Re: OpenLDAP under 6.8 - no intermediate certs in chain

2020-11-16 Thread Paul B. Henson
On 11/16/2020 6:52 AM, Stuart Henderson wrote: ...actually I have now added a workaround to the databases/openldap port in 6.8-stable to disable TLS 1.3, so either rebuild or wait for -stable packages and it should fix things. Cool, I was actually already building from source in order to enabl

Re: OpenLDAP under 6.8 - no intermediate certs in chain

2020-11-16 Thread Paul B. Henson
On 11/16/2020 2:30 AM, Stuart Henderson wrote: Yes OpenLDAP is broken with TLS 1.3 server-side unless you have that commit (or build LibreSSL with TLS 1.3 server support disabled). As far as I can tell there's no method to disable TLS 1.3 via config. Hmm, yah, you can disable old versions, but

Re: OpenLDAP under 6.8 - no intermediate certs in chain

2020-11-16 Thread Paul B. Henson
On 11/15/2020 10:18 PM, Brad Smith wrote: I remember seeing this commit recently. Not sure if this is your problem or not. https://marc.info/?l=openbsd-cvs&m=160511882917510&w=2 That definitely looks like it, thanks for the pointer.

Re: OpenLDAP under 6.8 - no intermediate certs in chain

2020-11-16 Thread Stuart Henderson
On 2020-11-16, Stuart Henderson wrote: > Yes OpenLDAP is broken with TLS 1.3 server-side unless you have that > commit (or build LibreSSL with TLS 1.3 server support disabled). As far > as I can tell there's no method to disable TLS 1.3 via config. ...actually I have now added a workaround to the

Re: OpenLDAP under 6.8 - no intermediate certs in chain

2020-11-16 Thread Stuart Henderson
On 2020-11-16, Brad Smith wrote: > On 11/16/2020 12:08 AM, Paul B. Henson wrote: >> I just updated one of my servers running 6.7 to 6.8, and am having a >> problem with openldap. I have the intermediate cert and root CA in a >> file referenced by the openldap config: >> >> TLSCACertificateFile

Re: OpenLDAP under 6.8 - no intermediate certs in chain

2020-11-16 Thread Brad Smith
On 11/16/2020 12:08 AM, Paul B. Henson wrote: I just updated one of my servers running 6.7 to 6.8, and am having a problem with openldap. I have the intermediate cert and root CA in a file referenced by the openldap config: TLSCACertificateFile/etc/openldap/cabundle.crt Under 6.7 with the o

Re: openldap port mdb support

2017-08-06 Thread Stuart Henderson
On 2017/08/05 21:39, Paul B. Henson wrote: > I took a look at the patch in head; you should assign the failure code to rc > before calling Debug, as it refers to rc... Thanks, fixed. On 2017/08/05 21:40, Paul B. Henson wrote: > On Sat, Aug 05, 2017 at 12:35:24AM +, Stuart Henderson wrote: >

Re: openldap port mdb support

2017-08-03 Thread Paul B. Henson
On Mon, Jul 10, 2017 at 07:34:11AM +, Stuart Henderson wrote: > Feel free to try it, I believe the required patch to force MDB_WRITEMAP > is still in there..but I don't think there were any major changes upstream > since the last attempt so I wouldn't hold out too much hope for it working > st

Re: openldap port mdb support

2017-07-10 Thread Stuart Henderson
On 2017-07-10, Paul B. Henson wrote: > mdb has been disabled in the openldap port since it looks like > 2015/02/16, I was wondering if anyone has tried it since then to see if > maybe the issues with it have been resolved? The other backends are > deprecated upstream, it would be nice to get mdb w

Re: OpenLDAP and filesystem permission

2017-04-28 Thread Marcus MERIGHI
hello, ros...@ghweb.de (Markus Rosjat), 2017.04.27 (Thu) 12:59 (CEST): > I basically want to know if its okay to set permission on a file or > directory for a LDAP user even if there is no local user on this machine. > > Hope someone understand what I mean, background is setting up a mailserver

Re: openldap password fails to update

2014-03-09 Thread Stéphane Guedon
Le samedi 8 mars 2014, 14:20:23 Matthew Weigel a écrit : > On 03/08/2014 12:16 PM, Stéphane Guedon wrote: > >> I am looking through logs and config since the beginning of the > >> day... Actually, asking help on forums or mailing lists is always > >> my last step in solving problems... > > We try t

Re: openldap password fails to update

2014-03-09 Thread Stéphane Guedon
Le samedi 8 mars 2014, 16:14:53 Matthew Weigel a écrit : > On 03/08/2014 03:11 PM, Stéphane Guedon wrote: > > when I use 127.0.0.1 in php scripts, I can use ldap. > > if the script is running with 'localhost' then, no ldap data... > > > > Any idea why ? > > I have checked host resolution... > > tel

Re: openldap password fails to update

2014-03-08 Thread Matthew Weigel
On 03/08/2014 03:11 PM, Stéphane Guedon wrote: > when I use 127.0.0.1 in php scripts, I can use ldap. > if the script is running with 'localhost' then, no ldap data... > > Any idea why ? > I have checked host resolution... > telnet localhost ldap gives the good behavior Is PHP running inside a c

