Re: olcPPolicyForwardUpdates not working

2023-05-03 Thread Quanah Gibson-Mount
--On Friday, April 28, 2023 10:57 AM +0200 Benjamin Renard wrote: Le 27/04/2023 à 19:53, Stefan Kania a écrit : Your log is telling that you have three server 000, 001 and 003 csn=20190213173033.952331Z#00#000#00;20230427155638.609257Z# 00#001#00;20190916120217.913828Z#000

Re: olcPPolicyForwardUpdates not working

2023-04-28 Thread Benjamin Renard
Le 27/04/2023 à 19:53, Stefan Kania a écrit : Your log is telling that you have three server 000, 001 and 003 csn=20190213173033.952331Z#00#000#00;20230427155638.609257Z#00#001#00;20190916120217.913828Z#00#003#00 And as you can see the csn from 000 and 003 is from 2019 an

Re: olcPPolicyForwardUpdates not working

2023-04-27 Thread Stefan Kania
Your log is telling that you have three server 000, 001 and 003 csn=20190213173033.952331Z#00#000#00;20230427155638.609257Z#00#001#00;20190916120217.913828Z#00#003#00 And as you can see the csn from 000 and 003 is from 2019 and from 001 it's 2023 loos a little bit stange

Re: olcPPolicyForwardUpdates not working

2023-04-27 Thread Benjamin Renard
Le 27/04/2023 à 19:28, Stefan Kania a écrit : Why do you have two csn from 2019 and one from 2023? Hum... I not sure to understand your question :( My two hosts was on the same slapd version (2.5.13+dfsg-2~bpo11+1) from Debian Bullseye Backports repository. -- Benjamin Renard

Re: olcPPolicyForwardUpdates not working

2023-04-27 Thread Benjamin Renard
Le 27/04/2023 à 19:17, Quanah Gibson-Mount a écrit : --On Thursday, April 27, 2023 8:12 PM +0200 Benjamin Renard wrote: Apr 27 18:45:35 gavotte slapd[1086351]: conn=1224 op=1 syncprov_op_search: registered persistent search Apr 27 18:45:35 gavotte slapd[1086662]: Stopping OpenLDAP: slapd.

Re: olcPPolicyForwardUpdates not working

2023-04-27 Thread Stefan Kania
Why do you have two csn from 2019 and one from 2023? Am 27.04.23 um 19:12 schrieb Benjamin Renard: Hello, Le 25/04/2023 à 18:48, Quanah Gibson-Mount a écrit : --On Tuesday, April 25, 2023 7:40 PM +0200 Benjamin Renard wrote: OK, thanks for your advice. I will try to update it on the prepr

Re: olcPPolicyForwardUpdates not working

2023-04-27 Thread Quanah Gibson-Mount
--On Thursday, April 27, 2023 8:12 PM +0200 Benjamin Renard wrote: Apr 27 18:45:35 gavotte slapd[1086351]: conn=1224 op=1 syncprov_op_search: registered persistent search Apr 27 18:45:35 gavotte slapd[1086662]: Stopping OpenLDAP: slapd. This shows two completely different PIDs for slapd?

Re: olcPPolicyForwardUpdates not working

2023-04-27 Thread Benjamin Renard
Hello, Le 25/04/2023 à 18:48, Quanah Gibson-Mount a écrit : --On Tuesday, April 25, 2023 7:40 PM +0200 Benjamin Renard wrote: OK, thanks for your advice. I will try to update it on the preprod to be sure I will be able to manage any upgrade issue. You may find this helpful as well:

Re: olcPPolicyForwardUpdates not working

2023-04-25 Thread Quanah Gibson-Mount
--On Tuesday, April 25, 2023 7:40 PM +0200 Benjamin Renard wrote: Le 25/04/2023 à 18:15, Quanah Gibson-Mount a écrit : --On Tuesday, April 25, 2023 6:40 PM +0200 Benjamin Renard wrote: The Debian security team always maintain the 2.4 version, even if there have not been many securi

Re: olcPPolicyForwardUpdates not working

2023-04-25 Thread Benjamin Renard
Le 25/04/2023 à 18:15, Quanah Gibson-Mount a écrit : --On Tuesday, April 25, 2023 6:40 PM +0200 Benjamin Renard wrote: The Debian security team always maintain the 2.4 version, even if there have not been many security updates since the switch to 2.4 : https://metadata.ftp-master.debia

Re: olcPPolicyForwardUpdates not working

2023-04-25 Thread Quanah Gibson-Mount
--On Tuesday, April 25, 2023 6:40 PM +0200 Benjamin Renard wrote: The Debian security team always maintain the 2.4 version, even if there have not been many security updates since the switch to 2.4 : https://metadata.ftp-master.debian.org/changelogs//main/o/openldap/openld ap_2.4.57+dfsg-

Re: olcPPolicyForwardUpdates not working

2023-04-25 Thread Benjamin Renard
Le 25/04/2023 à 17:04, Quanah Gibson-Mount a écrit : --On Tuesday, April 25, 2023 4:00 PM +0200 Benjamin Renard wrote: Hello, You'r right, 2.5 is available in backports, but I still preferred to used stable version for fast delivery of security update. The next release of Debian is coming

Re: olcPPolicyForwardUpdates not working

2023-04-25 Thread Quanah Gibson-Mount
--On Tuesday, April 25, 2023 4:00 PM +0200 Benjamin Renard wrote: Hello, You'r right, 2.5 is available in backports, but I still preferred to used stable version for fast delivery of security update. The next release of Debian is coming soon, I will update my installations at this time.

Re: olcPPolicyForwardUpdates not working

2023-04-25 Thread Benjamin Renard
Hello, You'r right, 2.5 is available in backports, but I still preferred to used stable version for fast delivery of security update. The next release of Debian is coming soon, I will update my installations at this time. I reconfigure chaining on frontend instead on the database, but I stil

Re: olcPPolicyForwardUpdates not working

2023-04-24 Thread Quanah Gibson-Mount
--On Saturday, April 22, 2023 6:07 PM +0200 Benjamin Renard wrote: you failed to provide any OpenLDAP version information. You'r right, I'm using slapd 2.4.57+dfsg-3+deb11u1 (on Debian stable). Hi, As a side note, OpenLDAP 2.4 series is historic and no longer supported. I believe

Re: olcPPolicyForwardUpdates not working

2023-04-22 Thread Benjamin Renard
Le 21/04/2023 à 18:00, Quanah Gibson-Mount a écrit : --On Friday, April 21, 2023 2:36 PM +0200 Benjamin Renard wrote: Hello, I have problem with the olcPPolicyForwardUpdates option that seem not Do you have any idea of what I doing wrong ? Hello, you failed to provide any OpenLDAP v

Re: olcPPolicyForwardUpdates not working

2023-04-21 Thread Quanah Gibson-Mount
--On Friday, April 21, 2023 2:36 PM +0200 Benjamin Renard wrote: Hello, I have problem with the olcPPolicyForwardUpdates option that seem not Do you have any idea of what I doing wrong ? Hello, you failed to provide any OpenLDAP version information. --Quanah

olcPPolicyForwardUpdates not working

2023-04-21 Thread Benjamin Renard
Hello, I have problem with the olcPPolicyForwardUpdates option that seem not working : On master and slave, I configured Ppolicy with pwdLockout. When I try to connect on master with a bad password, the pwdFailureTime attribute of the entry is successfully updated, but not if I do the same on