Re: problem with slapadd in migrating LDAP servers

2016-02-02 Thread Quanah Gibson-Mount
lready? I've no idea. Is cn=administrator,... a valid DN? No idea. etc. You can use slapcat to /export/ any existing data you have, that could determine whether or not you have an existing DB. You may also want to examine your configuration as to rootDN, etc, as well. --Quanah -- Qua

Re: chaining for a single backend?

2016-02-08 Thread Quanah Gibson-Mount
obally and should work for all database backends. This works. Then there is the example where chain is loaded in the linux database backend. This does not chain the request to the master. OpenLDAP version? --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimb

Re: [OpenLDAP][Authentication] SASL

2016-02-08 Thread Quanah Gibson-Mount
the source RPM includes the SPEC file used to build OpenLDAP. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: BINDDN in ~/.ldaprc ignored(?)

2016-02-09 Thread Quanah Gibson-Mount
entication? Feel free to submit an ITS with the appropriate changes. Likely the BINDDN section should say something more than just "when performing ldap operations" as it doesn't note the limitation to simple binds. --Quanah -- Quanah Gibson-Mount Platf

Re: rebuilding the DIT

2016-02-09 Thread Quanah Gibson-Mount
package, using the LDIF module to read in your file and output what you want. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: make posixGroup auxiliary in 2.4.40

2016-02-09 Thread Quanah Gibson-Mount
. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: openldap 2.4.44 does not provide an slapd.d

2016-02-09 Thread Quanah Gibson-Mount
.org/doc/admin24/quickstart.html> --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: Unable to do ldapsearch, but testsaslauthd works in OpenLDAP 2.4

2016-02-09 Thread Quanah Gibson-Mount
and clarity, and run a modern current release. You may want to check out the LTB project builds (<http://ltb-project.org/wiki/download#openldap>), or if you want builds of OpenLDAP that come with support, I would suggest contacting Symas (http://www.symas.com) --Quanah -- Quanah

Re: Crash on ldap 2.4.41 on RedHat using mdb.

2016-02-09 Thread Quanah Gibson-Mount
furnish any more information? I would strongly advise you to upgrade to OpenLDAP 2.4.44. Some significant bugs in liblmdb have been fixed since 2.4.41. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and

Re: Unable to do ldapsearch, but testsaslauthd works in OpenLDAP 2.4

2016-02-10 Thread Quanah Gibson-Mount
Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: Replication between 2.4.21 and 2.4.31

2016-02-10 Thread Quanah Gibson-Mount
d strongly advise you abandon such a strategy as it's doomed to failure, and instead use packages from the LTB project, or if you want actual support, from Symas. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source mes

Re: make posixGroup auxiliary in 2.4.40

2016-02-10 Thread Quanah Gibson-Mount
items are *always* present in slapd. Removing a schema that doesn't actually define it (such as nis.schema) then has no effect if you're not using it. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging

Re: Nested groups and sssd filters

2016-02-10 Thread Quanah Gibson-Mount
ldn't work for that. It is clearly only looking at users that specifically are members of the xv64ut09 group. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: Unable to do ldapsearch, but testsaslauthd works in OpenLDAP 2.4

2016-02-11 Thread Quanah Gibson-Mount
d hope of course you had already started at the documentation about upgrading from 2.3 --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: chaining for a single backend?

2016-02-11 Thread Quanah Gibson-Mount
--On Tuesday, February 09, 2016 9:53 AM +0100 Marc Patermann wrote: Am 08.02.2016 um 22:33 Uhr schrieb Quanah Gibson-Mount: --On Monday, February 08, 2016 4:50 PM +0100 Marc Patermann wrote: Am 30.12.2015 um 11:49 Uhr schrieb Marc Patermann: I want to activate chaining for a single

