ppolicy draft again (was: 2.4.40 ITS possibilities)

2014-07-18 Thread Michael Ströder
Howard Chu wrote: > Quanah Gibson-Mount wrote: >> 7838 - Add ORDERING matching rule to ppolicy (RFC issue?) > > re: 7838 - the draft needs a number of edits. I'm willing to commit this if > someone takes responsibility for publishing a new draft to IETF. Which draft/version are you exactly talkin

really ITS#4365?

2014-04-02 Thread Michael Ströder
HI! I'm trying to figure out what was recently fixed in RE24. But this comment in CHANGES does not really match the referenced ITS: libldap CR/LF handling (ITS#4365) Maybe I'm overlooking something? Ciao, Michael. smime.p7s Description: S/MIME Cryptographic Signature

Re: Performance improvements for set-based ACLs?

2014-02-10 Thread Michael Ströder
Quanah Gibson-Mount wrote: > --On Monday, February 03, 2014 10:30 PM +0100 Pierangelo Masarati > wrote: > >>> Or do you want to see some use-cases I've implemented? >> I mean apply realistic load to realistic set-based ACLs and profile the >> execution, to track possible bottlenecks, to avoid spe

Re: Performance improvements for set-based ACLs?

2014-02-03 Thread Michael Ströder
Pierangelo Masarati wrote: > On 02/03/2014 07:48 PM, Michael Ströder wrote: >> Yes, I know: >> Set-based ACLs are slow even if one properly sets index configuration. >> >> But I'd like to raise a discussion here whether it would be possible to >> improve >

Performance improvements for set-based ACLs?

2014-02-03 Thread Michael Ströder
Yes, I know: Set-based ACLs are slow even if one properly sets index configuration. But I'd like to raise a discussion here whether it would be possible to improve the performance within slapd. Any thoughts? Ciao, Michael.

Re: commit review for 2.4.39

2014-01-13 Thread Michael Ströder
Quanah Gibson-Mount wrote: > --On Friday, January 10, 2014 11:18 AM +0100 Michael Ströder > wrote: >> >> Hmm, ITS#7683 was meant to show which clients are connecting with Perfect >> Forward Secrecy. > > The change does not apply cleanly and results in a substa

Re: commit review for 2.4.39

2014-01-10 Thread Michael Ströder
Quanah Gibson-Mount wrote: > --On Thursday, January 09, 2014 9:40 PM +0100 Michael Ströder > wrote: > >> Michael Ströder wrote: >>> Quanah Gibson-Mount wrote: >>>> Pending commits I think look good for RE24: >>> >>> I'm in need to have

Re: commit review for 2.4.39

2014-01-09 Thread Michael Ströder
Michael Ströder wrote: > Quanah Gibson-Mount wrote: >> Pending commits I think look good for RE24: > > I'm in need to have ITS#7683 available. I've tested it with OpenSSL but not > with GnuTLS and MozNSS yet. But if it's not too intrusive I'd be happy t

Re: commit review for 2.4.39

2014-01-07 Thread Michael Ströder
Quanah Gibson-Mount wrote: > Pending commits I think look good for RE24: I'm in need to have ITS#7683 available. I've tested it with OpenSSL but not with GnuTLS and MozNSS yet. But if it's not too intrusive I'd be happy to see it released in in 2.4.39. Ciao, Michael. smime.p7s Description: S/M

Re: sets and ldap:// searches

2013-12-15 Thread Michael Ströder
Christian Kratzer wrote: > Hi Michael, > > On Sat, 14 Dec 2013, Michael Ströder wrote: > >> HI! >> >> I used this FAQ entry to use set-based ACLs for my current task: >> >> http://www.openldap.org/faq/data/cache/1133.html >> >> There's

sets and ldap:// searches

2013-12-14 Thread Michael Ströder
HI! I used this FAQ entry to use set-based ACLs for my current task: http://www.openldap.org/faq/data/cache/1133.html There's written: "We could make this more powerful (and more complex and costly to compute) by allowing base sets to be built from LDAP filters. This is something to consider, b

Re: RE24 Testing call #1 (OpenLDAP 2.4.38)

2013-11-14 Thread Michael Ströder
Quanah Gibson-Mount wrote: > --On Thursday, November 14, 2013 8:58 PM +0100 Michael Ströder > wrote: > >> Michael Ströder wrote: >>> Quanah Gibson-Mount wrote: >>>> Current RE24 is ready for testing for the 2.4.38 release. >>> >>> make test

Re: RE24 Testing call #1 (OpenLDAP 2.4.38)

