Problem browsing LDAP with Outlook
by Chris Bryant
When configuring Microsoft Outlook (not Outlook Express) to access an LDAP directory, there is an option to 'Enable Browsing (requires server support)'. If this option is chosen and the directory server supports it, then you should be able to open the LDAP address book and page up and down through the results. I have been unable to get this working properly with 389 DS.
When I try to browse from Outlook against the 389 DS directory, I am able to see the first page of results perfectly. However, if I move to the next page, only the first object returned will have any attributes included, and all of the rest of the objects in the page will have no attributes. I have a test perl script that duplicates this functionality as well.
I can get this to work properly with an older version of Netscape Directory Server, and I can get it working with OpenDS. Since 389 DS advertises support for the controls that are required for this to work, just like the other two servers, then I would expect it to work there also.
Has anyone out there gotten this to work with 389 DS? If so, can you share if there was anything special that you needed to do to get this to work? I'm trying to determine if this is a bug in the server, or if I'm just missing something in the configuration.
Thanks,
Chris
USA.NET
You Run Your Business. We'll Run Your Email.
This message is for the sole use of the intended recipient(s) and may contain confidential and/or privileged information of USA.NET, Inc. Any unauthorized review, use, copying, disclosure, or distribution is prohibited. If you are not the intended recipient, please immediately contact the sender by reply email and delete all copies of the original message.
3 years, 7 months
Directory Server help
by Natr Brazell
All,
I'm new to the community and apologize if posting to the wrong area. I'm
looking for "_current_" information relating to a forum or documentation on
RHEL Directory Server wrt to application integration. I'm making the
assumption that the FDS is a parallel effort. I've used RHDS for basic user
authentication but would like to do more with it. The docs that come with
it are pretty extensive but really don't cover basic things such as
integrating say autofs etc. Everywhere I read it says things like "you can
easily extend it to do ..." but no where does it say "here's how".
Probably just looking in the wrong places.
If this is the wrong area, please advise on where to post if you know. No
flaming please.
Nate
14 years, 1 month
slapd didn't close connection and get into CLOSE_WAIT state
by Chun Tat David Chu
Hi All,
I am running 389 DS version 1.2.5, build number 2010.012.2034 on RHEL 5.2.
I have a problem that slapd didn't close a connection and eventually get
into a CLOSE_WAIT state after my JAVA application exit.
The scenario only happen when my application registers a NamingListener via
the JAVA JNDI (Java Naming Directory Interface). I believe the
NamingListener is equivalent to the Persistent Search. This problem doesn't
exist if I don't use the JNDI NamingListener capability.
>From my understanding, I did everything correctly in my application. I
create a context, add a listener, do some stuffs, remove the listener and
then close the context.
One thing I notice is that in the slapd's error log, I see the following...
"-get_ldapmessage_controls failed: 12 (Unavailable critical extension)
(op=Abandon)".
This message prints out right after I remove the listener and before my
application closes the context.
The closest bug report I found is this and it said the problem has been
resolved.
https://bugzilla.redhat.com/show_bug.cgi?id=450575
At this point, I'm clueless. :-(
Can someone help me or give me some recommendation that I could try?
I will attach my JAVA JNDI replicator along with this e-mail. You will need
to modify 2-3 lines of code to get it running in your environment. Search
for "MODIFY ME" and that should be the lines that you need to modify.
Thanks!
David
14 years, 1 month
Problem with ldif import and empty attributes
by BLANQUART Fabrice
Hi,
I try to migrate an old Netscape Directory Server to 389ds.
When I import the export database, I get a lor of reject because of empty
attributes .
I get reject like :
Error adding object 'dn: uid=XXXXXX,o=Annuaire,o=directoryRoot'. The error
sent by the server was 'null. l: value #0 invalid per syntax
c: value #0 invalid per syntax
I test with centos-ds 8.1.0 and I didn't get these errors.
Is there a way to configure 389ds to accept empty attributes ?
Rgs
Ldif example :
dn: uid=XXXXXX,o=Annuaire,o=directoryRoot
objectclass: top
objectclass: person
objectclass: organizationalPerson
objectclass: inetorgperson
c:
cn: XXXXX Christelle
givenname: Christelle
l:
mail: cxxxxx(a)xxxxxx.com
o: Annuaire
sn: XXXXXX
uid: CXXXXXX
14 years, 1 month
FDS oid control for SunDS feature
by Charles Gilbert
Hi everyone,
I have been struggling with this one for a while.
In switching to 389, I am trying to figure out how to get my Solaris clients
working with account management and ssh keys. SunDS 5.? has an oid control
that allows for account management and ssh keys to proceed with their
server, and I was wondering if anyone has deal with a similar instance of
such on 389. I would really prefer to use the native ldap settings that
comes with Solaris.
Thanks,
Chuck Gilbert
14 years, 1 month
Re: [389-users] RH 3-5 systems hanging requiring autofs
by Charles Gilbert
>
>
> ------------------------------
>
> Message: 2
> Date: Tue, 23 Feb 2010 10:56:41 -0800
> From: "Morris, Patrick" <patrick.morris(a)hp.com>
> Subject: Re: [389-users] RH 3-5 systems hanging requiring autofs
> restart to fix issue
> To: "General discussion list for the 389 Directory server project."
