users@directory.apache.org Archives

Re: Upgrade from ApacheDS 1.5.3 to 2.0

2013-05-22T17:21:55Z

Le 5/22/13 6:54 PM, Abdala, Pablo Javier a écrit :
>> We don't provide installers for HP Unix, so you will have to use the
> archive tarball
> (http://directory.apache.org/apacheds/download/download-archive.html)
>
> Hello Emmanuel,
>                 I´ve installed the ApachedDS, then imported the schema from 1.5.3 but
I had this error:
> #!RESULT ERROR
> #!CONNECTION ldap://dhpx0049:10389
> #!DATE 2013-05-22T12:07:52.469
> #!ERROR [LDAP: error code 68 - ENTRY_ALREADY_EXISTS: failed for MessageType : ADD_REQUEST
Message ID : 12     Add Request : Entry     dn[n]: dc=example,dc=com     objectClass: domain
    objectClass: extensibleObject     objectClass: top     dc: example : ERR_250_ENTRY_ALREADY_EXISTS
dc=example,dc=com already exists!]
> dn: dc=example,dc=com
> changetype: add
> dc: example
> objectClass: domain
> objectClass: extensibleObject
> objectClass: top

Plain normal. The example.com entry is already present by default.
>
> So I remove the Entry from the schema then imported again and I gave this error:
>
> #!RESULT ERROR
> #!CONNECTION ldap://dhpx0049:10389
> #!DATE 2013-05-22T12:57:07.935
> #!ERROR [LDAP: error code 19 - CONSTRAINT_VIOLATION: failed for MessageType : ADD_REQUEST
Message ID : 50     Add Request : Entry     dn[n]: uid=z111111,ou=users,dc=example,dc=com
    objectClass: person     objectClass: organizationalPerson     objectClass: inetOrgPerson
    objectClass: top     uid: z111111     sn: z111111     userPassword: '0x70 0x65 0x70 0x65
'     cn: z111111     displayName: z111111 : Password should have a minmum of 5 characters]
> dn: uid=z111111,ou=users,dc=example,dc=com
> changetype: add
> displayName: z111111
> objectClass: person
> objectClass: organizationalPerson
> objectClass: inetOrgPerson
> objectClass: top
> uid: z111111
>
> Can you identify the problem?

Yes, the passwordPolicy is enabled, and it expect your password to be at
leat 5 chars long.

Either you modify your passowrd, or you disable the PasswordPolicy (but
I suspect you wanted to migrate because the PasswordPolicy is now
handled by 2.0...)


-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

Re: Upgrade from ApacheDS 1.5.3 to 2.0

2013-05-22T16:54:54Z

> We don't provide installers for HP Unix, so you will have to use the
archive tarball
(http://directory.apache.org/apacheds/download/download-archive.html)

Hello Emmanuel,
                I´ve installed the ApachedDS, then imported the schema from 1.5.3 but I had
this error:
#!RESULT ERROR
#!CONNECTION ldap://dhpx0049:10389
#!DATE 2013-05-22T12:07:52.469
#!ERROR [LDAP: error code 68 - ENTRY_ALREADY_EXISTS: failed for MessageType : ADD_REQUEST
Message ID : 12     Add Request : Entry     dn[n]: dc=example,dc=com     objectClass: domain
    objectClass: extensibleObject     objectClass: top     dc: example : ERR_250_ENTRY_ALREADY_EXISTS
dc=example,dc=com already exists!]
dn: dc=example,dc=com
changetype: add
dc: example
objectClass: domain
objectClass: extensibleObject
objectClass: top

So I remove the Entry from the schema then imported again and I gave this error:

#!RESULT ERROR
#!CONNECTION ldap://dhpx0049:10389
#!DATE 2013-05-22T12:57:07.935
#!ERROR [LDAP: error code 19 - CONSTRAINT_VIOLATION: failed for MessageType : ADD_REQUEST
Message ID : 50     Add Request : Entry     dn[n]: uid=z111111,ou=users,dc=example,dc=com
    objectClass: person     objectClass: organizationalPerson     objectClass: inetOrgPerson
    objectClass: top     uid: z111111     sn: z111111     userPassword: '0x70 0x65 0x70 0x65
'     cn: z111111     displayName: z111111 : Password should have a minmum of 5 characters]
dn: uid=z111111,ou=users,dc=example,dc=com
changetype: add
displayName: z111111
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: top
uid: z111111

Can you identify the problem?

Kind Regards,
Pablo Abdala

Re: Upgrade from ApacheDS 1.5.3 to 2.0

2013-05-21T21:51:58Z

Le 5/21/13 9:19 PM, Abdala, Pablo Javier a écrit :
>> I just wanted to know if you have added some new schema elements, like
> AttributeType or ObjectClass. Seems not.
>
>> So, bottom line : install apacheDS, import your data into it, you are
> ready to go..
>
> Ok, I will do what  you said, one more question, what file should I download to use Apache
DS 2.0 in HP-UNIX?
We don't provide installers for HP Unix, so you will have to use the
archive tarball
(http://directory.apache.org/apacheds/download/download-archive.html)


-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

Re: Upgrade from ApacheDS 1.5.3 to 2.0

2013-05-21T19:19:29Z

> I just wanted to know if you have added some new schema elements, like
AttributeType or ObjectClass. Seems not.

> So, bottom line : install apacheDS, import your data into it, you are
ready to go..

Ok, I will do what  you said, one more question, what file should I download to use Apache
DS 2.0 in HP-UNIX?

Thanks,
Kind Regards,
Pablo Abdala

Re: Upgrade from ApacheDS 1.5.3 to 2.0

2013-05-21T15:50:31Z

Le 5/21/13 5:31 PM, Abdala, Pablo Javier a écrit :
>> we don't have a description of the migration procedure. However, we can
>> drive you and help you to get 2.0 up and running.
>> Could you provide some information about ;
>> - your configuration (the server.xml file)
>> - how many entries dyou have in your server
>> - do you have any added schema elements ?
>> Bottom line, the idea is to convert your configuration into something
> that it usable for ApacheDS 2.0 (and you can configurate the server
> using Studio), and to import your data into the server. If you have
> created some AttributeTypes or ObjectClass, we will need to update the
> schema.
>
>> It should not be too complicated.
> Thanks Emmanuel for your answer and your help.
>
> Please find attached the server.xml file.
> Regarding to "entries  in server" I've attached an example file

I checked the server.xml file, it's a brand standard configuration. You
should be able to use ApacheDS 2.0 as is, inject you data, it should
work (it worked for me).


>
> I don't understand your last question, "do you have any added schema elements ?" could
you clarify my?

I just wanted to know if you have added some new schema elements, like
AttributeType or ObjectClass. Seems not.

So, bottom line : install apacheDS, import your data into it, you are
ready to go...

-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

Re: Upgrade from ApacheDS 1.5.3 to 2.0

2013-05-21T15:31:44Z

An error occured while fetching this message, sorry !

Re: How to configure Apache DS with Fault-Tolerance Mode

2013-05-21T07:17:10Z

Le 5/21/13 3:35 AM, gen_jing@pactera.com a écrit :
> Hi All,
Hi,
>
>      I am a newbie for ADS, currently I am using ADS to set up one testing
> environment to support LDAP Fault-Tolerance?

Can you define "Fault-Tolerance" in this context ?


-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

How to configure Apache DS with Fault-Tolerance Mode

2013-05-21T01:35:11Z

Hi All,

     I am a newbie for ADS, currently I am using ADS to set up one testing
environment to support LDAP Fault-Tolerance?

 

I check the help doc for ADS, unfortunately, any keyword "Fault-Tolerance"
was not founded.

 

Can anybody share your experience about this??

 

Thanks in advance..

 

Jack Geng

Best Regards

Re: ApacheDS support virtual attribute memberOf

2013-05-20T16:52:01Z

Le 5/20/13 5:53 PM, Danielsen, Jay a écrit :
> I see from the January 2013 archives that memberOf virtual attribute is not yet supported.
> Are there any plans or work-in-progress to support memberOf in an upcoming release ?
Morst certainly in 2.1.0.

We are currently busy cleaning the 150 remaining issues before a
2.0.0-RC1 release, so I think this is something we can have in the next
6 months.

You can create a JIRA to request such a feature.

Thanks !


-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

ApacheDS support virtual attribute memberOf

2013-05-20T15:53:03Z

I see from the January 2013 archives that memberOf virtual attribute is not yet supported.
Are there any plans or work-in-progress to support memberOf in an upcoming release ?