2013-11-14 Thread Michael Ströder
Michael Ströder wrote: > Quanah Gibson-Mount wrote: >> Current RE24 is ready for testing for the 2.4.38 release. > > make test works fine on openSUSE 12.3 (x86_64). I see that RE24 is tagged as read to release. But please take a look at http://www.openldap.org/its/index.cgi?f

Re: RE24 Testing call #1 (OpenLDAP 2.4.38)

2013-11-12 Thread Michael Ströder
Quanah Gibson-Mount wrote: > Current RE24 is ready for testing for the 2.4.38 release. make test works fine on openSUSE 12.3 (x86_64). Ciao, Michael.

conflicting types for ‘slap_reparse_sync_cookie’

2013-11-02 Thread Michael Ströder
HI! Building current git master 0645878d5dc4c08b7fd8d5bf39a166d74650f15b fails (see below). Ciao, Michael. make[3]: Entering directory `/usr/src/michael/openldap-git/master/openldap/servers/slapd/overlays' make[3]: Nothing to be done for `static'. make[3]: Leaving directory `/usr/src/michael/ope

Fix for slapo-unique: filter in unique_uri not evaluated

2013-11-01 Thread Michael Ströder
HI! Is there a chance to get ITS#6825 (dup ITS#6917) ever fixed? Ciao, Michael. smime.p7s Description: S/MIME Cryptographic Signature

Re: RE24 Testing call #1 (OpenLDAP 2.4.37)

2013-10-23 Thread Michael Ströder
Michael Ströder wrote: > On Tue, 22 Oct 2013 13:26:44 -0700 Quanah Gibson-Mount > wrote >> Current RE24 is ready for testing for the 2.4.37 release. > > Seems to build and runs make test (hdb and mdb) just fine on openSUSE 12.3 > (x86_64). Also ok on RPi openSUSE Fa

Re: RE24 Testing call #1 (OpenLDAP 2.4.37)

2013-10-23 Thread Michael Ströder
On Tue, 22 Oct 2013 13:26:44 -0700 Quanah Gibson-Mount wrote > Current RE24 is ready for testing for the 2.4.37 release. Seems to build and runs make test (hdb and mdb) just fine on openSUSE 12.3 (x86_64). Ciao, Michael.

Re: Fwd: Re: (ITS#7713) Segmentation fault if the pagesize of the Operating system is not equal to 4096.

2013-10-01 Thread Michael Ströder
On Tue, 01 Oct 2013 01:34:20 -0700 Howard Chu wrote > Fixing this will either require adding a bunch of ugly code, or changing the > on-disk format again. Opinions? I'd vote for changing the on-disk format. Simpler code will be easier to maintain and that's good in the long run. Ciao, Michael.

Re: next release

2013-09-09 Thread Michael Ströder
Howard Chu wrote: > Michael Ströder wrote: >> 1. I re-new my feature request "Retrieve LDAP server cert" (ITS#7398). >> Another >> reason for this feature is e.g. client-side cert pinning or similar. > > Rereading the ITS, still the question - you just w

Re: next release

2013-09-09 Thread Michael Ströder
Michael Ströder wrote: > 2. I'd also like to see a LDAP option for retrieving the actually negotiated > tls version/cipher info via ldap_get_option(). I know of > LDAP_OPT_X_TLS_CIPHER_SUITE but a client may enable different features based > on cipher actually negotiated. Filed

Re: next release

2013-09-09 Thread Michael Ströder
Howard Chu wrote: > A lot of my recent commits are actually intended for OpenLDAP 2.5. A few of > the recent TLS-related changes added to the libldap API, so one way or another > they will require a library version bump. The question is whether these > changes should go into the next 2.4 release: >

Time fo another RE24 testing call (OpenLDAP 2.4.36)?

2013-07-04 Thread Michael Ströder
HI! What are plans to cut a 2.4.36 release? Given the fact that there are important changes in RE24 for back-mdb what's the plan to release them? Ciao, Michael. smime.p7s Description: S/MIME Cryptographic Signature

Re: ITS#7473 back-mdb search

2013-01-13 Thread Michael Ströder
Howard Chu wrote: > Emmanuel Lécharny wrote: >> Le 1/11/13 7:48 PM, Michael Ströder a écrit : >>> Howard Chu wrote: >>>> We could alter the dn2id index format, and maintain a numSubordinates >>>> counter >>>> there. >>> Would this

Re: ITS#7473 back-mdb search

2013-01-11 Thread Michael Ströder
Howard Chu wrote: > We could alter the dn2id index format, and maintain a numSubordinates counter > there. Would this make it easier to implement this? http://tools.ietf.org/html/draft-boreham-numsubordinates-01 Ciao, Michael.

