Re: slapd seg faults when 'ppolicy_default' is enabled

2007-12-10 Thread Howard Chu
R.B. wrote: Hi; Updating to the latest 2.3.39 fixed whatever was causing this seg fault. For the record, that was ITS#4848. Thanks, Rafael On Dec 10, 2007 2:31 PM, R. B. <[EMAIL PROTECTED]> wrote: Hi; I'm in the process of configuring ppolicy for OpenLDAP using Buchan's RPMs and it seem

Re: slapd seg faults when 'ppolicy_default' is enabled

2007-12-10 Thread R.B.
Hi; Updating to the latest 2.3.39 fixed whatever was causing this seg fault. Thanks, Rafael On Dec 10, 2007 2:31 PM, R. B. <[EMAIL PROTECTED]> wrote: > Hi; > > I'm in the process of configuring ppolicy for OpenLDAP using Buchan's > RPMs and it seems that after adding my policy and enabling it

Re: documentation [was Re: logging]

2007-12-10 Thread Howard Chu
Craig wrote: On a side note, I noticed that jitterbug is no longer being maintained. "Maintained" is an interesting word, in open source. The source code is available, and it's completely under our control. We've tailored it to do what we want it to do. As such, I don't think you can call it unm

Re: documentation [was Re: logging]

2007-12-10 Thread Craig
I was very hesitant to respond because flame wars are simply a waste of time and serve no purpose. However, I find it simply too condescending to let it go. Also, you posted your reply publicly, so I will as well. Howard Chu wrote: > Craig wrote: >> Lastly, the man pages... Again, the size is a bi

Re: documentation [was Re: logging]

2007-12-10 Thread Craig
Gavin Henry wrote: > > Hmmm, which one? Every overlay is in the TOC. Yes. But, the overlay was referred to as "rwm". If you do a simple search on that (TOC) page, you get no results. http://www.openldap.org/doc/admin24/ I want to reiterate that this only because I was curious. There weren't a t

Re: documentation [was Re: logging]

2007-12-10 Thread Howard Chu
Craig wrote: I want to reiterate that this only because I was curious. There weren't a ton of log messages that said it was causing the server to explode or anything. I knew we were missing a log message somewhere. I suppose it ought to finish with "Click OK" as well... -- -- Howard Chu C

Re: documentation [was Re: logging]

2007-12-10 Thread Howard Chu
Craig wrote: Lastly, the man pages... Again, the size is a bit daunting. There are 78 man pages with 2.3.35. (With an additional 121 symlinked files.) That's quite a bit when you're looking for one specific thing and don't really know where to start. I want to be very clear; I am NOT knocking the

Re: Help Needed with mirrormode configuration in 2.4.6

2007-12-10 Thread Gavin Henry
> Hi, > I’m using OpenLDAP 2.4.6 and trying to use the mirrormode and syncrepl. > My setup has 2 LDAP nodes, one as master and other as slave through a > VIP. > When the master goes down, the slave will become master and vice-versa. > At any point to keep both the LDAP in sync I want to

Re: slapd seg faults when 'ppolicy_default' is enabled

2007-12-10 Thread Aaron Richton
I'm not a ppolicy user, so that output might be blatantly obvious to someone else. But from where I sit, I'd imagine that a copy of "cn=swaPasswordPolicy,ou=Policies,dc=swa,dc=com" would be helpful--especially since slapd seems to be crashing awfully close to where it would be parsing the polic

slapd seg faults when 'ppolicy_default' is enabled

2007-12-10 Thread R.B.
Hi; I'm in the process of configuring ppolicy for OpenLDAP using Buchan's RPMs and it seems that after adding my policy and enabling it in my slapd.conf file, slapd seg faults (see output below). If I uncomment the 'ppolicy_default' line, the server starts fine and continues to serve. Help? Than

Help Needed with mirrormode configuration in 2.4.6

2007-12-10 Thread Savithri
Hi, I’m using OpenLDAP 2.4.6 and trying to use the mirrormode and syncrepl. My setup has 2 LDAP nodes, one as master and other as slave through a VIP. When the master goes down, the slave will become master and vice-versa. At any point to keep both the LDAP in sync I want to use mirror mo

Re: documentation [was Re: logging]

2007-12-10 Thread Gavin Henry
> Howard Chu wrote: >> When you're looking for a software feature, the manpages and Admin Guide >> should be your first resort. Pretty much every feature is documented. > > This morning there were some posts about "rewriting overlays". So, I > wanted to learn more about what they could do. I resis

Re: Strange TLS behaviour with slapd 2.3.30 on Debian Etch

2007-12-10 Thread Denis Sacchet
> Quanah Gibson-Mount : Hopefully all of the Debian specific problems with TLS will go away once OpenLDAP 2.4 is released and integrated into Debian, since it has GnuTLS support. People often run into SSL/TLS issues on Debian because it has a hacked version of OpenLDAP 2.1 libraries linked aga