Regards,
	Jay

Re: Upgrade from ApacheDS 1.5.3 to 2.0

2013-05-17T22:33:09Z

Le 5/17/13 10:36 PM, Abdala, Pablo Javier a écrit :
> Hello,
>                 I have Apache DS 1.5.3 in a server with HP-UX 11 and I need to upgrade
to 2.0 to be able to use Password Policy. I've toured the http://directory.apache.org/apacheds/
page looking for information about upgrade procedure but I couldn´t find anything, can you
tell me where to find information about upgrade procedure?
Hi,

we don't have a description of the migration procedure. However, we can
drive you and help you to get 2.0 up and running.

Could you provide some information about ;
- your configuration (the server.xml file)
- how many entries dyou have in your server
- do you have any added schema elements ?

Bottom line, the idea is to convert your configuration into something
that it usable for ApacheDS 2.0 (and you can configurate the server
using Studio), and to import your data into the server. If you have
created some AttributeTypes or ObjectClass, we will need to update the
schema.

It should not be too complicated.

-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

Upgrade from ApacheDS 1.5.3 to 2.0

2013-05-17T20:36:43Z

An error occured while fetching this message, sorry !

Re: How to create and add a self signed certificate in Windows 7

2013-05-15T12:26:34Z

Le 5/15/13 2:17 PM, Ashwin Kumar a écrit :
> I am using ldaps (on port 10636) support and followed the instruction (
> http://directory.apache.org/apacheds/basic-ug/3.3-enabling-ssl.html) to
> create a keystore and was able to successfully connect to the LDAP server
> with ldaps.
>
> However, when I am using ldp.exe to connect to my ldaps server, I end up
> with:
>
> ld = ldap_sslinit("127.0.0.1", 10636, 1);
> Error 0 = ldap_set_option(hLdap, LDAP_OPT_PROTOCOL_VERSION, 3);
> Error 81 = ldap_connect(hLdap, NULL);
> Server error: 
> Error <0x51>: Fail to connect to 127.0.0.1
>
> Yes, the certificate is not verified.
>
> How do I create/verify a self-signed certificate. All I have now is the
> keystore file "keyfile.ks"
> How do I generate the certificate so that I will be able to connect via
> ldp.exe?
>
> Can someone point me to the correct documentation?
No idea. You have to ask the peeps who wrote ldp.exe...


-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

How to create and add a self signed certificate in Windows 7

2013-05-15T12:17:40Z

I am using ldaps (on port 10636) support and followed the instruction (
http://directory.apache.org/apacheds/basic-ug/3.3-enabling-ssl.html) to
create a keystore and was able to successfully connect to the LDAP server
with ldaps.

However, when I am using ldp.exe to connect to my ldaps server, I end up
with:

ld = ldap_sslinit("127.0.0.1", 10636, 1);
Error 0 = ldap_set_option(hLdap, LDAP_OPT_PROTOCOL_VERSION, 3);
Error 81 = ldap_connect(hLdap, NULL);
Server error: 
Error <0x51>: Fail to connect to 127.0.0.1

Yes, the certificate is not verified.

How do I create/verify a self-signed certificate. All I have now is the
keystore file "keyfile.ks"
How do I generate the certificate so that I will be able to connect via
ldp.exe?

Can someone point me to the correct documentation?

--
Ashwin kumar
(http://ashwinkumar.me)

Re: How to disable self-signed certificate validation?

2013-05-15T08:06:48Z

Le 5/15/13 9:44 AM, Ashwin Kumar a écrit :
> OK. I got it working.
> I had to add
>
> TLS_REQCERT never
>
> in ldap.conf

Exactly :)

Google is a gold mine !



-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

Re: How to disable self-signed certificate validation?

2013-05-15T08:06:17Z

Le 5/15/13 9:37 AM, Ashwin Kumar a écrit :
> I am using Apache Directory Studio and I have set up the server to run
> securely on SSL.
> This guide helped me getting it working:
> http://directory.apache.org/apacheds/basic-ug/3.3-enabling-ssl.html
>
> However, when I do use command line tools (ldapsearch)
> I end up with:
> "ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)"
>
> Enabling the debug logging for ldapsearch, I end up with
> "TLS certificate verification: Error, self signed certificate"

This may help :

http://speeves.erikin.com/2007/01/ldapsearch-tls-and-self-signed.html


-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

Re: How to disable self-signed certificate validation?

2013-05-15T07:44:57Z

OK. I got it working.
I had to add

TLS_REQCERT never

in ldap.conf



--
Ashwin kumar
(http://ashwinkumar.me)


On Wed, May 15, 2013 at 1:07 PM, Ashwin Kumar wrote:

> I am using Apache Directory Studio and I have set up the server to run
> securely on SSL.
> This guide helped me getting it working:
> http://directory.apache.org/apacheds/basic-ug/3.3-enabling-ssl.html
>
> However, when I do use command line tools (ldapsearch)
> I end up with:
> "ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)"
>
> Enabling the debug logging for ldapsearch, I end up with
> "TLS certificate verification: Error, self signed certificate"
>
> C:\Users\Ashwin>ldapsearch -x -H ldaps://localhost:10636 -d 1
> ldap_url_parse_ext(ldaps://localhost:10636)
> ldap_create
> ldap_url_parse_ext(ldaps://localhost:10636/??base)
> ldap_sasl_bind
> ldap_send_initial_request
> ldap_new_connection 1 1 0
> ldap_int_open_connection
> ldap_connect_to_host: TCP localhost:10636
> ldap_new_socket: 472
> ldap_prepare_socket: 472
> ldap_connect_to_host: Trying ::1 10636
> ldap_pvt_connect: fd: 472 tm: -1 async: 0
> attempting to connect:
> connect errno: 10061
> ldap_close_socket: 472
> ldap_new_socket: 472
> ldap_prepare_socket: 472
> ldap_connect_to_host: Trying 127.0.0.1:10636
> ldap_pvt_connect: fd: 472 tm: -1 async: 0
> attempting to connect:
> connect success
> TLS trace: SSL_connect:before/connect initialization
> TLS trace: SSL_connect:SSLv2/v3 write client hello A
> TLS trace: SSL_connect:SSLv3 read server hello A
> TLS certificate verification: depth: 0, err: 18, subject:
> /C=US/O=ASF/OU=ApacheD
> S/CN=zanzibar, issuer: /C=US/O=ASF/OU=ApacheDS/CN=zanzibar
> TLS certificate verification: Error, self signed certificate
> TLS trace: SSL3 alert write:fatal:unknown CA
> TLS trace: SSL_connect:error in SSLv3 read server certificate B
> TLS trace: SSL_connect:error in SSLv3 read server certificate B
> TLS: can't connect: error:14090086:SSL
> routines:SSL3_GET_SERVER_CERTIFICATE:cert
> ificate verify failed (self signed certificate).
> ldap_err2string
> ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)
>
> How do I get this working? Am I missing something?
>
> --
> Ashwin kumar
> (http://ashwinkumar.me)
>

How to disable self-signed certificate validation?

2013-05-15T07:37:52Z

I am using Apache Directory Studio and I have set up the server to run
securely on SSL.
This guide helped me getting it working:
http://directory.apache.org/apacheds/basic-ug/3.3-enabling-ssl.html

However, when I do use command line tools (ldapsearch)
I end up with:
"ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)"

Enabling the debug logging for ldapsearch, I end up with
"TLS certificate verification: Error, self signed certificate"

C:\Users\Ashwin>ldapsearch -x -H ldaps://localhost:10636 -d 1
ldap_url_parse_ext(ldaps://localhost:10636)
ldap_create
ldap_url_parse_ext(ldaps://localhost:10636/??base)
ldap_sasl_bind
ldap_send_initial_request
ldap_new_connection 1 1 0
ldap_int_open_connection
ldap_connect_to_host: TCP localhost:10636
ldap_new_socket: 472
ldap_prepare_socket: 472
ldap_connect_to_host: Trying ::1 10636
ldap_pvt_connect: fd: 472 tm: -1 async: 0
attempting to connect:
connect errno: 10061
ldap_close_socket: 472
ldap_new_socket: 472
ldap_prepare_socket: 472
ldap_connect_to_host: Trying 127.0.0.1:10636
ldap_pvt_connect: fd: 472 tm: -1 async: 0
attempting to connect:
connect success
TLS trace: SSL_connect:before/connect initialization
TLS trace: SSL_connect:SSLv2/v3 write client hello A
TLS trace: SSL_connect:SSLv3 read server hello A
TLS certificate verification: depth: 0, err: 18, subject:
/C=US/O=ASF/OU=ApacheD
S/CN=zanzibar, issuer: /C=US/O=ASF/OU=ApacheDS/CN=zanzibar
TLS certificate verification: Error, self signed certificate
TLS trace: SSL3 alert write:fatal:unknown CA
TLS trace: SSL_connect:error in SSLv3 read server certificate B
TLS trace: SSL_connect:error in SSLv3 read server certificate B
TLS: can't connect: error:14090086:SSL
routines:SSL3_GET_SERVER_CERTIFICATE:cert
ificate verify failed (self signed certificate).
ldap_err2string
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

How do I get this working? Am I missing something?