Re: RE24 Testing call #1 (OpenLDAP 2.4.34)

2012-12-16 Thread Michael Ströder
Quanah Gibson-Mount wrote: > Current RE24 is ready for testing for the 2.4.34 release. Up to now I did not find any regressions in my various deployments and I'd really appreciate to see 2.4.34 published. Ciao, Michael. smime.p7s Description: S/MIME Cryptographic Signature

Re: RE24 testing all #1 (OpenLDAP 2.4.33)

2012-10-03 Thread Michael Ströder
Quanah Gibson-Mount wrote: > If you know how to build OpenLDAP manually, and would like to participate in > testing the next set of code for the 2.4.33 release, please do so. test039 fails with mdb Ciao, Michael. smime.p7s Description: S/MIME Cryptographic Signature

Re: The Last Sysadmin Prayer: Discussion Returns to Wrap and Base64 World

2012-07-22 Thread Michael Ströder
Angel Bosch wrote: > all my scripts scream out loud because wraping and base64 encoding. Personally I consider using command-line tool ldapsearch to produce input data for shell scripts somewhat broken. I think even if you're not a developer you should learn a decent scripting language and use LD

Re: slapd: attr.c:481: attr_merge: Assertion

2012-03-16 Thread Michael Ströder
Hallvard B Furuseth wrote: > On Fri, 16 Mar 2012 12:40:31 +0100, Michael Ströder wrote: >> We saw this assertion in a production server during processing a modify of an >> entry. My co-worker said he could reproduce it. Does it mean the BDB files >> were corrupt? > >

Re: slapd: attr.c:481: attr_merge: Assertion

2012-03-16 Thread Michael Ströder
Howard Chu wrote: > Michael Ströder wrote: >> What does it mean when slapd aborts with this assertion? >> >> snip >> >> slapd: attr.c:481: attr_merge: Assertion `( nvals == ((void *)0)&a

slapd: attr.c:481: attr_merge: Assertion

2012-03-16 Thread Michael Ströder
HI! What does it mean when slapd aborts with this assertion? snip slapd: attr.c:481: attr_merge: Assertion `( nvals == ((void *)0) && (*a)->a_nvals == (*a)->a_vals ) || ( nvals != ((void *)0) && ( ( (*a)->a_vals == ((void *

Re: ITS candidates for 2.4.31

2012-03-10 Thread Michael Ströder
Quanah Gibson-Mount wrote: Looking at open ITSes, I would note the following are probably worthwhile to fix for 2.4.31: 6825 A fix for 6825 is definitely needed. What about these two? 7145: cn=Connection 0,cn=Connections,cn=Monitor received twice 6916: slapo-unique returns operations error wh

Re: RE24 testing call#1 (2.4.30)

2012-02-24 Thread Michael Ströder
Quanah Gibson-Mount wrote: If you know how to build OpenLDAP manually, and would like to participate in testing the next set of code for the 2.4.30 release, please do so. No problems with a simple "make test" on openSUSE 11.4 x86_64. But any tests which should be run with -l 100? Ciao, Michae

when 2.4.30?

2012-02-15 Thread Michael Ströder
HI! CHANGES in branch RE24 now contains: OpenLDAP 2.4.30 Engineering Fixed slapd syncrepl delete handling (ITS#7052,ITS#7162) Fixed slapo-syncprov loop detection (ITS#6024) Will there be a quick-fix release 2.4.30 soon? Ciao, Michael.

2.4.29?

2012-02-08 Thread Michael Ströder
HI! RE24 seems to be tagged ready to release. When will 2.4.29 be officially released? Ciao, Michael.

Re: RE24 testing call #2 (2.4.29)

2012-01-28 Thread Michael Ströder
Michael Ströder wrote: Quanah Gibson-Mount wrote: --On Friday, January 27, 2012 1:18 PM +0100 Michael Ströder wrote: Quanah Gibson-Mount wrote: A few minor fixes. Please test. make test runs correctly (with git 22ee28752e3e0d2a6910a22922fc69befd78578a) on RHEL 6.1 and openSUSE 11.4 (both

Re: RE24 testing call #2 (2.4.29)

2012-01-28 Thread Michael Ströder
Quanah Gibson-Mount wrote: --On Friday, January 27, 2012 1:18 PM +0100 Michael Ströder wrote: Quanah Gibson-Mount wrote: A few minor fixes. Please test. make test runs correctly (with git 22ee28752e3e0d2a6910a22922fc69befd78578a) on RHEL 6.1 and openSUSE 11.4 (both 64 bit). On the

Re: RE24 testing call #2 (2.4.29)