Re: Strange TLS behaviour with slapd 2.3.30 on Debian Etch

2007-12-10 Thread Fabian Steiner
Howard Chu wrote: > The fact that a reboot is required indicates that any problem is not in any > user-level code. Maybe your /dev/random has run out of entropy, or some > other underlying system resource is gone. Maybe strace would help here. Thanks for pointing me into the right direction. I can

Re: Strange TLS behaviour with slapd 2.3.30 on Debian Etch

2007-12-10 Thread Fabian Steiner
Howard Chu wrote: > Fabian Steiner wrote: > > Of course, I don't want to hijack the OP's thread but as our problems > > seem to be rather similar I can also provide the corresponding slapd log: > > This looks like a simple configuration error; you have slapd configured to > require client certifica

Re: Strange TLS behaviour with slapd 2.3.30 on Debian Etch

2007-12-10 Thread Fabian Steiner
Howard Chu wrote: > Denis Sacchet wrote: > > Hello, > > > > I have a strange behaviour regarding TLS encryption with an LDAP server. > > Everything works like a charm for a while, and without any sign, the > > server begins to not respond for TLS traffic. As the server is partially > > open on inte

documentation [was Re: logging]

2007-12-10 Thread Craig
Howard Chu wrote: > When you're looking for a software feature, the manpages and Admin Guide > should be your first resort. Pretty much every feature is documented. This morning there were some posts about "rewriting overlays". So, I wanted to learn more about what they could do. I resisted the ur

Re: Strange TLS behaviour with slapd 2.3.30 on Debian Etch

2007-12-10 Thread Howard Chu
Fabian Steiner wrote: Howard Chu wrote: Fabian Steiner wrote: Of course, I don't want to hijack the OP's thread but as our problems seem to be rather similar I can also provide the corresponding slapd log: This looks like a simple configuration error; you have slapd configured to require clien

Re: Strange TLS behaviour with slapd 2.3.30 on Debian Etch

2007-12-10 Thread Howard Chu
Fabian Steiner wrote: Of course, I don't want to hijack the OP's thread but as our problems seem to be rather similar I can also provide the corresponding slapd log: This looks like a simple configuration error; you have slapd configured to require client certificates and the client didn't sen

Re: rwm-overlay and ldap-backend do suit me ?

2007-12-10 Thread Buchan Milne
On Monday 10 December 2007 20:33:01 Frava wrote: > Hi all, > > I'm trying to setup a ldap server with openldap 2.3 and I need some lights > about how to do it. > I explain: > My company already have a central ldap server (openldap 2.2) on which I can > find all users and authenticate them, but the

Re: Strange TLS behaviour with slapd 2.3.30 on Debian Etch

2007-12-10 Thread Buchan Milne
On Monday 10 December 2007 09:28:38 Denis Sacchet wrote: > Hello, > > I have a strange behaviour regarding TLS encryption with an LDAP server. > Everything works like a charm for a while, and without any sign, the > server begins to not respond for TLS traffic. As the server is partially > open on

Re: OpenLDAP Planning

2007-12-10 Thread Buchan Milne
On Monday 10 December 2007 18:44:05 Daniel Gibby wrote: > Let me narrow the focus of my question a bit more. This isn't a general > LDAP question. This is a question specific to OpenLDAP, since I'm > looking for people with experience in OpenLDAP and for ways they solved > the same problem I'm havi

rwm-overlay and ldap-backend do suit me ?

2007-12-10 Thread Frava
Hi all, I'm trying to setup a ldap server with openldap 2.3 and I need some lights about how to do it. I explain: My company already have a central ldap server (openldap 2.2) on which I can find all users and authenticate them, but the corresponding attributes (homedir, shell, gidnumber) aren't re

Re: Strange TLS behaviour with slapd 2.3.30 on Debian Etch

2007-12-10 Thread Quanah Gibson-Mount
--On December 10, 2007 5:37:36 PM +0100 Fabian Steiner <[EMAIL PROTECTED]> wrote: Hello! We are experiencing exactly the same issues without having found any solution yet. Any suggestion highly appreciated! Hopefully all of the Debian specific problems with TLS will go away once OpenLDAP

Re: Strange TLS behaviour with slapd 2.3.30 on Debian Etch

2007-12-10 Thread Howard Chu
Denis Sacchet wrote: Hello, I have a strange behaviour regarding TLS encryption with an LDAP server. Everything works like a charm for a while, and without any sign, the server begins to not respond for TLS traffic. As the server is partially open on internet, I force TLS, so it is very annoying