Re: openldap password fails to update

2014-03-08 Thread Stéphane Guedon
Le samedi 8 mars 2014, 19:16:07 Stéphane Guedon a écrit : > Le samedi 8 mars 2014, 17:21:26 Stéphane Guedon a écrit : > > Le samedi 8 mars 2014, 09:09:08 Matthew Weigel a écrit : > > > On Mar 8, 2014, at 6:29 AM, Stéphane Guedon > > > > wrote: > > > > Notably, the user fails to auth and do login

Re: openldap password fails to update

2014-03-08 Thread Stuart Henderson
On 2014-03-08, Stéphane Guedon wrote: > Notably, the user fails to auth and do login (with openbsd login > system AND webpages) eventhough password is correct according to ldap > itself ! How are you doing ldap authentication? (i.e. what software are you using, and how does it authenticate? attem

Re: openldap password fails to update

2014-03-08 Thread Matthew Weigel
On 03/08/2014 12:16 PM, Stéphane Guedon wrote: >> I am looking through logs and config since the beginning of the >> day... Actually, asking help on forums or mailing lists is always >> my last step in solving problems... We try to help. But... giving detailed descriptions of the problem, and sh

Re: openldap password fails to update

2014-03-08 Thread Stéphane Guedon
Le samedi 8 mars 2014, 17:21:26 Stéphane Guedon a écrit : > Le samedi 8 mars 2014, 09:09:08 Matthew Weigel a écrit : > > On Mar 8, 2014, at 6:29 AM, Stéphane Guedon > > wrote: > > > Notably, the user fails to auth and do login (with openbsd login > > > system AND webpages) eventhough password is

Re: openldap password fails to update

2014-03-08 Thread Stéphane Guedon
Le samedi 8 mars 2014, 09:09:08 Matthew Weigel a écrit : > On Mar 8, 2014, at 6:29 AM, Stéphane Guedon wrote: > > Notably, the user fails to auth and do login (with openbsd login > > system AND webpages) eventhough password is correct according to > > ldap itself ! > > That's a lot more moving pa

Re: openldap password fails to update

2014-03-08 Thread Matthew Weigel
On Mar 8, 2014, at 6:29 AM, Stéphane Guedon wrote: > > Notably, the user fails to auth and do login (with openbsd login > system AND webpages) eventhough password is correct according to ldap > itself ! That's a lot more moving parts than just passwords in LDAP. Have you checked your configurati

Re: openldap password fails to update

2014-03-08 Thread Stéphane Guedon
Le samedi 8 mars 2014, 12:23:19 Stuart Henderson a écrit : > On 2014-03-07, Stéphane Guedon wrote: > > But when I try to change this user password it fails : > > > > # ldappasswd -x -v -D "uid=test,ou=users,dc=22decembre,dc=eu" \ > > -w somesecret -s anothersec > > ldap_initialize( ) > > Result:

Re: openldap password fails to update

2014-03-08 Thread Stuart Henderson
On 2014-03-07, Stéphane Guedon wrote: > But when I try to change this user password it fails : > > # ldappasswd -x -v -D "uid=test,ou=users,dc=22decembre,dc=eu" \ > -w somesecret -s anothersec > ldap_initialize( ) > Result: Other (e.g., implementation specific) error (80) > Additional info: pass

Re: openldap password fails to update

2014-03-07 Thread Matthew Weigel
On 03/07/2014 04:22 AM, Stéphane Guedon wrote: # ldappasswd -x -v -D "uid=test,ou=users,dc=22decembre,dc=eu" \ -w somesecret -s anothersec ldap_initialize( ) Result: Other (e.g., implementation specific) error (80) Additional info: password hash failed I'm sorry, it's not clear that this is

Re: openldap-2.4.36 server

2013-11-11 Thread Stuart Henderson
On 2013-11-10, Predrag Punosevac wrote: > Hi Misc, > > I am playing with OpenLDAP and I have a question about OpenLDAP server. > I see in ports OpenLDAP server version 2.3.43 and the client version > 2.4.36 even though current release is 2.4.37. Is there a particular > reason besides lack of man p

Re: openldap-2.4.36 server

2013-11-10 Thread Predrag Punosevac
j...@wxcvbn.org (J??r??mie Courr??ges-Anglas) wrote: > Predrag Punosevac writes: > > > Hi Misc, > > Hi, > > this is a question for ports@. > I was not sure but I didn't want to cross post. > > I am playing with OpenLDAP and I have a question about OpenLDAP server. > > I see in ports OpenLDAP se

Re: openldap-2.4.36 server

2013-11-10 Thread Jérémie Courrèges-Anglas
Predrag Punosevac writes: > Hi Misc, Hi, this is a question for ports@. > I am playing with OpenLDAP and I have a question about OpenLDAP server. > I see in ports OpenLDAP server version 2.3.43 and the client version > 2.4.36 even though current release is 2.4.37. Is there a particular > reaso

