Re: How to improve performance with MDB backend?

I am sorry replaying directly. I didn't check who was in TO field. OK I will try Re24. Tnx again. Sasa On Tue, Apr 9, 2013 at 4:15 PM, Quanah Gibson-Mount qua...@zimbra.comwrote: --On Tuesday, April 09, 2013 2:07 PM +0200 Saša-Stjepan Bakša ssba...@gmail.com wrote: Tnx. I will add what

Re: How to improve performance with MDB backend?

On Mon, Apr 8, 2013 at 4:40 PM, Quanah Gibson-Mount qua...@zimbra.comwrote: --On Monday, April 08, 2013 4:49 AM -0700 Howard Chu h...@symas.com wrote: Saša-Stjepan Bakša wrote: Hi, Maybe this is not the best way to ask but I would like to get some performance expectations or maybe

Re: How to improve performance with MDB backend?

Well, hardware is described in my first post. Now I am waiting for HP blades and SSD array :-) so if you need/want some tests to be done it can be arranged (in idle time). Br Sasa On Mon, Apr 15, 2013 at 7:09 PM, Michael Ströder mich...@stroeder.comwrote: Saša-Stjepan Bakša wrote: Now I

Alias dereferencing

I am using alias dereferencing with hdb backed because that was application requirement. Now I am switching to mdb but I can't get the same answer with ldapsearch. Does dereferencing work for mdb? Lp Sasa

Re: Alias dereferencing

On Thu, Apr 18, 2013 at 4:11 PM, Quanah Gibson-Mount qua...@zimbra.comwrote: --On Thursday, April 18, 2013 1:55 PM +0200 Saša-Stjepan Bakša ssba...@gmail.com wrote: I am using alias dereferencing with hdb backed because that was application requirement. Now I am switching to mdb but I can't

Re: How to improve performance with MDB backend?

First test with your sugestions. I am using Phyton program writen by me to add data to server. Server is Centos 6.2 based (hardware described in my first post) Python runs on separeate dual core PC with 1Gb connection to servers. Servers are configured as N-way Multymaster Test startTest stop

Re: How to improve performance with MDB backend?

For second test I have changed I/O scheduler only Nothing changed in terms of adding speed! Test startTest stop Test durationNum usersUser/sec 19.4.2013 19.4.2013min 5759,00742837128,99 14:37:45 16:13:34 sec 95,98333 [root@spr1 /]# cat

Re: How to improve performance with MDB backend?

Ok. I see your point and lesson is learned. Will do as suggested. On Fri, Apr 19, 2013 at 6:07 PM, Howard Chu h...@symas.com wrote: You really need to learn something more about system administration; you clearly don't know what to investigate but this is all fundamental sysadmin

Re: How to improve performance with MDB backend?

Ok. tnx for your suggestion. br Sasa . On Sat, Apr 20, 2013 at 10:16 AM, devzero2000 pinto.e...@gmail.com wrote: Just for Info, you should take a look to the tuned daemon and setting a consistent profile for your workload. It can help a lot. Best 2013/4/19, Saša-Stjepan Bakša ssba

Re: hdb and mdb dereferencing aliases differently

517a4879 send_ldap_result: err=0 matched= text= 517a4879 send_ldap_response: msgid=2 tag=101 err=0 On Fri, Apr 26, 2013 at 8:51 AM, Saša-Stjepan Bakša ssba...@gmail.comwrote: If I may add some of my observations, Problem (for me) is starting to show when I have more than 2 users inserted

Re: Problem adding olcModuleLoad

On 7 October 2014 05:51, Daniel Jung mimianddan...@gmail.com wrote: I tried adding suffix la as well. but no to avail. dn: cn=module{0},cn=config changetype: modify add: olcModuleLoad olcModuleLoad: memberof.la Are you sure that module with that name exists at you system? Did you try to

Very slow ldapserach

Hi, Year ago we have tested openldap with back_mdb and it was fantastic. Search worked as a charm. Database was filled with 20 mil. users and serach returned some 20 k results per sec (my colegue did the test). Now we need that setup for some tests and we encountered very slow response - 1

Re: Very slow ldapserach

Hi, It was long weekend with Easter holiday so... To answer Mattes, and Ulrich first, I will do as suggested by you. But something new first. If I have tried to add less data to database and then I have conducted the search. Till some point it works and then fails. It looks like when database

