November 2007 - 389-users - Fedora mailing-lists

[Fedora-directory-users] Centos5 does not install
by Maurizio Marini 28 Feb '08

28 Feb '08

As stated clearly here: http://www.mail-archive.com/fedora-directory-users@redhat.com/msg02579.html linux distro should be support apache 2.0 not 2.2 m.

3 3

[Fedora-directory-users] Announcing Fedora Directory Server 1.1 Beta
by Rich Megginson 05 Dec '07

05 Dec '07

Fedora Directory Server 1.1 Beta is now available. See http://directory.fedoraproject.org/wiki/Release_Notes for information.

3 14

Re: [Fedora-directory-users] Custom Attribute Export - Now PEN Number
by Jared B. Griffith 30 Nov '07

30 Nov '07

That's what I was afraid of... that file is pretty ugly. If you have a PEN number from iana, is there anywhere to put it or actually use it when using FDS? ----- Original Message ----- From: "George Holbert" <gholbert(a)broadcom.com> To: "Jared B. Griffith" <jared.griffith(a)farheap.com> Cc: "General discussion list for the Fedora Directory server project." <fedora-directory-users(a)redhat.com> Sent: Thursday, November 29, 2007 12:05:00 PM (GMT-0800) America/Los_Angeles Subject: Re: [Fedora-directory-users] Custom Attribute Export You'll have to filter out the ones you've added into a new file. Might be useful to grep 99user.ldif for the OID used for your schema items, etc. Schema elements added through the console (which I'm guessing is how yours were added) are appended to 99user.ldif, and FDS doesn't specially distinguish them from other entries in that file. Jared B. Griffith wrote: > There appears to be a lot of extra stuff in there that I really don't > need, I just want the specific ones that I have added. > > > > > ----- Original Message ----- > From: "George Holbert" <gholbert broadcom.com> > To: "Jared B. Griffith" <jared.griffith farheap.com>, "General > discussion list for the Fedora Directory server project." > <fedora-directory-users redhat.com> > Sent: Thursday, November 29, 2007 11:38:45 AM (GMT-0800) > America/Los_Angeles > Subject: Re: [Fedora-directory-users] Custom Attribute Export > > These should already be in your .../config/schema/99user.ldif file. > > Jared B. Griffith wrote: > > Is there a way to export the custom attributes and object classes I > > have created into an ldif file of some sort? > > > -- - Thank you, - Jared B. Griffith - Farheap Solutions, Inc. - Lead Systems Administrator - California IT Department - Email - jared.griffith(a)farheap.com - Phone - 949.417.1500 ext. 266 - Cell Phone - 949.910.6542

3 6

[Fedora-directory-users] nsslapd-lookthroughlimit and nsslapd-sizelimit
by Jean-Claude Ben 30 Nov '07

30 Nov '07

Hi I need to set those variables to an unlimited value. Whatever value i set, after reload i get "nsslapd-lookthroughlimit: 5000" in the "dn: cn=config,cn=ldbm database,cn=plugins,cn=config" section of my dse.ldif. Has someone an idea of the problem ?

3 5

[Fedora-directory-users] Custom Attribute Export
by Jared B. Griffith 29 Nov '07

29 Nov '07

Is there a way to export the custom attributes and object classes I have created into an ldif file of some sort? -- - Thank you, - Jared B. Griffith - Farheap Solutions, Inc. - Lead Systems Administrator - California IT Department - Email - jared.griffith(a)farheap.com - Phone - 949.417.1500 ext. 266 - Cell Phone - 949.910.6542

2 3

[Fedora-directory-users] Problems restoring backup
by Kimmo Koivisto 28 Nov '07

28 Nov '07

Hello I reinstalled FDS 1.0.4 and tried to restore backup, but something goes wrong and after restore is done, ldapsearch does not return any entries (and there should be about 1300 entries). Any ideas what is the problem and how to fix it? I just need to restore it to export ldif from it, is it possible to export ldif from the backup if it cannot be restored? Regards, Kimmo <log> [24/Nov/2007:18:36:16 +0200] - Deleting log file: (/opt/fedora-ds/slapd-myserver2/db/log.0000000001) [24/Nov/2007:18:36:16 +0200] - Restoring file 1 (/opt/fedora-ds/slapd-myserver2/db/DBVERSION) [24/Nov/2007:18:36:16 +0200] - Restoring file 2 (/opt/fedora-ds/slapd-myserver2/db/userRoot/objectclass.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 3 (/opt/fedora-ds/slapd-myserver2/db/userRoot/parentid.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 4 (/opt/fedora-ds/slapd-myserver2/db/userRoot/cn.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 5 (/opt/fedora-ds/slapd-myserver2/db/userRoot/nscpEntryDN.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 6 (/opt/fedora-ds/slapd-myserver2/db/userRoot/sn.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 7 (/opt/fedora-ds/slapd-myserver2/db/userRoot/nsUniqueId.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 8 (/opt/fedora-ds/slapd-myserver2/db/userRoot/uid.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 9 (/opt/fedora-ds/slapd-myserver2/db/userRoot/member.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 10 (/opt/fedora-ds/slapd-myserver2/db/userRoot/nsds5ReplConflict.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 11 (/opt/fedora-ds/slapd-myserver2/db/userRoot/DBVERSION) [24/Nov/2007:18:36:16 +0200] - Restoring file 12 (/opt/fedora-ds/slapd-myserver2/db/userRoot/telephoneNumber.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 13 (/opt/fedora-ds/slapd-myserver2/db/userRoot/ancestorid.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 14 (/opt/fedora-ds/slapd-myserver2/db/userRoot/aci.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 15 (/opt/fedora-ds/slapd-myserver2/db/userRoot/entrydn.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 16 (/opt/fedora-ds/slapd-myserver2/db/userRoot/seeAlso.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 17 (/opt/fedora-ds/slapd-myserver2/db/userRoot/givenName.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 18 (/opt/fedora-ds/slapd-myserver2/db/userRoot/owner.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 19 (/opt/fedora-ds/slapd-myserver2/db/userRoot/id2entry.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 20 (/opt/fedora-ds/slapd-myserver2/db/userRoot/numsubordinates.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 21 (/opt/fedora-ds/slapd-myserver2/db/userRoot/uniquemember.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 22 (/opt/fedora-ds/slapd-myserver2/db/userRoot/mail.db4) [24/Nov/2007:18:36:16 +0200] - Restoring file 23 (/opt/fedora-ds/slapd-myserver2/db/log.0000011927) [24/Nov/2007:18:36:17 +0200] - Add Instance Config Entry cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:17 +0200] - Del Instance Config Entry cn=NetscapeRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - ldbm: Bringing NetscapeRoot offline... [24/Nov/2007:18:36:18 +0200] - ldbm: removing 'NetscapeRoot'. [24/Nov/2007:18:36:18 +0200] - Destructor for instance NetscapeRoot called [24/Nov/2007:18:36:18 +0200] - Del Instance Config Entry cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - ldbm: Bringing userRoot offline... [24/Nov/2007:18:36:18 +0200] - ldbm: removing 'userRoot'. [24/Nov/2007:18:36:18 +0200] - Destructor for instance userRoot called [24/Nov/2007:18:36:18 +0200] - WARNING!!: current Instance Config is different from backed up configuration; The backup is restored. [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=cn,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=entrydn,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=givenName,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=mail,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=mailAlternateAddress,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=mailHost,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=member,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=nsCalXItemId,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=nsLIProfileName,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=nsUniqueId,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=nswcalCALID,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=ntUniqueId,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=ntUserDomainId,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=numsubordinates,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=objectclass,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=owner,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=parentid,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=pipstatus,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=pipuid,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=seeAlso,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=sn,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=telephoneNumber,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=uid,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Del Index Config Entry cn=uniquemember,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Add Index Config Entry cn=aci,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Add Index Config Entry cn=cn,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Add Index Config Entry cn=cn,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:18 +0200] - Add Index Config Entry cn=entrydn,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=entrydn,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=givenName,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=givenName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=mail,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=mail,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=mailAlternateAddress,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=mailAlternateAddress,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=mailHost,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=mailHost,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=member,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=member,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=nsCalXItemId,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=nsCalXItemId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=nscpEntryDN, cn=index, cn=userRoot, cn=ldbm database, cn=plugins, cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=nsds5ReplConflict, cn=index, cn=userRoot, cn=ldbm database, cn=plugins, cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=nsLIProfileName,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=nsLIProfileName,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=nsUniqueId,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=nsUniqueId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=nswcalCALID,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=nswcalCALID,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=ntUniqueId,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=ntUniqueId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=ntUserDomainId,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=ntUserDomainId,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=numsubordinates,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=numsubordinates,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=objectclass,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=objectclass,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=owner,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=owner,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=parentid,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=parentid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=pipstatus,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=pipstatus,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=pipuid,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=pipuid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=seeAlso,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=seeAlso,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=sn,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=sn,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=telephoneNumber,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=telephoneNumber,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=uid,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=uid,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=uniquemember,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Add Index Config Entry cn=uniquemember,cn=index,cn=userRoot,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=aci,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=cn,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=entrydn,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=givenName,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=mail,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=mailAlternateAddress,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=mailHost,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=member,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=nsCalXItemId,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=nsLIProfileName,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=nsUniqueId,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=nswcalCALID,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=ntUniqueId,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=ntUserDomainId,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=numsubordinates,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=objectclass,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=owner,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=parentid,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=pipstatus,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=pipuid,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=seeAlso,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=sn,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=telephoneNumber,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=uid,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - Del Index Config Entry cn=uniquemember,cn=default indexes, cn=config,cn=ldbm database,cn=plugins,cn=config [24/Nov/2007:18:36:19 +0200] - WARNING!!: current Index Config is different from backed up configuration; The backup is restored. </log>

