RE: 2.4.28 cn=config replication trouble

2012-02-02 Thread Quanah Gibson-Mount
--On Thursday, February 02, 2012 1:02 PM -0800 Quanah Gibson-Mount wrote: --On Thursday, February 02, 2012 3:37 PM -0500 Aaron Bennett wrote: But I can make changes to one machine and see them go to the other, and the syncrepl lines are clearly not asking for sasl. All binds are SASL bind

RE: 2.4.28 cn=config replication trouble

2012-02-02 Thread Aaron Bennett
>-Original Message- >From: Quanah Gibson-Mount [mailto:qua...@zimbra.com] >Sent: Thursday, February 02, 2012 4:02 PM >To: Aaron Bennett; openldap-technical@openldap.org >Subject: RE: 2.4.28 cn=config replication trouble > >All binds are SASL binds. You're probably using SASL SIMPLE, which

RE: 2.4.28 cn=config replication trouble

2012-02-02 Thread Quanah Gibson-Mount
--On Thursday, February 02, 2012 3:37 PM -0500 Aaron Bennett wrote: But I can make changes to one machine and see them go to the other, and the syncrepl lines are clearly not asking for sasl. All binds are SASL binds. You're probably using SASL SIMPLE, which most people don't think of as "

Re: DEL don't get synced

2012-02-02 Thread Hallvard B Furuseth
I wrote: As for git archive --remote=git://git.openldap.org/openldap.git, man git-daemon says this requires 'git config daemon.uploadarch true'. Requires it on the daemon side, that is. -- Hallvard

Re: DEL don't get synced

2012-02-02 Thread Quanah Gibson-Mount
--On Thursday, February 02, 2012 9:41 PM +0100 Hallvard B Furuseth wrote: On Thu, 02 Feb 2012 11:19:30 -0800, Quanah Gibson-Mount wrote: --On Thursday, February 02, 2012 10:46 AM +0100 Emmanuel Lecharny wrote: emmanuel-lecharnys-MacBook-Pro:openldap-git elecharny$ git archive --format=ta

Re: DEL don't get synced

2012-02-02 Thread Hallvard B Furuseth
On Thu, 02 Feb 2012 11:19:30 -0800, Quanah Gibson-Mount wrote: --On Thursday, February 02, 2012 10:46 AM +0100 Emmanuel Lecharny wrote: emmanuel-lecharnys-MacBook-Pro:openldap-git elecharny$ git archive --format=tar --remote=git-master.openldap.org:~git/git/openldap.git OPENLDAP_REL_ENG_2_4 o

RE: 2.4.28 cn=config replication trouble

2012-02-02 Thread Aaron Bennett
Ok... so I thought I was losing my mind. I had seen it fail before, and then shortly after posting this message, found it was working. However, running with olcLogLevel = sync, I see this in the ldap log: Feb 2 15:32:55 zoot slapd[10509]: slapd starting Feb 2 15:32:55 zoot slapd[10509]: slap_

RE: 2.4.28 cn=config replication trouble

2012-02-02 Thread Aaron Bennett
I'm sorry for wasting your time - this is working after all. From: openldap-technical-boun...@openldap.org [mailto:openldap-technical-boun...@openldap.org] On Behalf Of Aaron Bennett Sent: Thursday, February 02, 2012 2:20 PM To: openldap-technical@openldap.org Subject: 2.4.28 cn=config replicat

Re: 2.4.28 cn=config replication trouble

2012-02-02 Thread Howard Chu
Aaron Bennett wrote: Hello, I’ve got two 2.4.28 boxes and I’m trying to get two-way multimaster replication set up – first for cn=config, and then for the entire tree. I can attach more of config.ldif if needed, but here are what I think are the relevant snippets: First thing that leaps out is

2.4.28 cn=config replication trouble

2012-02-02 Thread Aaron Bennett
Hello, I've got two 2.4.28 boxes and I'm trying to get two-way multimaster replication set up - first for cn=config, and then for the entire tree. I can attach more of config.ldif if needed, but here are what I think are the relevant snippets: First thing that leaps out is, of course, the cert