2012-01-27 Thread Michael Ströder
Quanah Gibson-Mount wrote: A few minor fixes. Please test. make test runs correctly (with git 22ee28752e3e0d2a6910a22922fc69befd78578a) on RHEL 6.1 and openSUSE 11.4 (both 64 bit). On the openSUSE system I had occasional seg faults logged in syslog when shutting down the server. These are

Re: RE24 testing call (2.4.27 official call #3)

2011-11-23 Thread Michael Ströder
Quanah Gibson-Mount wrote: > Please test latest RE24. dynamic config support for back-sql and back-perl > have been added. If anyone has a setup to test either of those specifically, > that would be useful. I saw you marked RE24 ready to be released. make test also works for me but please take n

Re: Channel bindings

2011-11-22 Thread Michael Ströder
Howard Chu wrote: > Michael Ströder wrote: >> Howard Chu wrote: >>> Now that Cyrus SASL 2.1.25 is out with channel binding support, we should be >>> looking into adding the hooks needed to use it. I believe what we want to >>> expose is an ldap_get_option

Re: Channel bindings

2011-11-22 Thread Michael Ströder
Howard Chu wrote: > Now that Cyrus SASL 2.1.25 is out with channel binding support, we should be > looking into adding the hooks needed to use it. I believe what we want to > expose is an ldap_get_option(ld, LDAP_OPT_X_TLS_BINDING, &foo) to retrieve the > tls-unique binding data from the underlying

Re: MDB name

2011-11-13 Thread Michael Ströder
Howard Chu wrote: > I'm not sure that we need to change the name; I was asking the question. As said: Personally I don't think that a name change is needed. In your presentation you said you want to provide a stand-alone lib e.g. for SASL etc. So it's rather a question on how to name the lib to a

Re: MDB name

2011-11-13 Thread Michael Ströder
Howard Chu wrote: > What's in a name... Apparently "MDB" is already a well-known suffix for > Microsoft Access database files. "mdb" is also the name of a debugger tool in > Solaris. To avoid confusion with those unrelated items, it might be a good > idea to rename our MDB to something else. Now, b

Re: drop "stable"

2011-11-13 Thread Michael Ströder
uot; tag. My rule is: It's better to have no information than incomplete/outdated/errornous information. Ciao, Michael. > On 11/09/2011 11:19 AM, Quanah Gibson-Mount wrote: >> --On Wednesday, November 09, 2011 2:27 PM +0100 Michael Ströder >> wrote: >> >>>

drop "stable"

2011-11-09 Thread Michael Ströder
HI! Many people are downloading and compiling "stable" releases from http://www.openldap.org/software/download/ which is IMO problematic: Most developers consider those "stable" releases to be rather outdated since lots of fixes are missing and they don't want to get bothered with old issues (whi

Re: RE24 testing call (2.4.27 official call #1)

2011-11-09 Thread Michael Ströder
Howard Chu wrote: > Michael Ströder wrote: >> Howard Chu wrote: >>> Stack overrun in back-mdb. back_mdb_search is a bit more memory hungry than >>> back_bdb_search, unfortunately. The nested search call that dynlist invokes >>> is >>> enough to put

Re: RE24 testing call (2.4.27 official call #1)

2011-11-09 Thread Michael Ströder
Howard Chu wrote: > Stack overrun in back-mdb. back_mdb_search is a bit more memory hungry than > back_bdb_search, unfortunately. The nested search call that dynlist invokes is > enough to put it over the top. The recent commits fix this? Ciao, Michael.

Re: RE24 testing call (2.4.27 official call #1)

2011-11-08 Thread Michael Ströder
Quanah Gibson-Mount wrote: > Please test RE24. Thanks! There is something fishy in test044. It seg faults every now and then. Sometimes after 20-30 iterations, sometimes sooner. Not sure whether it's only due to back-mdb. ITS with details will follow. Others should bang on this as well. Ciao, M

Re: RE24 testing (pre-testing on 2.4.27)

2011-11-08 Thread Michael Ströder
Quanah Gibson-Mount wrote: > --On Monday, November 07, 2011 1:13 PM +0100 Michael Ströder > wrote: >> Any chance for ITS#6984 and ITS#7019? > > 6984 done for RE24. Please test. Thanks! Works for me (with demo script in python-ldap's source distribution). Ciao, Michael.