2 2

[Fedora-directory-users] ldap_simple_bind: Can't connect to the LDAP server - Invalid argument
by Dane Shea 28 Nov '07

28 Nov '07

Hello I am trying to use samba with Fedora Directory Server as it's backend, I am currently trying to configure samba to work with Fedora Directory Server using this guide: http://directory.fedoraproject.org/wiki/Howto:Samba#Samba_.26_Fedora_Direct… erver_Integration. My eventual goal is to have a Fedora Directory Server using Samba where XP clients can log in with pGina(pgina.org), and a logon script from samba will automatically mount their personal network drive, but first I am told that I need to configure samba for Fedora Directory Server. I don't know if I have everything up until this point configured correctly but I assume it is because I have been following the guide and I haven't had any errors. This is where I hit a brick wall. At the section of Populating FDS with PDC Entry, here is my console and the files I used: [root@daneshea ~]# net getlocalsid SID for domain SHEA is: S-1-5-21-578281780-2648695933-2708965967 [root@daneshea ~]# gedit /tmp/sambaDomainName.ldif sambaDomainName.ldif: dn: sambaDomainName=SHEA,dc=com objectclass: sambaDomain objectclass: sambaUnixIdPool objectclass: top sambaDomainName: SHEA sambaSID: S-1-5-21-578281780-2648695933-2708965967 uidNumber: 550 gidNumber: 550 [root@daneshea ~]# /opt/fedora-ds/slapd-daneshea/ldif2ldap "cn=Directory manager" password /tmp/sambaDomainName.ldif ldap_simple_bind: Can't connect to the LDAP server - Invalid argument [root@daneshea ~]# I don't know if my smb.conf is affecting it but I think I have it configured correctly, as you can see I have five users that need their network drives mounted automatically Global parameters [global] workgroup = WORKGROUP netbios name = SHEA server string = Shea Server map to guest = Bad User log file = /var/log/samba/log.%m max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 preferred master = yes local master = yes domain master = yes dns proxy = No security = user passdb backend = ldapsam:ldap://192.168.1.109 ldap admin dn = cn=Directory Manager ldap suffix = dc=com ldap user suffix = ou=People ldap machine suffix = ou=Computers ldap group suffix = ou=Groups domain logons = yes os level = 24 logon script = %U.bat logon home = \\home\%u\ logon path = \\home\%u\ logon drive = P: template shell = /bin/false winbind use default domain = no [netlogon] comment = The domain logon service path = /export/samba/logon public = no writeable = no browsable = no # Share [Chance] path = /home/CShea public = yes writeable = yes [Dane] path = /home/DShea public = yes writeable = yes [Berit] path = /home/BShea public = yes writeable = yes [Dale] path = /home/DLShea public = yes writeable = yes [Savanah] path = /home/SShea public = yes writeable = yes -- Thanks Dane Shea

2 1

[Fedora-directory-users] Importing Users
by Jared B. Griffith 27 Nov '07

27 Nov '07

Has anyone else experienced a very long time when importing a ldif file with a size of about 42 Mb? It is currently taking me about 2 hours to import the users using the Console. Would it be faster using the command line tool? I am at a loss as how to run it from the command line as it is requesting a back end instance, and I am not exactly sure what it is looking for. -- - Thank you, - Jared B. Griffith - Farheap Solutions, Inc. - Lead Systems Administrator - California IT Department - Email - jared.griffith(a)farheap.com - Phone - 949.417.1500 ext. 266 - Cell Phone - 949.910.6542

2 2

[Fedora-directory-users] Adding New Users
by Jared B. Griffith 27 Nov '07

27 Nov '07

Is there a way to modify what attributes a new user has when creating them? I know that the Object Class for account is read only, but there are several attributes we would like to make happen when creating an account rather than going back in and editing them. -- - Thank you, - Jared B. Griffith - Farheap Solutions, Inc. - Lead Systems Administrator - California IT Department - Email - jared.griffith(a)farheap.com - Phone - 949.417.1500 ext. 266 - Cell Phone - 949.910.6542

