Hi All,
I was wondering how i go about giving LESS access than the default ACL rule.
Lets assume some default permissions set from the FAQ-o-matic :
access to attr=userpassword
by self =xw
by anonymous auth
access to *
by self write
by users read
This allows the "standard use
Hi!
I just configured multi-master replication (with N=3) for testing
purposes, and I just found an annoying problem, under these
conditions:
1. Configure a N number of "masters", and have them replicate happily
(this is important).
2. Stop slapd service on all of the servers.
3. Start slapd serv
On Tue, 2 Dec 2008, Brett @Google wrote:
Hi All,
I was wondering how i go about giving LESS access than the default ACL rule.
Lets assume some default permissions set from the FAQ-o-matic :
access to attr=userpassword
by self =xw
by anonymous auth
access to *
by self write
by us
On Tue, Dec 02, 2008 at 02:14:52PM +1000, Brett @Google wrote:
> Assuming we add to the above a user that has LESS access than the default ie:
>
> access to attr=c,o,ou,cn,sn,givenName,mail
> by dn.exact=cn=limited,dc=example,dc=com
> by * none (or break)
>
> This literally wont work as
Irina Shetuhina <[EMAIL PROTECTED]> writes:
> Добрый день.
>
>> Dmitriy Kirhlarov <[EMAIL PROTECTED]> writes:
>
>>> Hi list.
>>>
>>> I'll try to ask again. :)
>>>
>>> We are want use slapd-meta for aggregate several databases to one
>>> DIT. We are suppose, users will read and write "o=vega" (virt
Hi All,
I'm migrating our ldap service from Sun One to OpenLDAP. In the
process I have stumbled upon this issue a couple times.
1. Initialize Master
2. Connect syncrepl slaves
3. Wait a week
4. Replication stops working with `null_callback : error code 0x12` in
slave logs and lots of ugly output i
David Hawes wrote:
> Quanah Gibson-Mount wrote:
>> --On Tuesday, November 25, 2008 7:24 PM -0500 David Hawes
>> <[EMAIL PROTECTED]> wrote:
>>
>>> I was doing some testing and noticed that when I search for entries
>>> using TLS, significantly more memory is used when using client
>>> certificates t
--On Tuesday, December 02, 2008 10:42 AM -0500 Will Nowak <[EMAIL PROTECTED]>
wrote:
Hi All,
I'm migrating our ldap service from Sun One to OpenLDAP. In the
process I have stumbled upon this issue a couple times.
I suggest you use OpenLDAP 2.4.13.
--Quanah
--
Quanah Gibson-Mount
Princip
--On Wednesday, December 03, 2008 9:25 AM +1930 Jose Ildefonso Camargo
Tolosa <[EMAIL PROTECTED]> wrote:
Hi!
I just configured multi-master replication (with N=3) for testing
purposes, and I just found an annoying problem, under these
conditions:
1. Configure a N number of "masters", and have
Sounds like an old version of Ubuntu.
Sellers
On 11/13/08 1:13 PM, "Net Warrior" <[EMAIL PROTECTED]> wrote:
> Running an slapindex -v was sufficient, very kind of you.
> anyway, ubuntu runs slapd as root, that surprised me, on most systems
> /var/lib/ldap is owned by ldap:ldap, but, we know the
Hello list.
I'm trying to extend nagios check_ldap plugin to also check LDAP
certificate expiration. Equivalent code in check_http work directly at
socket level, and is not directly transposable, as check_ldap works at
higher level, relying on openldap libraries to manage its connection.
The
On Tue, 2 Dec 2008, Guillaume Rousse wrote:
> The code manipulates an opaque LDAP *ld connection handle. I had a quick
> look at openldap code, in libraries/libldap/tls.c, to see how this
> handle could be used to access the x509 certificate:
>
> LDAPConn *conn = NULL;
> Sockbuf *sb = NULL;
> SS
Hi!
On Wed, Dec 3, 2008 at 3:16 PM, Quanah Gibson-Mount <[EMAIL PROTECTED]> wrote:
> --On Wednesday, December 03, 2008 9:25 AM +1930 Jose Ildefonso Camargo
> Tolosa <[EMAIL PROTECTED]> wrote:
>
>> Hi!
>>
>> I just configured multi-master replication (with N=3) for testing
>> purposes, and I just f
13 matches
Mail list logo