Re: Strange TLS behaviour with slapd 2.3.30 on Debian Etch

2007-12-10 Thread Denis Sacchet
Dieter Kluenter a écrit : You are connection to host ldap.domain.com /C=FR/ST=Lorraine/L=Nancy/O=/OU=/CN=smtp..com/emailAddress=it@.com, but the certificate is issued to host smtp.domain.com, a certificate verification must fail. In fact, the trace doesn't show it, but I have an a

RE: Active/Active servers

2007-12-10 Thread Clowser, Jeff (Contractor)
>> What are you trying to accomplish? >> >Add high availability to my master servers, avoiding replication. Why avoid replication? Multimastering is not necessarily bad, if done right. If you have two masters, but always write to one, with the other as a hot standby, you have the high avai

Re: Strange TLS behaviour with slapd 2.3.30 on Debian Etch

2007-12-10 Thread Fabian Steiner
Hello! On Mon, 2007-12-10 Denis Sacchet wrote: > I have a strange behaviour regarding TLS encryption with an LDAP server. > Everything works like a charm for a while, and without any sign, the > server begins to not respond for TLS traffic. As the server is partially > open on internet, I force TL

Re: logging

2007-12-10 Thread Tony Earnshaw
Craig skrev, on 10-12-2007 11:19: [...] I was simply looking for some advice on how to configure logging to get information X,Y,Z. My only comment about parsing was that I didn't care about the format, I just cared about the data. Our LDAP servers are working just fine. I was looking at the

Re: OpenLDAP Planning

2007-12-10 Thread Daniel Gibby
Let me narrow the focus of my question a bit more. This isn't a general LDAP question. This is a question specific to OpenLDAP, since I'm looking for people with experience in OpenLDAP and for ways they solved the same problem I'm having with OpenLDAP and MySQL. I understand why what you are s

Re: Strange TLS behaviour with slapd 2.3.30 on Debian Etch

2007-12-10 Thread Dieter Kluenter
Denis Sacchet <[EMAIL PROTECTED]> writes: > Hello, > > I have a strange behaviour regarding TLS encryption with an LDAP > server. Everything works like a charm for a while, and without any > sign, the server begins to not respond for TLS traffic. As the server > is partially open on internet, I fo

Re: OpenLDAP Planning

2007-12-10 Thread Gavin Henry
> Let me narrow the focus of my question a bit more. This isn't a general > LDAP question. This is a question specific to OpenLDAP, since I'm > looking for people with experience in OpenLDAP and for ways they solved > the same problem I'm having with OpenLDAP and MySQL. This is better ;-) > > I

Re: OpenLDAP Planning

2007-12-10 Thread Gavin Henry
> Hi, Hi, > > We are somewhat new to OpenLDAP and are planning on how we'll use it for > our business. This thread may be more suitable for the general LDAP mailing list: http://www.umich.edu/~dirsvcs/ldap/mailinglist.html Nothing, as yet, seems directly related to OpenLDAP since you appear t

OpenLDAP Planning

2007-12-10 Thread Daniel Gibby
Hi, We are somewhat new to OpenLDAP and are planning on how we'll use it for our business. We have a few different uses we plan on, but one in particular that I have a question about. We already have our email server setup to run virtual domain and aliases with a MySQL backend. We have a few

Re: rewrite searchDN based on filter

2007-12-10 Thread Pierangelo Masarati
Finn Blucher wrote: > I know this was discussed recently but there didn't seem to be a real > answer so I'd like to kick if off again. > > I would like to be able redirect user searches to two different LDAP > servers depending on UID, so: > > if a process searches for userA with a base of o=cont

Re: logging

2007-12-10 Thread Craig
Buchan Milne wrote: On Saturday 08 December 2007 01:42:02 Craig wrote: - how much time it took to answer the request IMHO you should avoid using a logging system as a performance monitoring system. I didn't mean to say that I was looking at logging for fine-grained performance anal

Strange TLS behaviour with slapd 2.3.30 on Debian Etch

2007-12-10 Thread Denis Sacchet
Hello, I have a strange behaviour regarding TLS encryption with an LDAP server. Everything works like a charm for a while, and without any sign, the server begins to not respond for TLS traffic. As the server is partially open on internet, I force TLS, so it is very annoying for us. I change

rewrite searchDN based on filter

2007-12-10 Thread Finn Blucher
I know this was discussed recently but there didn't seem to be a real answer so I'd like to kick if off again. I would like to be able redirect user searches to two different LDAP servers depending on UID, so: if a process searches for userA with a base of o=container, then the request is s

Re: logging

2007-12-10 Thread Buchan Milne
On Saturday 08 December 2007 01:42:02 Craig wrote: > Hi, I was recently looking at our logs and trying to figure out what an > appropriate logging level is for a stable, production system. > > What I would really like is a log (or logs) that contain: > - the request made > - the client