Re: rebuilding the DIT

2016-02-11 Thread Quanah Gibson-Mount
--On Thursday, February 11, 2016 12:29 PM -0800 Quanah Gibson-Mount wrote: --On Thursday, February 11, 2016 2:18 PM -0600 Timothy Keith wrote: When the slapadd loaded the backup ldif it prints : slapadd: dn="uid=tkeith,ou=Group,dc=pubsys,dc=com" (line=55): (65) unrecognized o

Re: rebuilding the DIT

2016-02-11 Thread Quanah Gibson-Mount
your config database properly. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: rebuilding the DIT

2016-02-11 Thread Quanah Gibson-Mount
ur issues are. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: rebuilding the DIT

2016-02-11 Thread Quanah Gibson-Mount
who knows where. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: rebuilding the DIT

2016-02-11 Thread Quanah Gibson-Mount
aren't using cn=config at all. We have no way of knowing. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: LDAP log lags in the ldap.log

2016-02-12 Thread Quanah Gibson-Mount
--On Friday, February 12, 2016 12:01 PM -0800 Daniel Jung wrote: I am using openldap-2.4.39 ( yes i should upgrade soon :( )  Database backend? --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and

Re: how to add users to LDAP and test authentication?

2016-02-13 Thread Quanah Gibson-Mount
sts/data/test-whoami.ldif;h=6a70ab42a8f60b272ab511860f29e986449e47c9;hb=HEAD> If you can provide more information on your goals, we may be able to help you further with your request. Hope this helps! --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: Disallow ldap operations without start_tls

2016-02-15 Thread Quanah Gibson-Mount
--On Monday, February 15, 2016 2:32 PM -0700 Joshua Schaeffer wrote: Is there any way to force clients to use start_tls without sending any credentials over the wire No, unfortunately that was not taken into consideration when the LDAP v3 spec was written. --Quanah -- Quanah Gibson

Re: SSL/TLS passphrase not being prompted for at startup

2016-02-15 Thread Quanah Gibson-Mount
would suggest getting the LTB project builds that are sanely linked to OpenSSL. <http://ltb-project.org/wiki/download#openldap> --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A divis

Re: SSL/TLS passphrase not being prompted for at startup

2016-02-16 Thread Quanah Gibson-Mount
-- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: how to add users to LDAP and test authentication?

2016-02-16 Thread Quanah Gibson-Mount
y a given individual may have more than one account. We used the seeAlso attribute to provide a pointer between account(s) and the person. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: SSL/TLS passphrase not being prompted for at startup

2016-02-17 Thread Quanah Gibson-Mount
org/lists/openldap-devel/201204/msg00019.html> --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: chain-uri with a blank?

2016-02-17 Thread Quanah Gibson-Mount
ss of the type of URL. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: Invalid credentials

2016-02-20 Thread Quanah Gibson-Mount
lp me? It is unlikely your installation uses slapd.conf at all. Modern OpenLDAP installations have long since abandoned that deprecated method of configuration. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messagin

Re: can find slapd.conf fine in /etc/openldap under Centos7

2016-02-20 Thread Quanah Gibson-Mount
i can find is slapd.ldif . though i still can start slapd services does openldap need slapd.conf any more ? No. I suggest reading the admin guide, which discusses the cn=config configuration database in depth. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc

RE: Invalid credentials

2016-02-20 Thread Quanah Gibson-Mount
e wrong DN. Given the close to zero amount of information provided about the DN in question in your configuration, it's essentially impossible for us to know what the issue is. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader

Re: ssf settings for SASL and TLS

2016-02-20 Thread Quanah Gibson-Mount
Make sure your SASL binds *also* use TLS. Then you're covered. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: ppolicy overlay and disk space exhaution

2016-02-22 Thread Quanah Gibson-Mount
oth offer prebuilt packages of OpenLDAP. Both of these sanely link to OpenSSL. Regards, Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: "LDAP ease modify restrictions" support

2016-02-22 Thread Quanah Gibson-Mount
can't even properly to 30 seconds is still open after over a decade. I'd strongly advise finding a different Java API for working with LDAP (We use UnboundID's LDAP API). --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in o