Re: openldap on OBSD amd64 5.2

2013-01-14 Thread Stuart Henderson
On 2013-01-14, Claudio Jeker wrote: > On Mon, Jan 14, 2013 at 05:41:36PM -0200, Friedrich Locke wrote: >> Hi, >> >> i am trying to get openldap running, but my experience has been not that >> good. >> I have built and installed from ports. I can get it up and running but as >> soon as qmail tries

Re: openldap on OBSD amd64 5.2

2013-01-14 Thread Vijay Sankar
I am using db-4.6.21p4 Quoting Friedrich Locke : Hi, sounds strange. Claudio said it was borked for amd64. Are you using BDB ? Which version ? On Mon, Jan 14, 2013 at 8:10 PM, Vijay Sankar wrote: Quoting Friedrich Locke : Hi, i am trying to get openldap running, but my experience has b

Re: openldap on OBSD amd64 5.2

2013-01-14 Thread Friedrich Locke
Hi, sounds strange. Claudio said it was borked for amd64. Are you using BDB ? Which version ? On Mon, Jan 14, 2013 at 8:10 PM, Vijay Sankar wrote: > Quoting Friedrich Locke : > > Hi, >> >> i am trying to get openldap running, but my experience has been not that >> good. >> I have built and ins

Re: openldap on OBSD amd64 5.2

2013-01-14 Thread Vijay Sankar
Quoting Friedrich Locke : Hi, i am trying to get openldap running, but my experience has been not that good. I have built and installed from ports. I can get it up and running but as soon as qmail tries to bind into it, it begins to consume memory up to all my available memory. I asked for hel

Re: openldap on OBSD amd64 5.2

2013-01-14 Thread Claudio Jeker
On Mon, Jan 14, 2013 at 05:41:36PM -0200, Friedrich Locke wrote: > Hi, > > i am trying to get openldap running, but my experience has been not that > good. > I have built and installed from ports. I can get it up and running but as > soon as qmail tries to bind into it, it begins to consume memory

Re: openldap and openbsd

2011-06-30 Thread Stuart Henderson
On 2011-06-29, Stuart Henderson wrote: > On 2011-06-29, Remco wrote: >> >> Apart from the other advise you got I think you need to set the KRB5_KTNAME >> environment variable to tell slapd where to find your LDAP keytab, e.g.: >> (yeah, I edited the default slapd rc script, I don't know if there'

Re: openldap and openbsd

2011-06-29 Thread Remco
Stuart Henderson wrote: > On 2011-06-29, Remco wrote: >> >> Apart from the other advise you got I think you need to set the >> KRB5_KTNAME environment variable to tell slapd where to find your LDAP >> keytab, e.g.: (yeah, I edited the default slapd rc script, I don't know >> if there's a better w

Re: openldap and openbsd

2011-06-29 Thread Stuart Henderson
On 2011-06-29, Remco wrote: > > Apart from the other advise you got I think you need to set the KRB5_KTNAME > environment variable to tell slapd where to find your LDAP keytab, e.g.: > (yeah, I edited the default slapd rc script, I don't know if there's a > better way) this will cause you hassle

Re: openldap and openbsd

2011-06-29 Thread Remco
Friedrich Locke wrote: > Dear list members, > > i have just installed openldap from ports (OpenBSD 4.9/amd64) and i am > testing it. My doubt is: > > It seems to me that openldap should be run as user "x" and group "y" > accordingly the ports collection. The problem is that i want to use > kerbe

Re: openldap and openbsd

2011-06-29 Thread Janne Johansson
2011/6/28 Friedrich Locke > Dear list members, > > i have just installed openldap from ports (OpenBSD 4.9/amd64) and i am > testing it. My doubt is: > > It seems to me that openldap should be run as user "x" and group "y" > accordingly the ports collection. The problem is that i want to use > ker

Re: openldap and openbsd

2011-06-28 Thread Jeremie Courreges-Anglas
Friedrich Locke writes: > How could i run openldap as another user not root and provide it with > a ldap/x.y.z ticket? Use kadmin and ktadd -k. Remember that openldap (and only openldap) should only have read access to the new keytab.

Re: OpenLDAP

2011-01-10 Thread Remi Locherer
Hi Friedich It's in current: http://marc.info/?l=openbsd-ports&m=129440451210138&w=2 Regards, Remi On 01/11/2011 12:56 AM, Friedrich Locke wrote: Hi folks, is there plan for openbsd support openldap with recent version(s) of bdb ? Thanks in advance, Gustavo.

Re: OpenLDAP w/o bdb okay?

2009-05-06 Thread Dan
Henning Brauer(lists-open...@bsws.de)@2009.01.06 14:42:09 +0100: > * Toni Mueller [2009-01-06 12:25]: > > > openldap is still a piece of shit, but the ldbm backend is probably the > > > sanest one. > > > > This pattern comes up often, but almost noone suggests an alternative > > LDAP server packa

Re: OpenLDAP w/o bdb okay?

