> access to *
> by dn.exact="cn=replicator,dc=example,dc=com" read
> by * break
Remember time and size limits.
--
Kind Regards,
Gavin Henry.
OpenLDAP Engineering Team.
E [EMAIL PROTECTED]
Community developed LDAP software.
http://www.openldap.org/project/
On Thu, Dec 04, 2008 at 12:57:13PM +1000, Brett @Google wrote:
> I needed to add more attributes, but primarily only to make my ldap
> browser happy, allow syncrepl, and some handy informational attributes
> for the carbon based lifeforms who maintain the data.
> # allow replicator to read all
>
> Did you apply both patches to BDB 4.7.25? It will not work if you
> don't
> have them both. See ITS#5844.
Hi Qannah,
Okay, I didn't notice either when I downloaded/built the packages. Sheesh.
Thanks for pointing those out. (I read the OpenLDAP "INSTALL" file, not the
"README"--those are
David Hawes wrote:
> David Hawes wrote:
>> Quanah Gibson-Mount wrote:
>>> --On Tuesday, November 25, 2008 7:24 PM -0500 David Hawes
>>> <[EMAIL PROTECTED]> wrote:
>>>
I was doing some testing and noticed that when I search for entries
using TLS, significantly more memory is used when usin
On Thu, 4 Dec 2008, David Hawes wrote:
...
> Here is an excerpt of the valgrind output when using client certificates:
>
> ==13311== 4,906 (92 direct, 4,814 indirect) bytes in 1 blocks are
> definitely lost in loss record 19 of 23
...
> ==13311==by 0x4286A57: d2i_X509 (x_x509.c:136)
> ==13311=
--On Thursday, December 04, 2008 5:47 PM -0800 Philip Guenther
<[EMAIL PROTECTED]> wrote:
In 2.4.x, tls_get_cert_dn() leaks a reference to the client's X509 cert:
the call to SSL_get_peer_certificate() in tls_get_cert() increments the
reference count on the cert and it never gets decremented b