2 2

[Fedora-directory-users] Certifcate Database Errors
by Anthony Giggins 27 Nov '07

27 Nov '07

I have been following the instructions here http://www.csse.uwa.edu.au/~ashley/fedora-ds/fedora-ds-26072006.html as per the wiki suggests I'm having problems with the Certificate Databases creating correctly When going into Manage Certificates on the Directory server within the admin console I get the following error "Internal Error | Unable to open certificate databases" I have tried deleting them so the admin console can recreate them as suggested in the instructions above but this does not work I just get more errors "An Error has occured | Could not open file slapd-devil-cert8.db." I have also tried using the script from the wiki http://directory.fedoraproject.org/download/setupssl2.sh Please help

2 3

[Fedora-directory-users] admin-serv seg faults over and over
by Ryan Braun 27 Nov '07

27 Nov '07

I just installed fds on another system, and I noticed the admin serv would keep seg faulting 11 over and over. A quick google-ing resulted in this thread. http://www.redhat.com/archives/fedora-directory-users/2007-June/msg00083.ht… I would just like to know if this is still the case that you cannot be running libnss-ldap depending services on any machines running fds. Ryan

4 5

[Fedora-directory-users] New Replication Agreement Error
by Jared B. Griffith 27 Nov '07

27 Nov '07

I am getting the following error when trying to create a replication agreement for a 2nd slave only server. NSMMReplicationPlugin - agmtlist_add_callback: Can't start agreement "cn=garryldap,cn=replica,cn=dc=farheap\,dc=com,cn=mapping tree,cn=config" I currently have 2 master servers and 1 slave server. We want to put a slave server at each building location, however when trying to create a new replication agreement for our newest slave server, I get the aforementioned error. I was wondering if anyone else has run into this as my googling did not return many results at all. On the other Master server I am able to create the replication agreement without any problems at all. -- - Thank you, - Jared B. Griffith - Farheap Solutions, Inc. - Lead Systems Administrator - California IT Department - Email - jared.griffith(a)farheap.com - Phone - 949.417.1500 ext. 266 - Cell Phone - 949.910.6542

1 1

[Fedora-directory-users] nsds5task
by James 26 Nov '07

26 Nov '07

Does anyone know much about the attribute nsds5task under cn=replica,cn="m-suffix",cn=mapping tree,cn=config ? I have a system with multiple directory servers using multi-master replication which has 2 suppliers and 3 dedicated consumers. The system receives a large amount of updates in a batch run at night. The problem I'm experiencing is that if I point the batch run at one of the 2 suppliers, it runs considerably slower than the other supplier (30-50%). The only difference I can find between these two suppliers (other than some expected differences) is this one attribute, who's value is set to "CL2LDIF" on the slow server, and the attribute is not set on the other. >From the very small amount of information I've found on this attribute, it appears that it causes the directory server to dump its changelogs. Should this attribute be set to "CL2LDIF" on one server constantly, but not be set at all on the other? Might this setting be causing one slow server? If so, how can I fix this situation? Any help would be greatly appreciated. Thanks, ~James -- James Bushey Software Engineer Soleo Communications (585) 641-4300 x0050

2 1

[Fedora-directory-users] Fedora-DS with Xp Clients having Network Mapped drives
by Dane Shea 26 Nov '07

26 Nov '07

Hi I am trying to run a FDS server with Windows XP clients. Currently I am able to log in with the pGina on the Windows Xp Pro machines but now I want to automount a personal drive every time a user logs in. Is this possible or am I touching unknown territory between Linux and XP clients? If it is possible what should I search for and what applications/programs should I use on both the client and server? If it isn't possible what should I do to make it possible? Different directory server, different authentication program, different server OS? -- Thanks Dane Shea

2 1

[Fedora-directory-users] Ldap user login problem in solaris 10
by Imtiaz Ahmed 26 Nov '07