> <389-users(a)lists.fedoraproject.org>
> Message-ID: <4B8424E9.9060004(a)hp.com>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> Charles Gilbert wrote:
> > Hi everyone,
> >
> > I am experiencing an issue with my systems in that autofs, or even
> > nscd or crond hangs after our RH 3, 4, and 5 machines are being used
> > for a while. This issue is causing concern that our LDAP install is
> > not stable obviously, and has sent me on a goose chase to find some
> > answers.
> >
> > Errors I get in the syslog are that automount: nss_ldap: can not
> > contact LDAP server.
>
> > Make sure you've got the most recent version of nss_ldap. Some of the
> > older Red Hat versions were buggy and could cause screwiness with LDAP
> > lookups.
>
> I have RH5.3 systems with up to date nss_ldap on it that are also having
> these problems. I am looking right now to verify that all the other systems
> are up todate.
>
14 years, 1 month
About nsMatchingRule in indexes
by Juan Asensio Sánchez
Hi
I am trying to make our directory more "user friendly". We are in Spain, so
there are people names like mine, "Juan Asensio Sánchez" (Sánchez with
tilde). Well, i I do a search with filter "(cn=*sánchez)" (with tilde), and
I get my user in the results, but if i try with the filter "(cn=*sanchez)"
(without tilde), i get no results (I understand why). Is there anyway to
make searches using indexes with the attribute nsMatchingRule to behave as I
need?
I have tried with:
nsMatchingRule: caseIgnoreSubstringMatch-es
in the cn index, but using the second filter "(cn=*sanchez)", i am already
having no results.
NB: I know I can use cn;lang-en, but this implies add more attributes
manually, duplicate similar values, etc.
Regards.
14 years, 1 month
CentOS DS and IP address
by Branimir
Hi list!
just one question (maybe silly one, but I have to be sure). Soon, we
will change the IP address of one of our servers running CentOS DS. Are
there any DS configuration files (or file) that need to be changed
accordingly? I took a look at /etc/dirsrv/slapd-instance and parsed for
IP address but there is none. Also, I tried to change IP addres of a
test LDAP server and everything works fine. But, as I mentioned before,
I have to be sure before (maybe there are some other configuration files
that I am not aware of) I do that in production environment? Any
thoughts, suggestions?
Thanks in advance!
Cheers,
Branimir
14 years, 1 month
RH 3-5 systems hanging requiring autofs restart to fix issue
by Charles Gilbert
Hi everyone,
I am experiencing an issue with my systems in that autofs, or even nscd or
crond hangs after our RH 3, 4, and 5 machines are being used for a while.
This issue is causing concern that our LDAP install is not stable obviously,
and has sent me on a goose chase to find some answers.
Errors I get in the syslog are that automount: nss_ldap: can not contact
LDAP server.
However, I am not using LDAP to store automount maps. Our home maps are
local files that are read, and the entry in nsswitch.conf has automount:
files only.
My theory is that since we are mounting home dirs with automount, it is
trying to verify ownership and permision by contacting the server. However,
after a time of users logging in and out on the servers, I have to log in as
root and restart autofs to allow users to continue to use the system.
I am not sure if this is an issue with tuning 389 or if it is my client
configuration. I have read about instances where soft binds can cause
issues, and instead, people are setting their systems to hard bind and using
the nss_reconnect_ values to prevent the connection from hanging
infinitly.
Any help would be greatly appreciated!
Thanks!
Chuck
14 years, 1 month
retrieving csn with ldapsearch
by Roberto Polli
hi all,
I'm trying to retrieve the csn with ldapsearch and ldapadd/modify.
I need it for syncing ldap with a custom backend.
For now I'm using the modifytimestamp, but for each add/modify I have to issue
a subsequent ldapsearch to retrieve the modifytimestamp...
The control I'm trying to use is the following:
https://www.opends.org/wiki/page/DefinitionCSNControl
the csn of the entry is reported into fedorads logs.
[18/Feb/2010:17:05:32 +0100] ... ADD dn="piEntryId=1..134c..."
[18/Feb/2010:17:05:33 +0100] RESULT err=0 .. csn=4b7d654e000000010000
Hope somebody can help.
Peace,
R.
--
Roberto Polli
Babel S.r.l. - http://www.babel.it
Tel. +39.06.91801075 - fax +39.06.91612446
Tel. cel +39.340.6522736
P.zza S.Benedetto da Norcia, 33 - 00040 Pomezia (Roma)
"Il seguente messaggio contiene informazioni riservate. Qualora questo
messaggio fosse da Voi ricevuto per errore, Vogliate cortesemente darcene
notizia a mezzo e-mail. Vi sollecitiamo altresì a distruggere il messaggio
erroneamente ricevuto. Quanto precede Vi viene chiesto ai fini del rispetto
della legge in materia di protezione dei dati personali."
14 years, 1 month
