Re: syncrepl question 2.3.

2007-04-02 Thread Buchan Milne
On Monday 02 April 2007, silly_sad wrote: > Hi, all > > After reading http://www.openldap.org/doc/admin23/syncrepl.html > I only ask what exactly should i setup and what programs to run ? > (on the slave and on the master) Only slapd needs to run. On the master, it must be configured to be a provi

syncrepl question 2.3.

2007-04-02 Thread silly_sad
Hi, all After reading http://www.openldap.org/doc/admin23/syncrepl.html I only ask what exactly should i setup and what programs to run ? (on the slave and on the master) If i already have the master populated with DIT and it is running on a production server. And the master was not configured for

Re: syncrepl question

2007-03-30 Thread Quanah Gibson-Mount
--On Friday, March 30, 2007 6:15 PM +0400 silly_sad <[EMAIL PROTECTED]> wrote: Hi, all After reading http://www.openldap.org/doc/admin22/syncrepl.html I only ask what exactly should i setup and what programs to run ? (on the slave and on the master) You need to upgrade to 2.3, and use syncrep

syncrepl question

2007-03-30 Thread silly_sad
Hi, all After reading http://www.openldap.org/doc/admin22/syncrepl.html I only ask what exactly should i setup and what programs to run ? (on the slave and on the master)

syncrepl question

2006-10-02 Thread sebastien Prouff
Hello list, I am working on a distributied tree with open ldap.(2-2-23 on sarge) my DIT is fragmented in several pieces. (up to 50...) that I want to replicate on the master tree. I tried to used the syncrepl directive, which look great (first look.) So, after a short while I was able to get sh

Re: Brief syncrepl question

2006-05-30 Thread Howard Chu
Michael L Torrie wrote: At one time conventional wisdom dictated that authorization and authentication should be separate. So in keeping with that Apple's solution was seen as a good one at the time. All the many different kinds of authentications and hashes were kept in one service which could

Re: Brief syncrepl question

2006-05-30 Thread Quanah Gibson-Mount
--On Tuesday, May 30, 2006 2:31 PM -0600 Michael L Torrie <[EMAIL PROTECTED]> wrote: However practice and theory are two different things and in practice everyone uses LDAP for authentication as well as authorization. No, everyone does not use LDAP for authentication as well as authorization

Re: Brief syncrepl question

2006-05-30 Thread Michael L Torrie
On Tue, 2006-05-30 at 13:15 -0700, Howard Chu wrote: > Yes, it's unfortunate that Apple didn't coordinate with the OpenLDAP > Project on their requirements in the past. There's been better > communication more recently, and hopefully they'll take advantage of the > supported extension hooks in O

Re: Brief syncrepl question

2006-05-30 Thread Howard Chu
Michael L Torrie wrote: I want to abandon this proprietary custom Apple solution soon. In the meantime we're keeping the Apple system because it interfaces so seamlessly with the Apple clients. While it is possible to make apple clients talk directly to openldap, things like password syncing,

Re: Brief syncrepl question

2006-05-30 Thread Michael L Torrie
On Tue, 2006-05-30 at 12:58 -0400, Aaron Richton wrote: > The answer to your question is no. The answer to what you're trying to > accomplish is likely more difficult--OpenLDAP is an open source project, > after all. > > OpenLDAP 2.1 doesn't do syncprov, at all. You may be able to slurpd from > 2.

Re: Brief syncrepl question

2006-05-30 Thread Quanah Gibson-Mount
--On Tuesday, May 30, 2006 10:27 AM -0600 Michael L Torrie <[EMAIL PROTECTED]> wrote: I am pretty sure the answer to this question is, no, but I haven't managed to find any definitive answer on google yet. The question is can I use syncrepl to sync openldap 2.2 and openldap 2.3 servers agai

Re: Brief syncrepl question

2006-05-30 Thread Aaron Richton
The answer to your question is no. The answer to what you're trying to accomplish is likely more difficult--OpenLDAP is an open source project, after all. OpenLDAP 2.1 doesn't do syncprov, at all. You may be able to slurpd from 2.1 into 2.{2,3} and then syncrepl from that. I doubt I'd recommend th

Re: Brief syncrepl question

2006-05-30 Thread Howard Chu
Michael L Torrie wrote: I am pretty sure the answer to this question is, no, but I haven't managed to find any definitive answer on google yet. The question is can I use syncrepl to sync openldap 2.2 and openldap 2.3 servers against an openldap 2.1.x master server? Unfortunately at the moment m

Brief syncrepl question

2006-05-30 Thread Michael L Torrie
I am pretty sure the answer to this question is, no, but I haven't managed to find any definitive answer on google yet. The question is can I use syncrepl to sync openldap 2.2 and openldap 2.3 servers against an openldap 2.1.x master server? Unfortunately at the moment my Apple openldap server is

Re: syncrepl question (2.2.x)

2006-01-16 Thread FRLinux
On 1/16/06, Digant Kasundra <[EMAIL PROTECTED]> wrote: > Try using refreshAndPersist instead of refreshOnly. Sorry, I am : syncrepl rid=123 \ provider=ldaps://xxx.xxx.xxx \ type=refreshAndPersist \ Steph

Re: syncrepl question (2.2.x)

2006-01-16 Thread FRLinux
On 1/16/06, Howard Chu <[EMAIL PROTECTED]> wrote: > 2.2 release stream is now Historic and no longer being maintained. You > should migrate to 2.3. Yes, indeed, but since our core auth system lies on this, we want to make sure it works properly first, so i'll wait to migrate the systems to FreeBSD

Re: syncrepl question (2.2.x)

2006-01-16 Thread Howard Chu
FRLinux wrote: Hello, We are using syncrepl on OpenLDAP 2.2.29 on FreeBSD 5.4. At the moment, updates are getting pushed at the request of the client every hour. What i'd like is instead the server publishing updates to backup servers as soon as they occur (like a password change, etc ...). I d

syncrepl question (2.2.x)

2006-01-16 Thread FRLinux
Hello, We are using syncrepl on OpenLDAP 2.2.29 on FreeBSD 5.4. At the moment, updates are getting pushed at the request of the client every hour. What i'd like is instead the server publishing updates to backup servers as soon as they occur (like a password change, etc ...). I didn't seem to fin