Re: OpenLDAP crash when defining multiple olcDbURI for chaining

2014-09-08 Thread Quanah Gibson-Mount
--On Monday, September 08, 2014 6:25 PM -0400 Khosrow Ebrahimpour wrote: Hello list, I am trying to setup referral chaining in a multi-master setup. I can setup chaining to one of the masters without any problems. And I can perform a MOD operation that is then referral chased and performed on

OpenLDAP crash when defining multiple olcDbURI for chaining

2014-09-08 Thread Khosrow Ebrahimpour
Hello list, I am trying to setup referral chaining in a multi-master setup. I can setup chaining to one of the masters without any problems. And I can perform a MOD operation that is then referral chased and performed on the master. However, when I define both masters the replica crashes whe

Re: Q: frontend and cn=Subschema

2014-09-08 Thread Michael Ströder
Ulrich Windl wrote: > forgive a beginner's question, but: > If I examine cn=Subschema, I see the following object classes: > objectClass[0]top > objectClass[1]subentry > objectClass[2]subschema > objectClass[3]extensibleObject > > And among the attributes is ldapSy

Re: RE24 testing call (2.4.40)

2014-09-08 Thread Quanah Gibson-Mount
--On Friday, September 05, 2014 6:35 PM -0700 "Paul B. Henson" wrote: On Mon, Aug 11, 2014 at 11:52:55AM -0700, Quanah Gibson-Mount wrote: If you know how to build OpenLDAP manually, and would like to participate in testing the next set of code for the 2.4.39 release, please do so. [...] E

Re: OpenLDAP self-signed certificates issue

2014-09-08 Thread Michael Ströder
Ryan Tandy wrote: > On 07/09/14 10:28 PM, Vijay Ganesan wrote: >> But I can't seem to connect using ldaps://localhost:636 using Apache >> Directory Studio client. I get a "Error while opening connection - >> Cannot connect on the server: Connection refused" error. >> I can connect fine using ldap:/

Re: LDAP gateway to RADIUS serverf

2014-09-08 Thread Aaron Richton
On Sun, 24 Aug 2014, David R wrote: I have setup 2 factor authentication on a RADIUS server (OTP). [...] I have found some elements like pw-radius.so, but this is clearly not fully documented. [...] So I was wondering if one of you has ever implemented this kind of solution and how... I use

Re: OpenLDAP self-signed certificates issue

2014-09-08 Thread Ryan Tandy
On 08/09/14 08:02 AM, Vijay Ganesan wrote: ldap_start_tls: Connect error (-11) additional info: A TLS packet with unexpected length was received. Unfortunately GnuTLS does not make it easy to diagnose this kind of error. There might still be a misconfiguration somewhere, or there might be a p

Re: OpenLDAP self-signed certificates issue

2014-09-08 Thread Vijay Ganesan
Thanks Ryan and Udai. Don't really have to use ldaps. I understand now that the documentation is for StartTLS an can use that. LDAPTLS_CACERT=/etc/ssl/certs/vijay_slapd_cert.pem ldapwhoami -H ldap://localhost -x -ZZ give

Re: OpenLDAP self-signed certificates issue

2014-09-08 Thread Ryan Tandy
On 07/09/14 10:28 PM, Vijay Ganesan wrote: But I can't seem to connect using ldaps://localhost:636 using Apache Directory Studio client. I get a "Error while opening connection - Cannot connect on the server: Connection refused" error. I can connect fine using ldap://localhost:389. Like Udai wr

Re: accesslog search filter using reqAttr

2014-09-08 Thread John Alex.
This appears to be a bug, filed an ITS (#7934) On 09/02/2014 12:58 PM, John Alex. wrote: > Hi all, > > Is anyone using "reqAttr" of accesslog overlay to find ldap requests for > specific attributes? > > Our accesslog db contains some entries like for example: > > dn: reqStart=20140902092840.0

slap_client_connect error

2014-09-08 Thread Gremaud Cyrill
Hello ! I’m trying to setup N-way multi master replication with openLDAP 2.4 but I have an error when I reload my servers. slapd_client_connect : URI=ldap://lda2.gremaud.local DN=“cn=config” ldap_sasl_bind_s failed (-1) How this error is possible ? I can make a ldapsearch with dn=config and co

Re: Error when trying to setup olcMirrorMode

2014-09-08 Thread Ferenc Wagner
Gremaud Cyrill writes: > dn: olcDatabase={0}config,cn=config > changetype: modify > add: olcSyncRepl > olcSyncRepl: rid=001 ... > olcSyncRepl: rid=002 … > olcSyncRepl: rid=003 … > - > add: olcMirrorMode > olcMirrorMode: TRUE > > But ldapmodify give me an error when I try to use the “-“ Please p

Re: Antw: Error when trying to setup olcMirrorMode

2014-09-08 Thread Gremaud Cyrill
Hello Ulrich Windl, No I never tried ! How this param do ? Where can I add it ? THanks. cyrill gremaud On 08 Sep 2014, at 11:30, Ulrich Windl wrote: Gremaud Cyrill schrieb am 08.09.2014 um 10:13 in > Nachricht <14ea9481-cccb-4ee8-a6f2-fe2ca31c0...@hefr.ch>: >> Hello, >> >> I'm trying t

Re: Error when trying to setup olcMirrorMode

2014-09-08 Thread Gremaud Cyrill
Hello Ferenc Wagner and thanks for your response. Yes I tried but I get another error when I do it. Here is my ldif dn: olcDatabase={0}config,cn=config changetype: modify add: olcSyncRepl olcSyncRepl: rid=001 ... olcSyncRepl: rid=002 … olcSyncRepl: rid=003 … - add: olcMirrorMode olcMirrorMode:

Re: Error when trying to setup olcMirrorMode

2014-09-08 Thread Ferenc Wagner
Gremaud Cyrill writes: > I'm trying to setup N-way multimaster replication for cn=config only > (for the moment). I have problem when I try to add olcMirrorMode: > TRUE. Here is my ldif file to do this: > > dn: olcDatabase={0}config,cn=config > changetype: modify > add: olcMirrorMode > olcMirrorM

Antw: Error when trying to setup olcMirrorMode

2014-09-08 Thread Ulrich Windl
>>> Gremaud Cyrill schrieb am 08.09.2014 um 10:13 in Nachricht <14ea9481-cccb-4ee8-a6f2-fe2ca31c0...@hefr.ch>: > Hello, > > I'm trying to setup N-way multimaster replication for cn=config only (for the > moment). I have problem when I try to add olcMirrorMode: TRUE. Here is my > ldif file to do

Error when trying to setup olcMirrorMode

2014-09-08 Thread Gremaud Cyrill
Hello, I'm trying to setup N-way multimaster replication for cn=config only (for the moment). I have problem when I try to add olcMirrorMode: TRUE. Here is my ldif file to do this: dn: olcDatabase={0}config,cn=config changetype: modify add: olcMirrorMode olcMirrorMode: TRUE and the error is th