--
Ashwin kumar
(http://ashwinkumar.me)

Re: Can't Open Configuration in Studio

2013-05-14T19:06:19Z

Le 5/14/13 8:41 PM, Kevin Hamilton a écrit :
> Hey everyone,
>
> I am getting the following error when I click "Open Configuration" on a
> fresh install of M12 on Mac Mountain Lion:

Yes this is a known issue. An AttributeType has been added in ApacheDS
and Studio is lagging. This is going to be fix this week.

Sorry for the inconvenience.


-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

Can't Open Configuration in Studio

2013-05-14T18:41:21Z

Hey everyone,

I am getting the following error when I click "Open Configuration" on a
fresh install of M12 on Mac Mountain Lion:

Unable to load the configuration.

 - ERR_04269 ATTRIBUTE_TYPE for OID ads-replpingersleep does not exist!

org.apache.directory.api.ldap.model.exception.LdapNoSuchAttributeException:
ERR_04269 ATTRIBUTE_TYPE for OID ads-replpingersleep does not exist!

at
org.apache.directory.api.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:317)

at
org.apache.directory.api.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:47)

at
org.apache.directory.api.ldap.schemamanager.impl.DefaultSchemaManager.lookupAttributeTypeRegistry(DefaultSchemaManager.java:1623)

at
org.apache.directory.api.ldap.model.entry.DefaultEntry.(DefaultEntry.java:311)

at
org.apache.directory.studio.apacheds.configuration.v2.jobs.LoadConfigurationRunnable.readConfiguration(LoadConfigurationRunnable.java:359)

at
org.apache.directory.studio.apacheds.configuration.v2.jobs.LoadConfigurationRunnable.getConfiguration(LoadConfigurationRunnable.java:182)

at
org.apache.directory.studio.apacheds.configuration.v2.jobs.LoadConfigurationRunnable.run(LoadConfigurationRunnable.java:127)

at
org.apache.directory.studio.common.core.jobs.StudioJob.run(StudioJob.java:83)

at org.eclipse.core.internal.jobs.Worker.run(Worker.java:54)

Caused by: org.apache.directory.api.ldap.model.exception.LdapException:
ERR_04269 ATTRIBUTE_TYPE for OID ads-replpingersleep does not exist!

at
org.apache.directory.api.ldap.model.schema.registries.DefaultSchemaObjectRegistry.lookup(DefaultSchemaObjectRegistry.java:176)

at
org.apache.directory.api.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:313)

... 8 more


ERR_04269 ATTRIBUTE_TYPE for OID ads-replpingersleep does not exist!
Am I doing something stupid?

Thanks,
Kevin

Re: Upgrade to M12

2013-05-14T09:18:35Z

On Tue, May 14, 2013 at 2:47 PM, Borys  wrote:

> I just reproduced it.
>
it would be great if you can file a bug report with the details to
reproduce this issue

> On 14 May 2013 11:14, "Kiran Ayyagari"  wrote:
>
> > On Tue, May 14, 2013 at 2:43 PM, Kiran Ayyagari  > >wrote:
> >
> > >
> > >
> > >
> > > On Tue, May 14, 2013 at 1:59 PM, Borys  wrote:
> > >
> > >> Perhaps this is what caused deletion. If replication consumer cannot
> see
> > >> the partition in the same way as studio cannot then deletion would
> > >> start....
> > >>
> > > looks like an issue with the API (LdapNetworkConnection)
> > >
> > BUT I still can't think of any situation how this can happen
> >
> > >  On 14 May 2013 10:17, "Borys"  wrote:
> > >>
> > >> > I did not move data around. I was just replacing the
> > >> > lib/apacheds-service.jar file.
> > >> > Another interesting observation: I cannot see cn=eumetsat partition
> in
> > >> the
> > >> > studio although I can query it using ldapsearch.
> > >> >  On 14 May 2013 09:46, "Kiran Ayyagari" 
> wrote:
> > >> >
> > >> >> On Tue, May 14, 2013 at 1:08 PM, Borys 
wrote:
> > >> >>
> > >> >> > No I did not delete anything anywhere. The only what was
done is:
> > >> >> > -Stop both serevrs
> > >> >> > - update config.ldif on both servers to add missing attribute
for
> > M12
> > >> >> > - replace the jar file
> > >> >> > - attempt to start one of the servers.
> > >> >> > - put back old jar file
> > >> >> > - deleted the attribute from the config.ldif on both servers
> > >> >> > - start one server server. Check the content - fine.
> > >> >> > - start second server. Check the content - few entries missing.
> > Check
> > >> >> > again, even more entries missing.
> > >> >> >
> > >> >> I *guess* this is where the problem might have happened, while
> > copying
> > >> >> files back to this second
> > >> >> server you might have copied old partition data  triggering a
> delete
> > >> >>
> > >> >> > - check the content on another server - more and more entries
are
> > >>  gone
> > >> >> and
> > >> >> > finally, all is gone.
> > >> >> >
> > >> >> >
> > >> >> >
> > >> >> >
> > >> >> >
> > >> >> > On Tue, May 14, 2013 at 9:32 AM, Emmanuel Lécharny <
> > >> elecharny@gmail.com
> > >> >> > >wrote:
> > >> >> >
> > >> >> > > Le 5/14/13 9:16 AM, Borys a écrit :
> > >> >> > > > That is exactly the problem, I did add some custom
schema.
> > >> >> > > > Now I have another big problem. I have two servers
> replicated.
> > >> The
> > >> >> > > > replication was setup yesterday and worked fine.
Today after
> > >> server
> > >> >> > > restart
> > >> >> > > > the replicated content start to "shrink" . I had
fewer and
> > fewer
> > >> >> > entries
> > >> >> > > in
> > >> >> > > > the database. And now the DB is empty on BOTH servers!!!
> > >> >> > > > The only message I got when I started second server
was:
> > >> >> > > > [07:05:40] WARN
> > >> >> > > >
> > >> >> > >
> > >> >> >
> > >> >>
> > >>
> >
> [org.apache.directory.server.ldap.replication.provider.SyncReplRequestHandler]
> > >> >> > > > - received a valid cookie
> > >> >> > > > rid=001,csn=20130513122431.469000Z#000000#001#000000
but
> there
> > >> is no
> > >> >> > > event
> > >> >> > > > log associated with this replica
> > >> >> > >
> > >> >> > > My guess is that you deleted all the entries from one
server
> > before
> > >> >> > > injectng the new schema, then  reconnected the server
to the
> > other
> > >> >> one.
> > >> >> > > As the date of modification on the deleted entries is
more
> > recent,
> > >> >> those
> > >> >> > > deletions get 'replicated'
> > >> >> > >
> > >> >> > >
> > >> >> > > --
> > >> >> > > Regards,
> > >> >> > > Cordialement,
> > >> >> > > Emmanuel Lécharny
> > >> >> > > www.iktek.com
> > >> >> > >
> > >> >> > >
> > >> >> >
> > >> >>
> > >> >>
> > >> >>
> > >> >> --
> > >> >> Kiran Ayyagari
> > >> >> http://keydap.com
> > >> >>
> > >> >
> > >>
> > >
> > >
> > >
> > > --
> > > Kiran Ayyagari
> > > http://keydap.com
> > >
> >
> >
> >
> > --
> > Kiran Ayyagari
> > http://keydap.com
> >
>



-- 
Kiran Ayyagari
http://keydap.com

Re: Upgrade to M12

2013-05-14T09:17:03Z

I just reproduced it.
On 14 May 2013 11:14, "Kiran Ayyagari"  wrote:

> On Tue, May 14, 2013 at 2:43 PM, Kiran Ayyagari  >wrote:
>
> >
> >
> >
> > On Tue, May 14, 2013 at 1:59 PM, Borys  wrote:
> >
> >> Perhaps this is what caused deletion. If replication consumer cannot see
> >> the partition in the same way as studio cannot then deletion would
> >> start....
> >>
> > looks like an issue with the API (LdapNetworkConnection)
> >
> BUT I still can't think of any situation how this can happen
>
> >  On 14 May 2013 10:17, "Borys"  wrote:
> >>
> >> > I did not move data around. I was just replacing the
> >> > lib/apacheds-service.jar file.
> >> > Another interesting observation: I cannot see cn=eumetsat partition in
> >> the
> >> > studio although I can query it using ldapsearch.
> >> >  On 14 May 2013 09:46, "Kiran Ayyagari"  wrote:
> >> >
> >> >> On Tue, May 14, 2013 at 1:08 PM, Borys  wrote:
> >> >>
> >> >> > No I did not delete anything anywhere. The only what was done
is:
> >> >> > -Stop both serevrs
> >> >> > - update config.ldif on both servers to add missing attribute
for
> M12
> >> >> > - replace the jar file
> >> >> > - attempt to start one of the servers.
> >> >> > - put back old jar file
> >> >> > - deleted the attribute from the config.ldif on both servers
> >> >> > - start one server server. Check the content - fine.
> >> >> > - start second server. Check the content - few entries missing.
> Check
> >> >> > again, even more entries missing.
> >> >> >
> >> >> I *guess* this is where the problem might have happened, while
> copying
> >> >> files back to this second
> >> >> server you might have copied old partition data  triggering a delete
> >> >>
> >> >> > - check the content on another server - more and more entries
are
> >>  gone
> >> >> and
> >> >> > finally, all is gone.
> >> >> >
> >> >> >
> >> >> >
> >> >> >
> >> >> >
> >> >> > On Tue, May 14, 2013 at 9:32 AM, Emmanuel Lécharny <
> >> elecharny@gmail.com
> >> >> > >wrote:
> >> >> >
> >> >> > > Le 5/14/13 9:16 AM, Borys a écrit :
> >> >> > > > That is exactly the problem, I did add some custom schema.
> >> >> > > > Now I have another big problem. I have two servers replicated.
> >> The
> >> >> > > > replication was setup yesterday and worked fine. Today
after
> >> server
> >> >> > > restart
> >> >> > > > the replicated content start to "shrink" . I had fewer
and
> fewer
> >> >> > entries
> >> >> > > in
> >> >> > > > the database. And now the DB is empty on BOTH servers!!!
> >> >> > > > The only message I got when I started second server
was:
> >> >> > > > [07:05:40] WARN
> >> >> > > >
> >> >> > >
> >> >> >
> >> >>
> >>
> [org.apache.directory.server.ldap.replication.provider.SyncReplRequestHandler]
> >> >> > > > - received a valid cookie
> >> >> > > > rid=001,csn=20130513122431.469000Z#000000#001#000000
but there
> >> is no
> >> >> > > event
> >> >> > > > log associated with this replica
> >> >> > >
> >> >> > > My guess is that you deleted all the entries from one server
> before
> >> >> > > injectng the new schema, then  reconnected the server to
the
> other
> >> >> one.
> >> >> > > As the date of modification on the deleted entries is more
> recent,
> >> >> those
> >> >> > > deletions get 'replicated'
> >> >> > >
> >> >> > >
> >> >> > > --
> >> >> > > Regards,
> >> >> > > Cordialement,
> >> >> > > Emmanuel Lécharny
> >> >> > > www.iktek.com
> >> >> > >
> >> >> > >
> >> >> >
> >> >>
> >> >>
> >> >>
> >> >> --
> >> >> Kiran Ayyagari
> >> >> http://keydap.com
> >> >>
> >> >
> >>
> >
> >
> >
> > --
> > Kiran Ayyagari
> > http://keydap.com
> >
>
>
>
> --
> Kiran Ayyagari
> http://keydap.com
>

Re: Upgrade to M12

2013-05-14T09:14:31Z

On Tue, May 14, 2013 at 2:43 PM, Kiran Ayyagari wrote:

>
>
>
> On Tue, May 14, 2013 at 1:59 PM, Borys  wrote:
>
>> Perhaps this is what caused deletion. If replication consumer cannot see
>> the partition in the same way as studio cannot then deletion would
>> start....
>>
> looks like an issue with the API (LdapNetworkConnection)
>
BUT I still can't think of any situation how this can happen

>  On 14 May 2013 10:17, "Borys"  wrote:
>>
>> > I did not move data around. I was just replacing the
>> > lib/apacheds-service.jar file.
>> > Another interesting observation: I cannot see cn=eumetsat partition in
>> the
>> > studio although I can query it using ldapsearch.
>> >  On 14 May 2013 09:46, "Kiran Ayyagari"  wrote:
>> >
>> >> On Tue, May 14, 2013 at 1:08 PM, Borys  wrote:
>> >>
>> >> > No I did not delete anything anywhere. The only what was done is:
>> >> > -Stop both serevrs
>> >> > - update config.ldif on both servers to add missing attribute for M12
>> >> > - replace the jar file
>> >> > - attempt to start one of the servers.
>> >> > - put back old jar file
>> >> > - deleted the attribute from the config.ldif on both servers
>> >> > - start one server server. Check the content - fine.
>> >> > - start second server. Check the content - few entries missing. Check
>> >> > again, even more entries missing.
>> >> >
>> >> I *guess* this is where the problem might have happened, while copying
>> >> files back to this second
>> >> server you might have copied old partition data  triggering a delete
>> >>
>> >> > - check the content on another server - more and more entries are
>>  gone
>> >> and
>> >> > finally, all is gone.
>> >> >
>> >> >
>> >> >
>> >> >
>> >> >
>> >> > On Tue, May 14, 2013 at 9:32 AM, Emmanuel Lécharny <
>> elecharny@gmail.com
>> >> > >wrote:
>> >> >
>> >> > > Le 5/14/13 9:16 AM, Borys a écrit :
>> >> > > > That is exactly the problem, I did add some custom schema.
>> >> > > > Now I have another big problem. I have two servers replicated.
>> The
>> >> > > > replication was setup yesterday and worked fine. Today after
>> server
>> >> > > restart
>> >> > > > the replicated content start to "shrink" . I had fewer and
fewer
>> >> > entries
>> >> > > in
>> >> > > > the database. And now the DB is empty on BOTH servers!!!
>> >> > > > The only message I got when I started second server was:
>> >> > > > [07:05:40] WARN
>> >> > > >
>> >> > >
>> >> >
>> >>
>> [org.apache.directory.server.ldap.replication.provider.SyncReplRequestHandler]
>> >> > > > - received a valid cookie
>> >> > > > rid=001,csn=20130513122431.469000Z#000000#001#000000 but
there
>> is no
>> >> > > event
>> >> > > > log associated with this replica
>> >> > >
>> >> > > My guess is that you deleted all the entries from one server before
>> >> > > injectng the new schema, then  reconnected the server to the other
>> >> one.
>> >> > > As the date of modification on the deleted entries is more recent,
>> >> those
>> >> > > deletions get 'replicated'
>> >> > >
>> >> > >
>> >> > > --
>> >> > > Regards,
>> >> > > Cordialement,
>> >> > > Emmanuel Lécharny
>> >> > > www.iktek.com
>> >> > >
>> >> > >
>> >> >
>> >>
>> >>
>> >>
>> >> --
>> >> Kiran Ayyagari
>> >> http://keydap.com
>> >>
>> >
>>
>
>
>
> --
> Kiran Ayyagari
> http://keydap.com
>



-- 
Kiran Ayyagari
http://keydap.com

Re: Upgrade to M12

2013-05-14T09:13:35Z

On Tue, May 14, 2013 at 1:59 PM, Borys  wrote:

> Perhaps this is what caused deletion. If replication consumer cannot see
> the partition in the same way as studio cannot then deletion would
> start....
>
looks like an issue with the API (LdapNetworkConnection)