2009-01-18 Thread Henning Brauer
* dan-openbsd-m...@ourbrains.org [2009-01-16 19:38]: > Henning Brauer(lists-open...@bsws.de)@2009.01.06 14:42:09 +0100: > > I am not aware of any. Lack of options doesn't make openldap better. > > There is an option for people who have very basic LDAP needs - tinyldap > from fefe.de. It's high q

Re: OpenLDAP w/o bdb okay?

2009-01-16 Thread dan-openbsd-misc
Henning Brauer(lists-open...@bsws.de)@2009.01.06 14:42:09 +0100: > I am not aware of any. Lack of options doesn't make openldap better. There is an option for people who have very basic LDAP needs - tinyldap from fefe.de. It's high quality but lacks many features at the time.

Re: OpenLDAP w/o bdb okay?

2009-01-07 Thread Toni Mueller
On Tue, 06.01.2009 at 06:27:17 -0500, ppruett-lists wrote: > Actually a lot linux users suggest using mysql for the non relational > authentication tables > ;) I knew you've got to be kidding! -- Kind regards, --Toni++

Re: OpenLDAP w/o bdb okay?

2009-01-07 Thread Toni Mueller
Hi, On Tue, 06.01.2009 at 14:42:09 +0100, Henning Brauer wrote: > * Toni Mueller [2009-01-06 12:25]: > > This pattern comes up often, but almost noone suggests an alternative > > LDAP server package. > I am not aware of any. Lack of options doesn't make openldap better. agreed, but it makes ba

Re: OpenLDAP w/o bdb okay?

2009-01-06 Thread Henning Brauer
* Toni Mueller [2009-01-06 12:25]: > > openldap is still a piece of shit, but the ldbm backend is probably the > > sanest one. > > This pattern comes up often, but almost noone suggests an alternative > LDAP server package. I am not aware of any. Lack of options doesn't make openldap better. --

Re: OpenLDAP w/o bdb okay?

2009-01-06 Thread Stuart Henderson
Moving this to po...@. Reply-To/MFT set, please honour it. On 2009/01/06 06:11, ppruett-lists wrote: > > Here's an untested tarball of an updated openldap port, split into > > directories for 2.3 and 2.4: http://spacehopper.org/tmp/openldap.tgz > > > > This issue has been kicked around for maybe t

Re: OpenLDAP w/o bdb okay?

2009-01-06 Thread ppruett-lists
> This pattern comes up often, but almost noone suggests an alternative > LDAP server package Actually a lot linux users suggest using mysql for the non relational authentication tables ;)

Re: OpenLDAP w/o bdb okay?

2009-01-06 Thread Toni Mueller
Hi, On Tue, 06.01.2009 at 01:08:27 +0100, Henning Brauer wrote: > I am using openldap with ldbm backend in an not exactly small > installation for 9 or 10 years now. I have never ever experienced a > broken database. never. my last encounter with ldbm, a few years back, drove me to bdb really f

Re: OpenLDAP w/o bdb okay?

2009-01-06 Thread ppruett-lists
> Here's an untested tarball of an updated openldap port, split into > directories for 2.3 and 2.4: http://spacehopper.org/tmp/openldap.tgz This issue has been kicked around for maybe two years, it has been on the misc list before, https://kerneltrap.org/mailarchive/openbsd-misc/2007/5/20/149

Re: OpenLDAP w/o bdb okay?

2009-01-06 Thread Rubin
Henning Brauer wrote: > * Philip Guenther [2009-01-06 00:40]: >> On Mon, Jan 5, 2009 at 11:15 AM, Claudio Jeker >> wrote: >> ... >>> Any DB that needs human help after a crash is in my opinion a bad choice. >> So that would rule out the ldbm backend, no? Last I checked the libc >> btree code, a

Re: OpenLDAP w/o bdb okay?

2009-01-05 Thread Henning Brauer
* Philip Guenther [2009-01-06 00:40]: > On Mon, Jan 5, 2009 at 11:15 AM, Claudio Jeker > wrote: > ... > > Any DB that needs human help after a crash is in my opinion a bad choice. > > So that would rule out the ldbm backend, no? Last I checked the libc > btree code, a crash while writing out a

Re: OpenLDAP w/o bdb okay?

2009-01-05 Thread Philip Guenther
On Mon, Jan 5, 2009 at 11:15 AM, Claudio Jeker wrote: ... > Any DB that needs human help after a crash is in my opinion a bad choice. So that would rule out the ldbm backend, no? Last I checked the libc btree code, a crash while writing out a page split would corrupt the subtree. > If a server

Re: OpenLDAP w/o bdb okay?

2009-01-05 Thread Stuart Henderson
On 2009-01-05, ppruett-lists wrote: > > So choices for those with older openbsd port of openldap with bdb flavor > are: > * don't upgrade ( bad choice) > * upgrade to openbsd 4.4 or current using the official port and renter > data storing in the obsolete backend ldbm (ughhh) > * Or go ahead and

Re: OpenLDAP w/o bdb okay?

2009-01-05 Thread Claudio Jeker
On Mon, Jan 05, 2009 at 01:46:30PM -0500, ppruett-lists wrote: >> >If your LDAP environment is anything at all like the majority I've >> seen >you will not notice any difference whatsoever (except you'll be >> free >from BDB corruption during a crash). >> > > Yep since I am not write heavy the

Re: OpenLDAP w/o bdb okay?

