Re: [389-users] Proxied Authorization Control (RFC 4370)

2015-04-09 Thread Ludwig Krispenz
On 04/09/2015 02:37 AM, Graham Leggett wrote: Hi all, Does 389DS support Proxied Authorization Control (RFC 4370)? It does: you can check supported controls by ldapsearch -b "" -s base supportedControl the result includes: supportedControl: 2.16.840.1.113730.3.4.18 Ludwig Some googling a

Re: [389-users] Some bind DNs sporadically can't search users

2014-03-06 Thread Ludwig Krispenz
On 03/06/2014 05:42 PM, Morgan Jones wrote: On Mar 6, 2014, at 11:32 AM, Ludwig Krispenz wrote: On 03/04/2014 11:10 PM, Morgan Jones wrote: On Mar 4, 2014, at 3:20 AM, Ludwig Krispenz wrote: Are groups involved in the acis and do these groups during these runs ? Yes, most of our ACIs

Re: [389-users] Some bind DNs sporadically can't search users

2014-03-06 Thread Ludwig Krispenz
On 03/04/2014 11:10 PM, Morgan Jones wrote: On Mar 4, 2014, at 3:20 AM, Ludwig Krispenz wrote: Are groups involved in the acis and do these groups during these runs ? Yes, most of our ACIs use groups to determine access. I'm not sure I understand the second part of your question t

Re: [389-users] Multi-Theading writes to the same 389 Master Server

2013-08-21 Thread Ludwig Krispenz
On 08/21/2013 05:29 PM, David Boreham wrote: On 8/21/2013 9:14 AM, Jeffrey Dunham wrote: The reason I asked about nsslapd-threadnumber is because during the time of the spike, all transactions slow. Meaning that binds, adds, searches, ect. all start increasing in their etime until it hits the

Re: [389-users] notes=U, unindex search? really

2013-01-18 Thread Ludwig Krispenz
Hi Rich, for DSEE we always had the discussion what is an unindexed search, or when should notes=U be logged. We did log notes=U only if there was no finite idlist and a full db scan had to be done. The finite idlist could be that in an AND one of the filtercomponents was indexed, or in an un