Re: replication between a back-sql master and back-hdb slave

2013-01-28 Thread Benin Technologies
thanks, yes there are probably many ways to replicate a SQL database to LDAP by writing the right code I just thought that since back-sql does already the job of mapping SQL databases to an LDAP tree, maybe there was a replication tool between that SQL backed LDAP tree and another LDAP tree with

Re: replication between a back-sql master and back-hdb slave

2013-01-28 Thread Benin Technologies
thank you for that pointer, yes that seems to be what I was looking for Le 28/01/2013 22:01, Patrick Lists a écrit : On 01/28/2013 07:52 PM, Quanah Gibson-Mount wrote: [snip] For example, when I was at a previous job, we had written a program that could convert our oracle DB to LDIF, and import

Re: Usage of groups in an access control

2013-01-28 Thread Marco de Booij
Thanks Harry and Markus. I did not read the page until the end :( Yesterday before I went to sleep the order thing (A firewall works this way too) came into my mind. I wanted to check it today. I moved the access rule up to 3rd place and I even removed all the by 'dn="cn=admin,dc=example,dc=co

Re: replication between a back-sql master and back-hdb slave

2013-01-28 Thread Patrick Lists
On 01/28/2013 07:52 PM, Quanah Gibson-Mount wrote: [snip] For example, when I was at a previous job, we had written a program that could convert our oracle DB to LDIF, and import then we would import that into LDAP. We used an event system as well, that when there were updates to the Oracle DB,

Re: SHA-2 support

2013-01-28 Thread Michael Ströder
Quanah Gibson-Mount wrote: > --On Wednesday, January 16, 2013 7:39 AM +0100 Michael Ströder > wrote: > >> Quanah Gibson-Mount wrote: >>> --On Tuesday, January 15, 2013 2:35 PM -0800 Ori Bani >>> wrote: Why hasn't the sha2 module been migrated out of the contrib directory >>> >>> The "c

Re: syncrepl issue

2013-01-28 Thread Quanah Gibson-Mount
--On Monday, January 28, 2013 3:59 PM +0100 Meike Stone wrote: a) Use a current release. That would be 2.4.33. b) Delta-syncrepl supports MMR in current releases c) The reason I suggest delta-syncrepl is because syncrepl is known to be problematic, particularly with MMR. If you want reliabl

Re: replication between a back-sql master and back-hdb slave

2013-01-28 Thread Quanah Gibson-Mount
--On Monday, January 28, 2013 7:20 PM +0100 Benin Technologies wrote: ok thanks back-sql is an experimental backend, it has no official support. Any development on it is purely based on the needs of people who use it and submit patches to enhance it in the ways they need. There are proba

Re: replication between a back-sql master and back-hdb slave

2013-01-28 Thread Benin Technologies
ok thanks I found that in the mailing list archive, dating back from 2007 (http://www.openldap.org/lists/openldap-software/200708/msg00015.html) Indeed back-sql was intended to loosely support acting as a syncrepl provider (limited to refreshOnly), but it's currently broken, and it's never b

Re: replication between a back-sql master and back-hdb slave

2013-01-28 Thread Benin Technologies
Thanks I just didn't understand why I would need suffixmassaging and a relay database... All my data are stored in PostgreSQL, used as a backend for my OpenLDAP/back-sql server (which will become the master OpenLDAP server) After setting up a second OpenLDAP server with hdb/bdb backend, actin

Is any way to make proxy cache working for acl requests?

2013-01-28 Thread Tio Teath
I'm thick and tired of configuring this dame thing! I mean slapo-pcache. It just won't work. Is any way to force this to cache JUST EVERYTHING, including ACL requests to remote server? I don't care of disk or memory usage, I just want dame thing working!

Re: syncrepl issue

2013-01-28 Thread Meike Stone
> > a) Use a current release. That would be 2.4.33. > b) Delta-syncrepl supports MMR in current releases > c) The reason I suggest delta-syncrepl is because syncrepl is known to be > problematic, particularly with MMR. If you want reliable replication, use > delta-syncrepl. Is it recommended in

Re: replication between a back-sql master and back-hdb slave

2013-01-28 Thread Dieter Klünter
Am Mon, 28 Jan 2013 14:19:44 +0100 schrieb Benin Technologies : > Hi, > > I set up a back-sql server to access some existing data in a > postgresql database. I was wondering if it's possible to replicate > that server to some (read-only) back-hdb servers. > Thanks This is possible, in principle

replication between a back-sql master and back-hdb slave

2013-01-28 Thread Benin Technologies
Hi, I set up a back-sql server to access some existing data in a postgresql database. I was wondering if it's possible to replicate that server to some (read-only) back-hdb servers. Thanks BT

Re: missing entry in slapcat backup

2013-01-28 Thread Meike Stone
>> - >> ~ # slapcat -f /etc/openldap/slapd.conf >/backup.ldif; echo $? >> 0 >> >> >> It seems to me, that in such case, the slapcat does not trows an error?! > > > slapcat doesn't check for missing entries.

Re: Usage of groups in an access control

2013-01-28 Thread harry . jede
Hi Marco, reread http://www.openldap.org/doc/admin24/access-control.html may be more then one time ;-) In short: exchange rule 4 & 5 Remenber that ordering by tree (DN in what clause) is important. -- Harry Jede

Re: Usage of groups in an access control

2013-01-28 Thread Markus Widmer
I think you should also have a look on the order of you ACLs. If you place a "access to *" before a "access to dn.children" the second will not be evaluated (if there is no "break"...) Cheers, -Markus- access to * by dn="cn=admin,dc=example,dc=com" write by * read acces