[Fedora-directory-users] "Numeric String" attribute syntax not supported by FDS 1.1?
by Aleksander Adamowski
Hi!
I''ve installed Fedora DS 1.1 for x86_64 and am currently extending my
schema. I got some schema ldif files converted from OpenLDAP format.
I've placed the converted schema LDIFs in
/etc/dirsrv/my_instance_name/schema/, and restarted the dirsrv service.
The problem is that FDS reject a quite common attribute syntax:
[03/Mar/2008:17:47:54 +0100] dse - The entry cn=schema in file
/etc/dirsrv/my_instance_name/schema/75phpgwcontact.ldif is invalid,
error code 21 (Invalid syntax) - attribute type phpgwContactOwner:
Unknown attribute syntax OID "1.3.6.1.4.1.1466.115.121.1.36"
[03/Mar/2008:17:47:54 +0100] dse - Please edit the file to correct the
reported problems and then restart the server.
This is very strange, considering that 1.3.6.1.4.1.1466.115.121.1.36
(Numeric String) is a quite common attribute syntax and it's present in
Netscape's own RFC 2252, section 6.23:
http://www.faqs.org/rfcs/rfc2252.html
==============================
6.23. Numeric String
( 1.3.6.1.4.1.1466.115.121.1.36 DESC 'Numeric String' )
The encoding of a string in this syntax is the string value itself.
Example:
1997
==============================
Surely it can't be that Netscape/Fedora Directory Server doesn't
support it?
--
Best Regards,
Aleksander Adamowski
GG#: 274614
ICQ UIN: 19780575
http://olo.org.pl
--
Aleksander Adamowski
Administrator systemów korporacyjnych; Instruktor
Altkom Akademia S.A. http://www.altkom.pl
Warszawa, ul. Chłodna 51
kom. +48 601-318-080
Sąd Rejonowy dla m.st. Warszawy w Warszawie, XII Wydział Gospodarczy Krajowego Rejestru Sądowego,
KRS: 0000120139, NIP 118-00-08-391, Kapitał zakładowy: 1000 000 PLN. Adres rejestrowy Firmy - ul. Stawki 2, 00-193 Warszawa.
Niniejsza wiadomość zawiera informacje zastrzeżone i stanowiące tajemnicę przedsiębiorstwa firmy Altkom Akademia S.A.
Ujawnianie tych informacji osobom trzecim lub nieuprawnione wykorzystanie ich do własnych celów jest zabronione.
Jeżeli otrzymaliście Państwo niniejszą wiadomość omyłkowo, prosimy o niezwłoczne skontaktowanie się z nadawcą oraz usunięcie wszelkich kopii niniejszej wiadomości.
This message contains proprietary information and trade secrets of Altkom Akademia S.A. company.
Unauthorized use or disclosure of this information to any third party is prohibited.
If you received this message by mistake, please contact the sender immediately and delete all copies of this message.
15 years
[Fedora-directory-users] "Numeric String" attribute syntax not supported by FDS 1.1?
by Aleksander Adamowski
Hi!
I''ve installed Fedora DS 1.1 for x86_64 and am currently extending my
schema. I got some schema ldif files converted from OpenLDAP format.
I've placed the converted schema LDIFs in
/etc/dirsrv/my_instance_name/schema/, and restarted the dirsrv service.
The problem is that FDS reject a quite common attribute syntax:
[03/Mar/2008:17:47:54 +0100] dse - The entry cn=schema in file
/etc/dirsrv/my_instance_name/schema/75phpgwcontact.ldif is invalid,
error code 21 (Invalid syntax) - attribute type phpgwContactOwner:
Unknown attribute syntax OID "1.3.6.1.4.1.1466.115.121.1.36"
[03/Mar/2008:17:47:54 +0100] dse - Please edit the file to correct the
reported problems and then restart the server.