2009-01-05 Thread ppruett-lists
For OpenBSD 4.4 and current the flavor "bdb" is broken on openldap BROKEN=OpenLDAP 2.3 is incompatible with Berkeley DB 4.6 So, what to do? My experience is that compiling BDB and OpenLDAP yourself isn't hard, yep, I remember compiling apache back in the middle 90's For security and la

Re: OpenLDAP w/o bdb okay?

2009-01-05 Thread ppruett-lists
>If your LDAP environment is anything at all like the majority I've seen >you will not notice any difference whatsoever (except you'll be free >from BDB corruption during a crash). Yep since I am not write heavy then the non bdb could be okay, but as an afore mentioned in this thread I am co

Re: OpenLDAP w/o bdb okay?

2009-01-05 Thread Philip Guenther
On Mon, Jan 5, 2009 at 5:30 AM, P.Pruett wrote: > For OpenBSD 4.4 and current the flavor "bdb" is broken on openldap > BROKEN=OpenLDAP 2.3 is incompatible with Berkeley DB 4.6 > > Most past articles have strongly suggested haveing openldap use "bdb" > as its storage method. Seeing that even t

Re: OpenLDAP w/o bdb okay?

2009-01-05 Thread tico
Damn, forgot to send my response to list: Message-ID: <49624a88.3020...@raapid.net> Date: Mon, 05 Jan 2009 11:59:36 -0600 From: tico User-Agent: Thunderbird 2.0.0.18 (Macintosh/20081105) MIME-Version: 1.0 To: "P.Pruett" Subject: Re: OpenLDAP w/o bdb okay? References

Re: OpenLDAP w/o bdb okay?

2009-01-05 Thread Vijay Sankar
P.Pruett wrote: For OpenBSD 4.4 and current the flavor "bdb" is broken on openldap BROKEN=OpenLDAP 2.3 is incompatible with Berkeley DB 4.6 Most past articles have strongly suggested haveing openldap use "bdb" as its storage method. Seeing that even the current port is not ready to implemen

Re: OpenLDAP

2008-10-21 Thread Philip Guenther
On Tue, Oct 21, 2008 at 12:33 PM, John Nietzsche <[EMAIL PROTECTED]> wrote: > i would like to know if openldap (in ports collection) will be shipped > with suport for BDB in openbsd 4.4 ports infra structure? Since the release is frozen, UTSL: http://www.openbsd.org/cgi-bin/cvsweb/ports/databases

Re: OpenLDAP

2008-09-08 Thread Rogier Krieger
web-markup 2. MARC.info - OpenBSD-misc, 'Re: OpenLDAP' by Philip Guenther (2008/09/03) http://marc.info/?l=openbsd-misc&m=122046507630763&w=2 -- If you don't know where you're going, any road will get you there.

Re: OpenLDAP

2008-09-08 Thread my mail
--- On Wed, 9/3/08, Philip Guenther <[EMAIL PROTECTED]> wrote: > From: Philip Guenther <[EMAIL PROTECTED]> > Subject: Re: OpenLDAP > To: "John Nietzsche" <[EMAIL PROTECTED]> > Cc: "misc" > Date: Wednesday, September 3, 2008, 6:00 PM >

Re: OpenLDAP

2008-09-03 Thread Philip Guenther
On Wed, Sep 3, 2008 at 4:15 AM, John Nietzsche <[EMAIL PROTECTED]> wrote: > is there any chance the next openbsd release holds an unbroken OpenLDAP? I presume you're referring to the port/packages version. The answer depends on whose definition of "unbroken" you prefer. The last word I heard fro

Re: OpenLDAP

2008-09-03 Thread Dorian Büttner
John Nietzsche schrieb: I am in need for performance. Is replacing bdb with ldbm a good ideia? Thanks once more. On Wed, Sep 3, 2008 at 10:28 AM, Henning Brauer <[EMAIL PROTECTED]> wrote: * John Nietzsche <[EMAIL PROTECTED]> [2008-09-03 13:22]: is there any chance the next openbsd rel

Re: OpenLDAP

2008-09-03 Thread Ted Unangst
On 9/3/08, John Nietzsche <[EMAIL PROTECTED]> wrote: > I am in need for performance. Is replacing bdb with ldbm a good ideia? Is working faster than not working?

