Re: Config files & env vars not read when geteuid() != getuid()

2021-04-15 Thread Howard Chu
Norm Green wrote: > Hello LDAP users and maintainers, > > libraries/libldap/init.c has this code which bypasses read all LDAP config > env vars when the exe loadlig libldap is running in setuid mode. > > This is causing problems for one of our customers who routinely run our > product Linux exe

Re: Problems setting up a proxy

2021-04-15 Thread Quanah Gibson-Mount
--On Thursday, April 15, 2021 8:58 PM +0200 Hans van Zijst wrote: On 15-04-2021 19:09, Quanah Gibson-Mount wrote: A few notes: A) the "backend meta" directive is not needed.  There's only one use case for a "backend" statement at this time that I'm aware of, for back-mdb, and only in

Config files & env vars not read when geteuid() != getuid()

2021-04-15 Thread Norm Green
Hello LDAP users and maintainers, libraries/libldap/init.c has this code which bypasses read all LDAP config env vars when the exe loadlig libldap is running in setuid mode. This is causing problems for one of our customers who routinely run our product Linux executables (which load our libld

Re: Timeout values in search_ext(), ldap_result() and global

2021-04-15 Thread varun mittal
Any inputs on this one ? The client timeout parameter works for individual search page or the entire time period of the search, if there are multiple pages ? On Fri, Apr 2, 2021 at 2:07 PM varun mittal wrote: > I am using openldap-2.4.39 on CentOS 7, to query my AD server, with > python-ldap w

Re: Problems setting up a proxy

2021-04-15 Thread Quanah Gibson-Mount
--On Thursday, April 15, 2021 6:39 PM +0200 Hans van Zijst wrote: dn: cn=module{0},cn=config changetype: modify add: olcModuleLoad olcModuleLoad: back_ldap.la 6075bced /root/proxybackend.conf: line 1: failed init (meta)! slaptest: bad configuration directory! A few notes

Re: default config file

2021-04-15 Thread Rallavagu Kon
I have started the slapd with the following command in both cases. As you may notice, have not provided explicit option of “-F’” or “-f”. Perhaps, a compile time configuration influencing the noticed behavior? /opt/openldap/lib/slapd -u service -h "ldap://0.0.0.0:10389 ldaps://0.0.0.0:10636" W

Problems setting up a proxy

2021-04-15 Thread Hans van Zijst
Hi, After more than a day of fiddling with it, I turn to you, the gurus ;) I'm trying to create an OpenLDAP proxy that will talk to 2 OpenLDAP servers, doing MirrorMode replication and using a floating IP so that I can point all write queries to one and the same server. Those 2 MirrorMode ser

Re: default config file

2021-04-15 Thread Quanah Gibson-Mount
--On Wednesday, April 14, 2021 9:46 PM -0700 Rallavagu Kon wrote: Hello All, Noticing a difference in behavior of locating config file at the time of startup between 2.4.48 and 2.4.58. 6077b37d could not stat config file "/etc/ldap/slapd.d/slapd.conf": No such file or directory (2) I

Re: Antw: [EXT] Re: mdb_substring_candidates: (cn) not indexed

2021-04-15 Thread Quanah Gibson-Mount
--On Thursday, April 15, 2021 9:37 AM +0200 Ulrich Windl wrote: In logs mdb_substring_candidates: (cn) not indexed So couldn't the message be: mdb_substring_candidates: index "cn sub" missing It literally already provides all the necessary information. I'd also note that there are mu

Antw: [EXT] Re: mdb_substring_candidates: (cn) not indexed

2021-04-15 Thread Ulrich Windl
>>> Quanah Gibson-Mount schrieb am 14.04.2021 um 17:10 in Nachricht : > > --On Wednesday, April 14, 2021 9:14 AM + Клеусов > Владимир Сергеевич wrote: > >> Hi, >> >> In logs mdb_substring_candidates: (cn) not indexed >> >> But >> >> slapcat -b cn=config | grep olcDbIndex >> >> olcDbIndex:

default config file

2021-04-15 Thread Rallavagu Kon
Hello All, Noticing a difference in behavior of locating config file at the time of startup between 2.4.48 and 2.4.58. The 2.4.48 is a ubuntu supplied package while 2.4.58 is compiled with following options. ./configure --prefix=/opt/openldap \ --sysconfdir=/etc/ldap \