Re: "LDAP ease modify restrictions" support

2016-02-22 Thread Quanah Gibson-Mount
--On Monday, February 22, 2016 10:00 PM +0100 Radovan Semancik wrote: On 02/22/2016 05:57 PM, Quanah Gibson-Mount wrote: Right. Even though the situation is not that easy when going through abstractions such as JNDI Wow, I'm surprised anyone is still using something as utterly brok

Re: ppolicy overlay and disk space exhaution

2016-02-22 Thread Quanah Gibson-Mount
there are good alternatives like the LTB project and Symas, as I already noted, for those who aren't able to compile from source for whatever reasons. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging an

Re: ppolicy overlay and disk space exhaution

2016-02-22 Thread Quanah Gibson-Mount
to MozNSS, which is very problematic and should be avoided. It makes much more sense to start with something like the LTB project, and base anything off their spec if not using their pre-compiled packages. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc

Re: LDIF?

2016-02-23 Thread Quanah Gibson-Mount
--On Tuesday, February 23, 2016 10:39 PM + Mary Kao wrote: objectClass: organizationUnit As the error clearly states, the above is not a valid objectClass. Perhaps you mean organizationalUnit? --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc

Re: LDIF?

2016-02-23 Thread Quanah Gibson-Mount
--On Wednesday, February 24, 2016 12:50 AM +0100 Emmanuel Lécharny wrote: No to mention there is a missing dc Attribute in the entry. Good point. It's unlikely the author meant to combine the two objectClasses. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra

Re: OpenLDAP 2.4x Syncrepl setup

2016-03-02 Thread Quanah Gibson-Mount
or everything, and has scripted MMR setup. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: ldapmodify hangs, slapd appears to be looping

2016-03-03 Thread Quanah Gibson-Mount
LTB project or Symas. <http://ltb-project.org/wiki/download#openldap> <https://symas.com/products/openldap-directory/> There were some known issues with mdb in 2.4.40 and 2.4.41 you may be triggering here. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. ---

Re: ldapmodify hangs, slapd appears to be looping

2016-03-03 Thread Quanah Gibson-Mount
th (artificial) standards ________ From: Quanah Gibson-Mount Sent: Thursday, March 3, 2016 10:37 AM To: Heinemann, Peter; openldap-technical@openldap.org Subject: Re: ldapmodify hangs, slapd appears to be looping --On Thursday, March 03, 2016 3:23 PM + "Heinemann, Peter" wrote:

Re: DB_LOG_AUTOREMOVE fails to suppress the log files

2016-03-03 Thread Quanah Gibson-Mount
back-mdb instead of back-bdb or back-hdb As to your issue, did you set a checkpoint? --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: slapd-meta

2016-03-04 Thread Quanah Gibson-Mount
--On Tuesday, March 01, 2016 7:23 PM +0100 Fr3ddie wrote: Il 18/11/2015 02:32, Quanah Gibson-Mount ha scritto: --On Tuesday, November 17, 2015 7:57 PM +0200 Fr3ddie wrote: Il 10/11/2015 13:06, Fr3ddie ha scritto: Hello to the list, Nobody has any hint? I suggest reading the code

Re: DB_LOG_AUTOREMOVE fails to suppress the log files

2016-03-07 Thread Quanah Gibson-Mount
nt). --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: Antw: delta sync and strictrefresh

2016-03-09 Thread Quanah Gibson-Mount
at still is not guaranteed. * <http://www.openldap.org/its/index.cgi/?findid=8281> * <http://www.openldap.org/its/index.cgi/?findid=8365> --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: Antw: Re: log_rdns.patch

2016-03-09 Thread Quanah Gibson-Mount
T, IP addresses are not in and of themselves the full set of information necessary to identify a system. You need the address + port, and only the ISP can map it back to any individual system. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra ::