Re: OpenLDAP

2008-09-03 Thread bofh
On Wed, Sep 3, 2008 at 9:28 AM, Nick Guenther <[EMAIL PROTECTED]> wrote: > On Wed, Sep 3, 2008 at 7:15 AM, John Nietzsche <[EMAIL PROTECTED]> > wrote: > > Hi, > > > > is there any chance the next openbsd release holds an unbroken OpenLDAP? > Since openbsd doesn't include ldap, I would guess that

Re: OpenLDAP

2008-09-03 Thread John Nietzsche
I am in need for performance. Is replacing bdb with ldbm a good ideia? Thanks once more. On Wed, Sep 3, 2008 at 10:28 AM, Henning Brauer <[EMAIL PROTECTED]> wrote: > * John Nietzsche <[EMAIL PROTECTED]> [2008-09-03 13:22]: >> is there any chance the next openbsd release holds an unbroken OpenLDAP

Re: OpenLDAP

2008-09-03 Thread Nick Guenther
On Wed, Sep 3, 2008 at 7:15 AM, John Nietzsche <[EMAIL PROTECTED]> wrote: > Hi, > > is there any chance the next openbsd release holds an unbroken OpenLDAP? > > Thanks in advance. And how is it broken exactly? I was able to install it just a month ago and I didn't see anything obviously wrong. -N

Re: OpenLDAP

2008-09-03 Thread Henning Brauer
* John Nietzsche <[EMAIL PROTECTED]> [2008-09-03 13:22]: > is there any chance the next openbsd release holds an unbroken OpenLDAP? I'd say the chance of ever having an unbroken OpenLDAP release on any OS is pretty damn low. that said, openldap works as well on openbsd as it does on other oses. t

Re: OpenLDAP and BDB: i am desperated

2008-09-02 Thread Stuart Henderson
On 2008-09-02, John Nietzsche <[EMAIL PROTECTED]> wrote: > i have just installed OpenBSD and i would like to use it (the server > with OpenBSD) as a directory services. When i try to install openldap > from ports i am prevented with the following message: > >===> openldap-client-2.3.39 is marked a

Re: openldap-server on 4.3? (newbie)

2008-08-14 Thread Stuart Henderson
On 2008-08-14, Ross Tucker <[EMAIL PROTECTED]> wrote: > I am trying to set my new OpenBSD 4.3 installation up as a PDC for a > windows network. I am following directions from > http://www.kernel-panic.it/openbsd/pdc/pdc2.html but I cannot get > openldap-server to build from the ports, because the b

Re: slapd hangs, was: Re: OpenLDAP and Berkeley DB 4.6

2008-08-06 Thread my mail
--- On Tue, 8/5/08, Marc Balmer <[EMAIL PROTECTED]> wrote: > From: Marc Balmer <[EMAIL PROTECTED]> > Subject: Re: slapd hangs, was: Re: OpenLDAP and Berkeley DB 4.6 > To: "Toni Mueller" <[EMAIL PROTECTED]> > Cc: misc@openbsd.org > port

Re: slapd hangs, was: Re: OpenLDAP and Berkeley DB 4.6

2008-08-05 Thread Marc Balmer
* Toni Mueller wrote: > Hi, > > On Sun, 09.03.2008 at 16:31:27 +, Stuart Henderson <[EMAIL PROTECTED]> > wrote: > > You have several recommended options: > > > > - dump your database, uninstall, install the unFLAVORed version > > and restore your database. > > I tried that, but now run into

slapd hangs, was: Re: OpenLDAP and Berkeley DB 4.6

2008-08-05 Thread Toni Mueller
Hi, On Sun, 09.03.2008 at 16:31:27 +, Stuart Henderson <[EMAIL PROTECTED]> wrote: > You have several recommended options: > > - dump your database, uninstall, install the unFLAVORed version > and restore your database. I tried that, but now run into the problem that now, slapd can't be stop

Re: OpenLDAP and Berkeley DB 4.6

2008-03-10 Thread Quanah Gibson-Mount
--On Sunday, March 09, 2008 11:13 PM +0800 Dongsheng Song <[EMAIL PROTECTED]> wrote: Since OpenLDAP 2.3 is incompatible[1] with Berkeley DB 4.6, so I must stick to BDB 4.5 or upgrade to OpenLDAP 2.4 ? Yes. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc

Re: OpenLDAP and Berkeley DB 4.6

2008-03-09 Thread Stuart Henderson
On 2008-03-09, Dongsheng Song <[EMAIL PROTECTED]> wrote: > Since OpenLDAP 2.3 is incompatible[1] with Berkeley DB 4.6, it is incompatible with DB 4.6.3 and up (where they quietly broke the API). 4.6.2 and below are ok. > so I must stick to BDB 4.5 or upgrade to OpenLDAP 2.4 ? You have several re

Re: openldap with dbv4 crash

2008-01-02 Thread Daniel
On Wed, 2 Jan 2008 11:13:26 -0600 Vijay Sankar <[EMAIL PROTECTED]> wrote: > On December 31, 2007 06:59:06 am Vijay Sankar wrote: > > > > env CPPFLAGS="-I/usr/local/include/db4 -I/usr/local/include/sasl" \ > > LDFLAGS="-L/usr/local/lib/db4 -L/usr/local/share/libtool/libltdl > > -L/usr/local/lib/sas

Re: openldap with dbv4 crash

2008-01-02 Thread Vijay Sankar
On December 31, 2007 06:59:06 am Vijay Sankar wrote: > On December 30, 2007 08:03:09 pm Stuart Henderson wrote: > > > > > On December 29, 2007 11:23:19 am Daniel wrote: > > > > > > Hi (again, sorry, now with Subject)! > > > > > > > > > > > > Anyone experiencing or experienced segfaults with openlda

