[Fedora-directory-users] FDS and trusts
by Roman Dronov
Good day!
My question for developers.
Can i organize trusts between FDS and AD? For example: user from AD
domain can transparently access resources of FDS domain and vice
versa.
If no, what are you thinking about this function in the future
releases of FDS? Or FDS is LDAP database with advanced GUI interface
only? And trusts, group policy (and other tools normal in Windows
world) required external soft?
With the greatest regards,
Roman Dronov.
17 years, 2 months
[Fedora-directory-users] FDS <-> AD
by Brandon Young
Hi All. I have been struggling with creating a Windows Sync agreement
that works the way I think it's supposed to. Maybe someone can
educate me as to what I'm doing wrong. Documentation on this subject
is sparse and incomplete. If I can get this problem solved, I would
be happy to contribute the detailed document on how I did it back to
this list. Sort of a "Complete Idiots Guide to Windows Sync
Agreements" or something.
First, the way I *think* it's supposed to work ...
1. If I create an account or group in AD, it replicates to FDS
2. If I create an account or group in FDS it replicates to AD
3. If I change a user's password in one directory, it updates in the other
>From the Redhat documentation: "The Windows Sync feature allows
synchronization of adds, deletes and changes in groups, user entries,
and their passwords between Red Hat Directory Server and both
Microsoft Active Directory and Microsoft Windows NT 4.0 Server."
Seems vague enough. I am left with a big question, though: is it
possible to replicate UNIX uid/gid information to Active Directory?
Somewhere along the path I got it in my head that I needed to install
Windows Services for UNIX in order to share UNIX uid/gid/shell/homedir
information between the two directories. Further, I came to believe
that the sync agreement code in the Directory Server magically handles
the translations between schemas ... that is to say, in AD the UNIX
uid is stored as MSSFU30uid (or something close to that), while it's
simply uid in FDS; and the sync code does that translation.
Is all that wishful thinking on my part? It does not appear to work
this way. I have SFU installed in AD. Any UNIX data I put into AD
does not replicate down to my FDS. Is there a way to do what I'm
talking about?
Secondly, it has never been clear to me how changes on the FDS side
replicate back up to AD. Do I need to set the replication up as
Multimaster/Single Master/??
I'd appreciate any help someone may be able to give -- even if it's
just educating me about some misconception I seem to have.
--
Brandon
17 years, 2 months
[Fedora-directory-users] admin console problem: Failed to instantiate Server Object
by Jo De Troy
Hello,
we have a strange problem.
I'm using the console on my Windows machine without a problem and 1 of my
collegea's gets an error when trying to access the Directory server from
within the console, it does work for both of us when accessing the admin
server console.
The error he gets is: Failed to instantiate Server Object for Directory
Server (server name):
com.netscape.admin.dirserv.DSAdmin
I copied over my local directory containing the fedora console
Thanks in advance,
Jo
17 years, 2 months
[Fedora-directory-users] NT FDS emulation
by Roman Dronov
Good day!
My question for FDS developers and guru:
Is anybody know: may FDS last release provides FRS (File Replication Service
for Windows Clients, this need for replication Group Policies, scripts,
etc.) or this function will be introduced later?
I understand that FRS is only AD feature but it's analog very important for
migration (from AD to FDS).
What you think about this, gentleman's?
With the greatest regards,
Roman Dronov.
17 years, 2 months
[Fedora-directory-users] ldapsearch on virtual view
by Mikael Kermorgant
Hello,
I've built a virtual view (ou=personnels) under
"ou=people,dc=ourdomain" I'm running FDS 1.0.2 on Fedora core 4.
Running ldapsearch on the virtual view doesn't give me the expected
result. Here's the result for my uid which is present under both
nodes.
bash-3.00$ ldapsearch -H ldap://127.0.0.1 -W -x -b
ou=people,dc=ourdomain-D
uid=kermorgant,ou=people,dc=ourdomain"(uid=kermorgant)" cn
Enter LDAP Password:
# extended LDIF
#
# LDAPv3
# base <ou=people,dc=ourdomain> with scope sub
# filter: (uid=kermorgant)
# requesting: cn
#
# kermorgant, People, ourdomain
dn: uid=kermorgant,ou=People,dc=ourdomain
cn: Kermorgant Mikael
# search result
search: 2
result: 0 Success
# numResponses: 2
# numEntries: 1
bash-3.00$ ldapsearch -H ldap://127.0.0.1 -W -x -b
ou=personnels,ou=people,dc=ourdomain -D
uid=kermorgant,ou=people,dc=ourdomain "(uid=kermorgant)" cn
Enter LDAP Password:
# extended LDIF
#
# LDAPv3
# base <ou=personnels,dc=ourdomain> with scope sub
# filter: (uid=kermorgant)
# requesting: cn
#
# search result
search: 2
result: 0 Success
# numResponses: 1
Isn't there something wrong with this result ?
Regards,
--
Mikael Kermorgant
17 years, 2 months
[Fedora-directory-users] How to make application connect to multi-master set-up?
by Ankur Agarwal
Hi,
We have a weblogic app server based application which talks to RedHat LDAP through weblogic's security provider APIs.
On Production env we have set-up master-master LDAP servers i.e. there are two master LDAP servers. How should i make my application connect to these 2 servers?
Should there be a front-end load balancer to which my application will make request and then load balancer will handle requests to one of the LDAP servers?
Also note that we have weblogic cluster in Prod with 2 instances. So should i make each instance point to one LDAP server? But in that case how will automatic failover work if one of the LDAP servers go down?
Would be great if people can suggest any standard solution to deal with such situations.
regards,
Ankur
---------------------------------
The fish are biting.
Get more visitors on your site using Yahoo! Search Marketing.
17 years, 2 months
[Fedora-directory-users] Empty console window
by Marko Karg
Hi,
I installed fedora DS 1.0.4 without any problems, slapd and adminserver
are up and running.
When I start the admin-console, I get stuck after the authorization with
an empty console window.
I've put the debug output to
http://paste.ausil.us/114
so you can have a look on it.
Any help is appreciated.
Cheers
Marko
17 years, 2 months
