Enabling LDAPS over LDAP in OpenLDAP

I found getting LDAPS enabled in the latest OpenLDAP packages a bit more complicated than it should have been. The main reason for this is that, starting with 8.04 LTS, the Ubuntu developers decided to begin compiling OpenLDAP’s slapd using the gnutls libraries instead of the intergalactic standard, openssl. I will refrain from my usual [...]

March 23rd, 2009 by Phil Lembo 
Comments Off - Read More...

Performance Monitoring Tools for LDAP

Just a few tools to note here today. All of these come by way of Kostas Kalevras’s blog.
Up first, an article about some tools from Prefetch Technologies.
The featured utility is ldap-stats.pl, which parses an OpenLDAP server log and analyzes what’s there.
Another tool linked by Kostas is Prefetch’s ldap-gather.pl, a script that collects [...]

February 19th, 2009 by Phil Lembo 
Comments Off - Read More...

Taking a step back: The Sad Story of My VMware Downgrade

A short time ago I wrote about upgrading my personal systems at home and work to VMware Server 2.0, and gave what I thought were some compelling reasons why it was A Good Thing ™.
Unfortunately, the one issue I haven’t been able to work around has been my inability to get any guest, whether upgraded [...]

October 22nd, 2008 by Phil Lembo 
Comments Off - Read More...

Problems parsing the Oracle Internet Directory schema

Ugh. Don’t you just hate it when things don’t work as expected?
So, after finally mastering the “new” version of Net::LDAP::Schema it was time to turn it on Oracle Internet Directory.

[eldapo@testguy tools]$ ./schemaparse.pl
Cannot parse [( 1.3.6.1.1.1.1.22 NAME 'macAddress' DESC 'MAC
address in maximal, colon separated hex notation,
eg. 00:00:92:90:ee:e2' EQUALITY caseIgnoreIA5
Match SYNTAX '1.3.6.1.4.1.1466.115.121.1.27'{128} )]
{{128}} at /usr/lib/perl5/vendor_perl/5.8.8/Net/LDAP/Schema.pm
line 351, line [...]

August 21st, 2008 by Phil Lembo 
Comments Off - Read More...

Automated Text Backup of an LDAP Directory

This can be done lots of ways. What I normally do is write a small perl script that runs under the system user’s cron on the directory host itself. Having a daily (at least) backup of an LDAP directory’s entries is helpful not only in a full recovery scenario, but also for point restores of [...]

May 20th, 2008 by Phil Lembo 
Comments Off - Read More...

Backing up and restoring Sun DS using command line tools

I’m just going to do a document dump here, because it’s always nice to have really clear instructions somewhere when bad stuff happens. The following is taken from my own administrator’s notes.
These procedures have been used successfully on Sun Directory 5.1 SP4 servers. Syntax may (probably will) differ in other versions of Sun directory server, [...]

January 22nd, 2008 by Phil Lembo 
Comments Off - Read More...

LDAP vs. RDBMS

Just a friendly reminder:
Re: sorry, another “LDAP vs RDBMS” question!
* To: Phillip Rhodes

* Subject: Re: sorry, another “LDAP vs RDBMS” question!
* From: “Christopher E. Brown”
* Date: Thu, 2 Mar 2000 09:35:44 -0900 (AKST)
* Cc: “‘openldap-general@OpenLDAP.org’”
* In-reply-to:
On Wed, 1 Mar 2000, [...]

January 15th, 2008 by Phil Lembo 
Comments Off - Read More...
Older Posts »