26 Nov '07

hi *I can't login Solaris 10 by ldap user*. I have installed Red hat 7.1 DS and it's working fine with HP-UX and Linux. I create a user named *ldaptst* under ou=profile,dc=test,dc=com,dc=bd LDAP Client=Solaris 10 LDAP Server=HP-UX 11.23 (Red Hat DS 7.1) Solaris 10 bash-3.00# more ldap_client_cred # # Do not edit this file manually; your changes will be lost.Please use ldapclient (1M) instead. # NS_LDAP_BINDDN= cn=proxyagent,ou=profile,dc=test,dc=com,dc=bd NS_LDAP_BINDPASSWD= {NS1}f8670fc15443505d bash-3.00# more ldap_client_file # # Do not edit this file manually; your changes will be lost.Please use ldapclient (1M) instead. # NS_LDAP_FILE_VERSION= 2.0 NS_LDAP_SERVERS= 10.10.96.114 NS_LDAP_SEARCH_BASEDN= dc=test,dc=com,dc=bd NS_LDAP_AUTH= simple NS_LDAP_SEARCH_REF= FALSE NS_LDAP_SEARCH_SCOPE= sub NS_LDAP_SEARCH_TIME= 30 NS_LDAP_SERVER_PREF= 10.10.96.114 NS_LDAP_CACHETTL= 43200 NS_LDAP_PROFILE= default NS_LDAP_CREDENTIAL_LEVEL= proxy NS_LDAP_SERVICE_SEARCH_DESC= passwd:ou=profile,dc=test,dc=com,dc=bd?sub NS_LDAP_SERVICE_SEARCH_DESC= group:ou=profile,dc=test,dc=com,dc=bd?sub NS_LDAP_BIND_TIME= 10 bash-3.00# ################ bash-3.00# ldaplist -l passwd dn: uid=ldaptst,ou=profile,dc=test,dc=com,dc=bd objectClass: posixAccount objectClass: top objectClass: inetOrgPerson objectClass: organizationalPerson objectClass: person gidNumber: 65534 givenName: ldap sn: Only displayName: LDAP Test uid: ldaptst homeDirectory: /export/home loginShell: /bin/ksh cn: LDAP Test uidNumber: 16954 bash-3.00# ################################ # # /etc/nsswitch.ldap: # # An example file that could be copied over to /etc/nsswitch.conf; it # uses LDAP in conjunction with files. # # "hosts:" and "services:" in this file are used only if the # /etc/netconfig file has a "-" for nametoaddr_libs of "inet" transports. # LDAP service requires that svc:/network/ldap/client:default be enabled # and online. # the following two lines obviate the "+" entry in /etc/passwd and /etc/group. passwd: files ldap group: files ldap # consult /etc "files" only if ldap is down. hosts: files dns # Note that IPv4 addresses are searched for in all of the ipnodes databases # before searching the hosts databases. ipnodes: files networks: files protocols: files rpc: files ethers: files netmasks: files bootparams: files publickey: files netgroup: files automount: files aliases: files # for efficient getservbyname() avoid ldap services: files printers: user files auth_attr: files prof_attr: files project: files ####################/etc/pam.conf######### # login service (explicit because of pam_dial_auth) # login auth requisite pam_authtok_get.so.1 login auth required pam_dhkeys.so.1 login auth required pam_unix_cred.so.1 #login auth required pam_unix_auth.so.1 login auth required pam_dial_auth.so.1 login auth binding pam_unix_auth.so.1 server_policy login auth required pam_ldap.so.1 # # # rlogin service (explicit because of pam_rhost_auth) # rlogin auth sufficient pam_rhosts_auth.so.1 rlogin auth requisite pam_authtok_get.so.1 rlogin auth required pam_dhkeys.so.1 rlogin auth required pam_unix_cred.so.1 #rlogin auth required pam_unix_auth.so.1 rlogin auth binding pam_unix_auth.so.1 server_policy rlogin auth required pam_ldap.so.1 # # Kerberized rlogin service # krlogin auth required pam_unix_cred.so.1 krlogin auth binding pam_krb5.so.1 krlogin auth required pam_unix_auth.so.1 # # rsh service (explicit because of pam_rhost_auth, # and pam_unix_auth for meaningful pam_setcred) # rsh auth sufficient pam_rhosts_auth.so.1 rsh auth required pam_unix_cred.so.1 rsh auth binding pam_unix_auth.so.1 server_policy rsh auth required pam_ldap.so.1 # # Kerberized rsh service # krsh auth required pam_unix_cred.so.1 krsh auth binding pam_krb5.so.1 krsh auth required pam_unix_auth.so.1 # # Kerberized telnet service # ktelnet auth required pam_unix_cred.so.1 ktelnet auth binding pam_krb5.so.1 ktelnet auth required pam_unix_auth.so.1 # # PPP service (explicit because of pam_dial_auth) # ppp auth requisite pam_authtok_get.so.1 ppp auth required pam_dhkeys.so.1 #ppp auth required pam_unix_cred.so.1 ppp auth required pam_dial_auth.so.1 #ppp auth required pam_unix_auth.so.1 ppp auth binding pam_unix_auth.so.1 server_policy ppp auth required pam_ldap.so.1 # # Default definitions for Authentication management # Used when service name is not explicitly mentioned for authentication # other auth requisite pam_authtok_get.so.1 other auth required pam_dhkeys.so.1 other auth required pam_unix_cred.so.1 #other auth required pam_unix_auth.so.1 other auth binding pam_unix_auth.so.1 server_policy other auth required pam_ldap.so.1 # # passwd command (explicit because of a different authentication module) # #passwd auth required pam_passwd_auth.so.1 passwd auth binding pam_passwd_auth.so.1 server_policy passwd auth required pam_ldap.so.1 # # cron service (explicit because of non-usage of pam_roles.so.1) # cron account required pam_unix_account.so.1 # # Default definition for Account management # Used when service name is not explicitly mentioned for account management # other account requisite pam_roles.so.1 #other account required pam_unix_account.so.1 other account binding pam_unix_account.so.1 server_policy other account required pam_ldap.so.1 # Default definition for Session management # Used when service name is not explicitly mentioned for session management # other session required pam_unix_session.so.1 # # Default definition for Password management # Used when service name is not explicitly mentioned for password management # other password required pam_dhkeys.so.1 other password requisite pam_authtok_get.so.1 other password requisite pam_authtok_check.so.1 #other password required pam_authtok_store.so.1 other password required pam_authtok_store.so.1 server_policy # # Support for Kerberos V5 authentication and example configurations can # be found in the pam_krb5(5) man page under the "EXAMPLES" section. # ######################################### Access LOG from Server########### [21/Nov/2007:10:32:07 +0600] conn=1576076 op=1 SRCH base="ou=profile,dc=test,dc=com,dc=bd" scope=2 filter="(&(objectClass=shadowAccount)(uid=ldaptst))" attrs="uid userPassword shadowFlag" [21/Nov/2007:10:32:10 +0600] conn=1576077 op=1 SRCH base="ou=profile,dc=test,dc=com,dc=bd" scope=2 filter="(&(objectClass=posixAccount)(uid=ldaptst))" attrs="cn uid uidNumber gidNumber gecos description homeDirectory loginShell" [21/Nov/2007:10:32:10 +0600] conn=1576078 op=1 SRCH base="ou=profile,dc=test,dc=com,dc=bd" scope=2 filter="(&(objectClass=shadowAccount)(uid=ldaptst))" attrs="uid userPassword shadowFlag" [21/Nov/2007:10:32:10 +0600] conn=1576079 op=1 SRCH base="ou=profile,dc=test,dc=com,dc=bd" scope=2 filter="(&(objectClass=posixAccount)(uid=ldaptst))" attrs="cn uid uidNumber gidNumber gecos description homeDirectory loginShell" [21/Nov/2007:10:32:10 +0600] conn=1576080 op=1 SRCH base="ou=profile,dc=test,dc=com,dc=bd" scope=2 filter="(&(objectClass=shadowAccount)(uid=ldaptst))" attrs="uid userPassword shadowFlag" [21/Nov/2007:10:32:10 +0600] conn=1576081 op=1 SRCH base="ou=profile,dc=test,dc=com,dc=bd" scope=2 filter="(&(objectClass=posixAccount)(uid=ldaptst))" attrs=ALL [21/Nov/2007:10:32:10 +0600] conn=1576082 op=0 BIND dn="uid=ldaptst,ou=profile,dc=test,dc=com,dc=bd" method=128 version=3 ###################################### bash-3.00# ldapclient -v init -a profileName=default -a proxyDN=cn=proxyagent,ou=profile,dc=test,dc=com,dc=bd -a proxyPassword=Dm123456 10.10.96.114:389 Parsing profileName=default Parsing proxyDN=cn=proxyagent,ou=profile,dc=test,dc=com,dc=bd Parsing proxyPassword=Dm123456 Arguments parsed: proxyDN: cn=proxyagent,ou=profile,dc=test,dc=com,dc=bd profileName: default proxyPassword: Dm123456 defaultServerList: 10.10.96.114:389 Handling init option About to configure machine by downloading a profile findBaseDN: begins findBaseDN: ldap not running findBaseDN: calling __ns_ldap_default_config() found 2 namingcontexts findBaseDN: __ns_ldap_list(NULL, "(&(objectclass=nisDomainObject)(nisdomain= test.com.bd))" rootDN[0] dc=test,dc=com,dc=bd found baseDN dc=test,dc=com,dc=bd for domain test.com.bd Proxy DN: cn=proxyagent,ou=profile,dc=test,dc=com,dc=bd Proxy password: {NS1}f8670fc15443505d Credential level: 1 Authentication method: 1 About to modify this machines configuration by writing the files Stopping network services Stopping sendmail stop: sleep 100000 microseconds stop: network/smtp:sendmail... success Stopping nscd stop: sleep 100000 microseconds stop: system/name-service-cache:default... success Stopping autofs stop: sleep 100000 microseconds stop: sleep 200000 microseconds stop: sleep 400000 microseconds stop: sleep 800000 microseconds stop: sleep 1600000 microseconds stop: sleep 3200000 microseconds stop: system/filesystem/autofs:default... success ldap not running nisd not running nis(yp) not running file_backup: stat(/etc/nsswitch.conf)=0 file_backup: (/etc/nsswitch.conf -> /var/ldap/restore/nsswitch.conf) file_backup: stat(/etc/defaultdomain)=0 file_backup: (/etc/defaultdomain -> /var/ldap/restore/defaultdomain) file_backup: stat(/var/nis/NIS_COLD_START)=-1 file_backup: No /var/nis/NIS_COLD_START file. file_backup: nis domain is "test.com.bd" file_backup: stat(/var/yp/binding/test.com.bd)=-1 file_backup: No /var/yp/binding/test.com.bd directory. file_backup: stat(/var/ldap/ldap_client_file)=-1 file_backup: No /var/ldap/ldap_client_file file. Starting network services start: /usr/bin/domainname test.com.bd... success start: sleep 100000 microseconds start: network/ldap/client:default... success start: sleep 100000 microseconds start: system/filesystem/autofs:default... success start: sleep 100000 microseconds start: system/name-service-cache:default... success start: sleep 100000 microseconds start: network/smtp:sendmail... success restart: sleep 100000 microseconds restart: milestone/name-services:default... success System successfully configured bash-3.00# ######################333 regards Imtiaz