Re: Very slow ldapserach

On 7 April 2015 at 11:36, Saša-Stjepan Bakša ssba...@gmail.com wrote: Hi, It was long weekend with Easter holiday so... To answer Mattes, and Ulrich first, I will do as suggested by you. But something new first. If I have tried to add less data to database and then I have conducted

Re: Very slow ldapserach

On 8 April 2015 at 18:05, Quanah Gibson-Mount qua...@zimbra.com wrote: --On Wednesday, April 08, 2015 11:58 AM +0200 Saša-Stjepan Bakša ssba...@gmail.com wrote: I have tested search with your suggestion. No crash - slapd crashes only when deref is on or in best case it is slow (10 to 20

Re: Very slow ldapserach

On 9 April 2015 at 17:57, Quanah Gibson-Mount qua...@zimbra.com wrote: --On Thursday, April 09, 2015 10:21 AM +0200 Saša-Stjepan Bakša ssba...@gmail.com wrote: And search for all still crashes openldap server ldapsearch -h 10.14.252.103 -p 389 -D cn=admin,dc=spr -w siemens -s sub

Re: Very slow ldapserach

On 9 April 2015 at 17:57, Quanah Gibson-Mount qua...@zimbra.com wrote: --On Thursday, April 09, 2015 10:21 AM +0200 Saša-Stjepan Bakša ssba...@gmail.com wrote: And search for all still crashes openldap server I must wait for 2.4.41 release then. In the mean time I will use LTB project

Re: Very slow ldapserach

On 9 April 2015 at 02:37, Quanah Gibson-Mount qua...@zimbra.com wrote: --On Wednesday, April 08, 2015 8:51 PM +0200 Saša-Stjepan Bakša ssba...@gmail.com wrote: I am sorry for this mistake with answering to you and not to the group. It was unintentional mistake. Ok, I will check ITS#7657

Re: Alias dereferencing and performance

Hi Karol, Same problem here. Quanah suggested that we have to use dereferncing set to when finding but with that option we have problem that some data is missing from answer although speed is as with HDB. My database is in range from 1 Milion to 50 Milion objects. Br Sasa On 2 September 2015

Re: LDAP authentication with uid

Hi, Maybe this will help you. I am using this for testing purpose and I am sure that there are some more scure examples but ... This is a test user, test group and test apache2 config part: User: dn: uid=ptest,ou=CS,ou=Policy,ou=SDM,dc=lab,dc=os objectClass: posixAccount objectClass: top

Re: After few seconds slapd automatically closes connection. Why?

Faceplam. Bloody olcIdleTimeout, I was searching for it but obviously didn't find it till your mentioned it. Very embarrassing indeed. Thank you for your help. Br Sasa On 17 February 2017 at 14:38, Saša-Stjepan Bakša <ssba...@gmail.com> wrote: > Hi Frank, > > Yes, all is inside

Dynamic groups/lists

Hi, I have access to LDAP server which doesn't have any groups defined. All users have only attributes which are used to distinguish to which type of users they belong and for application which I have intention to use groups are necessary. I don't have authority to change that but I can create

After few seconds slapd automatically closes connection. Why?

After successful bind and some search actions my client is still bind to server but as I can see from trace few seconds after successful operation slapd shuts down connection. Why is that happening? Can I prevent it? We have monitoring in our software which find that as server down and lots of

Re: After few seconds slapd automatically closes connection. Why?

he client, or only the client? What > version of OpenLDAP are you using? What is the value assigned to > idletimeout in the OpenLDAP configuration? > > > > On 2/17/17, 08:00, "openldap-technical on behalf of Saša-Stjepan Bakša" < > openldap-technical-boun...@openldap.

Re: Dynamic groups/lists

, Clément OUDOT <clem.ou...@gmail.com> wrote: > 2017-02-21 15:09 GMT+01:00 Saša-Stjepan Bakša <ssba...@gmail.com>: > > Hi, > > > > I have access to LDAP server which doesn't have any groups defined. All > > users have only attributes which are used to distinguish

Re: Does everybody end up writing their own directory management programs?

