Re: acls and restricting permissions

2008-12-04 Thread Gavin Henry
> access to * > by dn.exact="cn=replicator,dc=example,dc=com" read > by * break Remember time and size limits. -- Kind Regards, Gavin Henry. OpenLDAP Engineering Team. E [EMAIL PROTECTED] Community developed LDAP software. http://www.openldap.org/project/

Re: acls and restricting permissions

2008-12-04 Thread Andrew Findlay
On Thu, Dec 04, 2008 at 12:57:13PM +1000, Brett @Google wrote: > I needed to add more attributes, but primarily only to make my ldap > browser happy, allow syncrepl, and some handy informational attributes > for the carbon based lifeforms who maintain the data. > # allow replicator to read all >

RE: "make test" hangs indefinitely

2008-12-04 Thread Drew Leske
> Did you apply both patches to BDB 4.7.25? It will not work if you > don't > have them both. See ITS#5844. Hi Qannah, Okay, I didn't notice either when I downloaded/built the packages. Sheesh. Thanks for pointing those out. (I read the OpenLDAP "INSTALL" file, not the "README"--those are

Re: TLS client certificates and memory use

2008-12-04 Thread David Hawes
David Hawes wrote: > David Hawes wrote: >> Quanah Gibson-Mount wrote: >>> --On Tuesday, November 25, 2008 7:24 PM -0500 David Hawes >>> <[EMAIL PROTECTED]> wrote: >>> I was doing some testing and noticed that when I search for entries using TLS, significantly more memory is used when usin

Re: TLS client certificates and memory use

2008-12-04 Thread Philip Guenther
On Thu, 4 Dec 2008, David Hawes wrote: ... > Here is an excerpt of the valgrind output when using client certificates: > > ==13311== 4,906 (92 direct, 4,814 indirect) bytes in 1 blocks are > definitely lost in loss record 19 of 23 ... > ==13311==by 0x4286A57: d2i_X509 (x_x509.c:136) > ==13311=

Re: TLS client certificates and memory use

2008-12-04 Thread Quanah Gibson-Mount
--On Thursday, December 04, 2008 5:47 PM -0800 Philip Guenther <[EMAIL PROTECTED]> wrote: In 2.4.x, tls_get_cert_dn() leaks a reference to the client's X509 cert: the call to SSL_get_peer_certificate() in tls_get_cert() increments the reference count on the cert and it never gets decremented b