Bug#390954: [Pkg-openldap-devel] Bug#390954: slapd is compiled withou SLAPI support
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Torsten Landschoff wrote: On Sun, Oct 22, 2006 at 04:46:20PM -0700, Quanah Gibson-Mount wrote: On Thu, Oct 12, 2006 at 03:33:24PM -0700, Quanah Gibson-Mount wrote: Compiling OpenLDAP with SLAPI support means that ACL caching is disabled. However, I'll note that ACL caching is broken in 2.3 for some types of ACLs, and compiling with SLAPI support is the only way to make those ACL's work correctly. So even though I do not use SLAPI plugins, I compile with SLAPI enabled so that my ACL's work right. Wouldn't that come with a big performance impact? Always possible, I didn't really notice one. ;) And my ACL file is several hundred lines. On the other hand, I use SASL/GSSAPI binds, which slows down things enough that the missing caching may have no effect. So I think we should enable SLAPI. Matthias, any objections? Greetings Torsten No objections. Go ahead. Regards, Matthijs Mohlmann -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFQ6rX2n1ROIkXqbARAo7oAJ0ViZSKp8nbZyRNwTXtQ6OHZ24zFACcC2oG Jir3hl9iPsdz2fro+m/UdDc= =0enh -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#390954: [Pkg-openldap-devel] Bug#390954: slapd is compiled withou SLAPI support
On Thu, Oct 12, 2006 at 03:33:24PM -0700, Quanah Gibson-Mount wrote: Compiling OpenLDAP with SLAPI support means that ACL caching is disabled. However, I'll note that ACL caching is broken in 2.3 for some types of ACLs, and compiling with SLAPI support is the only way to make those ACL's work correctly. So even though I do not use SLAPI plugins, I compile with SLAPI enabled so that my ACL's work right. Wouldn't that come with a big performance impact? Greetings Torsten signature.asc Description: Digital signature
Bug#390954: [Pkg-openldap-devel] Bug#390954: slapd is compiled withou SLAPI support
--On Sunday, October 22, 2006 12:43 PM +0200 Torsten Landschoff [EMAIL PROTECTED] wrote: On Thu, Oct 12, 2006 at 03:33:24PM -0700, Quanah Gibson-Mount wrote: Compiling OpenLDAP with SLAPI support means that ACL caching is disabled. However, I'll note that ACL caching is broken in 2.3 for some types of ACLs, and compiling with SLAPI support is the only way to make those ACL's work correctly. So even though I do not use SLAPI plugins, I compile with SLAPI enabled so that my ACL's work right. Wouldn't that come with a big performance impact? Always possible, I didn't really notice one. ;) And my ACL file is several hundred lines. On the other hand, I use SASL/GSSAPI binds, which slows down things enough that the missing caching may have no effect. --Quanah -- Quanah Gibson-Mount Principal Software Developer ITS/Shared Application Services Stanford University GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#390954: [Pkg-openldap-devel] Bug#390954: slapd is compiled withou SLAPI support
Hi Neil, On Wed, Oct 04, 2006 at 10:12:47AM +1000, Neil Brown wrote: Compiling slapd with SLAPI support would make it a lot easier to develop, test, and use SLAPI plugins :-) That's for sure :) Do you know if it could impact stability of the packages? I do not really want to risk anything as the packages should get ready for the release soon... Greetings Torsten signature.asc Description: Digital signature
Bug#390954: [Pkg-openldap-devel] Bug#390954: slapd is compiled withou SLAPI support
On Thursday October 12, [EMAIL PROTECTED] wrote: That's for sure :) Do you know if it could impact stability of the packages? I do not really want to risk anything as the packages should get ready for the release soon... I haven't done a thorough review of the code, but from what I have seen and what I understand of how it works there should be zero impact on stability. It just makes some extra functionality available via the keywords plugin and pluginlog in slapd.conf. If you don't compile in SLAPI support, those keywords are quietly ignored. If you do, then those keywords give access to the extra functionality. Certainly *using* this functionality _could_ upset stability. But just having it compiled in shouldn't. Thanks, NeilBrown -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#390954: [Pkg-openldap-devel] Bug#390954: slapd is compiled withou SLAPI support
--On Thursday, October 12, 2006 11:36 PM +0200 Torsten Landschoff [EMAIL PROTECTED] wrote: Hi Neil, On Wed, Oct 04, 2006 at 10:12:47AM +1000, Neil Brown wrote: Compiling slapd with SLAPI support would make it a lot easier to develop, test, and use SLAPI plugins :-) That's for sure :) Do you know if it could impact stability of the packages? I do not really want to risk anything as the packages should get ready for the release soon... Compiling OpenLDAP with SLAPI support means that ACL caching is disabled. However, I'll note that ACL caching is broken in 2.3 for some types of ACLs, and compiling with SLAPI support is the only way to make those ACL's work correctly. So even though I do not use SLAPI plugins, I compile with SLAPI enabled so that my ACL's work right. Other than that, compiling with SLAPI support doesn't have an effect either way how OpenLDAP behaves. --Quanah -- Quanah Gibson-Mount Principal Software Developer ITS/Shared Application Services Stanford University GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
