Re: Dynamic Indexing through cn=config

2007-06-26 Thread Eric Irrgang
immediately and delete it! -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

server startup overhead

2007-05-25 Thread Eric Irrgang
with the same filter in the root and then a child search base with the same results. Is this a bug recursion or something that I just hadn't been noticing? What would be the best search to perform to prepare whatever cache is getting hit to make searches outside of the root DN faster? -- Eric

Re: server startup overhead

2007-05-25 Thread Eric Irrgang
? -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

Re: server startup overhead

2007-05-25 Thread Eric Irrgang
of the attributes from DB and building LDIF. On Fri, 25 May 2007, Howard Chu wrote: Eric Irrgang wrote: I continue to have trouble with getting a freshly started server to be responsive. One problem in particular is one that I thought had been resolved some time ago but is apparently biting me right

Re: server startup overhead

2007-05-25 Thread Eric Irrgang
Is there a way (with or without attaching a debugger) to find out what my IDL cache and DN cache is doing? -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

RE: Server Certificate Chain

2007-04-19 Thread Eric Irrgang
, Symas Corp. http://www.symas.com Director, Highland Sunhttp://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/ -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

startup costs was Re: filter preprocessing for performance improvement

2007-04-04 Thread Eric Irrgang
every entry satisfies the condition. -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

cn=include

2007-01-23 Thread Eric Irrgang
Are olcInclude attributes in cn=config honored as per the Admin Guide section 5.2.2 or is that documentation misleading? -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

olcTLSCipherSuite?

2007-01-23 Thread Eric Irrgang
connections while trying to negotiate high-strength first. -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

tool threads

2006-08-17 Thread Eric Irrgang
Solaris on UltraSparc 3 and UltraT1 and BDB 4.4.20 with the four current patches. -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

Re: slow cn=config changes; Re: Correct procedure to backup LDAP?

2006-08-15 Thread Eric Irrgang
lore... that sounds like the magic bullet. Can you give an example? -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

Re: requesting clarification of slapd.conf-versus-slapd.d configuration

2006-04-27 Thread Eric Irrgang
to open any databases and to ignore the default behavior of looking for a default config directory followed by looking for a default config file when neither '-f' nor '-F' is specified. -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

Re: requesting clarification of slapd.conf-versus-slapd.d configuration

2006-04-27 Thread Eric Irrgang
/openldap/etc/openldap/schema/cosine.schema databasebdb suffix dc=test directory /tmp/ldap mode0600 index objectclass eq On Thu, 27 Apr 2006, Howard Chu wrote: Eric Irrgang wrote: On Thu, 20 Apr 2006, Howard Chu wrote: First of all - don't do

Re: verification

2006-04-18 Thread Eric Irrgang
something wrong, but not sure what. Any ideas? Thanks! -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

Re: back-ldap with glue overlay

2006-03-23 Thread Eric Irrgang
there ought to be a better way to do the loopback connection, but using both back-relay and back-ldap/meta seemed like too much additional complexity. -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

Re: lastmod and index corruption

2006-02-22 Thread Eric Irrgang
: How about the obligatory Don't use BDB 4.3 warning that we've been giving for a while? :) -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

Re: lastmod and index corruption

2006-02-22 Thread Eric Irrgang
-Mount wrote: On Wednesday 22 February 2006 11:18, Eric Irrgang wrote: I'll be looking at BDB 4.4 for OL 2.3.x but I couldn't get BDB 4.2 to work with more than a total of 4 Gigs of db cache. 4.3 changed the limit from 4 GB max to 4 GB per cache segment. Has a patch been backported to 4.2

lastmod and index corruption

2006-02-21 Thread Eric Irrgang
out there who fails to heed the obligatory upgrade to 2.3.x warning. -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

Re: BDB fragmented

2006-02-09 Thread Eric Irrgang
. Sounds like a question you'll find answers for in the BDB documentation. Generally there's no point in freeing up the space since it will just get reused the next time you add data. -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

Re: identity assertion

2006-01-24 Thread Eric Irrgang
(the '!' is because the control MUST be critical). Ah! That's exactly what I've been looking for. I suppose if I had just checked the ldapsearch command-line help I would have seen that but I had been relying on the man page. Thanks so much! -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475

Re: reprocessing rejected replica entries

2006-01-24 Thread Eric Irrgang
an error. Since slurpd will just pick up where it left off I'd suggest simply stopping slurpd while you clean out its working directory. -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

RE: [ldap] Implementation Suggestions

2006-01-20 Thread Eric Irrgang
. -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

Re: identity assertion

2006-01-20 Thread Eric Irrgang
from a regular ldap client without using SASL. Is there a way? For instance, the following fails with ldapsearch: not compiled with SASL support ldapsearch -x -W -D cn=authorizeduser,dc=test -X cn=config,dc=test -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

slapd-ldap configuration and identity assertion

2006-01-20 Thread Eric Irrgang
,dc=test idassert-authzFrom dn.regex:.* Instead, the connection gets relayed without using the binddn or the authzID as if I hadn't used idassert-bind at all. Am I missing something? -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

identity assertion

2006-01-19 Thread Eric Irrgang
for a while. Do I just need to go the SASL route? Is there a way to move to SASL with my current SSHA userPassword credentials intact? -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

Re: How can I build openldap on 64-bit machie?

2005-12-15 Thread Eric Irrgang
suite against a sparcv9 binary, and usually file an ITS when it doesn't work (a rare situation lately). But I don't use it in production. -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342

slapd doesn't notice completion of background index rebuilding

2005-12-15 Thread Eric Irrgang
or adding additional indexable entries doesn't change matters. Am I doing something wrong or has anyone else had this problem? Moreover, I just noticed that if I try to use an attribute 'replace' on olcDbIndex, the server crashes immediately! That can't be right... -- Eric Irrgang - UT Austin ITS Unix

sizelimit evaluated before ACLs?

2005-11-23 Thread Eric Irrgang
results, it may be obvious that 2 entries matched the filter but failed the ACL check, disclosing perhaps more information than the directory maintainers would like. Is this expected/intended behavior? -- Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342