Re: Note on Cyrus-SASL when testing

2011-11-07 Thread Michael Ströder
Quanah Gibson-Mount wrote: > Latest cyrus-sasl 2.1.25 introduces a new mechanism called SCRAM. Unlike the > other mechanisms, SCRAM generates entropy as soon as the cyrus-sasl library is > loaded. This is a problem because cyrus-sasl defaults to using /dev/random > instead of /dev/urandom when it

Re: RE24 testing (pre-testing on 2.4.27)

2011-11-07 Thread Michael Ströder
Quanah Gibson-Mount wrote: > --On Friday, November 04, 2011 9:47 PM +0100 Michael Ströder > wrote: > >> When should we test before integration of back-mdb? >> I ran make test without trouble but saw more committs coming after that. > > Yeah, Howard picked out a few m

Re: RE24 testing (pre-testing on 2.4.27)

2011-11-07 Thread Michael Ströder
Michael Ströder wrote: > Howard Chu wrote: >> Need backtrace from SEGV, steps to reproduce. Not seeing it here. > > Note the very same action works with OpenLDAP 2.4.26. > > (gdb) info threads > 2 Thread 14284 0x7f7ef725638c in pthread_cond_wait@@GLIBC_2.3.2 () fro

Re: RE24 testing (pre-testing on 2.4.27)

2011-11-07 Thread Michael Ströder
Howard Chu wrote: > Michael Ströder wrote: >> Michael Ströder wrote: >>> Michael Ströder wrote: >>>> Quanah Gibson-Mount wrote: >>>>> Tomorrow I'll be working on merging in libmdb/back-mdb. If anyone would >>>>> like >>>&g

Re: RE24 testing (pre-testing on 2.4.27)

2011-11-05 Thread Michael Ströder
Michael Ströder wrote: > Michael Ströder wrote: >> Quanah Gibson-Mount wrote: >>> Tomorrow I'll be working on merging in libmdb/back-mdb. If anyone would >>> like >>> to do a basic sanity test against current RE24, that would be helpful. It >>>

Re: RE24 testing (pre-testing on 2.4.27)

2011-11-05 Thread Michael Ströder
Michael Ströder wrote: > Quanah Gibson-Mount wrote: >> Tomorrow I'll be working on merging in libmdb/back-mdb. If anyone would like >> to do a basic sanity test against current RE24, that would be helpful. It has >> all of the planned fixes for 2.4.27 except ITS#

Re: RE24 testing (pre-testing on 2.4.27)

2011-11-04 Thread Michael Ströder
Quanah Gibson-Mount wrote: > Tomorrow I'll be working on merging in libmdb/back-mdb. If anyone would like > to do a basic sanity test against current RE24, that would be helpful. It has > all of the planned fixes for 2.4.27 except ITS#7025 which Howard is still > working on. When should we test b

Re: RE24 testing (pre-testing on 2.4.27)

2011-11-04 Thread Michael Ströder
Quanah Gibson-Mount wrote: > Seems like you have a rather odd source checkout. I get no references to > back-mdb at all. Hmm, I'm new to git. Hallvard explained me to invoke "make distclean" before switching the branch. Ciao, Michael.

Re: RE24 testing (pre-testing on 2.4.27)

2011-11-04 Thread Michael Ströder
Quanah Gibson-Mount wrote: > Tomorrow I'll be working on merging in libmdb/back-mdb. If anyone would like > to do a basic sanity test against current RE24, that would be helpful. It has > all of the planned fixes for 2.4.27 except ITS#7025 which Howard is still > working on. It seems something's

Re: Plans for 2.4.27?

2011-09-30 Thread Michael Ströder
Howard Chu wrote: > Michael Ströder wrote: >> Howard Chu wrote: >>> Michael Ströder wrote: >>>> Are there plans for a 2.4.27 release with the recent syncrepl fixes? >>> >>> Our release engineer is on vacation for a little while longer. >> >

Re: Plans for 2.4.27?

2011-09-30 Thread Michael Ströder
Howard Chu wrote: > Michael Ströder wrote: >> Howard Chu wrote: >>> Michael Ströder wrote: >>>> Are there plans for a 2.4.27 release with the recent syncrepl fixes? >>> >>> Our release engineer is on vacation for a little while longer. >> >

Re: Plans for 2.4.27?

2011-09-30 Thread Michael Ströder
Howard Chu wrote: > Michael Ströder wrote: >> Are there plans for a 2.4.27 release with the recent syncrepl fixes? > > Our release engineer is on vacation for a little while longer. Hmm, does that mean there won't be any releases at all for a little while longer? I'm

Plans for 2.4.27?

2011-09-30 Thread Michael Ströder
HI! Are there plans for a 2.4.27 release with the recent syncrepl fixes? Ciao, Michael.

Attribute 'auditContext' replicated

2011-08-08 Thread Michael Ströder
HI! Is it intentional that attribute 'auditContext' is replicated? Ciao, Michael.