On 19 September 2016 at 14:01, Shawn McKinney wrote: > > > On Sep 18, 2016, at 2:25 PM, John Lewis wrote: > > > > Right now I am trying to weigh my options for maintaining my POSIX > > accounts on an OpenLDAP tree. > > > > I learned today that ldap

Re: Re: Garbled objectClass

On Thu, 24 Oct 2019 at 08:26, Ulrich Windl < ulrich.wi...@rz.uni-regensburg.de> wrote: > >>> Philip Guenther schrieb am 23.10.2019 um > 18:28 > in > Nachricht : > > On Wed, 23 Oct 2019, Quanah Gibson-Mount wrote: > > > > The "–" in the DESC is not the ascii "-" but a Unicode hyphen. > > Good

Re: Garbled objectClass

019 at 04:52:41PM +0200, Saša-Stjepan Bakša wrote: > > Is there any good reason that I see one of my custom objectClass garbled > >like this below. It happens when I am reading content from file. From GUI > >tool it looks as it should. &g

Garbled objectClass

Is there any good reason that I see one of my custom objectClass garbled like this below. It happens when I am reading content from file. From GUI tool it looks as it should. olcObjectClasses:: ezZ9KCAxLjMuNi4xLjQuMS4zNTI2OS4zLjI0NS4yLjcgTkFNRSAncGNyZ

Re: OpenLDAP 2.5.5 PPA for Ubuntu 20.04 LTS

23, 2021 3:15 PM +0200 Saša-Stjepan Bakša > wrote: > > > > Does anyone maintain PPA for OpenLDAP 2.5.5 PPA for Ubuntu 20.04 LTS? > > On the Symas page, there is a package only for 2.4.59+dfsg-1ppa~bionic1 > > and since Quanah recommends the latest version for using dynlist

Re: OpenLDAP 2.5.5 PPA for Ubuntu 20.04 LTS

On Mon, 23 Aug 2021 at 17:15, David Coutadeur wrote: > > Hi, > > For information, the LDAP Toolbox Community is providing packages for > OpenLDAP. > > For now, only 2.4.59 packages are available (see > https://ltb-project.org/download), but we are about to release a 2.5.7 > version. > > Regards,

Re: OpenLDAP 2.5.5 PPA for Ubuntu 20.04 LTS

On Tue, 24 Aug 2021 at 19:39, Quanah Gibson-Mount wrote: > > > We don't provide any i386 data, which is what that message is saying. > I.e., your local apt command looked for an i386 architecture and was > unable > to find one. For some reason, Ubuntu still configures to look for i386 by >

OpenLDAP 2.5.5 PPA for Ubuntu 20.04 LTS

create an Ubuntu building environment. Br, Saša-Stjepan Bakša

Re: 2.5.7 - adding memberof module Duplicate attributeType

On Sun, 29 Aug 2021 at 16:50, Dave Macias wrote: > Thank you for the input! > > Ive been researching it a bit. As far as I understand, dynlist “allows for > expansion of dynamic groups and more” (from the man). Also, I'm assuming > that dynlist also works well with MMR syncrepl, yes? (Since

Is there significance in overlay order in replicated environment

Hi, I am moving my old LDAP setup which is now more than 8 years old to version 2.5.7 (Symas Ubuntu build). Now I use simple Master -> backup only sync configuration. On those systems I also use accesslog overlay. On new systems I would like to deploy a multi master with delta sync or maybe

Re: Is there significance in overlay order in replicated environment

> > > Yes, it matters. Syncprov first, then accesslog. After that order should > be immaterial. > > I would note that in OpenLDAP 2.5, a bit of the lastbind functionality has > been integrated into slapd so you may not need to deploy it separately. > > --Quanah > > > I thought so but wasn't

Re: Is there significance in overlay order in replicated environment

On Tue, 21 Sept 2021 at 16:47, Ondřej Kuzník wrote: > On Tue, Sep 21, 2021 at 02:23:35PM +0200, Saša-Stjepan Bakša wrote: > >> Also, in latest 2.5.7* olcLastBindPrecision* is not among list of > >> possible attributes for mdb. I Have searched for it also but only > >

Re: Is there significance in overlay order in replicated environment

> Lastbind functionality integrated partially? Nice! Where can I find > > documentation about it or a description on how to extract data for each > > user? > > > See the slapd.conf(5) man page. > > Ok I have found it, make it enabled and I can't find information where this attribute is shown. I

Re: Is there significance in overlay order in replicated environment

> > Ok I have found it, make it enabled and I can't find information where > this attribute is shown. I searched through this man page and through the > latest Admin guide but nothing points me in the direction of > this attribute location. I can see that it is loaded with schema but no > object

Re: 2.5.7 - adding memberof module Duplicate attributeType

On Mon, 30 Aug 2021 at 19:33, Quanah Gibson-Mount wrote: > > > > @Dave Macias Can you share the structure of your groups? > > member/memberOf depend on LDAP groups, not unix groups, which are based on > DNs. > > Example groups objectClasses are: > > groupOfNames (core schema) >