Re: Antw: delta sync and strictrefresh

2016-03-10 Thread Quanah Gibson-Mount
--On Thursday, March 10, 2016 8:27 AM +0100 Ulrich Windl wrote: Quanah Gibson-Mount schrieb am 10.03.2016 um 04:49 in Nachricht <07CEB0B0E429A934BA46C978@[192.168.1.9]>: --On Wednesday, March 09, 2016 8:46 AM +0100 Ulrich Windl wrote: Sometimes it happen the consumer go out o

Re: SASL2 and Openldap

2016-03-10 Thread Quanah Gibson-Mount
suggest a good "How to" on how to accomplish this on a FreeBSD OS (if that makes any difference). Examples are welcomed :) What is it you want to do, exactly? --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source mes

Re: Collaborative work of MirrorMode replication and LDAP Sync Replication

2016-03-10 Thread Quanah Gibson-Mount
orate? --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: SASL2 and Openldap

2016-03-10 Thread Quanah Gibson-Mount
--On Thursday, March 10, 2016 3:02 PM -0500 Jerry wrote: On Thu, 10 Mar 2016 10:47:51 -0800, Quanah Gibson-Mount stated: --On Thursday, March 10, 2016 1:05 PM -0500 Jerry wrote: > I just started creating a new server with FreeBSD 11. I installed > the openldap port. Now I am try

Re: Collaborative work of MirrorMode replication and LDAP Sync Replication

2016-03-10 Thread Quanah Gibson-Mount
il over to a different master if the one it is pointing at goes down. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: Collaborative work of MirrorMode replication and LDAP Sync Replication

2016-03-10 Thread Quanah Gibson-Mount
--On Thursday, March 10, 2016 12:52 PM -0800 Quanah Gibson-Mount wrote: --On Thursday, March 10, 2016 10:43 PM +0300 Andrei Valoshyn wrote: Hello Quanah, The case 3 - not standard replication approuch for openldap. Kind of mix MirrorMode replication and LDAP Sync Replication. And I want to

Re: olcAccess/olcLimits modifications

2016-03-14 Thread Quanah Gibson-Mount
2}), adjust appropriately. changetype: modify add: olcAccess olcAccess: {11} --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: olcAccess/olcLimits modifications

2016-03-15 Thread Quanah Gibson-Mount
). What's handed with the way things are ordered in cn=config is that you don't have to run the delete command against the full exact value, but only the index. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source

Re: olcAccess/olcLimits modifications

2016-03-15 Thread Quanah Gibson-Mount
the new value. This has nothign to do with devs, but with the RFC specification that defined this behavior decades ago. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: Error with :mozillaOrgPerson removed from template as it is not defined in the schema

2016-03-19 Thread Quanah Gibson-Mount
iki/index.php/SchemaContributed:MozillaOrgPerson> <http://www.zytrax.com/books/ldap/ape/courier.html> --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: cn=config (MMR) replication causes ldapsearch -ZZ to hang on RHEL 6.7

2016-03-22 Thread Quanah Gibson-Mount
as.com/products/openldap-directory/>). Using the broken cruft shipped by RH is just asking for trouble. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: Syncrepl TLS woes

2016-03-28 Thread Quanah Gibson-Mount
ably a lot of data, given the fact you're doing replication with verions known to be broken in regard to replication... --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: CSN is matching but entries count differs in master and slaves

2016-03-28 Thread Quanah Gibson-Mount
e the replica from the provider? --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: CSN is matching but entries count differs in master and slaves

2016-03-31 Thread Quanah Gibson-Mount
-- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: Openldap 2.4.44 syncprov delays

2016-04-01 Thread Quanah Gibson-Mount
need to change in my syncprov/syncrepl configuration to get around this? No, this would be a serious bug. Can you provide related configs and test data that reproduce the issue? I've not seen anything like this w/ delta-syncrepl MMR. --Quanah -- Quanah Gibson-Mount Platform Arch

Re: Openldap 2.4.44 syncprov delays

2016-04-04 Thread Quanah Gibson-Mount
--On Monday, April 04, 2016 6:24 PM + Frank Swasey wrote: I have been able to reproduce the failure. Do you want an ITS with the configuration files, database and instructions to reproduce? Yes, please. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc

