Re: MDB_BAD_RSLOT while executing slapacl

2013-12-11 Thread Igor Zinovik
2013/12/12 Howard Chu > Igor Zinovik wrote: > >> Hello. >> >> Today I run slapacl to test access rights and saw this: >> ldap3# sudo slapacl -F /etc/openldap/slapd.d/ ... >> ... >> 52a8ae51 mdb_opinfo_get: err MDB_BAD_RSLOT: Invalid reuse of reader >> locktable slot(-30783) >> read access to

Re: MDB_BAD_RSLOT while executing slapacl

2013-12-11 Thread Howard Chu
Igor Zinovik wrote: Hello. Today I run slapacl to test access rights and saw this: ldap3# sudo slapacl -F /etc/openldap/slapd.d/ ... ... 52a8ae51 mdb_opinfo_get: err MDB_BAD_RSLOT: Invalid reuse of reader locktable slot(-30783) read access to o: ALLOWED Sounds like ITS#7662. At http://sy

Re: OPENLDAP BUILD/CONFIGURE

2013-12-11 Thread Dieter Klünter
Am Wed, 11 Dec 2013 14:22:55 -0500 schrieb "Borresen, John - 0442 - MITLL" : > Playing around after discussing with one of our programmers, we > discovered that someone had installed numerous Berkeley DB flavors > both from source and rpm (installed in /usr/lib64 and /lib64)??!! > > Modifying my

Re: 2 way SSL configuration in OpenLDAP 2.4

2013-12-11 Thread Philip Guenther
On Wed, 11 Dec 2013, vidya bharadwaj wrote: > have to implement a 2 way SSL mechanism on a LDAP connector in our > product. In order to test the implementation, we have chosen openLDAP2.4 > as the data source. You should *first* get SSL working without client certs. Once you have that working,

RE: OPENLDAP BUILD/CONFIGURE

2013-12-11 Thread Borresen, John - 0442 - MITLL
I may be speaking prematurely, but got it going now. For some reason, even though I built berkeleydb with 64 bit libraries, it created /usr/local/berkeleydb/lib directory (no lib64 directory). When reviewing the config.log for openldap-2.4.38, it showed the following: LDFLAGS="-L/usr/local/be

RE: OPENLDAP BUILD/CONFIGURE

2013-12-11 Thread Borresen, John - 0442 - MITLL
Playing around after discussing with one of our programmers, we discovered that someone had installed numerous Berkeley DB flavors both from source and rpm (installed in /usr/lib64 and /lib64)??!! Modifying my LD_LIBRARY_PATH to look in the /usr/local/berkeleydb/lib folder first, I got further.

RE: OPENLDAP BUILD/CONFIGURE

2013-12-11 Thread Aaron Richton
On Wed, 11 Dec 2013, Borresen, John - 0442 - MITLL wrote: I agree. But checked it is in my PATH. Is it compiling outside of your rpmbuild attempt? Let's get that working first. Once that does work, sounds like it's an issue with the rpm build environment, might be better off asking a rpm-

MDB_BAD_RSLOT while executing slapacl

2013-12-11 Thread Igor Zinovik
Hello. Today I run slapacl to test access rights and saw this: ldap3# sudo slapacl -F /etc/openldap/slapd.d/ ... ... 52a8ae51 mdb_opinfo_get: err MDB_BAD_RSLOT: Invalid reuse of reader locktable slot(-30783) read access to o: ALLOWED At http://symas.com/mdb/doc/group__errors.html#ga1b6cbb

RE: OPENLDAP BUILD/CONFIGURE

2013-12-11 Thread Borresen, John - 0442 - MITLL
I agree. But checked it is in my PATH. -Original Message- From: openldap-technical-boun...@openldap.org [mailto:openldap-technical-boun...@openldap.org] On Behalf Of Quanah Gibson-Mount Sent: Wednesday, December 11, 2013 1:23 PM To: Borresen, John - 0442 - MITLL; openldap-technical@open