3 2

[Fedora-directory-users] pb.conf and an intranet.
by Matt Wells 26 Nov '07

26 Nov '07

Does anyone know how I can use my intranet to query my Directory Server? I have the pb.conf file but the admin-serv interface is not permitted on my server. We only permit the normal 389 lookups. What I would like is for my intranet on server1 to query with pb.conf to server2 and get the information.?.?

2 1

[Fedora-directory-users] user self-service
by Andrew Jennings 26 Nov '07

26 Nov '07

Hi All I'm looking for a feature that would allow users to reset their passwords or recover from forgotten passwords through a GUI. I can't find a reference to anything like it in the docs. Andy

2 1

[Fedora-directory-users] Fedora 7 and Fedors-DS
by Gene Poole 26 Nov '07

26 Nov '07

What can I expect if I install the current version of fedora-ds on Fedora7? Thanks, Gene Poole gene.poole(a)macys.com

2 1

[Fedora-directory-users] Ivan Ferreira está ausente de la oficina.
by Ivan Ferreira 24 Nov '07

24 Nov '07

Estaré ausente de la oficina desde el 24/11/2007 y no volveré hasta el 02/12/2007. Responderé a su mensaje cuando regrese. ======================================================================================== AVISO LEGAL: Esta información es privada y confidencial y está dirigida únicamente a su destinatario. Si usted no es el destinatario original de este mensaje y por este medio pudo acceder a dicha información por favor elimine el mensaje. La distribución o copia de este mensaje está estrictamente prohibida. Esta comunicación es sólo para propósitos de información y no debe ser considerada como propuesta, aceptación ni como una declaración de voluntad oficial de NUCLEO S.A. La transmisión de e-mails no garantiza que el correo electrónico sea seguro o libre de error. Por consiguiente, no manifestamos que esta información sea completa o precisa. Toda información está sujeta a alterarse sin previo aviso. This information is private and confidential and intended for the recipient only. If you are not the intended recipient of this message you are hereby notified that any review, dissemination, distribution or copying of this message is strictly prohibited. This communication is for information purposes only and shall not be regarded neither as a proposal, acceptance nor as a statement of will or official statement from NUCLEO S.A. . Email transmission cannot be guaranteed to be secure or error-free. Therefore, we do not represent that this information is complete or accurate and it should not be relied upon as such. All information is subject to change without notice.

1 0

[Fedora-directory-users] Account Inactive Attribute
by Jared B. Griffith 20 Nov '07

20 Nov '07

Is it possible from the command line to search for whether or not a particular user is Active or Inactive? If so, does anyone know what the attribute is? -- - Thank you, - Jared B. Griffith - Farheap Solutions, Inc. - Lead Systems Administrator - California IT Department - Email - jared.griffith(a)farheap.com - Phone - 949.417.1500 ext. 266 - Cell Phone - 949.910.6542

2 3

[Fedora-directory-users] Expanding directory schema using LDIF
by Chun Tat David Chu 20 Nov '07

20 Nov '07

Hi, I'm having a problem when attempting to expand my directory schema using LDIF. What I'm doing is to place my custom schema into the INSTALLDIR/slapd-INSTANCE/config/schema directory. I stopped the Fedora DS before doing so because base on what I read, the schema should get automatically loaded during the start. I received the following messages when I attempt to start Fedora DS. Starting Fedora Directory Server: [20/Nov/2007:14:47:51 -0500] dse - The entry cn=schema in file /opt/fedora-ds/slapd-<hostname>/config/schema/98_test.ldif is invalid, error code 21 (Invalid syntax) - attribute type testAttribute_1: Missing attribute syntax OID [20/Nov/2007:14:47:52 -0500] dse - Please edit the file to correct the reported problems and then restart the server. [FAILED] Below is my schema dn: cn=schema objectClass: top objectClass: ldapSubentry objectClass: subschema cn: schema attributeTypes: ( testAttribute_1 NAME 'testAttribute_1' DESC 'This is testAttribute_1' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE X-ORIGIN 'user defined' ) attributeTypes: ( testAttribute_1 NAME 'testAttribute_2' DESC 'This is testAttribute_2' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 MULTI-VALUE X-ORIGIN 'user defined' ) Is the OID that I defined is invalid? If so what's the best way to generate a OID? or that's something wrong in my LDIF? Regards, - David

2 2

[Fedora-directory-users] Openldap Slave Servers
by Jared B. Griffith 20 Nov '07

20 Nov '07

Is it possible to set up openldap to be slave servers of Fedora Directory Servers? We currently have BSD gateways, and building FDS for BSD is pretty much a no go (tried for about 3 weeks with no success), and on each gateway we would like to have a read only slave server of our FDS servers. That way if for some ungodly reason our network goes down, logins would still work correctly. I read that it is possible to set up slurpd for replication, but was wondering if anyone here has tried this and had success with it. -- - Thank you, - Jared B. Griffith - Farheap Solutions, Inc. - Lead Systems Administrator - California IT Department - Email - jared.griffith(a)farheap.com - Phone - 949.417.1500 ext. 266 - Cell Phone - 949.910.6542

2 2

[Fedora-directory-users] authenticating windows against directory server
by Jimmy Stewpot 20 Nov '07

20 Nov '07

Hi, I am currently evaluating a Directory Server product. One of the requirements we have is to authenticate windows servers to it. I have had a look through the documentation on the web page and can see how we can synchronise AD with FDS. I am wondering if its possible to authenticate windows servers (2003 R2) directly to FDS. Any additional information would be greatly appreciated. Regards, Jimmy

