olcsizeLimit cant work ?

2005-10-27 Thread William.Zhang
Dear : i have set the olcsizeLimit paramter of 'bdb' entry of 'config' database to 100. but ldapsearch still returns all entries: ldapsearch -x -b dc=com -D cn=Manager,dc=com -s sub (objectclass=*) and this returns 100 entries: ldapsearch -x -b dc=com -s sub (objectclass=*) i am not

Re: syncrepl on Openldap 2.3.11 and bdb 4.3 not working

2005-10-27 Thread Leigh Porter
Hiya, I already read the dox and added the ovarlay directive - didn't work, here is what I have in the configs: Sync provider: # overlay syncprov syncprov-checkpoint 10 2 syncprov-sessionlog 500 Replcate Server: # syncrepl rid=123 provider=ldap://10.100.100.30:389 type=refreshOnly

Corrupt LDAP DB ...

2005-10-27 Thread C.Lee Taylor
Greetings ... It's been awhile since I have been on this list, so if things have changed since last, please excuse me. I'm running a few Fedora Core 4-64 computers which LDAP for pam, nss and Samba mainly, with web page access and control in the future for internal use. For quite some

Re: back-sql sqlquery

2005-10-27 Thread Thomas Hoth
Hello again, On Wed, Oct 19, 2005 at 11:27:29AM +0200, Thomas Hoth wrote: On Wed, Oct 19, 2005 at 10:14:55AM +0200, Pierangelo Masarati wrote: Hello, Why do back-sql querys like (2=2 OR (ldap_entries.id=ldap_entry_objclasses.entry_id AND ldap_entry_objclasses.oc_name=' /* '))

Re: Corrupt LDAP DB ...

2005-10-27 Thread Buchan Milne
On Thursday 27 October 2005 14:52, C.Lee Taylor wrote: Greetings ... It's been awhile since I have been on this list, so if things have changed since last, please excuse me. I'm running a few Fedora Core 4-64 computers which LDAP for pam, nss and Samba mainly, with web page

Re: back-sql sqlquery

2005-10-27 Thread Luca Scamoni
Thomas Hoth wrote: Hello again, someone tells me this: 16:51 *ยป* SELECT ldap_entries.id,groups.id,text('posixGroup') AS objectClass,ldap_entries.dn AS dn FROM +ldap_entries,groups,ldap_entry_objclasses,posix_account,groups_users WHERE groups.id=ldap_entries.keyval AND

Re: Corrupt LDAP DB ...

2005-10-27 Thread Richard Megginson
C.Lee Taylor wrote: Greetings ... Thanks for your quick response ... Buchan Milne wrote: 1)Your slapd.conf extract has no checkpoint directive, have you got a DB_CONFIG file in your db directory (/home/services/ldap/za/db). You should add both (after reviewing the docs on the

Re: installation nighmare....

2005-10-27 Thread Xavier Fustero
Sorry, I did play a while ago after installing it through yast. However, I wanted to install the packages manually and have a little bit more control about it. I installed different packages: cyrus-sasl, the openssl, the berkeleyDB but I got stuck with the openssl. I mean installing

Re: Corrupt LDAP DB ...

2005-10-27 Thread Leigh Porter
Hiya All, I also have seen this problem. I have a master and syncrepl OpenLDAP pair on various versions from 2.2.18 to 2.2.2x and get seemingly random database corruption problems on the master. To fix this, I slapcat the slave, delete the master db and slapadd it to the master, delete the

Re: Corrupt LDAP DB ...

2005-10-27 Thread Buchan Milne
On Thursday 27 October 2005 18:26, Robert Larson wrote: On Thursday 27 October 2005 07:52 am, C.Lee Taylor wrote: Greetings ... ... For quite some time, we seem to be getting corrupt LDAP DB. LDAP just stops working and we can't restarted. Have done slap slapindex -v -c, but that

Re: Corrupt LDAP DB ...

2005-10-27 Thread C.Lee Taylor
Greetings ... Thanks for you words of support ... Robert Larson wrote: For quite some time, we seem to be getting corrupt LDAP DB. LDAP just stops working and we can't restarted. Have done slap slapindex -v -c, but that just hangs. I have experienced this problem before.

Re: Corrupt LDAP DB ...