Re: slapd ACL - limit bind to employeeType=

2016-04-10 Thread Quanah Gibson-Mount
by * auth You might be able to work something out using filter=... and access to userpasswd that way? --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: ldapdelete recursive (-r) with syncrepl

2016-04-12 Thread Quanah Gibson-Mount
; slapadd. What are you trying to accomplish? --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: ldapdelete recursive (-r) with syncrepl

2016-04-12 Thread Quanah Gibson-Mount
nodes and not containers?     OpenLDAP version? It would also be useful to know your syncrepl configuration, etc (minus any passwords). --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: ldapdelete recursive (-r) with syncrepl

2016-04-12 Thread Quanah Gibson-Mount
efreshOnly  bindmethod=sasl  saslmech=EXTERNAL   I strongly advise against using refreshOnly. There's virtually no instance where that is the correct option. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open sourc

Re: ldapdelete recursive (-r) with syncrepl

2016-04-12 Thread Quanah Gibson-Mount
og: <http://www.openldap.org/software/release/changes.html> I'm not kidding when I say there are *SERIOUS* bugs with 2.4.40 and replication. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: ldapdelete recursive (-r) with syncrepl

2016-04-13 Thread Quanah Gibson-Mount
any issues with bulk operations being propagated to the other master replicas. Good, delta-syncrepl's definitely better. But this doesn't resolve the many replication problems that still exist in 2.4.40. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. ---

Re: ldapdelete recursive (-r) with syncrepl

2016-04-13 Thread Quanah Gibson-Mount
they do find it acceptable, by all means, stay on 2.4.40. ;) Also not sure which database backend you're using, but I'd strongly advise back-mdb once you get to 2.4.44. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in o

Re: ldapdelete recursive (-r) with syncrepl

2016-04-13 Thread Quanah Gibson-Mount
not want to do for your backups. In fact, that will likely cause serious issues if you do set that when loading a DB taken from a real master. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: ldapdelete recursive (-r) with syncrepl

2016-04-13 Thread Quanah Gibson-Mount
--On Wednesday, April 13, 2016 10:20 AM -0700 Quanah Gibson-Mount wrote: --On Wednesday, April 13, 2016 1:16 PM -0400 Frank Crow wrote:  Then just slapcat the data first, do your destructive tests, and then restore from slapadd.  Doing repetitive ldap deletes/adds will just causes

Re: Q: accesslog and replicated changes

2016-04-14 Thread Quanah Gibson-Mount
w it's supposed to operate in an MMR environment. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: ldap_sync(3) function usage

2016-04-18 Thread Quanah Gibson-Mount
7;t find any example code that is using that interface, so if somebody could point me to any that does, I'd really appreciate it. The Net::LDAPapi perl module uses the C library for building a sync client. You may want to examine it. --Quanah -- Quanah Gibson-Mount

Re: Export issue after an DN change

2016-04-22 Thread Quanah Gibson-Mount
ckend? What results do you get from slapcat? --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: Export issue after an DN change

2016-04-29 Thread Quanah Gibson-Mount
of the numerous bugs fixed since that time. For example, maybe it is one of these ITSes, fixed since 2.4.35: 7628, 7702, 7927, 8146, 8103, 8036, 7904, 7975, 8203. I would strongly advise you to upgrade to a current release. --Quanah -- Quanah Gibson-Mount Platform A

Re: Documentation

2016-04-30 Thread Quanah Gibson-Mount
ou haven't read the quickstart guide in a while. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: Documentation

2016-04-30 Thread Quanah Gibson-Mount
--On Saturday, April 30, 2016 3:21 PM -0700 Daniel Howard wrote: On Apr 30, 2016 1:03 PM, "Quanah Gibson-Mount" wrote: --On Saturday, April 30, 2016 11:41 AM -0700 Daniel Howard wrote: My recent experience is OpenLDAP on Ubuntu. I thought I would go with OpenLDAP's gui