2 2

[Fedora-directory-users] Restoring Replicating Masters
by James Deuchar 20 Nov '07

20 Nov '07

Hi, We have two DS' with master-master replicating databases - for backup we're taking a nightly database backup on each server (DB not LDIF). I've had trouble with changelogs in the past during devlopment phases when we occasionally separated the pair of masters which has made me nervous about how trouble-free a restore might be... Before we jump in & test the process - is there a documented procedure for restoring replicated databases & do I have to worry about the changelog when restoring? Many thanks for any/all advice! James _________________________________________________________________ Celeb spotting – Play CelebMashup and win cool prizes https://www.celebmashup.com

1 0

[Fedora-directory-users] PassSync Error
by Anthony Giggins 20 Nov '07

20 Nov '07

This is a New Proof of concept installation setup by following http://directory.fedoraproject.org/wiki/Howto:WindowsSync I am syncing users from Active Directory using LDAP without SSL, but SSL is setup for both LDAP and Passsync but I'm getting the following errors in the passsync.log 11/20/07 14:34:25: PassSync service started 11/20/07 14:34:25: Failed to load entries from file 11/20/07 14:34:25: Ldap bind error in Connect 48: Inappropriate authentication 11/20/07 14:34:25: Can not connect to ldap server in SyncPasswords 11/20/07 14:34:25: Password list is empty. Waiting for passhook event And also the errors below in the FDS access log [20/Nov/2007:14:32:34 +1100] conn=19 fd=65 slot=65 SSL connection from 10.50.10.231 to 10.50.1.24 [20/Nov/2007:14:32:34 +1100] conn=19 SSL 128-bit RC4 [20/Nov/2007:14:32:34 +1100] conn=19 op=0 BIND dn="cn=sync manager,cn=config" method=128 version=2 [20/Nov/2007:14:32:34 +1100] conn=19 op=0 RESULT err=48 tag=97 nentries=0 etime=0 [20/Nov/2007:14:32:34 +1100] conn=19 op=1 UNBIND [20/Nov/2007:14:32:34 +1100] conn=19 op=1 fd=65 closed - U1 Regards, Anthony

1 0

[Fedora-directory-users] Windows Authentication
by Jared B. Griffith 19 Nov '07

19 Nov '07

Has anyone gotten windows computers to successfully authenticate against Fedora Directory Server? If so is there a walk through online somewhere? Or is it just ridiculously easy to do? Or is it like having a windows computer join an active directory domain? -- - Thank you, - Jared B. Griffith - Farheap Solutions, Inc. - Lead Systems Administrator - California IT Department - Email - jared.griffith(a)farheap.com - Phone - 949.417.1500 ext. 266 - Cell Phone - 949.910.6542

2 2

Re: [Fedora-directory-users] Can't locate CSN in Multi-Master replica
by Dael Maselli 19 Nov '07

19 Nov '07

> Do you have a changelog configured on B? Is B configured as a multiple master? Is the replica ID for B different than A? Yes to all. I hope it's an error of mine, we are planning a big reorganization of our Authentication and Authorization Infrastructure, FDS seems to be great for our needs. I think it is a misconfiguration and maybe it work if I reinstall FDS, but i need to understand what's happening. Thank you. -- ___________________________________________________________________ Dael Maselli --- INFN-LNF Computing Service -- +39.06.9403.2214 ___________________________________________________________________ Democracy is two wolves and a lamb voting on what to have for lunch ___________________________________________________________________

2 14

Re: [Fedora-directory-users] tcp keepalive
by Howard Chu 16 Nov '07

16 Nov '07

> Date: Thu, 15 Nov 2007 15:10:59 -0700 > From: David Boreham <david_list(a)boreham.org> > I doubt you need to use SO_KEEPALIVE. A couple of observations: > > 1. If you have ESTABLISHED state connections on one end that are not > in the same state on the peer, that would indicate something broken in the > network or the stack, rather than in the DS. There's a lot of firewalls out there that silently drop idle connections, rather than informing either side of the action (e.g., at least they should send TCP RST packets but they do nothing). I think SO_KEEPALIVE is a reasonable defensive measure to use, faced with such unfriendly behavior in the network. > 2. The DS already has connection timeout features that you can enable: > http://osdir.com/ml/redhat.fedora.directory.user/2006-04/msg00131.html > Gordon Messmer wrote: >> > This morning I noticed that one of my directory servers has hundreds >> > of "ESTABLISHED" connections from a coworker's Linux host. The >> > directory server is running RHEL4, kernel 2.6.9-55.ELsmp, and >> > tcp_keepalive_time is set to 600. The client no longer shows an >> > ESTABLISHED connection on the port that is reported by netstat on the >> > directory server. It reports less than ten open connections. >> > >> > I'm not sure whether or not an intermediary firewall is doing >> > something bad, but I expected that the directory server would use >> > setsockopt() to set SO_KEEPALIVE on its connections so that it could >> > detect connections that die off. After 600 seconds of inactivity, the >> > server should start sending probes, and then notify ns-slapd that the >> > connection is closed. >> > >> > I'm not sure how I might filter keepalive packets with tcpdump, so I'm >> > not sure if I can verify that they're being used with that tool. Can >> > anyone identify the code that *should* be setting SO_KEEPALIVE on the >> > sockets, or otherwise speculate on why they might not be working? -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

[Fedora-directory-users] tcp keepalive
by Gordon Messmer 15 Nov '07

15 Nov '07

This morning I noticed that one of my directory servers has hundreds of "ESTABLISHED" connections from a coworker's Linux host. The directory server is running RHEL4, kernel 2.6.9-55.ELsmp, and tcp_keepalive_time is set to 600. The client no longer shows an ESTABLISHED connection on the port that is reported by netstat on the directory server. It reports less than ten open connections. I'm not sure whether or not an intermediary firewall is doing something bad, but I expected that the directory server would use setsockopt() to set SO_KEEPALIVE on its connections so that it could detect connections that die off. After 600 seconds of inactivity, the server should start sending probes, and then notify ns-slapd that the connection is closed. I'm not sure how I might filter keepalive packets with tcpdump, so I'm not sure if I can verify that they're being used with that tool. Can anyone identify the code that *should* be setting SO_KEEPALIVE on the sockets, or otherwise speculate on why they might not be working?

2 1

[Fedora-directory-users] private key
by Elisa Pellegrini 13 Nov '07

13 Nov '07

Hi! when a crete a new reqest of certificate and my CAsign it is impossible form me to extract private key. How can I extract private key from certificate? Where FDS put private key?

2 1

[Fedora-directory-users] use of certificate
by Elisa Pellegrini 13 Nov '07

13 Nov '07

Hi! I have a problem with certificate: I create certificate and install my CA in FDS . When I show certificate's detail I have the following field "this certificate has been verified for the following uses: " and notihig else is specified: I don't specify uses of certifiate . Is this a problem for the use of certififcate?