>  On 14 May 2013 10:17, "Borys"  wrote:
>
> > I did not move data around. I was just replacing the
> > lib/apacheds-service.jar file.
> > Another interesting observation: I cannot see cn=eumetsat partition in
> the
> > studio although I can query it using ldapsearch.
> >  On 14 May 2013 09:46, "Kiran Ayyagari"  wrote:
> >
> >> On Tue, May 14, 2013 at 1:08 PM, Borys  wrote:
> >>
> >> > No I did not delete anything anywhere. The only what was done is:
> >> > -Stop both serevrs
> >> > - update config.ldif on both servers to add missing attribute for M12
> >> > - replace the jar file
> >> > - attempt to start one of the servers.
> >> > - put back old jar file
> >> > - deleted the attribute from the config.ldif on both servers
> >> > - start one server server. Check the content - fine.
> >> > - start second server. Check the content - few entries missing. Check
> >> > again, even more entries missing.
> >> >
> >> I *guess* this is where the problem might have happened, while copying
> >> files back to this second
> >> server you might have copied old partition data  triggering a delete
> >>
> >> > - check the content on another server - more and more entries are
>  gone
> >> and
> >> > finally, all is gone.
> >> >
> >> >
> >> >
> >> >
> >> >
> >> > On Tue, May 14, 2013 at 9:32 AM, Emmanuel Lécharny <
> elecharny@gmail.com
> >> > >wrote:
> >> >
> >> > > Le 5/14/13 9:16 AM, Borys a écrit :
> >> > > > That is exactly the problem, I did add some custom schema.
> >> > > > Now I have another big problem. I have two servers replicated.
The
> >> > > > replication was setup yesterday and worked fine. Today after
> server
> >> > > restart
> >> > > > the replicated content start to "shrink" . I had fewer and fewer
> >> > entries
> >> > > in
> >> > > > the database. And now the DB is empty on BOTH servers!!!
> >> > > > The only message I got when I started second server was:
> >> > > > [07:05:40] WARN
> >> > > >
> >> > >
> >> >
> >>
> [org.apache.directory.server.ldap.replication.provider.SyncReplRequestHandler]
> >> > > > - received a valid cookie
> >> > > > rid=001,csn=20130513122431.469000Z#000000#001#000000 but there
is
> no
> >> > > event
> >> > > > log associated with this replica
> >> > >
> >> > > My guess is that you deleted all the entries from one server before
> >> > > injectng the new schema, then  reconnected the server to the other
> >> one.
> >> > > As the date of modification on the deleted entries is more recent,
> >> those
> >> > > deletions get 'replicated'
> >> > >
> >> > >
> >> > > --
> >> > > Regards,
> >> > > Cordialement,
> >> > > Emmanuel Lécharny
> >> > > www.iktek.com
> >> > >
> >> > >
> >> >
> >>
> >>
> >>
> >> --
> >> Kiran Ayyagari
> >> http://keydap.com
> >>
> >
>



-- 
Kiran Ayyagari
http://keydap.com

Re: Upgrade to M12

2013-05-14T08:54:52Z

Le 5/14/13 10:29 AM, Borys a écrit :
> Perhaps this is what caused deletion. If replication consumer cannot see
> the partition in the same way as studio cannot then deletion would start....

Morst certainly. The old server will be updated with the new server data
(or lack of data...)

-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

Re: How to enable SSL for LDAP with Apache Directory Studio?

2013-05-14T08:47:42Z

Le 5/14/13 10:19 AM, Ashwin Kumar a écrit :
> On Tue, May 14, 2013 at 1:33 PM, Emmanuel Lécharny wrote:
>
>> This is *not* something good from the user experience, that's
>> for sure...
>>
> You are absolutely right.
>
> Reported the issue here: https://issues.apache.org/jira/browse/DIRSTUDIO-908

Many thanks ! This should be easy to fix.


-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

Re: Upgrade to M12

2013-05-14T08:29:41Z

And after removal of the consumers and restarting the servers my partition
is visible again! This is a nasty bug, isn't it?
 On 14 May 2013 10:27, sborys@gmail.com wrote:

Perhaps this is what caused deletion. If replication consumer cannot see
the partition in the same way as studio cannot then deletion would start....
 On 14 May 2013 10:17, "Borys"  wrote:

I did not move data around. I was just replacing the
lib/apacheds-service.jar file.
Another interesting observation: I cannot see cn=eumetsat partition in the
studio although I can query it using ldapsearch.
 On 14 May 2013 09:46, "Kiran Ayyagari"  wrote:

> On Tue, May 14, 2013 at 1:08 PM, Borys  wrote:
>
> > No I did not delete anything anywhere. The only what was done is:
> > -Stop both serevrs
> > - update config.ldif on both servers to add missing attribute for M12
> > - replace the jar file
> > - attempt to start one of the servers.
> > - put back old jar file
> > - deleted the attribute from the config.ldif on both servers
> > - start one server server. Check the content - fine.
> > - start second server. Check the content - few entries missing. Check
> > again, even more entries missing.
> >
> I *guess* this is where the problem might have happened, while copying
> files back to this second
> server you might have copied old partition data  triggering a delete
>
> > - check the content on another server - more and more entries are  gone
> and
> > finally, all is gone.
> >
> >
> >
> >
> >
> > On Tue, May 14, 2013 at 9:32 AM, Emmanuel Lécharny  > >wrote:
> >
> > > Le 5/14/13 9:16 AM, Borys a écrit :
> > > > That is exactly the problem, I did add some custom schema.
> > > > Now I have another big problem. I have two servers replicated. The
> > > > replication was setup yesterday and worked fine. Today after server
> > > restart
> > > > the replicated content start to "shrink" . I had fewer and fewer
> > entries
> > > in
> > > > the database. And now the DB is empty on BOTH servers!!!
> > > > The only message I got when I started second server was:
> > > > [07:05:40] WARN
> > > >
> > >
> >
> [org.apache.directory.server.ldap.replication.provider.SyncReplRequestHandler]
> > > > - received a valid cookie
> > > > rid=001,csn=20130513122431.469000Z#000000#001#000000 but there is no
> > > event
> > > > log associated with this replica
> > >
> > > My guess is that you deleted all the entries from one server before
> > > injectng the new schema, then  reconnected the server to the other one.
> > > As the date of modification on the deleted entries is more recent,
> those
> > > deletions get 'replicated'
> > >
> > >
> > > --
> > > Regards,
> > > Cordialement,
> > > Emmanuel Lécharny
> > > www.iktek.com
> > >
> > >
> >
>
>
>
> --
> Kiran Ayyagari
> http://keydap.com
>

Re: Upgrade to M12

2013-05-14T08:29:21Z

Perhaps this is what caused deletion. If replication consumer cannot see
the partition in the same way as studio cannot then deletion would start....
 On 14 May 2013 10:17, "Borys"  wrote:

> I did not move data around. I was just replacing the
> lib/apacheds-service.jar file.
> Another interesting observation: I cannot see cn=eumetsat partition in the
> studio although I can query it using ldapsearch.
>  On 14 May 2013 09:46, "Kiran Ayyagari"  wrote:
>
>> On Tue, May 14, 2013 at 1:08 PM, Borys  wrote:
>>
>> > No I did not delete anything anywhere. The only what was done is:
>> > -Stop both serevrs
>> > - update config.ldif on both servers to add missing attribute for M12
>> > - replace the jar file
>> > - attempt to start one of the servers.
>> > - put back old jar file
>> > - deleted the attribute from the config.ldif on both servers
>> > - start one server server. Check the content - fine.
>> > - start second server. Check the content - few entries missing. Check
>> > again, even more entries missing.
>> >
>> I *guess* this is where the problem might have happened, while copying
>> files back to this second
>> server you might have copied old partition data  triggering a delete
>>
>> > - check the content on another server - more and more entries are  gone
>> and
>> > finally, all is gone.
>> >
>> >
>> >
>> >
>> >
>> > On Tue, May 14, 2013 at 9:32 AM, Emmanuel Lécharny > > >wrote:
>> >
>> > > Le 5/14/13 9:16 AM, Borys a écrit :
>> > > > That is exactly the problem, I did add some custom schema.
>> > > > Now I have another big problem. I have two servers replicated. The
>> > > > replication was setup yesterday and worked fine. Today after server
>> > > restart
>> > > > the replicated content start to "shrink" . I had fewer and fewer
>> > entries
>> > > in
>> > > > the database. And now the DB is empty on BOTH servers!!!
>> > > > The only message I got when I started second server was:
>> > > > [07:05:40] WARN
>> > > >
>> > >
>> >
>> [org.apache.directory.server.ldap.replication.provider.SyncReplRequestHandler]
>> > > > - received a valid cookie
>> > > > rid=001,csn=20130513122431.469000Z#000000#001#000000 but there is
no
>> > > event
>> > > > log associated with this replica
>> > >
>> > > My guess is that you deleted all the entries from one server before
>> > > injectng the new schema, then  reconnected the server to the other
>> one.
>> > > As the date of modification on the deleted entries is more recent,
>> those
>> > > deletions get 'replicated'
>> > >
>> > >
>> > > --
>> > > Regards,
>> > > Cordialement,
>> > > Emmanuel Lécharny
>> > > www.iktek.com
>> > >
>> > >
>> >
>>
>>
>>
>> --
>> Kiran Ayyagari
>> http://keydap.com
>>
>

Re: How to enable SSL for LDAP with Apache Directory Studio?

2013-05-14T08:19:25Z

On Tue, May 14, 2013 at 1:33 PM, Emmanuel Lécharny wrote:

> This is *not* something good from the user experience, that's
> for sure...
>

You are absolutely right.