Re: ldap user login attempt kills slapd service

2016-05-10 Thread Quanah Gibson-Mount
ied. The RHEL packages of OpenLDAP are known broken. Why are you using them? --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: ldap user login attempt kills slapd service

2016-05-10 Thread Quanah Gibson-Mount
hel72 instead. What do you suggest? Thank you, Liz _________ From: Quanah Gibson-Mount Sent: Tuesday, May 10, 2016 4:03 PM Subject: Re: ldap user login attempt kills slapd service To: , Real, Elizabeth (392K) --On Tuesday, May 10, 2016 11:58 PM + "Real, Elizabeth

Re: OpenLDAP logging and rsyslog

2016-05-11 Thread Quanah Gibson-Mount
logs everything via binary logs to systemd. We've hit this with recent Zimbra installs, you can see <https://bugzilla.zimbra.com/show_bug.cgi?id=104534> for more detail. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open

Re: SLAPD WON'T START ON ONE OF THE MULTIMASTERS

2016-05-16 Thread Quanah Gibson-Mount
Apr 16:56 2016 (ITS#8413) Assertion in back-mdb/search.c during replication Full_Name: Quanah Gibson-Mount Version: 2.4.44 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (75.111.52.177) During replication from the accesslog DB, in a 4-way MMR setup, various masters

RE: SLAPD WON'T START ON ONE OF THE MULTIMASTERS

2016-05-16 Thread Quanah Gibson-Mount
dap-data directories and the __db.*. Could I run a slapcat of the dbase on ldapserver1 and copy that over to ldapserver2? Is that a viable option? John D. Borresen (Dave) Ph: (781) 981-1609 Email: john.borre...@ll.mit.edu -----Original Message- From: Quanah Gibson-Mount [mailto:qua...@zimbr

RE: SLAPD WON'T START ON ONE OF THE MULTIMASTERS

2016-05-16 Thread Quanah Gibson-Mount
609 Email: john.borre...@ll.mit.edu -Original Message- From: Quanah Gibson-Mount [mailto:qua...@zimbra.com] Sent: Monday, May 16, 2016 1:47 PM To: Borresen, John - 0444 - MITLL; openldap-technical@openldap.org Subject: RE: SLAPD WON'T START ON ONE OF THE MULTIMASTERS Actually, neve

Re: pw-sha2, olcPasswordHash, SSHA512 & with cn=config

2016-05-17 Thread Quanah Gibson-Mount
Read the man page and load the module as part of slapadd. --Quanah > On May 17, 2016, at 12:13 PM, Patrick Ohearn wrote: > > Hi, > > I am running into an issue with changing olcPasswordHash to SSHA512, > in cn=config . OpenLDAP appears not to load the pw-sha2 module from > contrib, until afte

Re: Partial SyncRepl replication

2016-05-19 Thread Quanah Gibson-Mount
pages or is the source code (or the benevolence of one of you good folks) my only hope? + --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: Partial SyncRepl replication

2016-05-19 Thread Quanah Gibson-Mount
--On Thursday, May 19, 2016 12:18 PM -0400 Frank Swasey wrote: Today at 10:37am, Quanah Gibson-Mount wrote: --On Thursday, May 19, 2016 10:11 AM -0400 Frank Swasey wrote: I am running OpenLDAP 2.4.44 locally built on RHEL7 using mdb as the database backend. I am attempting to replicate

Re: entryCSN is larger (later) in consumer node than in provider node

2016-05-23 Thread Quanah Gibson-Mount
each server. It is required that your clocks be tightly sync'd. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: entryCSN is larger (later) in consumer node than in provider node

2016-05-24 Thread Quanah Gibson-Mount
: 20160524152340.159717Z#00#002#00 node 5: contextCSN: 20150723095205.352520Z#00#000#00 contextCSN: 20160524152519.525094Z#00#001#00 contextCSN: 20160524152340.159717Z#00#002#00 THanks Frank On Mon, May 23, 2016 at 5:11 PM, Quanah Gibson-Mount wrote: --On Monday, May 23, 2016 5:56

