Re: How to use LDAP_OPT_CONNECT_ASYNC?

2011-02-03 Thread masarati
> Hi, > > I'm trying to use the new LDAP_OPT_CONNECT_ASYNC with OpenLDAP 2.4.23 > client and I can't see how it can be done. > > After creating the connection structure via ldap_initialize() I then call > ldap_sasl_bind() to do the bind. That calls down to ldap_new_connection() > (ldap_sasl_bind ->

Re: Which backend should I use?

2011-02-03 Thread Quanah Gibson-Mount
On Feb 3, 2011, at 9:16 AM, Emmanuel Lecharny wrote: > On 2/3/11 5:45 PM, Quanah Gibson-Mount wrote: >> >> On Feb 3, 2011, at 1:11 AM, Clément OUDOT wrote: >> >>> Le 3 février 2011 09:39, Olivier PAVILLA >>> a écrit : Hi. I need your advice again :) I have LDAP server with l

Re: How to use LDAP_OPT_CONNECT_ASYNC?

2011-02-03 Thread Howard Chu
Ian Puleston wrote: Hi, I'm trying to use the new LDAP_OPT_CONNECT_ASYNC with OpenLDAP 2.4.23 client and I can't see how it can be done. After creating the connection structure via ldap_initialize() I then call ldap_sasl_bind() to do the bind. That calls down to ldap_new_connection() (ldap_s

How to use LDAP_OPT_CONNECT_ASYNC?

2011-02-03 Thread Ian Puleston
Hi, I'm trying to use the new LDAP_OPT_CONNECT_ASYNC with OpenLDAP 2.4.23 client and I can't see how it can be done. After creating the connection structure via ldap_initialize() I then call ldap_sasl_bind() to do the bind. That calls down to ldap_new_connection() (ldap_sasl_bind -> ldap_send_

Re: Transparent proxy, (objectClass=user) not being relayed. Schema issue?

2011-02-03 Thread Christopher Cprek
Ah, I see now! Yes, after I removed the proxytemplate line, everything is working perfectly. Thanks again! Chris On Thu, Feb 3, 2011 at 11:05 AM, wrote: > > I take it back :-( > > > > I was looking at an older config that wasn't in use. If I use the default > > slapd.conf with a standard bdb ba

Re: AccessLog behaviour

2011-02-03 Thread Marco Pizzoli
Hi Howard, probably you are addressing me to this part: "When using a log database that supports ordered indexing on generalizedTime attributes, specifying an eq index on the* reqStart* attribute will greatly benefit the performance of the purge operation." My accesslog db is back-hdb and I have

Re: AccessLog behaviour

2011-02-03 Thread Howard Chu
Marco Pizzoli wrote: Hi all, I would like to know the internal behaviour of slapo-accesslog. Read the slapo-accesslog(5) manpage. Re-read the logpurge description and don't skip any of it. I would like to have accesslog with a data retention of 10 days. In my ldap usage scenario this retent

Re: Which backend should I use?

2011-02-03 Thread Emmanuel Lecharny
On 2/3/11 5:45 PM, Quanah Gibson-Mount wrote: On Feb 3, 2011, at 1:11 AM, Clément OUDOT wrote: Le 3 février 2011 09:39, Olivier PAVILLA a écrit : Hi. I need your advice again :) I have LDAP server with ldbm database on a fedora core 5 which is running for more than 3 years without any upda

Re: Which backend should I use?

2011-02-03 Thread Quanah Gibson-Mount
On Feb 3, 2011, at 1:11 AM, Clément OUDOT wrote: > Le 3 février 2011 09:39, Olivier PAVILLA > a écrit : >> Hi. >> I need your advice again :) >> I have LDAP server with ldbm database on a fedora core 5 which is >> running for more than 3 years without any update nor upgrade neither. So >> now

Re: Transparent proxy, (objectClass=user) not being relayed. Schema issue?

2011-02-03 Thread masarati
> I take it back :-( > > I was looking at an older config that wasn't in use. If I use the default > slapd.conf with a standard bdb backend, it starts just fine. With pcache > overlay, slapd will not start. > > Configured / compiled with this: > # LDFLAGS=-L/usr/local/BerkeleyDB.4.8/lib CPPFLAGS="-

Re: Transparent proxy, (objectClass=user) not being relayed. Schema issue?

2011-02-03 Thread Christopher Cprek
I take it back :-( I was looking at an older config that wasn't in use. If I use the default slapd.conf with a standard bdb backend, it starts just fine. With pcache overlay, slapd will not start. Configured / compiled with this: # LDFLAGS=-L/usr/local/BerkeleyDB.4.8/lib CPPFLAGS="-D_GNU_SOURCE -

Re: System user login fails if ldap goes down.