Re: DEL don't get synced

2012-02-02 Thread Quanah Gibson-Mount
--On Thursday, February 02, 2012 10:46 AM +0100 Emmanuel Lecharny wrote: emmanuel-lecharnys-MacBook-Pro:openldap-git elecharny$ git archive --format=tar --remote=git-master.openldap.org:~git/git/openldap.git OPENLDAP_REL_ENG_2_4 openldap-2.4.26.tar Permission denied (publickey). fatal: The rem

BayLISA OpenLDAP talk

2012-02-02 Thread Howard Chu
For any folks in the San Francisco area who haven't already heard, I'll be giving a talk on OpenLDAP's new memory-mapped database and backend (back-mdb) there on February 16. http://www.baylisa.org/ -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun

Re: Got error while enabling SASL

2012-02-02 Thread Gaurav Gugnani
Hello, Thks for helping me out. Yes, the package is missing. The O/P of plugin viewer: /u01/app/openldap/product/2.4.26/etc/openldap>pluginviewer Installed SASL (server side) mechanisms are: ANONYMOUS PLAIN LOGIN EXTERNAL And clearly it is not displaying any MD5 SASL mechanism. Now, i'll try to

Re: Directory Manager (cn=config) ACLs

2012-02-02 Thread Buchan Milne
On Wednesday, 1 February 2012 21:52:56 Andy Carlson wrote: > Are there any ACLs that control what cn=directory manager,cn=config can > modify or is it a LDAP superuser sort-of account? I only ask because I > want to blow away my ACLs (olcAccess attributes in olcDatabase={2}bdb) and > re-add update

Re: Got error while enabling SASL

2012-02-02 Thread Dan White
On 02/02/12 16:24 +0530, Gaurav Gugnani wrote: Hello, I too suppose that my package is missing for cyrus-sasl DIGEST MD5. I'm working on linux 86_64 machine and want to implement DIGEST MD5 mechanism. Following packages are installed: /u01/app/openldap/product/2.4.26/etc/openldap>rpm -qa | gre

Re: openldap 2.4.28 and "allow bind_v2"

2012-02-02 Thread Francis Swasey
On 2/1/12 12:56 PM, Francis Swasey wrote: > On 2/1/12 11:49 AM, Hallvard B Furuseth wrote: >> On Wed, 01 Feb 2012 10:36:36 -0500, Francis Swasey >> wrote: >>> slapd[4434]: conn=115331 op=0 do_extended: protocol version (2) too low >>> (...) >>> Where should I start looking? >> At ITS#7107, whic

Re: Got error while enabling SASL

2012-02-02 Thread Gaurav Gugnani
Hello, I too suppose that my package is missing for cyrus-sasl DIGEST MD5. I'm working on linux 86_64 machine and want to implement DIGEST MD5 mechanism. Following packages are installed: /u01/app/openldap/product/2.4.26/etc/openldap>rpm -qa | grep cyrus-sasl cyrus-sasl-devel-2.1.22-5.el5_4.3 cy

Re: Got error while enabling SASL

2012-02-02 Thread Raffael Sahli
On 02/02/2012 10:40 AM, Gaurav Gugnani wrote: Hello All, After some more research into it and reading some more links: http://www.linuxtopia.org/online_books/network_administration_guides/ldap_administration/sasl_SASL_Authentication.html http://tldp.org/HOWTO/LDAP-HOWTO/sasl.html I did some mor

Re: DEL don't get synced

2012-02-02 Thread Emmanuel Lecharny
On 2/1/12 7:16 PM, Quanah Gibson-Mount wrote: --On Wednesday, February 01, 2012 1:40 PM +0100 Michael Ströder wrote: Nick Milas wrote: On 1/2/2012 12:19 μμ, Emmanuel Lecharny wrote: Any direction on how to test the build and to check out the branch in order to run the tests ? Can someone

Re: Got error while enabling SASL

2012-02-02 Thread Gaurav Gugnani
Hello All, After some more research into it and reading some more links: http://www.linuxtopia.org/online_books/network_administration_guides/ldap_administration/sasl_SASL_Authentication.html http://tldp.org/HOWTO/LDAP-HOWTO/sasl.html I did some more steps like- *Step-1:* In the file slapd.conf i