OID for Relax Rules Control (was: (ITS#6830) slapo-ppolicy.5 has incorrect schema fragments)

2011-07-01 Thread Michael Ströder
andrew.find...@skills-1st.co.uk wrote: > On Thu, Jun 09, 2011 at 01:45:17AM -0700, Howard Chu wrote: > >> I note that in ppolicy.c we have: >> >> { "( 1.3.6.1.4.1.42.2.27.8.1.17 " >> "NAME ( 'pwdAccountLockedTime' ) " >> "DESC 'The time an user account was locked' " >>

Re: slapo-accesslog: resolution of reqStart

2011-06-10 Thread Michael Ströder
Howard Chu wrote: Michael Ströder wrote: HI! I'm running slapo-memberof and slapo-accesslog together with the fix for ITS#6915. But now when restoring accesslog-LDIF data with slapadd I get: Which fix? There were several commits (2-3 reverts as I recall) needed. => hdb_tool_e

slapo-accesslog: resolution of reqStart

2011-06-10 Thread Michael Ströder
HI! I'm running slapo-memberof and slapo-accesslog together with the fix for ITS#6915. But now when restoring accesslog-LDIF data with slapadd I get: => hdb_tool_entry_put: id2entry_add failed: DB_KEYEXIST: Key/data pair already exists (-30996) slapadd: could not add entry dn="reqStart=201106

replicate internal operations (was: (ITS#6915) memberof+accesslog duplicate reqStart)

2011-05-25 Thread Michael Ströder
Taking this to -devel for clarification. h...@symas.com wrote: The original design for memberOf was for the internal modifications to not be replicated. Instead, any replicas that wanted to maintain member information was expected to run an identical memberOf overlay configuration. Ok. In ge

Re: Critical client controls stop ldap_unbind()

2011-05-13 Thread Michael Ströder
Hallvard B Furuseth wrote: > ldap_unbind() & co fail without doing anything if a critical client > control is set with ldap_set_option() or passed to ldap_unbind_ext_s(). Not sure whether it's related: But I have problems sending unbind with python-ldap via ldap_unbind_ext() when using a persisten

Re: RE 24 testing call (OL 2.4.25)

2011-03-25 Thread Michael Ströder
Quanah Gibson-Mount wrote: > A few small fixes have been applied to the RE24 branch for a 2.4.25 > release. Please test and report. make test seems to be fine on openSUSE 11.3 x86_64 Ciao, Michael.

Re: authTimestamp and relax rules control

2011-03-19 Thread Michael Ströder
Kurt Zeilenga wrote: > > On Mar 17, 2011, at 11:49 AM, Michael Ströder wrote: >> I'm using slapo-lastbind with 2.4.24 found under contrib/ which writes the >> operational attribute authTimestamp to an entry. Now I have a use-case where >> a >> LDAP client (conn

authTimestamp and relax rules control

2011-03-17 Thread Michael Ströder
HI! I'm using slapo-lastbind with 2.4.24 found under contrib/ which writes the operational attribute authTimestamp to an entry. Now I have a use-case where a LDAP client (connector continously pumping data from another non-OpenLDAP directory server) should write this attribute to the OpenLDAP serv

Re: RE24 status

2011-02-04 Thread Michael Ströder
Howard Chu wrote: > We've picked up one or two additional regression fixes. Aside from that, > the RE24 tree is now closed. We'll do a final call for testing Friday > and aim to release 2.4.24 next week. Unless we run into crashers or some > other major issue, this should be it. Glad to hear 2.4.2

Re: RE24 testing call #3 (OL 2.4.24)

2011-01-15 Thread Michael Ströder
Dieter Kluenter wrote: > ./scripts/test020-proxycache failed for hdb (exit 255) > make: *** [hdb-yes] Fehler 255 > > openSuSE-11.3 x86_64 I'm also running the build and tests on openSuSE-11.3 x86_64 with all the required -devel packages installed with the openSUSE 11.3 distro. No errors for me wi

Plans for 2.4.24?

2010-12-04 Thread Michael Ströder
HI! Given the stability-related fixes in HEAD recently I wonder what the plans for releasing 2.4.24 are. When will backporting to OPENLDAP_REL_ENG_2_4 start? Sorry, I'm not a C programmer. I can only help testing. Ciao, Michael.

Re: slapo-allowed: allowedChildClasses and allowedChildClassesEffective

2010-04-28 Thread Michael Ströder
Cc:-ed samba-technical list... masar...@aero.polimi.it wrote: > Michael Ströder wrote: >> masar...@aero.polimi.it wrote: >>> Michael Ströder wrote: >>>> masar...@aero.polimi.it wrote: >>>>> slapo-allowed was modified between 2.4.21 and 2.4.

