Merging databases with translucent

2016-01-08 Thread M. P.
Hi, We are on a process of merging datas from a remote database to a local database. The two databases have the same base dn. To ease this process, I thought for a way to make a union of the remote database and the local database until remote datas are merged to local database. From my readin

Re: pass-through authentication

2016-01-08 Thread Dan White
On 01/07/16 17:24 -0600, Timothy Keith wrote: ldapsearch -LLLQY EXTERNAL -H ldapi:/// -b cn=config "(|(cn=config)(olcDatabase={1}hdb))" ldap_sasl_interactive_bind_s: Authentication method not supported (7) additional info: SASL(-4): no mechanism available: I'm missing some context here.

Re: Out of ideas when troubleshooting TLS negotiation failure

2016-01-08 Thread Graham Allan
Replying to my own message here, but I continue to investigate my problem and can't explain what I see. I put together a small test program to connect to our ldap server using same parameters as smbd. Setting "ldap debug level = 1" in smb.conf, and the equivalent LDAP_DEBUG_TRACE in my test pro

Re: Merging databases with translucent

2016-01-08 Thread M. P.
meta backend is one thing I found too when I were looking for some solution and I thought I should also try. I had not yet the time to try it but every where I saw his usage it is to map ou=suffix1 and ou=suffix2 to "a third suffix". In my case I have my local db with a suffix of dc=base,dc=dn

Re: Out of ideas when troubleshooting TLS negotiation failure

2016-01-08 Thread Quanah Gibson-Mount
--On Friday, January 08, 2016 3:38 PM -0600 Graham Allan wrote: Replying to my own message here, but I continue to investigate my problem and can't explain what I see. I put together a small test program to connect to our ldap server using same parameters as smbd. Setting "ldap debug level = 1

Re: Out of ideas when troubleshooting TLS negotiation failure

2016-01-08 Thread Graham Allan
On 01/08/2016 03:45 PM, Quanah Gibson-Mount wrote: Error in error is a pretty interesting. What SSL libs is samba linked to? What SSL libs is your test program linked to? It did make me wonder! The failure right after "write client key exchange A" does seem to correlate with my wireshark cap

Re: Out of ideas when troubleshooting TLS negotiation failure

2016-01-08 Thread Philip Guenther
On Fri, 8 Jan 2016, Graham Allan wrote: > Replying to my own message here, but I continue to investigate my problem and > can't explain what I see. I put together a small test program to connect to > our ldap server using same parameters as smbd. Setting "ldap debug level = 1" > in smb.conf, and th

Re: Out of ideas when troubleshooting TLS negotiation failure

2016-01-08 Thread Graham Allan
On 01/08/2016 04:03 PM, Philip Guenther wrote: On Fri, 8 Jan 2016, Graham Allan wrote: Replying to my own message here, but I continue to investigate my problem and can't explain what I see. I put together a small test program to connect to our ldap server using same parameters as smbd. Setting

Re: Merging databases with translucent

2016-01-08 Thread jason cafarelli
I used suffix massage to combine customer LDAP with my local LDAP server; this allows us to have internal users. Documentation on doing this is very sparse. Client side; sssd points at dc=local. # BDB database definitions ### #

Re: what databases are to be replicated for a slave?

2016-01-08 Thread Quanah Gibson-Mount
--On Wednesday, December 30, 2015 11:01 PM +0400 Jephte Clain wrote: - a "new" one, with two masters in mirror mode (only one get the writes at anytime thanks to the loadbalancer), and two replicas (only data) which get all the reads. I feel like configuring chaining to be able to write from t