Re: openldap with dbv4 crash

2008-01-02 Thread Liviu Daia
On 1 January 2008, Daniel <[EMAIL PROTECTED]> wrote: > Vijay Sankar mrta: [...] > >> there's support in 2.4 but iirc it's not a simple thing to > >> backport. > Why should we backport the db4.6 support? We just need to use 2.4. [...] (1) Historically, upgrading existing OpenLDAP databases to new f

Re: openldap with dbv4 crash

2008-01-01 Thread Stuart Henderson
On 2008/01/01 13:27, Daniel wrote: >>> there's support in 2.4 but iirc it's not a simple thing to backport. > Why should we backport the db4.6 support? We just need to use 2.4. Well, you mentioned one reason why not just upgrade: > With openldap-2.4, one can not use the ldbm backend anymore, but

Re: openldap with dbv4 crash

2008-01-01 Thread Daniel
Vijay Sankar mrta: On December 30, 2007 08:03:09 pm Stuart Henderson wrote: On December 29, 2007 11:23:19 am Daniel wrote: Hi (again, sorry, now with Subject)! Anyone experiencing or experienced segfaults with openldap using the bdb backed? I'm using -current ports tree, and built the openldap

Re: openldap with dbv4 crash

2007-12-31 Thread Vijay Sankar
Quoting Vijay Sankar <[EMAIL PROTECTED]>: On December 30, 2007 08:03:09 pm Stuart Henderson wrote: > > > On December 29, 2007 11:23:19 am Daniel wrote: > > > > Hi (again, sorry, now with Subject)! > > > > > > > > Anyone experiencing or experienced segfaults with openldap using > > > > the bdb b

Re: openldap with dbv4 crash

2007-12-31 Thread Vijay Sankar
On December 30, 2007 08:03:09 pm Stuart Henderson wrote: > > > > On December 29, 2007 11:23:19 am Daniel wrote: > > > > > Hi (again, sorry, now with Subject)! > > > > > > > > > > Anyone experiencing or experienced segfaults with openldap using > > > > > the bdb backed? I'm using -current ports tree

Re: openldap with dbv4 crash

2007-12-30 Thread Stuart Henderson
> > > On December 29, 2007 11:23:19 am Daniel wrote: > > > > Hi (again, sorry, now with Subject)! > > > > > > > > Anyone experiencing or experienced segfaults with openldap using > > > > the bdb backed? I'm using -current ports tree, and built the > > > > openldap-{client,server}, dbv4 and cyrus-sa

Re: openldap with dbv4 crash

2007-12-30 Thread Daniel
On Sat, 29 Dec 2007 15:49:20 -0600 Vijay Sankar <[EMAIL PROTECTED]> wrote: > On December 29, 2007 02:15:15 pm Daniel wrote: > > On Sat, 29 Dec 2007 13:41:06 -0600 > > > > Vijay Sankar <[EMAIL PROTECTED]> wrote: > > > On December 29, 2007 11:23:19 am Daniel wrote: > > > > Hi (again, sorry, now with

Re: openldap with dbv4 crash

2007-12-29 Thread Daniel
On Sat, 29 Dec 2007 13:41:06 -0600 Vijay Sankar <[EMAIL PROTECTED]> wrote: > On December 29, 2007 11:23:19 am Daniel wrote: > > Hi (again, sorry, now with Subject)! > > > > Anyone experiencing or experienced segfaults with openldap using > > the bdb backed? I'm using -current ports tree, and built

Re: openldap with dbv4 crash

2007-12-29 Thread Vijay Sankar
On December 29, 2007 02:15:15 pm Daniel wrote: > On Sat, 29 Dec 2007 13:41:06 -0600 > > Vijay Sankar <[EMAIL PROTECTED]> wrote: > > On December 29, 2007 11:23:19 am Daniel wrote: > > > Hi (again, sorry, now with Subject)! > > > > > > Anyone experiencing or experienced segfaults with openldap using

Re: openldap with dbv4 crash

2007-12-29 Thread Vijay Sankar
On December 29, 2007 11:23:19 am Daniel wrote: > Hi (again, sorry, now with Subject)! > > Anyone experiencing or experienced segfaults with openldap using the bdb > backed? I'm using -current ports tree, and built the > openldap-{client,server}, dbv4 and cyrus-sasl2 packages from there. > > I will

Re: openldap -- syncrepl and dynamic backend modules (SOLVED)

2007-05-28 Thread Vijay Sankar
On Saturday 26 May 2007 14:14, Vijay Sankar wrote: > I have been using the openldap (openldap-server-2.3.33p1-bdb) from > ports and it works great when I use slurpd for replication. > > I would like to use syncrepl instead of slurpd, just to see what the > benefits are. However I don't know how to

Re: OpenLDAP question

2007-05-23 Thread Mathieu Sauve-Frankel
On Mon, May 21, 2007 at 07:29:45AM +0200, Henning Brauer wrote: > * Uv Pzaf <[EMAIL PROTECTED]> [2007-05-20 23:12]: > > I wonder why OpenBSD packages (i.e. openldap-server-2.3.24.tgz) still > > uses ldbm as database backend especially since the OpenLDAP folks are > > stating that this is no good an