Re: slapo-allowed: allowedChildClasses and allowedChildClassesEffective

2010-04-27 Thread Michael Ströder
masar...@aero.polimi.it wrote: >> Redirected this to openldap-devel... >> >> masar...@aero.polimi.it wrote: >>> slapo-allowed was modified between 2.4.21 and 2.4.22; support for >>> allowedChildClasses and allowedChildClassesEffective was added. >> >> The semantics you've implemented seems to be in

slapo-allowed: allowedChildClasses and allowedChildClassesEffective (was: Seg faults with 2.4.22)

2010-04-27 Thread Michael Ströder
Redirected this to openldap-devel... masar...@aero.polimi.it wrote: > slapo-allowed was modified between 2.4.21 and 2.4.22; support for > allowedChildClasses and allowedChildClassesEffective was added. The semantics you've implemented seems to be incompatible with my implementation in web2ldap wh

Re: logging "reqEntryUUID" in accesslog?

2010-03-29 Thread Michael Ströder
Howard Chu wrote: > Michael Ströder wrote: >> In web2ldap when displaying a single entry I have a button which directly >> forms a filter for searching the audit log (accesslog DB) for the >> entry based >> on the attribute 'reqDN'. This is handy but does not

logging "reqEntryUUID" in accesslog?

2010-03-29 Thread Michael Ströder
HI! In web2ldap when displaying a single entry I have a button which directly forms a filter for searching the audit log (accesslog DB) for the entry based on the attribute 'reqDN'. This is handy but does not work anymore when entries were renamed. So how about logging the value of entryUUID of a

Re: OpenLDAP 2.5

2009-12-22 Thread Michael Ströder
Howard Chu wrote: > We should also walk thru the Software Enhancement requests and decide > which to accept and which to reject. Currently there are 37 outstanding. 1. I'd hope to see DIT structure rules and name forms to be implemented. 2. If support for slapd.conf is completely dropped would it

Re: RE24 (2.4.20) testing call #4

2009-11-24 Thread Michael Ströder
Quanah Gibson-Mount wrote: > --On Tuesday, November 24, 2009 6:06 AM +0100 Michael Ströder > wrote: > >> Quanah Gibson-Mount wrote: >>> Testing call for 2.4.20 #4. This should be the last one. :P >> >> Thanks for increasing the testing call number

Re: RE24 (2.4.20) testing call #4

2009-11-23 Thread Michael Ströder
Quanah Gibson-Mount wrote: > Testing call for 2.4.20 #4. This should be the last one. :P Thanks for increasing the testing call number. I had lost track of the changes. ;-) test008 fails now. Ciao, Michael. > Starting test008-concurrency for bdb... running defines.sh Running slapadd to bu

Re: RE24 (2.4.20) testing call #3

2009-11-21 Thread Michael Ströder
Michael Ströder wrote: > Quanah Gibson-Mount wrote: >> A few new changes, please re-sync and test. Thanks! Hopefully this >> will be the last of it. In particular, watch test050 please. ;) > > test050 fails for me. I can send the testrun/ if needed. Seems to be ok now

Re: RE24 (2.4.20) testing call #3

2009-11-20 Thread Michael Ströder
Quanah Gibson-Mount wrote: > A few new changes, please re-sync and test. Thanks! Hopefully this > will be the last of it. In particular, watch test050 please. ;) test050 fails for me. I can send the testrun/ if needed. [..] Using ldapmodify to add/modify/delete entries from server 1... itera

Re: RE24 (2.4.20) testing call #2

2009-11-18 Thread Michael Ströder
Quanah Gibson-Mount wrote: > Please test current RE24 CVS. Several issues identified in the first > round have been resolved. Unfortunately test020 still seg faults. Ciao, Michael.

Re: Please test RE24 for 2.4.20 candidate

2009-11-18 Thread Michael Ströder
Jens Vagelpohl wrote: > Getting an error for test020-proxycache on OS X 10.6.2 compiling OpenLDAP > with -march x86-64: Running test020 for several times I get a seg fault on openSUSE 11.2 x86-64 built with gcc version 4.4.1. Testing pwdModify Query 19: (Bind should be cached) > Test succeed

contrib/slapd-modules/passwd/sha2

2009-11-18 Thread Michael Ströder
HI! Is there any chance that contrib/slapd-modules/passwd/sha2 will make it to being a standard feature like e.g. password scheme {SSHA} within 2.4 release series? Ciao, Michael. -- Michael Ströder E-Mail: mich...@stroeder.com http://www.stroeder.com

Re: RE24: Decoding error when querying MS AD

2009-11-04 Thread Michael Ströder
Hallvard B Furuseth wrote: > Michael Ströder writes: >> Michael Ströder wrote: >>> Something's screwed up in BER decoding of RE24 now. I get a >>> LDAP_DECODING_ERROR but it used to work with former versions. > > Workaround in HEAD: liblber/decode.c rev 1.12

