June 2007 - 389-devel - Fedora Mailing-Lists

[Fedora-directory-devel] Please Review: (246270) Remove serverroot concept from Console

by Nathan Kinder

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=246270 Resolves: bug 246270 Bug Description: The notion of a "Server Root" has gone away in Admin Server, so the Console needs to adjust for this. Reviewed by: ??? Files: see diff Branch: HEAD Fix Description: The server root was mainly used for a deprecated merge config capability in the Console. The attached changes remove all traces of the server root. I've also bumped the version up to 1.1.0, improved the build system, turned the startconsole script into a template, fixed some theme bugs, and worked on the RPM packaging. Platforms tested: FC6 & RHEL4 Flag Day: no Doc impact: no https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=158240&action=diff

15 years, 11 months

1
0
0 / 0

[Fedora-directory-devel] Please Review: (246124) adminutil: findSIEDNByIDSSL() uses wrong credentials

by Nathan Kinder

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=246124 Resolves: bug 246124 Bug Description: The findSIEDNByIDSSL() function in adminutil needs to use the credentials used to authenticate to the webserver instead of the siedn when calling getServerDNListSSL(). Reviewed by: ??? Files: see diff Branch: HEAD Fix Description: The attached diffs save the siedn off before calling getServerDNListSSL() and set the userdn and password in the AdmLDAPInfo to the credentials supplied by the password pipe. There's also an unrelated change in the code that parses admpw. On my machine (FC6 i386), the parsing of admpw was giving incorrect results as viewed in gdb. For some reason, the pointer was being incremented before assignment. Noriko did not observe this on her RHEL4 machine, but we agreed that the changes I made are more safe as we will always get the intended results. Platforms tested: FC6 Flag Day: no Doc impact: no https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=158146&action=diff

15 years, 11 months

1
0
0 / 0

[Fedora-directory-devel] Re: [Bug 244749] Configure Pass Thru Auth

by Noriko Hosoi

Summary: Configure Pass Thru Auth https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=244749 The first diff is for the Admin Server setup and is almost identical to the proposal in comment #20, which is reviewed by Rich (Thank you!) The second one is for the Directory Server ds_newinst; proposing to remove the dependency on the Configuration Directory from the DS code and moving them to the Admin Server code. Thanks, --noriko ------- Additional Comments From nhosoi(a)redhat.com 2007-06-27 17:57 EST ------- Created an attachment (id=158070) --> (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=158070&action=view) cvs diffs (adminserver) Files: Makefile.am admserv/newinst/src/AdminUtil.pm.in admserv/newinst/src/dirserver.map.in admserv/newinst/src/register_param.map.in admserv/newinst/src/setup-ds-admin.pl.in admserv/schema/ldif/15dspta.ldif.tmpl.in Description: resurrected the code adding cn=Pass Through Authentication for o=netscape. In addition to the one in comment #20, adding the calling code to admserv/newinst/src/setup-ds-admin.pl.in in case the new server is non-configuration DS. ------- Additional Comments From nhosoi(a)redhat.com 2007-06-27 18:01 EST ------- Created an attachment (id=158071) --> (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=158071&action=view) cvs diff (ldapserver) Files: ldap/admin/src/create_instance.[ch] Description: 1) removing the dependency on the config_ds 2) ds_newinst always adds "cn=Pass Through Authentication" with the nsslapd-pluginEnabled value off.

15 years, 11 months

1
1
0 / 0

[Fedora-directory-devel] Please Review: (246020) Viewlog CGI needs to be modified to work with Console

by Nathan Kinder

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=246020 Resolves: bug 246020 Bug Description: The current viewlog CGI needs to be modified to be able to work properly with the Console. The CGI currently only supports the GET request method. This works for Admin Express, but Console expects it to support the POST request method. The output of the CGI currently includes a log selection combo box as well as other HTML elements that make for a nice useful log viewer page in Admin Express. The Console needs to be able to get get the raw log content that it requests. Reviewed by: ??? Files: see diff Branch: HEAD Fix Description: The attached diffs address the above issues. With these changes, the CGI will work with both the GET and POST request methods. I've added a new CGI parameter called "nohtml". This optional parameter is a flag that allows the caller to ask for only the raw content to be sent back. This satisfies the needs of the Console while keeping the behavior the same for Admin Express. Platforms tested: FC6 Flag Day: no Doc impact: no https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=158068&action=diff

15 years, 11 months

1
0
0 / 0

[Fedora-directory-devel] Please Review: (245665) dsalib still relies on server root

by Nathan Kinder

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245665 Resolves: bug 245665 Bug Description: The dsa library in Admin Server still heavily relies on the concept of a server root. This library is used by the Directory Server cgi tasks. The dsa library should try to get paths dynamically from the Directory Server config when possible. Other paths that are not in the config, such as the location of command-line utilities, should be passed in as a define at compilation time. Reviewed by: ??? Files: see diff Branch: HEAD Fix Description: This pass eliminated the usage of a "server root" in the dsa library. I also refactored some of the code that was referring to the "install root" as it did not seem to really represent the directory that it refers to. I renamed it to "instance dir" and adjusted the getter function and variables accordingly. I needed to pass in the DS libdir as a define for being able to find the instance dir in the code. I also found that I was incorrectly using the lockdir config attribute to set the rundir, which was causing problems for the start, stop, and restart CGIs. We don't have the rundir in cn=config by default, but we already have it set as a PIDDIR define, so I opted to use that instead. The start, stop, and restart CGIs now work properly. Platforms tested: FC6 Flag Day: no Doc impact: no https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=157923&action=diff