Re: OPENLDAP BUILD/CONFIGURE

2013-12-11 Thread Quanah Gibson-Mount
--On Wednesday, December 11, 2013 12:57 PM -0500 "Borresen, John - 0442 - MITLL" wrote: Attempting to upgrade to OpenLDAP 2.4.38 Receiving the following output : ./configure: line 5788: gcc: command not found Seems like it can't find gcc. --Quanah -- Quanah Gibson-Mount Architect

OPENLDAP BUILD/CONFIGURE

2013-12-11 Thread Borresen, John - 0442 - MITLL
Attempting to upgrade to OpenLDAP 2.4.38 Receiving the following output : Configuring OpenLDAP 2.4.38-Release ... checking build system type... x86_64-unknown-linux-gnu checking host system type... x86_64-unknown-linux-gnu checking target system type... x86_64-unknown-linux-gnu checking for a BSD

Re: Recovering from a Single-Node downtime in a Multi-Master Setup

2013-12-11 Thread Quanah Gibson-Mount
--On Wednesday, December 11, 2013 10:27 AM -0500 Christopher Wood wrote: (inline) On Wed, Dec 11, 2013 at 02:04:40PM +0100, Marco Nett wrote: 2013/12/10 Quanah Gibson-Mount <[1]qua...@zimbra.com> --On Tuesday, December 10, 2013 11:08 AM -0600 [2]espe...@oreillyauto.com wrote:

Re: Recovering from a Single-Node downtime in a Multi-Master Setup

2013-12-11 Thread Christopher Wood
(inline) On Wed, Dec 11, 2013 at 02:04:40PM +0100, Marco Nett wrote: >2013/12/10 Quanah Gibson-Mount <[1]qua...@zimbra.com> > > --On Tuesday, December 10, 2013 11:08 AM -0600 > [2]espe...@oreillyauto.com wrote: > >Do the slapcat on ldap2 and then delete the db files on ldap

Custom attribute values created prior to an index are not getting indexed by slapindex

2013-12-11 Thread Jon C Kidder
I am running 2.4.36 with mdb and have discovered an interesting behavior that may be a bug but wanted some input before I opened an ITS. I can upgrade to .38 and verify the behavior if needed. I have a third party application that defines the following custom attribute: olcAttributeTypes: ( 1.

Re: Upgrading from Ubuntu-packaged 2.4.28 to self-built 2.4.38

2013-12-11 Thread Philip Colmer
This is what I've done so far on a test server that is a copy of our production server: 1. slapcat -bcn=config -l config.ldif 2. slapcat -l backup.ldif 3. Uninstalled Ubuntu installation of OpenLDAP 4. Built and installed new version of OpenLDAP using default locations I'm now a bit stuck at gett

2 way SSL configuration in OpenLDAP 2.4

2013-12-11 Thread vidya bharadwaj
Hi,   We have to implement a 2 way SSL mechanism on a LDAP connector in our product. In order to test the implementation, we have chosen openLDAP2.4 as the data source.   Currently we have done the following steps: On the OpenLDAP end: 1. Installed OpenLDAP with TLS feature 2.Created a CA using Ope

Re: Recovering from a Single-Node downtime in a Multi-Master Setup

2013-12-11 Thread Marco Nett
2013/12/10 Quanah Gibson-Mount > --On Tuesday, December 10, 2013 11:08 AM -0600 espeake@oreillyauto.comwrote: > > Do the slapcat on ldap2 and then delete the db files on ldap1 and then run >> the slapadd. you will not get duplicates because all of the CSN's will be >> the same. This is what I

Fwd: Linux kernel performance regressions

2013-12-11 Thread Howard Chu
Original Message Subject: Linux kernel performance regressions Date: Wed, 11 Dec 2013 04:33:06 -0800 From: Howard Chu To: openldap-de...@openldap.org We upgraded from kernel 3.5 to 3.12.3 to update some of our benchmark numbers and hit some major performance regressions, mai