2 1

[Fedora-directory-users] FDS certificate and certificate database
by Elisa Pellegrini 13 Nov '07

13 Nov '07

Hi! I have a problem:when I install a new certificate in FDS is necessary to have a certificate database? FDS certificate and certificate database are connect? Thanks

1 0

[Fedora-directory-users] ldap ldaps:difference
by Elisa Pellegrini 13 Nov '07

13 Nov '07

Hi! I have a question: when I use FDS and ldaps is necessary a certificate? please help me,I don't understand in the guide. thanks

2 1

[Fedora-directory-users] Restricting Users Login Question
by Jared B. Griffith 12 Nov '07

12 Nov '07

I am setting up a Fedora Directory Server for use in our company. Our problem now is that any user that has a posix account (which it is necessary for every user to have a posix account due web applications and our heavy use of Linux machines) can log into machines we do not want them having access to (ie production web servers, gateways, firewalls, etc etc etc). Yes, we could lock it down via sshd_config on the servers with the AllowUsers statement, but that would not prevent them from being able to log in on the local machine. I have changed my ldap.conf on my linux / bsd machines to allow only the following: pam_groupdn cn=syadmins,ou=IT,ou=Groups,dc=company,dc=tld # Group member attribute pam_member_attribute uniqueMember This does and does not work. When logging into the server with a user that is not a member of that group, I get the following warning: You must be a uniqueMember of cn=syadmins,ou=IT,ou=Groups,dc=company,dc=tld to login But it logs me right in. I have posted the full ldap.conf here: http://pastebin.com/m11b0b227 Here is the shorter version (minus all commented out stuff) http://pastebin.com/m26f9048d Any help or pointers would be appreciated. -- - Thank you, - Jared B. Griffith - Farheap Solutions, Inc. - Lead Systems Administrator - California IT Department - Email - jared.griffith(a)farheap.com - Phone - 949.417.1500 ext. 266 - Cell Phone - 949.910.6542

2 1

Re: [Fedora-directory-users] libnss_ldap-2.5.0.so update breaks admin server.
by Brian Roy 09 Nov '07

09 Nov '07

Platform is FC6. LDAP auth worked with libnss_ladap-2.4.90 AND libnss_ldap-2.5 HOWEVER after the 2.5 update (via Software Updater) Admin Server child processes crashed when loading libnss_ldap.so.2. The second un-updated system (the one I pulled libnss_ldap-2.4.90.so from) is also FC6. Log Snips: Admin Server Error Log (showing the period when the reboot after Software Updater update): [Fri Aug 24 11:55:07 2007] [notice] [client ::1] admserv_host_ip_check: host [localhost.localdomain] did not match pattern [*.santan.brianandkelly.ws] -will scan aliases [Fri Aug 24 11:55:07 2007] [notice] [client ::1] admserv_host_ip_check: host alias [localhost] did not match pattern [*.santan.brianandkelly.ws] [Fri Aug 24 11:55:07 2007] [notice] [client ::1] admserv_check_authz(): passing [/admin-serv/authenticate] to the userauth handler [Wed Oct 24 09:53:30 2007] [notice] caught SIGTERM, shutting down [Wed Oct 24 09:58:51 2007] [notice] Access Host filter is: *.santan.brianandkelly.ws [Wed Oct 24 09:58:51 2007] [notice] Access Address filter is: * [Wed Oct 24 09:58:52 2007] [notice] Access Host filter is: *.santan.brianandkelly.ws [Wed Oct 24 09:58:52 2007] [notice] Access Address filter is: * [Wed Oct 24 09:58:52 2007] [notice] Apache/2.2.6 (Unix) mod_nss/2.2.3 NSS/3.11.3 configured -- resuming normal operations [Wed Oct 24 09:58:53 2007] [notice] child pid 3327 exit signal Segmentation fault (11) [Wed Oct 24 09:58:55 2007] [notice] child pid 3328 exit signal Segmentation fault (11) [Wed Oct 24 09:58:57 2007] [notice] child pid 3348 exit signal Segmentation fault (11) [Wed Oct 24 09:58:59 2007] [notice] child pid 3350 exit signal Segmentation fault (11) Content of strace on Segmentation Faulting admin server child process: <clip - standar stuff... looking for libnss_ldap.so.2> open("/usr/lib/libnss_ldap.so.2", O_RDONLY) = 32 read(32, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0`& \0\0004\0\0\0"..., 512) = 512 fstat64(32, {st_mode=S_IFREG|0755, st_size=84552, ...}) = 0 mmap2(NULL, 129408, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 32, 0) = 0x6f2d0000 mmap2(0x6f2e4000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED| MAP_DENYWRITE, 32, 0x14) = 0x6f2e4000 mmap2(0x6f2e5000, 43392, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED| MAP_ANONYMOUS, -1, 0) = 0x6f2e5000 close(32) = 0 munmap(0xb729d000, 57248) = 0 rt_sigaction(SIGPIPE, {SIG_IGN}, {SIG_IGN}, 8) = 0 geteuid32() = 0 futex(0x6f2e4544, FUTEX_WAKE, 2147483647) = 0 open("/etc/ldap.conf", O_RDONLY) = 32 fstat64(32, {st_mode=S_IFREG|0644, st_size=6182, ...}) = 0 fstat64(32, {st_mode=S_IFREG|0644, st_size=6182, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f5f000 read(32, "#\n# This is the configuration fi"..., 4096) = 4096 read(32, "7objectclass\tmapped_objectclass\n"..., 4096) = 2086 read(32, "", 4096) = 0 close(32) = 0 munmap(0xb7f5f000, 4096) = 0 uname({sys="Linux", node="royhomegp02.santan.brianandkelly.ws", ...}) = 0 open("/etc/hosts", O_RDONLY) = 32 fcntl64(32, F_GETFD) = 0 fcntl64(32, F_SETFD, FD_CLOEXEC) = 0 fstat64(32, {st_mode=S_IFREG|0644, st_size=194, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f5f000 read(32, "# Do not remove the following li"..., 4096) = 194 read(32, "", 4096) = 0 close(32) = 0 munmap(0xb7f5f000, 4096) = 0 socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 32 connect(32, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("192.168.0.5")}, 28) = 0 fcntl64(32, F_GETFL) = 0x2 (flags O_RDWR) fcntl64(32, F_SETFL, O_RDWR|O_NONBLOCK) = 0 gettimeofday({1194384239, 115881}, NULL) = 0 poll([{fd=32, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1 send(32, "\23\0\1\0\0\1\0\0\0\0\0\0\vroyhomegp02\6santan\r"..., 53, MSG_NOSIGNAL) = 53 poll([{fd=32, events=POLLIN, revents=POLLIN}], 1, 5000) = 1 ioctl(32, FIONREAD, [111]) = 0 recvfrom(32, "\23\0\205\200\0\1\0\1\0\1\0\1\vroyhomegp02\6santan \r"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("192.168.0.5")}, [16]) = 111 close(32) = 0 --- SIGSEGV (Segmentation fault) @ 0 (0) --- chdir("/opt/fedora-ds/admin-serv") = 0 rt_sigaction(SIGSEGV, {SIG_DFL}, {SIG_DFL}, 8) = 0 kill(7265, SIGSEGV) = 0 sigreturn() = ? (mask now []) --- SIGSEGV (Segmentation fault) @ 0 (0) --- Brian T. Roy b.t.roy(a)brianandkelly.ws Visit my blog @: http://briantroy.com/blog The greatest mistake you can make in life is to be continually fearing you will make one. — Elbert Hubbard (1856-1915), The Note Book On Nov 9, 2007, at 10:00 AM, fedora-directory-users-request(a)redhat.com wrote: > Re: [Fedora-directory-users] libnss_ldap-2.5.0.so update breaks > admin server.

