Re: extracting X509 certificate from LDAP connection with openldap public API

2008-12-03 Thread Guillaume Rousse
Philip Guenther a écrit : On Tue, 2 Dec 2008, Guillaume Rousse wrote: The code manipulates an opaque LDAP *ld connection handle. I had a quick look at openldap code, in libraries/libldap/tls.c, to see how this handle could be used to access the x509 certificate: LDAPConn *conn = NULL; Sockbuf

"make test" hangs indefinitely

2008-12-03 Thread Drew Leske
Hi all, Apologies if this has been asked and answered already. I did a number of searches for this problem and found nothing. When I build OpenLDAP it hangs on "make test". This has happened on two separate hosts, one AMD64 running Gentoo and the other a CentOS 5 distribution running on Inte

Re: Multi-master doesn't replicate deletes under certain circumstances.

2008-12-03 Thread Jose Ildefonso Camargo Tolosa
Hi! I submitted the ITS, although later I found a very similar problem already reported. Anyway, I have been playing around some more. My config file used to look like this: serverID N and I had syncrepl entries for the *other* masters. And off course: mirrormode true and the syncrepl overlay

Re: "make test" hangs indefinitely

2008-12-03 Thread Quanah Gibson-Mount
--On Wednesday, December 03, 2008 1:27 PM -0800 Drew Leske <[EMAIL PROTECTED]> wrote: Hi all, Apologies if this has been asked and answered already. I did a number of searches for this problem and found nothing. When I build OpenLDAP it hangs on "make test". This has happened on two s

Re: acls and restricting permissions

2008-12-03 Thread Brett @Google
On Wed, Dec 3, 2008 at 12:30 AM, Andrew Findlay <[EMAIL PROTECTED]> wrote: > You could split the rule into two clauses: > > access to attr=c,o,ou,cn,sn,givenName,mail,entry > by dn.exact=cn=limited,dc=example,dc=com read > by * break > > access to * > by dn.exact=cn=limited,dc=example,d