Reported the issue here: https://issues.apache.org/jira/browse/DIRSTUDIO-908


--
Ashwin kumar
(http://ashwinkumar.me)

Re: Upgrade to M12

2013-05-14T08:17:42Z

I did not move data around. I was just replacing the
lib/apacheds-service.jar file.
Another interesting observation: I cannot see cn=eumetsat partition in the
studio although I can query it using ldapsearch.
 On 14 May 2013 09:46, "Kiran Ayyagari"  wrote:

> On Tue, May 14, 2013 at 1:08 PM, Borys  wrote:
>
> > No I did not delete anything anywhere. The only what was done is:
> > -Stop both serevrs
> > - update config.ldif on both servers to add missing attribute for M12
> > - replace the jar file
> > - attempt to start one of the servers.
> > - put back old jar file
> > - deleted the attribute from the config.ldif on both servers
> > - start one server server. Check the content - fine.
> > - start second server. Check the content - few entries missing. Check
> > again, even more entries missing.
> >
> I *guess* this is where the problem might have happened, while copying
> files back to this second
> server you might have copied old partition data  triggering a delete
>
> > - check the content on another server - more and more entries are  gone
> and
> > finally, all is gone.
> >
> >
> >
> >
> >
> > On Tue, May 14, 2013 at 9:32 AM, Emmanuel Lécharny  > >wrote:
> >
> > > Le 5/14/13 9:16 AM, Borys a écrit :
> > > > That is exactly the problem, I did add some custom schema.
> > > > Now I have another big problem. I have two servers replicated. The
> > > > replication was setup yesterday and worked fine. Today after server
> > > restart
> > > > the replicated content start to "shrink" . I had fewer and fewer
> > entries
> > > in
> > > > the database. And now the DB is empty on BOTH servers!!!
> > > > The only message I got when I started second server was:
> > > > [07:05:40] WARN
> > > >
> > >
> >
> [org.apache.directory.server.ldap.replication.provider.SyncReplRequestHandler]
> > > > - received a valid cookie
> > > > rid=001,csn=20130513122431.469000Z#000000#001#000000 but there is no
> > > event
> > > > log associated with this replica
> > >
> > > My guess is that you deleted all the entries from one server before
> > > injectng the new schema, then  reconnected the server to the other one.
> > > As the date of modification on the deleted entries is more recent,
> those
> > > deletions get 'replicated'
> > >
> > >
> > > --
> > > Regards,
> > > Cordialement,
> > > Emmanuel Lécharny
> > > www.iktek.com
> > >
> > >
> >
>
>
>
> --
> Kiran Ayyagari
> http://keydap.com
>

Re: How to enable SSL for LDAP with Apache Directory Studio?

2013-05-14T08:03:21Z

Le 5/14/13 9:58 AM, Ashwin Kumar a écrit :
> On Tue, May 14, 2013 at 1:20 PM, Emmanuel Lécharny wrote:
>
>> use / instead of \ in the path.
>
> Wow, Thanks a lot. Been trying to understand this from past 6 hours. Thanks
> again.

So I guess it works...

It's very likely that the \ will escape some chars, producing sme weird
results. This is *not* something good from the user experience, that's
for sure...

-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

Re: How to enable SSL for LDAP with Apache Directory Studio?

2013-05-14T07:58:40Z

On Tue, May 14, 2013 at 1:20 PM, Emmanuel Lécharny wrote:

> use / instead of \ in the path.

Wow, Thanks a lot. Been trying to understand this from past 6 hours. Thanks
again.

Btw, it would deserve a JIRA : there is no reason oen should not be able
> to inject windows path in Studio.

Will create a bug report on this issue.

--
Ashwin kumar
(http://ashwinkumar.me)

Re: How to enable SSL for LDAP with Apache Directory Studio?

2013-05-14T07:50:39Z

Le 5/14/13 9:39 AM, Ashwin Kumar a écrit :
> Here are the images.
> Please click on the link below:
> https://plus.google.com/photos/104488956102051410647/albums/5877735847213867505?authkey=CLHL2fy-hu2XSg

use / instead of \ in the path.

Btw, it would deserve a JIRA : there is no reason oen should not be able
to inject windows path in Studio.

-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

Re: Upgrade to M12

2013-05-14T07:45:58Z

On Tue, May 14, 2013 at 1:08 PM, Borys  wrote:

> No I did not delete anything anywhere. The only what was done is:
> -Stop both serevrs
> - update config.ldif on both servers to add missing attribute for M12
> - replace the jar file
> - attempt to start one of the servers.
> - put back old jar file
> - deleted the attribute from the config.ldif on both servers
> - start one server server. Check the content - fine.
> - start second server. Check the content - few entries missing. Check
> again, even more entries missing.
>
I *guess* this is where the problem might have happened, while copying
files back to this second
server you might have copied old partition data  triggering a delete

> - check the content on another server - more and more entries are  gone and
> finally, all is gone.
>
>
>
>
>
> On Tue, May 14, 2013 at 9:32 AM, Emmanuel Lécharny  >wrote:
>
> > Le 5/14/13 9:16 AM, Borys a écrit :
> > > That is exactly the problem, I did add some custom schema.
> > > Now I have another big problem. I have two servers replicated. The
> > > replication was setup yesterday and worked fine. Today after server
> > restart
> > > the replicated content start to "shrink" . I had fewer and fewer
> entries
> > in
> > > the database. And now the DB is empty on BOTH servers!!!
> > > The only message I got when I started second server was:
> > > [07:05:40] WARN
> > >
> >
> [org.apache.directory.server.ldap.replication.provider.SyncReplRequestHandler]
> > > - received a valid cookie
> > > rid=001,csn=20130513122431.469000Z#000000#001#000000 but there is no
> > event
> > > log associated with this replica
> >
> > My guess is that you deleted all the entries from one server before
> > injectng the new schema, then  reconnected the server to the other one.
> > As the date of modification on the deleted entries is more recent, those
> > deletions get 'replicated'
> >
> >
> > --
> > Regards,
> > Cordialement,
> > Emmanuel Lécharny
> > www.iktek.com
> >
> >
>



-- 
Kiran Ayyagari
http://keydap.com

Re: Upgrade to M12

2013-05-14T07:45:01Z

On the server that was started first and had all entries until the start of
second server I got this:
[07:09:14] ERROR
[org.apache.directory.server.ldap.replication.consumer.ReplicationConsumerImpl]
- ERR_251_PARENT_NOT_FOUND Parent cn=ogs,cn=eumetsat not found
org.apache.directory.api.ldap.model.exception.LdapNoSuchObjectException:
ERR_251_PARENT_NOT_FOUND Parent cn=ogs,cn=eumetsat not found

And later on the second server similar:
[07:09:27] ERROR
[org.apache.directory.server.ldap.replication.consumer.ReplicationConsumerImpl]
- ERR_251_PARENT_NOT_FOUND Parent cn=eumetsat not found
org.apache.directory.api.ldap.model.exception.LdapNoSuchObjectException:
ERR_251_PARENT_NOT_FOUND Parent cn=eumetsat not found

I guess this has triggered deletion. But I can swear that I did not delete
any file on neither of the servers!




On Tue, May 14, 2013 at 9:38 AM, Borys  wrote:

> No I did not delete anything anywhere. The only what was done is:
> -Stop both serevrs
> - update config.ldif on both servers to add missing attribute for M12
> - replace the jar file
> - attempt to start one of the servers.
> - put back old jar file
> - deleted the attribute from the config.ldif on both servers
> - start one server server. Check the content - fine.
> - start second server. Check the content - few entries missing. Check
> again, even more entries missing.
> - check the content on another server - more and more entries are  gone
> and finally, all is gone.
>
>
>
>
>
> On Tue, May 14, 2013 at 9:32 AM, Emmanuel Lécharny wrote:
>
>> Le 5/14/13 9:16 AM, Borys a écrit :
>> > That is exactly the problem, I did add some custom schema.
>> > Now I have another big problem. I have two servers replicated. The
>> > replication was setup yesterday and worked fine. Today after server
>> restart
>> > the replicated content start to "shrink" . I had fewer and fewer
>> entries in
>> > the database. And now the DB is empty on BOTH servers!!!
>> > The only message I got when I started second server was:
>> > [07:05:40] WARN
>> >
>> [org.apache.directory.server.ldap.replication.provider.SyncReplRequestHandler]
>> > - received a valid cookie
>> > rid=001,csn=20130513122431.469000Z#000000#001#000000 but there is no
>> event
>> > log associated with this replica
>>
>> My guess is that you deleted all the entries from one server before
>> injectng the new schema, then  reconnected the server to the other one.
>> As the date of modification on the deleted entries is more recent, those
>> deletions get 'replicated'
>>
>>
>> --
>> Regards,
>> Cordialement,
>> Emmanuel Lécharny
>> www.iktek.com
>>
>>
>

Re: How to enable SSL for LDAP with Apache Directory Studio?

