refint_repair: dependent modify failed: 16

2010-01-07 Thread Hung Luu
Hello, I haven't had any luck getting referential integrity to work with OpenLDAP 2.4.19 (and BerkeleyDB 4.8). Neither delete nor modify operations on DN's are triggering referenced member attributes to be removed as expected. I've tried building the overlays statically into the slapd executable a

Directory layout help

2010-01-09 Thread Hung Luu
Hello, Suppose I have the following DN's: inetOrgPerson: [uid=alice,dc=example,dc=com] organizationalRole: [cn=manager,ou=groups,dc=example,dc=com] [cn=supervisor,ou=groups,dc=example,dc=com] locality: [l=phoenix,ou=division,dc=example,dc=com] [l=portland,ou=division,dc=example,dc=com] How can

Re: Directory layout help

2010-01-09 Thread Hung Luu
2010/1/9 Michael Ströder > Hung Luu wrote: > > Suppose I have the following DN's: > > > > inetOrgPerson: > > [uid=alice,dc=example,dc=com] > > > > organizationalRole: > > [cn=manager,ou=groups,dc=example,dc=com] > > [cn=supervisor,ou=group

Standard objectClass for representing web services

2010-01-11 Thread Hung Luu
Does anyone know of a standard objectClass that is appropriate for representing web services in the directory? I want to represent web services like users in the directory, and assign their DN's to groups for authorization, so I suppose I'm looking for an inetOrgPerson equivalent for web services.

Re: Directory layout help

2010-01-11 Thread Hung Luu
2010/1/9 Michael Ströder > Hung Luu wrote: > > > > 2010/1/9 Michael Ströder > <mailto:mich...@stroeder.com>> > > > > Hung Luu wrote: > > > Suppose I have the following DN's: > > > > > > inetOrgPerson: > &g

Re: Standard objectClass for representing web services

2010-01-12 Thread Hung Luu
2010/1/12 Michael Ströder > Hung Luu wrote: > > Does anyone know of a standard objectClass that is appropriate for > > representing web services in the directory? > > Personally I prefer to use 'applicationProcess' as a base class for system > processes. You mi

olcSyncrepl invalid URL - OpenLDAP 2.4.21

2010-01-15 Thread Hung Luu
Hello everyone, Has anyone experienced the " invalid URL" error from starting up a consumer slapd? I've tried configuring the provider setting for the syncrepl directive as a domain name and IP address but neither works. Thanks in advance for your help. Here's the error from slapd: *olcSyncrepl

Re: olcSyncrepl invalid URL - OpenLDAP 2.4.21

2010-01-16 Thread Hung Luu
On Fri, Jan 15, 2010 at 4:53 PM, Hung Luu wrote: > Hello everyone, > > Has anyone experienced the " invalid URL" error from starting > up a consumer slapd? I've tried configuring the provider setting for the > syncrepl directive as a domain name and IP address bu

Re: olcSyncrepl invalid URL - OpenLDAP 2.4.21

2010-01-27 Thread Hung Luu
) does not. Is there a workaround for this that will allow me to use 2.4.21 or should I stick with 2.4.20? Thanks, Hung. On Sat, Jan 16, 2010 at 6:15 PM, Hung Luu wrote: > > > On Fri, Jan 15, 2010 at 4:53 PM, Hung Luu wrote: > >> Hello everyone, >> >> Has anyone e

Re: olcSyncrepl invalid URL - OpenLDAP 2.4.21

2010-01-27 Thread Hung Luu
Wed, Jan 27, 2010 at 2:49 PM, Hung Luu wrote: > OpenLDAP 2.4.20 does not have this problem. I compared the > olcDatabase={0}config.ldif and olcDatabase={1}hdb.ldif files between 2.4.20 > and 2.4.21 and noticed that the olcSyncrepl attribute value from 2.4.21 > contains a uri=&q

All of slapd's configuration options can be changed on the fly?

2010-01-28 Thread Hung Luu
Hello all, I am just experimenting with applying LDIF to the dynamic config backend and see what configuration directives I'm allowed to modify. I've tried deleting an olcModuleLoad attribute and replacing the olcModulePath attribute with a new value; both times resulted in an LDAP error code 80.

Error 53 applying syncrepl LDIF

2010-01-29 Thread Hung Luu
Hello all, In a syncrepl setup, I understand that the syncrepl specification is defined on the consumer server. I understand this to mean that I should apply my LDIF (that adds the olcSyncrepl attribute to my config and hdb backends) on the consumer server. However, ldapadd was only successful in

Re: Error 53 applying syncrepl LDIF

2010-01-29 Thread Hung Luu
On Fri, Jan 29, 2010 at 2:16 PM, Quanah Gibson-Mount wrote: > --On Friday, January 29, 2010 1:56 PM -0700 Hung Luu > wrote: > > Hello all, >> >> In a syncrepl setup, I understand that the syncrepl specification is >> defined on the consumer server. I underst

Re: Error 53 applying syncrepl LDIF

2010-01-29 Thread Hung Luu
On Fri, Jan 29, 2010 at 3:06 PM, Quanah Gibson-Mount wrote: > --On Friday, January 29, 2010 2:39 PM -0700 Hung Luu > wrote: > > Are you able to get it to work with ldapadd as well? I'm getting a >> segmentation fault using ldapmodify (installed as part of >> openlda