RE: [Fedora-directory-users] Problem with solaris & FDS authentication
by Tay, Gary
Yes it would be a superset containing schema definitions of
DUAConfigProfile and nisDomain attributes and objectclasses, ONLY if you
have run "idsconfig". When I first tried configuring Solaris8 LDAP
Client against FDS I copied over the 99user.ldif from SUN iDS install,
and it actually worked.
BUT the point is, as George and Rich had pointed up to me in
https://www.redhat.com/archives/fedora-directory-users/2005-July/msg0013
8.html
is that 99user.ldif may contain all other "customized" schema changes
and it is not "proper" to just "blindly copy over" and overwrite the
original 99user.ldif of FDS7.1.
Looks like you did not perform a fresh re-install of FDS and went from
there, make sure you stop slapd and admin server, "rm -f /opt/fedora-ds"
and re-install from scratch using static IP for your Solaris8 LDAP
Client running OpenSSH server, you may follow my revised HOW-TO:
http://web.singnet.com.sg/~garyttt/Configuring%20Solaris%20Native%20LDAP
%20Client%20for%20Fedora%20Directory%20Server.htm
Gary
-----Original Message-----
From: fedora-directory-users-bounces(a)redhat.com
[mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Igor
Sent: Thursday, September 01, 2005 11:49 PM
To: General discussion list for the Fedora Directory server project.
Subject: RE: [Fedora-directory-users] Problem with solaris & FDS
authentication
> ===
> GT: Did you have 61DUAConfigFile.ldif and 62nisDomain.ldif added to
> config/schema (and slapd restarted)? They provides all the required
> attributes for DUAConfigProfile and nisDomain objects including SSD
> (serviceSearchDescriptor). We try not to touch 99user.ldif and the
> original 99user.ldif should have a file size of 1321.
No, I got the 99user.ldif from an iDS install. I thought it is a
superset of 61dua & 62nis LDIFs?
____________________________________________________
Start your day with Yahoo! - make it your home page
http://www.yahoo.com/r/hs
--
Fedora-directory-users mailing list Fedora-directory-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
18 years, 7 months
- 1
- 0
[Fedora-directory-users] FDS/Samba and password sync
by Sævaldur Arnar Gunnarsson
I would like to ask the people who are using the Fedora Directory Server
as a backend LDAP server to a Samba PDC to see what happens when a user
changes a password from the ctrl+alt+del dialog in Windows. (with 'ldap
passwd sync = Yes' in smb.conf)
This did not work for me the last time I tried FDS (last June) only the
Samba related password fields (SambaLMPassword/SambaNTPassword) are
changed and not the userPassword field.
See this thread:
https://www.redhat.com/archives/fedora-directory-users/2005-June/msg00092...
So I'm kinda curious to see if someone has gotten this to work.
--
Sævaldur Arnar Gunnarsson ; RHCE
18 years, 7 months
- 1
- 0
RE: [Fedora-directory-users] Problem with solaris & FDS authentication
by Tay, Gary
===
The system is using dhcp, btw. Could that be the problem?
===
GT: I do not think it is logical to run an OpenSSH Server on a DHCP
Client with possibly varying IP address, please use Static IP.
==
I dont have SSD attributes. 99user.ldif is in the schema directory but
none of those attributes can be added in the properties of default
profile.
===
GT: Did you have 61DUAConfigFile.ldif and 62nisDomain.ldif added to
config/schema (and slapd restarted)? They provides all the required
attributes for DUAConfigProfile and nisDomain objects including SSD
(serviceSearchDescriptor). We try not to touch 99user.ldif and the
original 99user.ldif should have a file size of 1321.
-rw------- 1 nobody nobody 1321 Jun 3 02:39 99user.ldif
-rw-r--r-- 1 root root 3624 Aug 29 02:17
61DUAConfigProfile.ldif
-rw-r--r-- 1 root root 264 Aug 29 02:53 62nisDomain.ldif
Gary
-----Original Message-----
From: fedora-directory-users-bounces(a)redhat.com
[mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Igor
Sent: Thursday, September 01, 2005 3:48 AM
To: General discussion list for the Fedora Directory server project.
Subject: RE: [Fedora-directory-users] Problem with solaris & FDS
authentication
started nscd, added debug, still no go. id testdba works.
> /etc/pam.conf to observe all possible /var/adm/messages for "sshd"
> processing.
Aug 31 14:04:02 unknown last message repeated 1 time
Aug 31 14:04:02 unknown sshd[413]: [ID 800047 auth.error] error: PAM:
Authentication failed for testdba from cnyitsun01.composers.foo.com Aug
31 14:04:07 unknown sshd[413]: [ID 316739 auth.error] pam_ldap: no legal
authentication method configured
That's all I get. The system is using dhcp, btw. Could that be the
problem?
> GT: Use Fedord Management Console to add the three SSDs into the
> "default" profile,
I dont have SSD attributes. 99user.ldif is in the schema directory but
none of those attributes can be added in the properties of default
profile.
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
--
Fedora-directory-users mailing list Fedora-directory-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
18 years, 7 months
- 4
- 3