2 1

[Fedora-directory-users] libnss_ldap-2.5.0.so update breaks admin server.
by Brian Roy 08 Nov '07

08 Nov '07

Admin server began having child process seg faults after my box updated to libnss_ldap-2.5.so I know this is the culprit as I've tracked down (using strace) the seg fault to the use of libnss_ldap.so.2 I grabed libnss_ldap-2.4.90.so from another system which had not updated and re-sym linked libnss_ldap.so.2 back to libnss_ldap-2.4.90.so and now Admin Server runs fine... however... All LDAP auth on the server is now broken. Anyone found a real fix for this... as of now I've created a script to swap the symlinks allowing me to run the Admin Server and the Directory Console - and another script which allows me to swap the symlink back to libnss_ldap-2.5.so to re-enable ldap auth. Needless to say this is a significant pain in the... Any suggestions? Brian T. Roy b.t.roy(a)brianandkelly.ws Visit my blog @: http://briantroy.com/blog The greatest mistake you can make in life is to be continually fearing you will make one. — Elbert Hubbard (1856-1915), The Note Book

2 1

[Fedora-directory-users] ns-slapd out of memory
by Tamas Bagyal 07 Nov '07

07 Nov '07

hello, first, sorry for my bad english :) I installed two fedora-ds 1.0.4 on debian etch (compile in place by dsbuild script) with multi master replication. these servers used by powerdns with ldap backend and cups 1.2.7 ( both came out from officially debian archive) configured for ldap browseing. the problem is: when the cups use ldap browseing, the memory usage is begin growing while the ns-slapd is run out of memory. the machine have 2gb memory this enough about 6-7 days. the cups generate 50-60 read/mod request every 3 minutes, powerdns make 2-3 read request per second. i'm new in fedora-ds, this is normal operation? almost every setting are default, however which logs/conf settings you need for the problem determination? thanks, KeeF

2 2

[Fedora-directory-users] FDS Groups
by Jared B. Griffith 06 Nov '07

06 Nov '07

How would one go about configuring FDS to be able to do groups such as wheel and what not? I have it set up, but the client is not getting the groups out of the Groups OU. -- - Thank you, - Jared B. Griffith - Farheap Solutions, Inc. - Lead Systems Administrator - California IT Department - Email - jared.griffith(a)farheap.com - Phone - 949.417.1500 ext. 266 - Cell Phone - 949.910.6542

3 5

[Fedora-directory-users] samba + PDC + FDS
by Satish Patel 06 Nov '07

06 Nov '07

dear all it is possible to implement samba as PDC + FDS and it will give fully functionality like Win 2003 DC ?? Regards $ cat ~/satish/url.txt http://www.linuxbug.org _____________________________________________________________________________________________________ --------------------------------- Forgot the famous last words? Access your message archive online. Click here.

2 1

[Fedora-directory-users] Password Encryption
by Jared B. Griffith 06 Nov '07

06 Nov '07

What is the default password encryption routine for FDS? Also, is it possible to change it? -- - Thank you, - Jared B. Griffith - Farheap Solutions, Inc. - Lead Systems Administrator - California IT Department - Email - jared.griffith(a)farheap.com - Phone - 949.417.1500 ext. 266 - Cell Phone - 949.910.6542

2 3

[Fedora-directory-users] multiple AD servers and password sync
by Aaron Oas 05 Nov '07

05 Nov '07

Apologies if this has been covered before somewhere. I am trying to implement AD <--> FDS syncronization, and don't understand what I need to do about setting up the Password Sync on the AD server when there are (in my case) 3 AD servers. >From reading the docs, and from my understanding of how windows clients bind to AD server to change their passwords, it appears that password sync needs to be installed on every AD server to catch an interactive password change from a windows client which has bound to any one of 3 AD servers. For example: AD servers are all serving one domain AD1 (password sync --> FDS1, sync agreement <--> FDS1) AD2 (no password sync) AD3 (no password sync) FDS servers have 1 master/supplier, one replica/consumer FDS1 (win sync <--> AD1, supply --> FDS2) FDS2 So, if win client talks to a non-passwordsync AD3 and changes password, then AD3 synchronizes to AD1, then password sync hooks on AD1 can't understand the already windows-encrypted password from AD3 because it's not part of the initial interactive password change. If that's true, then I definitely have to have Password Sync on every AD server, along with the certs etc etc. Is this the case? A collateral question is: what happens if you have 3 AD servers with sync agreements to an FDS server? Will you get 3 updates to FDS on the same user change? Will FDS updates sent to all 3 AD servers result in trouble as the AD servers subsequently sync to each other? - Aaron

1 0

[Fedora-directory-users] add users
by Zahra Bahar 05 Nov '07

05 Nov '07

Hi all, I installed fedora ds and have noe console, but when I want to add a user it makes this error: can not save to directory server. java.lang.illegalArgumentExeption what should I do?

2 1

[Fedora-directory-users] problem with ldapsearch
by Elisa Pellegrini 05 Nov '07

05 Nov '07

Hi! I have a problem with ldapsearch -x command! I'm not able to see all the attribute of my user,in particular his password(the hash of password). The problem is ACL or ACI set. What I must modify? Thanks!

2 1

[Fedora-directory-users] One way replication from Active Directory
by Nikolay Fomichev 01 Nov '07

01 Nov '07

Can FDS only replicate LDAP data from Active Directory, not sync? I find in Archive that it may be posible with Database Link to AD http://osdir.com/ml/redhat.fedora.directory.user/2006-10/msg00132.html But it was about a year ago, and i think that exist another way. And can i choose what attribute to replicate from AD(mapping) ?

1 0

Re: [Fedora-directory-users] Question about caseIgnoreIA5Match
by Balaji Ganesan 01 Nov '07

01 Nov '07

From: Richard Megginson <rmeggins(a)redhat.com> > > rm> Did you re-index the attribute after making that change? Thanks. re-indexing after changing type to Directory String fixed the problem. Should I just use Directory String instead of IA5String?

2 1

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users November 2007