RE: Help tweaking settings so slapd is not writing to disk so much

Are you using memory mapped files for BdB ? You should move to shared mem. ++Cyrille -Original Message- From: openldap-technical-boun...@openldap.org [mailto:openldap-technical-boun...@openldap.org] On Behalf Of Marc Roos Sent: Monday, March 05, 2012 11:51 PM To: openldap-technical@open

Help tweaking settings so slapd is not writing to disk so much

Hi I am running on a vm dovecot and sendmail with authentication through pam agains ldap. I have got strange spikes in the load and I think slapd is writing to much to disk. I want to reduce disk io. Anybody an idea why slapd is so often writing to disk instead of reading? The slapd process kee

Re: in ACL defined by set?

> masar...@aero.polimi.it wrote: >>> Is it possible to specify the clause in an ACL with a set? >> >> No. >> >>> We have several applications and for each application there's a >>> specific >>> AUXILIARY object class for application-specific user attributes. >>> >>> So for each application I add A

Re: production best-practices for cn=monitor

Aaron Bennett wrote: I’m curious what people think about best practices for cn=monitor in production environments. Do people generally keep it enabled? Is there a drawback to keeping it enabled? Are there any specific security or performance concerns? I have always enabled it equipped with appr

Re: in ACL defined by set?

masar...@aero.polimi.it wrote: Is it possible to specify the clause in an ACL with a set? No. We have several applications and for each application there's a specific AUXILIARY object class for application-specific user attributes. So for each application I add ACLs like this: access to

Re: in ACL defined by set?

> HI! > > Is it possible to specify the clause in an ACL with a set? No. > We have several applications and for each application there's a specific > AUXILIARY object class for application-specific user attributes. > > So for each application I add ACLs like this: > > access to >dn.onelevel=

production best-practices for cn=monitor

Hi, I'm curious what people think about best practices for cn=monitor in production environments. Do people generally keep it enabled? Is there a drawback to keeping it enabled? Are there any specific security or performance concerns? Best, Aaron Bennett

in ACL defined by set?

HI! Is it possible to specify the clause in an ACL with a set? We have several applications and for each application there's a specific AUXILIARY object class for application-specific user attributes. So for each application I add ACLs like this: access to dn.onelevel="ou=Users,dc=example

Re: syncrepl simple bind

> ldap1-client <->   slapd2:       Communication OK > slapd1       <->   ldap2-client: Communication OK > slapd1       <-/-> slapd2:       Communication failure > > Using 'ldapsearch' command, I am able to bind and search on the > slapd2 server from the server (slapd1) that is issuing the above >

Re: LDAP_OPT_X_TLS_xxx option in SSL/TLS connection

Am Donnerstag 01 März 2012, 11:49:22 schrieb Michael Ströder: > Qiang Xu wrote: > > Guess what? Just picked up a pearl in the sea of internet: > > http://www.mailinglistarchive.com/postfix-us...@postfix.org/msg5768 > > 8.html > > > > Basically, it seems to be a feature introduced since the beginni

Re: Connection timeouts

Nick Milas wrote: A web app is a single client to ldap server, no matter how many http clients there are to the web app. It depends. Any app can use connection pooling opening numerous LDAP connections and e.g. WebSSO applications definitely do so. Ciao, Michael. smime.p7s Description: S/

Re: Connection timeouts

2012/3/5 Michael Ströder : > Marcin S wrote: >> >> I have a question, lets say i have web application with ldap >> authentication. User that log in to page opens new LDAP connection, >> our LDAP also holds some security attributes per application and they >> are verified for certain app operations,

Re: Connection timeouts

On 5/3/2012 2:09 μμ, Marcin S wrote: I have a question, lets say i have web application with ldap authentication. User that log in to page opens new LDAP connection, our LDAP also holds some security attributes per application and they are verified for certain app operations, so connections rema

A question about the sssvlv overlay

Hi all, When using the sssvlv overlay I see the following behaviour: (a) Updating an attribute value while an sssvlv request is active:     1. do a request containing a vlv control and a sort control, which returns a subset of a total result set defined by the search parameters, and the context

Re: Connection timeouts

Marcin S wrote: I have a question, lets say i have web application with ldap authentication. User that log in to page opens new LDAP connection, our LDAP also holds some security attributes per application and they are verified for certain app operations, so connections remains open for a whole t

Connection timeouts

Hello, I have a question, lets say i have web application with ldap authentication. User that log in to page opens new LDAP connection, our LDAP also holds some security attributes per application and they are verified for certain app operations, so connections remains open for a whole time. Questi