2013-05-14T07:39:53Z

Here are the images.
Please click on the link below:
https://plus.google.com/photos/104488956102051410647/albums/5877735847213867505?authkey=CLHL2fy-hu2XSg

--
Ashwin kumar
(http://ashwinkumar.me)


On Tue, May 14, 2013 at 1:04 PM, Emmanuel Lécharny wrote:

> Le 5/14/13 9:21 AM, Ashwin Kumar a écrit :
> > I am using Apache Directory Studio for testing LDAP services for an
> > application. I am lost in configuring the LDAP with SSL.
> >
> > So far I've tried:
> >
> >    1. Started ApacheDS with port 10389 (ldap://) and also on 10636
> >    (ldaps://)
> >
> > Here's the screenshot of ldap config in Apache Directory studio:
> >
> >
> > [image: Inline image 1]
> >
> >
> > Then I followed the instructions as mentioned here: How to enable
> > SSL
> >
> > I generated the keys using
> > keytool<
> http://docs.oracle.com/javase/6/docs/technotes/tools/windows/keytool.html>
> > :
> >
> > C:\LDAP\keys>keytool -genkey -keyalg "RSA" -dname "
> > mojo,cn=com" -alias mojo -keystore mojo1.ks -storepass secret -validity
> 3650
> >
> > and then I am using this key in Apache Directory Studio (and restarting
> the
> > LDAP server), I end up with this error:
> >
> >
> > [image: Inline image 2]
> >
> >
> > Can someone tell what I am doing wrong? Is there something I am missing?
>
> The images have been strip of the mails by our mail system.
>
> I suggest you create a JIRA, and attach the images to it.
>
> --
> Regards,
> Cordialement,
> Emmanuel Lécharny
> www.iktek.com
>
>

Re: Upgrade to M12

2013-05-14T07:38:49Z

No I did not delete anything anywhere. The only what was done is:
-Stop both serevrs
- update config.ldif on both servers to add missing attribute for M12
- replace the jar file
- attempt to start one of the servers.
- put back old jar file
- deleted the attribute from the config.ldif on both servers
- start one server server. Check the content - fine.
- start second server. Check the content - few entries missing. Check
again, even more entries missing.
- check the content on another server - more and more entries are  gone and
finally, all is gone.





On Tue, May 14, 2013 at 9:32 AM, Emmanuel Lécharny wrote:

> Le 5/14/13 9:16 AM, Borys a écrit :
> > That is exactly the problem, I did add some custom schema.
> > Now I have another big problem. I have two servers replicated. The
> > replication was setup yesterday and worked fine. Today after server
> restart
> > the replicated content start to "shrink" . I had fewer and fewer entries
> in
> > the database. And now the DB is empty on BOTH servers!!!
> > The only message I got when I started second server was:
> > [07:05:40] WARN
> >
> [org.apache.directory.server.ldap.replication.provider.SyncReplRequestHandler]
> > - received a valid cookie
> > rid=001,csn=20130513122431.469000Z#000000#001#000000 but there is no
> event
> > log associated with this replica
>
> My guess is that you deleted all the entries from one server before
> injectng the new schema, then  reconnected the server to the other one.
> As the date of modification on the deleted entries is more recent, those
> deletions get 'replicated'
>
>
> --
> Regards,
> Cordialement,
> Emmanuel Lécharny
> www.iktek.com
>
>

Re: How to enable SSL for LDAP with Apache Directory Studio?

2013-05-14T07:38:01Z

if all that you are trying to do is testing ldaps:// then just connect
directly to server, no need to setup your own certificate unless you want
to replace the existing one with your own CA or other self signed
certificate


On Tue, May 14, 2013 at 12:51 PM, Ashwin Kumar wrote:

> I am using Apache Directory Studio for testing LDAP services for an
> application. I am lost in configuring the LDAP with SSL.
>
> So far I've tried:
>
>    1. Started ApacheDS with port 10389 (ldap://) and also on 10636
>    (ldaps://)
>
> Here's the screenshot of ldap config in Apache Directory studio:
>
>
> [image: Inline image 1]
>
>
> Then I followed the instructions as mentioned here: How to enable SSL
>
> I generated the keys using keytool
> :
>
> C:\LDAP\keys>keytool -genkey -keyalg "RSA" -dname "
> mojo,cn=com" -alias mojo -keystore mojo1.ks -storepass secret -validity 3650
>
> and then I am using this key in Apache Directory Studio (and restarting
> the LDAP server), I end up with this error:
>
>
> [image: Inline image 2]
>
>
> Can someone tell what I am doing wrong? Is there something I am missing?
>
> --
> Ashwin kumar
> (http://ashwinkumar.me)
>
>


-- 
Kiran Ayyagari
http://keydap.com

Re: How to enable SSL for LDAP with Apache Directory Studio?

2013-05-14T07:34:30Z

Le 5/14/13 9:21 AM, Ashwin Kumar a écrit :
> I am using Apache Directory Studio for testing LDAP services for an
> application. I am lost in configuring the LDAP with SSL.
>
> So far I've tried:
>
>    1. Started ApacheDS with port 10389 (ldap://) and also on 10636
>    (ldaps://)
>
> Here's the screenshot of ldap config in Apache Directory studio:
>
>
> [image: Inline image 1]
>
>
> Then I followed the instructions as mentioned here: How to enable
> SSL
>
> I generated the keys using
> keytool
> :
>
> C:\LDAP\keys>keytool -genkey -keyalg "RSA" -dname "
> mojo,cn=com" -alias mojo -keystore mojo1.ks -storepass secret -validity 3650
>
> and then I am using this key in Apache Directory Studio (and restarting the
> LDAP server), I end up with this error:
>
>
> [image: Inline image 2]
>
>
> Can someone tell what I am doing wrong? Is there something I am missing?

The images have been strip of the mails by our mail system.

I suggest you create a JIRA, and attach the images to it.

-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

Re: Upgrade to M12

2013-05-14T07:34:08Z

On Tue, May 14, 2013 at 12:46 PM, Borys  wrote:

> That is exactly the problem, I did add some custom schema.
>
ok, in this case all you need to do was to add the files [1] and [2] to the
folder
 schema/ou=schema/cn=adsconfig/ou=attributetypes

Now I have another big problem. I have two servers replicated. The
> replication was setup yesterday and worked fine. Today after server restart
> the replicated content start to "shrink" . I had fewer and fewer entries in
> the database. And now the DB is empty on BOTH servers!!!
>
this can't happen unless the data was deleted in  one of the master
servers, can you check further on which
server the delete started first (and why? if possible)

> The only message I got when I started second server was:
> [07:05:40] WARN
>
> [org.apache.directory.server.ldap.replication.provider.SyncReplRequestHandler]
> - received a valid cookie
> rid=001,csn=20130513122431.469000Z#000000#001#000000 but there is no event
> log associated with this replica
>
>
> [1]
http://svn.apache.org/repos/asf/directory/shared/trunk/ldap/schema/data/src/main/resources/schema/ou=schema/cn=adsconfig/ou=attributetypes/m-oid=1.3.6.1.4.1.18060.0.4.1.2.923.ldif
[2]
http://svn.apache.org/repos/asf/directory/shared/trunk/ldap/schema/data/src/main/resources/schema/ou=schema/cn=adsconfig/ou=attributetypes/m-oid=1.3.6.1.4.1.18060.0.4.1.2.924.ldif