Re: OpenLDAP question

2007-05-22 Thread Uv Pzaf
I still want to push this little points directly from the OpenLDAP faq: * back-ldbm is /obsolete/ and /should not be used/. *As a historical note, the back-ldbm code is a direct descendant of the original University of Michigan code. The age of the code and its byzantine data structures were beco

Re: OpenLDAP question

2007-05-22 Thread Dave Harrison
Henning Brauer wrote: > * Dave Harrison <[EMAIL PROTECTED]> [2007-05-21 08:26]: >> Henning Brauer wrote: >>> * Uv Pzaf <[EMAIL PROTECTED]> [2007-05-20 23:12]: I wonder why OpenBSD packages (i.e. openldap-server-2.3.24.tgz) still uses ldbm as database backend especially since the OpenLDAP

Re: OpenLDAP question

2007-05-21 Thread Henning Brauer
* Dave Harrison <[EMAIL PROTECTED]> [2007-05-21 08:26]: > Henning Brauer wrote: > > * Uv Pzaf <[EMAIL PROTECTED]> [2007-05-20 23:12]: > >> I wonder why OpenBSD packages (i.e. openldap-server-2.3.24.tgz) still > >> uses ldbm as database backend especially since the OpenLDAP folks are > >> stating th

Re: OpenLDAP question

2007-05-21 Thread Henning Brauer
* Bryan Irvine <[EMAIL PROTECTED]> [2007-05-21 09:01]: > Older versions of bdb went bad a fairly regular basis. I had DB's go > corrupt as often as once a day under older verson of OL using bdb. > This hasn't been a problem for a while though. I havn't had a db go > bad in 2 years, even after powe

Re: OpenLDAP question

2007-05-20 Thread Bryan Irvine
On 5/20/07, Dave Harrison <[EMAIL PROTECTED]> wrote: Henning Brauer wrote: > * Uv Pzaf <[EMAIL PROTECTED]> [2007-05-20 23:12]: >> I wonder why OpenBSD packages (i.e. openldap-server-2.3.24.tgz) still >> uses ldbm as database backend especially since the OpenLDAP folks are >> stating that this is

Re: OpenLDAP question

2007-05-20 Thread Dave Harrison
Henning Brauer wrote: > * Uv Pzaf <[EMAIL PROTECTED]> [2007-05-20 23:12]: >> I wonder why OpenBSD packages (i.e. openldap-server-2.3.24.tgz) still >> uses ldbm as database backend especially since the OpenLDAP folks are >> stating that this is no good any more: >> (http://www.openldap.org/faq/data/

Re: OpenLDAP question

2007-05-20 Thread Henning Brauer
* Uv Pzaf <[EMAIL PROTECTED]> [2007-05-20 23:12]: > I wonder why OpenBSD packages (i.e. openldap-server-2.3.24.tgz) still > uses ldbm as database backend especially since the OpenLDAP folks are > stating that this is no good any more: > (http://www.openldap.org/faq/data/cache/756.htm) and not bdb o

Re: openLDAP Unrecognized database type (bdb)

2007-02-12 Thread Vijay Sankar
On Monday 12 February 2007 09:27, Antonis Faragitakis wrote: > Hi all, > > > im trying to install openldap-server-2.3.11p4.tgz (i386) and > openldap-client-2.3.11p4.tgz (i386) under OpenBSD3.9. After > i've configured my slapd.conf im trying to start the server (slapd -d4 ) > but the i get the foll

Re: Openldap

2006-12-13 Thread Toni Mueller
Hi, On Fri, 08.12.2006 at 10:02:37 -0800, Bryan Irvine <[EMAIL PROTECTED]> wrote: > I've been running 2.2.27 (with db4 FWIW) since august-ish of last year > with zero corruption problems. please also be sure to enable the sync option on bdb databases. I've only experienced data loss when slapd we

Re: Openldap

2006-12-08 Thread Bryan Irvine
> I installed the package. However, on the mirror I used I don4t find any bdb > version. On a side note, some people obersved data corruption or even data loss when using the bdb backend. The gdbm backends on the other hand, is stable. I don't remember the specific details, but there was a ve

Re: Openldap

2006-12-08 Thread Marc Balmer
Dr. Harry Knitter wrote: Am Montag, 4. Dezember 2006 20:23 schrieb Bryan Irvine: I have installed the following binaries: openldap-server-2.3.24 openldap-client-2.3.24 db-4.2.52p8 OS is OpenBSD 4.0 You need to install openldap-server-2.3.24-bdb If installed from ports use env FLAVOR=bdb make i

Re: Openldap

2006-12-05 Thread Bryan Irvine
> > You need to install openldap-server-2.3.24-bdb > > > > If installed from ports use env FLAVOR=bdb make install to get it, or if > > you used packages then use the bdb version. > > > > --Bryan > > > I installed the package. However, on the mirror I used I don4t find any > bdb > version. > So it

  1   2   >