2011-02-03 Thread Buchan Milne
On Thursday, 3 February 2011 14:34:21 Meghanand Acharekar wrote: > Hi, > > I have configured a mixed authentication systems (LDAP + System Users). > On this system some users are configure to login via ldap rest as system > users. > I observed that if the ldap server goes down, system users also n

Re: Transparent proxy, (objectClass=user) not being relayed. Schema issue?

2011-02-03 Thread Christopher Cprek
You are correct. Revisiting this fresh, it's working now with pcache enabled. I believe I had some errors left over in my environmental variables as I was messing with the locally compiled bdb libs. Thanks again. Chris On Wed, Feb 2, 2011 at 3:33 PM, wrote: > > Well now the issue I run into is

Re: ldap_bind: Invalid credentials (49)

2011-02-03 Thread Brian Candler
On Wed, Feb 02, 2011 at 10:49:55PM +0100, John Espiro wrote: > Ubuntu 10.10 server 64bit ... > Entering: > ldapmodify -x -D 'cn=config' -W -f log.ldif > > Gives me: > Enter LDAP Password: > ldap_bind: Invalid credentials (49) Run ldapmodify on the same box as the server, as root. Poin

System user login fails if ldap goes down.

2011-02-03 Thread Meghanand Acharekar
Hi, I have configured a mixed authentication systems (LDAP + System Users). On this system some users are configure to login via ldap rest as system users. I observed that if the ldap server goes down, system users also not able to login. Is there any way to prevent this, following my pam configur

Re: "Tagging" and Data Access: a request for advice and help

2011-02-03 Thread Dieter Kluenter
Am Thu, 03 Feb 2011 10:00:05 + schrieb Gervase Markham : > On 02/02/11 17:43, Gervase Markham wrote: > > [I hope this message is on-topic for this list; if not, please can > > you tell me where I can get some advice?] > > Thanks to the moderator for approving my post; however, I have > realis

Re: ldap_bind: Invalid credentials (49)

2011-02-03 Thread Buchan Milne
On Wednesday, 2 February 2011 23:49:55 John Espiro wrote: [...] > I've got to be missing something obvious, but it's not clear what that > is... You didn't read my reply to your previous thread, which was sent 20 minutes before your mail above, all the info you needed was there. Regards, Bucha

Re: "Tagging" and Data Access: a request for advice and help

2011-02-03 Thread Gervase Markham
On 02/02/11 17:43, Gervase Markham wrote: [I hope this message is on-topic for this list; if not, please can you tell me where I can get some advice?] Thanks to the moderator for approving my post; however, I have realised that I didn't do enough reading before asking this question, and there

Re: Which backend should I use?

2011-02-03 Thread Clément OUDOT
Le 3 février 2011 09:39, Olivier PAVILLA a écrit : > Hi. > I need your advice again :) > I have LDAP server with ldbm database on a fedora core 5 which is > running for more than 3 years without any update nor upgrade neither. So > now I've to migate this old LDAP on a new server with new Linux >

Re: ldap_bind: Invalid credentials (49)

2011-02-03 Thread Ondrej Kuznik
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/03/2011 08:35 AM, Razvan Deaconescu wrote: > On 02/03/2011 12:39 AM, John Espiro wrote: >>> Seems that this might be the solution... >>> http://stackoverflow.com/questions/3057257/ubuntu-10-04-lucid-openldap-invalid-credentials-issue >>> >> Actua

AccessLog behaviour

2011-02-03 Thread Marco Pizzoli
Hi all, I would like to know the internal behaviour of slapo-accesslog. I would like to have accesslog with a data retention of 10 days. In my ldap usage scenario this retention produce an accesslog db of quite 10GB of data. Things are working quite fine, but when the log db contains data older t

Which backend should I use?

2011-02-03 Thread Olivier PAVILLA
Hi. I need your advice again :) I have LDAP server with ldbm database on a fedora core 5 which is running for more than 3 years without any update nor upgrade neither. So now I've to migate this old LDAP on a new server with new Linux distribution (Debian Lenny). I'm tune up both /etc/ldap/slapd.co

Running back-perl and hdb/bdb in the same suffix

2011-02-03 Thread José Miguel Parrella Romero
Hi, I've written a Perl class to be used with back-perl. I'm able to load this class from slapd.conf using a different suffix than my traditional hdb database. Say, for example, my hdb database is serving the dc=my,dc=net suffix, and my Perl is serving dc=perl,dc=my,dc=net. This effectively preve

"Tagging" and Data Access: a request for advice and help

2011-02-03 Thread Gervase Markham
[I hope this message is on-topic for this list; if not, please can you tell me where I can get some advice?] I am writing a new bit of Mozilla software called Domesday, which is a community directory: http://wiki.mozilla.org/Domesday We hope to scale it beyond 100,000, perhaps up to 1M users e