2005-10-27 Thread Buchan Milne
On Thursday 27 October 2005 18:23, C.Lee Taylor wrote: Greetings ... Thanks for you input ... Quanah Gibson-Mount wrote: Try reading the man page specific to the BDB backend: slapd-bdb Thanks, found it. RedHat's support of OpenLDAP has always been bad. They have been the

Re: Corrupt LDAP DB ...

2005-10-27 Thread Buchan Milne
On Thursday 27 October 2005 18:59, Leigh Porter wrote: Hiya All, I also have seen this problem. I have a master and syncrepl OpenLDAP pair on various versions from 2.2.18 I don't think the OP was using syncrepl. Note that there are known issues with syncrepl providers on 2.2 ... to 2.2.2x

Re: Corrupt LDAP DB ...

2005-10-27 Thread Buchan Milne
On Thursday 27 October 2005 19:00, C.Lee Taylor wrote: Well, I have had this on my AMD system from AMD Athlon 32bit system to my current servers of AMD 64bit system, ranging in motherboards and memory ... And from FC2 to FC4, from OpenLDAP 2.2.13 up to 2.2.29, so I just have not be

Re: Corrupt LDAP DB ... ans 2.3.11 syncrepl

2005-10-27 Thread Leigh Porter
Hiya, Thanks for the input Buchan, here is the slapd.conf for the 2.3.11 syncrepl provider: # # See slapd.conf(5) for details on configuration options. # This file should NOT be world readable. # include /usr/local/etc/openldap/schema/core.schema include

User Schema Load failed ..., using ppolicy.schema overlay

2005-10-27 Thread Robert Kupperstein
Can someone tell me how to work around this problem? Should I use different configure options to build a dynamically loadable version? What options do I need to use? Thanks, -Bob __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best

Re: Corrupt LDAP DB ... ans 2.3.11 syncrepl

2005-10-27 Thread Buchan Milne
On Thursday 27 October 2005 20:02, Leigh Porter wrote: Hiya, Thanks for the input Buchan, here is the slapd.conf for the 2.3.11 syncrepl provider: # # See slapd.conf(5) for details on configuration options. # This file should NOT be world readable. # include

Re: User Schema Load failed ..., using ppolicy.schema overlay

2005-10-27 Thread Buchan Milne
On Thursday 27 October 2005 20:13, Robert Kupperstein wrote: Can someone tell me how to work around this problem? Should I use different configure options to build a dynamically loadable version? What options do I need to use? I think the solution to this is to add an include line for the

Re: Corrupt LDAP DB ...

2005-10-27 Thread Quanah Gibson-Mount
--On Thursday, October 27, 2005 5:59 PM +0100 Leigh Porter [EMAIL PROTECTED] wrote: Hiya All, At the moment I am testing 2.3.11 on some lab boxes, but as per the last posts syncrepl does not seem to work at the moment.. On the subject of which, does anybody know why this would happen

Re: ACL problem

2005-10-27 Thread Samuel Tran
On Thu, 2005-10-27 at 10:12 +0800, Feifei Jia wrote: On 10/26/05, Samuel Tran [EMAIL PROTECTED] wrote: On Wed, 2005-10-26 at 20:53 +0800, Feifei Jia wrote: Hi there, What I want to do is: Let the RDN under ou=Admin,dc=com have write permission to the RDN like

Re: User Schema Load failed ..., using ppolicy.schema overlay

2005-10-27 Thread Robert Kupperstein
I've tried that, with no luck. BTW, I'm working with 2.3.11, but I have the same problem with 2.3.7 and 2.3.9. This was written up as a bug, but w/o any mention of how to work around it: static ppolicy overlay init (ITS#3137) * To: [EMAIL PROTECTED] * Subject: static ppolicy overlay

Re: User Schema Load failed ..., using ppolicy.schema overlay

2005-10-27 Thread Howard Chu
Robert Kupperstein wrote: I've tried that, with no luck. BTW, I'm working with 2.3.11, but I have the same problem with 2.3.7 and 2.3.9. This was written up as a bug, but w/o any mention of how to work around it: That bug was fixed long ago, before 2.3 was ever released. Make sure you're

Re: olcsizeLimit cant work ?

2005-10-27 Thread William
Dear: No limits are applied to the rootdn (well, I'm not sure if via 'limits' you can enforce it).. So, avoid the use of the rootdn. I dont know how to bind without rootdn or set limits to rootdn , can you give me a example ? thanks ! -- -- Regards