>
>
> And then few minutes later:
> [07:09:27] ERROR
>
> [org.apache.directory.server.ldap.replication.consumer.ReplicationConsumerImpl]
> - ERR_251_PARENT_NOT_FOUND Parent cn=eumetsat not found
> org.apache.directory.api.ldap.model.exception.LdapNoSuchObjectException:
> ERR_251_PARENT_NOT_FOUND Parent cn=eumetsat not found
>         at
>
> org.apache.directory.server.core.exception.ExceptionInterceptor.add(ExceptionInterceptor.java:164)
>         at
>
> org.apache.directory.server.core.api.interceptor.BaseInterceptor.next(BaseInterceptor.java:412)
>         at
>
> org.apache.directory.server.core.admin.AdministrativePointInterceptor.add(AdministrativePointInterceptor.java:1206)
>         at
>
> org.apache.directory.server.core.api.interceptor.BaseInterceptor.next(BaseInterceptor.java:412)
>         at
>
> org.apache.directory.server.core.authz.AciAuthorizationInterceptor.add(AciAuthorizationInterceptor.java:525)
>         at
>
> org.apache.directory.server.core.api.interceptor.BaseInterceptor.next(BaseInterceptor.java:412)
>         at
>
> org.apache.directory.server.core.referral.ReferralInterceptor.add(ReferralInterceptor.java:249)
>         at
>
> org.apache.directory.server.core.api.interceptor.BaseInterceptor.next(BaseInterceptor.java:412)
>         at
>
> org.apache.directory.server.core.authn.AuthenticationInterceptor.add(AuthenticationInterceptor.java:327)
>         at
>
> org.apache.directory.server.core.api.interceptor.BaseInterceptor.next(BaseInterceptor.java:412)
>         at
>
> org.apache.directory.server.core.normalization.NormalizationInterceptor.add(NormalizationInterceptor.java:128)
>         at
>
> org.apache.directory.server.core.DefaultOperationManager.add(DefaultOperationManager.java:373)
>         at
>
> org.apache.directory.server.ldap.replication.consumer.ReplicationConsumerImpl.handleSearchResultEntry(ReplicationConsumerImpl.java:400)
>         at
>
> org.apache.directory.server.ldap.replication.consumer.ReplicationConsumerImpl.doSyncSearch(ReplicationConsumerImpl.java:785)
>         at
>
> org.apache.directory.server.ldap.replication.consumer.ReplicationConsumerImpl.startSync(ReplicationConsumerImpl.java:572)
>         at
> org.apache.directory.server.ldap.LdapServer$2.run(LdapServer.java:732)
>         at java.lang.Thread.run(Thread.java:735)
>
> CN=EUMETSAT is the tree that I am trying to keep replicated...
>
>
> Any idea what is going on?
>
>
>
> On Tue, May 14, 2013 at 9:07 AM, Kiran Ayyagari  >wrote:
>
> > if you didn't add any custom schema elements to your old server then you
> > can just delete the
> > schema folder present under "partitions" folder and restart the server
> > (keeping the remaining folders as they were)
> >
> >
> > On Tue, May 14, 2013 at 12:33 PM, Borys  wrote:
> >
> > > Well,
> > >
> > > it does not seem to be that straight forward. I guess the schema was
> > > modified too for M12. Another exception thrown. How can I edit the
> > schema ?
> > >
> > > [07:00:45] WARN
> [org.apache.directory.api.ldap.model.entry.DefaultEntry]
> > -
> > > The attribute 'ads-replpingersleep' cannot be stored
> > > org.apache.directory.api.ldap.model.exception.LdapOtherException:
> > ERR_04269
> > > ATTRIBUTE_TYPE for OID ads-replpingersleep does not exist!
> > >         at
> > >
> > >
> >
> org.apache.directory.server.core.api.partition.AbstractPartition.initialize(AbstractPartition.java:84)
> > >         at
> > >
> > >
> >
> org.apache.directory.server.ApacheDsService.initConfigPartition(ApacheDsService.java:289)
> > >         at
> > >
> >
> org.apache.directory.server.ApacheDsService.start(ApacheDsService.java:169)
> > >         at
> > > org.apache.directory.server.UberjarMain.start(UberjarMain.java:76)
> > >         at
> > > org.apache.directory.server.UberjarMain.main(UberjarMain.java:54)
> > > Caused by:
> > >
> >
> org.apache.directory.api.ldap.model.exception.LdapNoSuchAttributeException:
> > > ERR_04269 ATTRIBUTE_TYPE for OID ads-replpingersleep does not exist!
> > >         at
> > >
> > >
> >
> org.apache.directory.api.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:317)
> > >         at
> > >
> > >
> >
> org.apache.directory.api.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:47)
> > >         at
> > >
> > >
> >
> org.apache.directory.api.ldap.schemamanager.impl.DefaultSchemaManager.lookupAttributeTypeRegistry(DefaultSchemaManager.java:1623)
> > >         at
> > >
> > >
> >
> org.apache.directory.api.ldap.model.entry.DefaultEntry.(DefaultEntry.java:311)
> > >         at
> > >
> > >
> >
> org.apache.directory.server.core.partition.ldif.SingleFileLdifPartition.loadEntries(SingleFileLdifPartition.java:166)
> > >         at
> > >
> > >
> >
> org.apache.directory.server.core.partition.ldif.SingleFileLdifPartition.doInit(SingleFileLdifPartition.java:123)
> > >         at
> > >
> > >
> >
> org.apache.directory.server.core.api.partition.AbstractPartition.initialize(AbstractPartition.java:79)
> > >         ... 4 more
> > > Caused by: org.apache.directory.api.ldap.model.exception.LdapException:
> > > ERR_04269 ATTRIBUTE_TYPE for OID ads-replpingersleep does not exist!
> > >         at
> > >
> > >
> >
> org.apache.directory.api.ldap.model.exception.LdapException.(LdapException.java:50)
> > >         at
> > >
> > >
> >
> org.apache.directory.api.ldap.model.schema.registries.DefaultSchemaObjectRegistry.lookup(DefaultSchemaObjectRegistry.java:176)
> > >         at
> > >
> > >
> >
> org.apache.directory.api.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:313)
> > >         ... 10 more
> > > [07:00:45] ERROR [org.apache.directory.server.UberjarMain] - Failed to
> > > start the service.
> > > org.apache.directory.api.ldap.model.exception.LdapOtherException:
> > ERR_04269
> > > ATTRIBUTE_TYPE for OID ads-replpingersleep does not exist!
> > >         at
> > >
> > >
> >
> org.apache.directory.server.core.api.partition.AbstractPartition.initialize(AbstractPartition.java:84)
> > >         at
> > >
> > >
> >
> org.apache.directory.server.ApacheDsService.initConfigPartition(ApacheDsService.java:289)
> > >         at
> > >
> >
> org.apache.directory.server.ApacheDsService.start(ApacheDsService.java:169)
> > >         at
> > > org.apache.directory.server.UberjarMain.start(UberjarMain.java:76)
> > >         at
> > > org.apache.directory.server.UberjarMain.main(UberjarMain.java:54)
> > > Caused by:
> > >
> >
> org.apache.directory.api.ldap.model.exception.LdapNoSuchAttributeException:
> > > ERR_04269 ATTRIBUTE_TYPE for OID ads-replpingersleep does not exist!
> > >         at
> > >
> > >
> >
> org.apache.directory.api.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:317)
> > >         at
> > >
> > >
> >
> org.apache.directory.api.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:47)
> > >         at
> > >
> > >
> >
> org.apache.directory.api.ldap.schemamanager.impl.DefaultSchemaManager.lookupAttributeTypeRegistry(DefaultSchemaManager.java:1623)
> > >         at
> > >
> > >
> >
> org.apache.directory.api.ldap.model.entry.DefaultEntry.(DefaultEntry.java:311)
> > >         at
> > >
> > >
> >
> org.apache.directory.server.core.partition.ldif.SingleFileLdifPartition.loadEntries(SingleFileLdifPartition.java:166)
> > >         at
> > >
> > >
> >
> org.apache.directory.server.core.partition.ldif.SingleFileLdifPartition.doInit(SingleFileLdifPartition.java:123)
> > >         at
> > >
> > >
> >
> org.apache.directory.server.core.api.partition.AbstractPartition.initialize(AbstractPartition.java:79)
> > >         ... 4 more
> > > Caused by: org.apache.directory.api.ldap.model.exception.LdapException:
> > > ERR_04269 ATTRIBUTE_TYPE for OID ads-replpingersleep does not exist!
> > >         at
> > >
> > >
> >
> org.apache.directory.api.ldap.model.exception.LdapException.(LdapException.java:50)
> > >         at
> > >
> > >
> >
> org.apache.directory.api.ldap.model.schema.registries.DefaultSchemaObjectRegistry.lookup(DefaultSchemaObjectRegistry.java:176)
> > >         at
> > >
> > >
> >
> org.apache.directory.api.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:313)
> > >         ... 10 more
> > >
> > >
> > >
> > > On Mon, May 13, 2013 at 3:44 PM, Kiran Ayyagari  > > >wrote:
> > >
> > > > On Mon, May 13, 2013 at 7:04 PM, Borys  wrote:
> > > >
> > > > > Hi guys,
> > > > >
> > > > > How do I upgrade from M11 to M12? Replacing the jar file did not
> > work.
> > > I
> > > > > have got an exception about missing attributes during startup.
> > > > >
> > > > ah I see,
> > > >
> > > > 1. open the config.ldif
> > > >
> > > > 2. go to the entry with the DN
> > > >
> > >
> >
> ads-serverId=ldapServer,ou=servers,ads-directoryServiceId=default,ou=config
> > > >
> > > > 3. add the below like at the end of the entry
> > > >
> > > >     ads-replPingerSleep: 5
> > > >
> > > > 4. make sure you have a blank line at the end of the above LDIF entry
> > IF
> > > it
> > > > was removed during editing
> > > >
> > > > 5. restart the server
> > > >
> > > >
> > > > --
> > > > Kiran Ayyagari
> > > > http://keydap.com
> > > >
> > >
> >
> >
> >
> > --
> > Kiran Ayyagari
> > http://keydap.com
> >
>



-- 
Kiran Ayyagari
http://keydap.com