[389-users] using ipa_pwd_extop (freeIPA plugin) to update kerberos

Hello, We want regular 389-ds password changes to also update our MIT kerberos realm principals. It's my understanding that FreeIPA does this already via their ipa_pwd_extop 389-ds plugin. Does anybody have any comment on the feasibility of implementing this plugin in a vanilla 389-ds install

[389-users] Re: elapsed time gremlin

Thanks, that helps. :) Anthony From: Noriko Hosoi [mailto:nho...@redhat.com] Sent: Friday, February 17, 2017 10:43 AM To: 389-users@lists.fedoraproject.org Subject: [389-users] Re: elapsed time gremlin On 02/17/2017 07:42 AM, Winstanley, Anthony wrote: It was set to the default (4000). I set

[389-users] Re: elapsed time gremlin

-idlistscanlimit If it is less than 6000, could you increase it to some large number, e.g., 70, and retry the searches? Thanks, --noriko On 02/16/2017 04:54 PM, Winstanley, Anthony wrote: Hi, I'm hoping somebody can tell me where I might look to find why this is happening… We're running 389-Directory

[389-users] elapsed time gremlin

Hi, I'm hoping somebody can tell me where I might look to find why this is happening... We're running 389-Directory/1.2.11.15 B2014.300.2010 I have two ldapsearch queries that only vary in searchbase, one which is taking too long. (Times don't vary much with consecutive executions.) ou=PEOPLE

[389-users] support for rfc2307bis

After reading Trevor's thread on schema, there's a core issue here: How does one go about choosing between RFC2307 and RFC2307bis? (They are incompatible: You can't have both.) Is it RedHat's position to mandate the use of RFC2307 and remove RFC2307bis as a supported option? (In other words,

[389-users] Re: Limitations with large numbers of ACIs?

raproject.org>; Winstanley, Anthony Subject: Re: [389-users] Re: Limitations with large numbers of ACIs? On 7/28/20 12:30 PM, Winstanley, Anthony wrote: > We're running with 458 ACIs right now (verified the same number on all > nodes), running on RHEL 7 with: > 389-admin-1.1.46-1.el7.x86_64 &

[389-users] Limitations with large numbers of ACIs?

Hello, We've got a large 389ds installation and have run into issues with ACIs not always behaving as expected. Where an ACI working on one node is not doing anything at all on a replicated node. Sometimes reducing the number of ACIs fixes the issue. Sometimes restarting a node fixes it. I