrote: On 7/18/07, Maria McKinley <[EMAIL PROTECTED]> wrote: > Hi there, > > I am trying to move my ldap to a new machine to upgrade from > openldap2.2 to openldap2.3. I moved all of my config files and created > new certificates, but I am having diff

Re: log.000xx files?

2007-07-19 Thread Quanah Gibson-Mount
--On Thursday, July 19, 2007 10:02 PM +0200 Dieter Kluenter <[EMAIL PROTECTED]> wrote: Tim Tyler <[EMAIL PROTECTED]> writes: Openldap experts, We are running openldap 2.3.30 on Fedora core 6. Everything seems to be working fine since we started it up in February. However, I have

Re: ldapsearch on local attributes with slapo-translucent

2007-07-19 Thread Howard Chu
Gavin Henry wrote: Dear All, I'm doing some work with Asterisk and translucent, trying to overlay some attributes to an existing remote account, locally. These attributes have been added by entries in the local database before being presented to me via ldapsearch, whilst searching for attribut

Re: moving ldap database and upgrading

2007-07-19 Thread matthew sporleder
On 7/19/07, Maria McKinley <[EMAIL PROTECTED]> wrote: On 7/19/07, John Drescher <[EMAIL PROTECTED]> wrote: > On 7/18/07, Maria McKinley <[EMAIL PROTECTED]> wrote: > > Hi there, > > > > I am trying to move my ldap to a new machine to upgrade from > > openldap2.2 to openldap2.3. I moved all of my c

Re: moving ldap database and upgrading

2007-07-19 Thread matthew sporleder
On 7/19/07, Maria McKinley <[EMAIL PROTECTED]> wrote: On 7/19/07, matthew sporleder <[EMAIL PROTECTED]> wrote: > On 7/19/07, Maria McKinley <[EMAIL PROTECTED]> wrote: > > On 7/19/07, John Drescher <[EMAIL PROTECTED]> wrote: > > > On 7/18/07, Maria McKinley <[EMAIL PROTECTED]> wrote: > > > > Hi th

Programmatic manner to determine version?

2007-07-19 Thread Mark Lavi
Hello everyone, I'm working on a build system which encompasses dependencies on OpenLDAP. I've done a general of the web with Google, searched the OpenLDAP FAQ, and searched the OpenLDAP mailing lists for how one can determine the version of OpenLDAP software. I understand that there are di

RE: Error message while starting service

2007-07-19 Thread Paul Blondé
AD uses the LDAP ports, because it is Microsoft's (poor) implementation of LDAP. I would not recommend trying to run AD and OpenLDAP on the same machine. Paul Blondé -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of S

RE: Query Log and stats?

2007-07-19 Thread Paul Blondé
In slapd.conf, you need to set your log level. Search for the line that contains "loglevel" or "logging parameters". Edit or add the line: loglevel### where ### is built from this info: Level Information recorded -1 Everything 0 Nothing 1

Re: moving ldap database and upgrading

2007-07-19 Thread Maria McKinley
On 7/19/07, matthew sporleder <[EMAIL PROTECTED]> wrote: On 7/19/07, Maria McKinley <[EMAIL PROTECTED]> wrote: > On 7/19/07, John Drescher <[EMAIL PROTECTED]> wrote: > > On 7/18/07, Maria McKinley <[EMAIL PROTECTED]> wrote: > > > Hi there, > > > > > > I am trying to move my ldap to a new machine

Re: moving ldap database and upgrading

2007-07-19 Thread Maria McKinley
On 7/19/07, John Drescher <[EMAIL PROTECTED]> wrote: On 7/18/07, Maria McKinley <[EMAIL PROTECTED]> wrote: > Hi there, > > I am trying to move my ldap to a new machine to upgrade from > openldap2.2 to openldap2.3. I moved all of my config files and created > new certificates, but I am having diff