15 years, 11 months

1
0
0 / 0

[Fedora-directory-devel] Please Review: (245665) dsalib still relies on server root

by Nathan Kinder

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245665 Resolves: bug 245665 Bug Description: The dsa library in Admin Server still heavily relies on the concept of a server root. This library is used by the Directory Server cgi tasks. The dsa library should try to get paths dynamically from the Directory Server config when possible. Other paths that are not in the config, such as the location of command-line utilities, should be passed in as a define at compilation time. Reviewed by: ??? Files: see diff Branch: HEAD Fix Description: This is a first pass at cleaning up the paths in dsalib. These changes make the path getter functions use the Directory Server config values where possible. The next step is to pass the proper paths to the command-line utilities at compile time. Platforms tested: FC6 Flag Day: no Doc impact: no https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=157833&action=diff

15 years, 11 months

1
0
0 / 0

[Fedora-directory-devel] Please review: Bug 245369: mod_admserv: Task cache refresh uses wrong credentials

by Rich Megginson

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245369 Resolves: bug 245369 Bug Description: mod_admserv: Task cache refresh uses wrong credentials Reviewed by: ??? Files: see diff Branch: HEAD Fix Description: When the user requests a Task url, the admin server first figures out which server instance (or product) the request is for, then checks to see if it has seen that server or product before. If not, it uses the function sync_task_sie_data() to read the task data from the SIEs and ISIEs. However, it needs to use the credentials of the currently authenticated user to do so, because the tasks are protected by ACIs, and the user should only be allowed to read those tasks the user has access to. The interface to read these tasks is not great. It expects the SIE is a user with a password, and it attempts to bind as that user, instead of the currently authenticated user. I had to hack it to force it to use the current userdn and password instead of the SIE DN and SIE password. The SIE DN and password are now deprecated for binding. There were a couple of places where the SIE was used for both the bind DN and the SIE DN. I've created another structure member for the admservSieDN for use as the SIE (the configuration base DN) instead of as a bind DN, and deprecated the use of the SIE as the bind DN elsewhere in the code. Platforms tested: RHEL4 Flag Day: no Doc impact: no https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=157632&action=diff

15 years, 11 months

1
0
0 / 0

[Fedora-directory-devel] Please review: Bug 245214: adminserver: Solaris port for 1.1

by Rich Megginson

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245214 Resolves: bug 245214 Bug Description: adminserver: Solaris port for 1.1 Reviewed by: ??? Files: see diff Branch: HEAD Fix Description: Fortitude can supply different components, depending on the operating system. On Fedora, mod_nss and Apache are already there, so we don't use Fortitude. On RHEL4, we use Fortitude for mod_nss. On Solaris, we use Fortitude for Apache and mod_nss. I've created a fortitude.m4 that can handle all of these cases, and changed the existing httpd.m4 and mod_nss.m4 to first see if fortitude.m4 has found the component. configure will also pass the proper --with flags to mod_admserv and mod_restartd. ICU introduces a dependency on C++. Solaris requires linking with the C++ libraries and that also requires using C++ to link as well. This means using the CXXLINK macro. There were a few other minor porting issues which required the additional compiler defines and use of config.h. We need to set the libpath before using the @cgibindir@/config program. LIBPATH was not being set correctly on Solaris because I was using the extended sort flags instead of the standard ones. Platforms tested: Solaris 9 64bit Flag Day: no Doc impact: no https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=157561&action=diff

15 years, 11 months

1
0
0 / 0

[Fedora-directory-devel] Please review: Bug 245212: mod_admserv: Solaris port for 1.1

by Rich Megginson

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245212 Resolves: bug 245212 Bug Description: mod_admserv: Solaris port for 1.1 Reviewed by: ??? Files: see diff - new file dummy.cpp Branch: HEAD Fix Description: There are several problems with building/running mod_admserv on Solaris. The biggest is that ICU introduces a dependency on C++. Solaris requires linking with the C++ libraries and that also requires using C++ to link as well. This means using the CXXLINK macro. However, automake will only generate this macro if it detects a C++ source file in Makefile.am. So, we have to introduce a dummy.cpp file to force automake to generate the CXXLINK macro, then use that to link the module. I also added some support for Fortitude, although this will be handled by adminserver when building mod_admserv as part of adminserver. Platforms tested: Solaris 9 64bit Flag Day: no Doc impact: no https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=157560&action=diff -- Fedora-directory-devel mailing list Fedora-directory-devel(a)redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-devel

15 years, 11 months

1
0
0 / 0

[Fedora-directory-devel] Please review: Bug 245208: adminutil: Solaris port for 1.1

by Rich Megginson

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245208 Resolves: bug 245208 Bug Description: adminutil: Solaris port for 1.1 Reviewed by: ??? Files: see diff - new file dummy.cpp Branch: HEAD Fix Description: There are several problems with building/running adminutil on Solaris. The biggest is that ICU introduces a dependency on C++. Solaris requires linking with the C++ libraries and that also requires using C++ to link as well. This means using the CXXLINK macro. However, automake will only generate this macro if it detects a C++ source file in Makefile.am. So, we have to introduce a dummy.cpp file to force automake to generate the CXXLINK macro, then use that to link the shared libraries. Accept automake version 1.10 or later. Look for mozldap6 first, then mozldap. Platforms tested: Solaris 9 64bit Flag Day: no Doc impact: no https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=157558&action=diff

15 years, 11 months

1
0
0 / 0

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-devel June 2007