Re: entryCSN is larger (later) in consumer node than in provider node

2016-05-24 Thread Quanah Gibson-Mount
=u,dc=com" credentials=password searchbase="dc=u,dc=com" schemachecking=on type=refreshAndPersist retry="60 +" Thanks Frank On Tue, May 24, 2016 at 12:54 PM, Quanah Gibson-Mount wrote: Sure -- 000 i

Re: entryCSN is larger (later) in consumer node than in provider node

2016-05-25 Thread Quanah Gibson-Mount
--On Wednesday, May 25, 2016 5:21 PM -0400 Frank Luo wrote: yes overlay ppolicy So ppolicy maintains various data internally to the server. That's likely what is giving you #000# items. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Z

Re: problems connecting to ldaps:// under high load with ppc64 client

2016-05-26 Thread Quanah Gibson-Mount
nd this is not supported by the OpenLDAP project. I would strongly advise avoiding the RHEL built client libraries entirely, and use sane packages linked to OpenSSL. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. Zimbra :: the leader in open source mes

Re: Odd MMR behaviour with delta-syncrepl and refreshAndPersist

2016-06-03 Thread Quanah Gibson-Mount
ollowing behaviour when adding and deleting objects: Likely <http://www.openldap.org/its/index.cgi/?findid=8432> --Quanah -- Quanah Gibson-Mount Platform Architect Manager, Systems Team Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A divis

Re: Odd MMR behaviour with delta-syncrepl and refreshAndPersist

2016-06-13 Thread Quanah Gibson-Mount
--On Saturday, June 04, 2016 4:01 PM -0700 "Paul B. Henson" wrote: On Fri, Jun 03, 2016 at 04:06:45PM -0700, Quanah Gibson-Mount wrote: Likely <http://www.openldap.org/its/index.cgi/?findid=8432> This is a new issue with 2.4.44? We've been running a 4 node MMR syste

Re: Assertion failed

2016-06-14 Thread Quanah Gibson-Mount
--On Tuesday, June 14, 2016 12:57 PM +0200 mdii wrote: Hi, I'm having some trouble when starting a openLDAP 2.4.35. Upgrade to a current release instead of one that's over 3 years old. --Quanah -- Quanah Gibson-Mount Platform Architect Manager, Systems Team Z

Re: Odd MMR behaviour with delta-syncrepl and refreshAndPersist

2016-06-15 Thread Quanah Gibson-Mount
u provided, obfuscated as necessary. --Quanah -- Quanah Gibson-Mount Platform Architect Manager, Systems Team Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: openldap 2.4.44 - delta-syncrepl fails on auditContext

2016-06-20 Thread Quanah Gibson-Mount
t you mean. I have no issues with empty consumers replicating from their master servers. --Quanah -- Quanah Gibson-Mount Platform Architect Manager, Systems Team Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: openldap 2.4.44 - delta-syncrepl fails on auditContext

2016-06-20 Thread Quanah Gibson-Mount
with the following: I don't have the accesslog module loaded on my replicas, and they do not have this issue. ;) Are you doing cn=config replication as well as replicating the main db? --Quanah -- Quanah Gibson-Mount Platform Architect Manager, Systems Team Zimbra

Re: openldap 2.4.44 - delta-syncrepl fails on auditContext

2016-06-21 Thread Quanah Gibson-Mount
3, and 4. In fact, I recently updated it so that my replicas can pull from N number of masters. ;) --Quanah -- Quanah Gibson-Mount Platform Architect Manager, Systems Team Zimbra, Inc. Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc

Re: mdb backup via slapcat

2016-06-24 Thread Quanah Gibson-Mount
[1]. You are confusing LDBM with LMDB. Two entirely different things. Slapcat is perfectly valid for back-mdb. The FAQ simply hasn't been updated in years. I.e., LMDB didn't even exist the last time it was updated. --Quanah -- Quanah Gibson-Mount Platform Architect Manage

<    1   2   3   4   5   6   7   8   9   10   >