Re: RE24: Decoding error when querying MS AD

2009-11-04 Thread Michael Ströder
Michael Ströder wrote: > Something's screwed up in BER decoding of RE24 now. I get a > LDAP_DECODING_ERROR but it used to work with former versions. I guess this is > related to the recent changes to liblber. Find attached a client-side debug log. Ciao, Michael. ldap_url_

RE24: Decoding error when querying MS AD

2009-11-04 Thread Michael Ströder
HI! Something's screwed up in BER decoding of RE24 now. I get a LDAP_DECODING_ERROR but it used to work with former versions. I guess this is related to the recent changes to liblber. Ciao, Michael.

Re: small project

2009-10-14 Thread Michael Ströder
Kurt Zeilenga wrote: > [..] then may adding export support to ldapsearch and slapdump > (using some sort of content detection to determine whether or not to use > xml-value-spec or not). Given your worthful but very strict comments about UTF-8 support in LDIF "using some sort of content detection"

Re: Problems compiling OpenLDAP in 64 bit due to old libtool version included

2009-09-29 Thread Michael Ströder
Howard Chu wrote: > Dagobert Michelsen wrote: >> Hi, >> >> Am 24.09.2009 um 21:13 schrieb Howard Chu: >>> Dagobert Michelsen wrote: I have a problem compiling the current OpenLDAP (2.4.18) in 64 bit on Solaris. The problem occurs when building with modules and enabling 64 bit in CFLA

Re: slapo-accesslog: Preserve some attributes of deleted entries in auditDelete entries

2009-09-25 Thread Michael Ströder
Howard Chu wrote: > Michael Ströder wrote: >> When using slapo-accesslog in a meta-directory environment you might >> wanna >> query the accesslog database for quickly detecting deleted entries with >> (&(objectClass=auditDelete)(reqResult=0)() and act >> accor

slapo-accesslog: Preserve some attributes of deleted entries in auditDelete entries

2009-09-25 Thread Michael Ströder
HI! When using slapo-accesslog in a meta-directory environment you might wanna query the accesslog database for quickly detecting deleted entries with (&(objectClass=auditDelete)(reqResult=0)() and act accordingly. Now when receiving this entry of object class auditDelete the entry referenced by '

Re: libldap_r

2009-09-24 Thread Michael Ströder
Howard Chu wrote: > It seems the dichotomy between libldap and libldap_r is a relic from the > bad old days of dcethreads / cmathreads when linking a threaded library > into an otherwise non-threaded program would cause all sorts of strange > and wonderful failures. Unless anyone knows of any curre

Re: random topics

2009-09-24 Thread Michael Ströder
Howard Chu wrote: > This also brings me to another topic - adopting features from OpenDS... > They expose a cn=Tasks tree which can be used for submitting tasks via > LDAP. Currently we expose our runqueue under cn=Monitor but that's only > read-only. It would be nice to be able to submit/schedule/

Re: RE24 testing round 3

2009-08-31 Thread Michael Ströder
Quanah Gibson-Mount wrote: > Please test. Thanks! "make test" seems to be ok. Built on: SLES 10 i586 with self-compiled BDB 4.7.25p4 and cyrus-sasl 2.1.24rc1 (no Kerberos). openSUSE 11.1 i586 with pre-installed Kerberos, cyrus-sasl and BDB 4.5 packages. Ciao, Michael.

Re: Two small wishes for 2.4.18

2009-08-25 Thread Michael Ströder
Michael Ströder wrote: > Since AFAIK 2.4.18 is still not tagged for release I'd like to suggest two > things to add: > > 1. ITS#4730 slapo-allowed to be added under contrib/ with the Makefile I sent > > 2. ITS#6257 libldap: getopt flag to return the SASL username Than

Two small wishes for 2.4.18

2009-08-25 Thread Michael Ströder
HI! Since AFAIK 2.4.18 is still not tagged for release I'd like to suggest two things to add: 1. ITS#4730 slapo-allowed to be added under contrib/ with the Makefile I sent 2. ITS#6257 libldap: getopt flag to return the SASL username Any objections? Ciao, Michael.

Re: commit: ldap/servers/slapd/overlays pcache.c

2009-08-17 Thread Michael Ströder
Howard Chu wrote: > Michael Ströder wrote: >> Howard Chu wrote: >>> masar...@aero.polimi.it wrote: >>>>> h...@openldap.org wrote: >>>>> Detecting renames will be trickier since the cache typically won't >>>>> have any entry

<    1   2   3   4   5   6   >