This is very strange, considering that 1.3.6.1.4.1.1466.115.121.1.36
(Numeric String) is a quite common attribute syntax and it's present in
Netscape's own RFC 2252, section 6.23:
http://www.faqs.org/rfcs/rfc2252.html
==============================
6.23. Numeric String
( 1.3.6.1.4.1.1466.115.121.1.36 DESC 'Numeric String' )
The encoding of a string in this syntax is the string value itself.
Example:
1997
==============================
Surely it can't be that Netscape/Fedora Directory Server doesn't
support it?
--
Best Regards,
Aleksander Adamowski
GG#: 274614
ICQ UIN: 19780575
http://olo.org.pl
--
Aleksander Adamowski
Administrator systemów korporacyjnych; Instruktor
Altkom Akademia S.A. http://www.altkom.pl
Warszawa, ul. Chłodna 51
kom. +48 601-318-080
Sąd Rejonowy dla m.st. Warszawy w Warszawie, XII Wydział Gospodarczy Krajowego Rejestru Sądowego,
KRS: 0000120139, NIP 118-00-08-391, Kapitał zakładowy: 1000 000 PLN. Adres rejestrowy Firmy - ul. Stawki 2, 00-193 Warszawa.
Niniejsza wiadomość zawiera informacje zastrzeżone i stanowiące tajemnicę przedsiębiorstwa firmy Altkom Akademia S.A.
Ujawnianie tych informacji osobom trzecim lub nieuprawnione wykorzystanie ich do własnych celów jest zabronione.
Jeżeli otrzymaliście Państwo niniejszą wiadomość omyłkowo, prosimy o niezwłoczne skontaktowanie się z nadawcą oraz usunięcie wszelkich kopii niniejszej wiadomości.
This message contains proprietary information and trade secrets of Altkom Akademia S.A. company.
Unauthorized use or disclosure of this information to any third party is prohibited.
If you received this message by mistake, please contact the sender immediately and delete all copies of this message.
15 years
[Fedora-directory-users] Request For Comment: fedora-ds-utils project
by Chris St. Pierre
My quest to find a copy of mmr.pl last week led me to ask on IRC:
[08:51] stpierre has anyone tried pulling together a collection of
some of the scripts that support fds -- mmr.pl, ol-schema-migrate.pl,
setupssl2.sh, etc. -- and packaging them as, say, fedora-ds-utils?
The answer was "no," so I've decided to take this project on. In
order to make the fedora-ds-utils package as valuable as possible (and
to aid my eventual request for inclusion in Fedora), I'll be enforcing
some fairly strict standards for the scripts included in the
package. Please read and comment on the standards listed below; once a
reasonable comment period has passed (probably a week or two), I'll
start redacting the various scripts to conform to the standards and,
finally, release the package.
Additionally, please nominate any scripts you feel should be included
in the package. In addition to mmr.pl, ol-schema-migrate.pl, and
setupssl2.sh, I will be including a tool for working with indexes that
I wrote but never released.
STANDARDS:
Program aiming for inclusion in fedora-ds-utils must meet the
following standards:
1. The program must implement the following flags, where appropriate:
-b searchbase Search in or operate on specified base
-D binddn Bind DN
-h host LDAP server
-H URI LDAP Uniform Resource Indentifier(s)
-n instancename Fedora DS instance
-p port Port on LDAP server
-s scope Search scope
--restart Restart Fedora DS without prompting
-v Run in verbose mode (diagnostics to standard output)
-w passwd Bind password (for simple authentication)
-W Prompt for bind password
-y file Read password from file
-Z Start TLS
-ZZ Start TLS and require successful TLS response
If the program does not need a given input, it doesn't need to
implement the corresponding flag. For instance, if the program
does not connect to an LDAP server, it obviously doesn't need to
implement the -h/-H flags.
Defaults for the -b, -D, -h/-H, and -p flags should be determined
first by looking in /etc/openldap/ldap.conf for the following
attributes:
-b: BASE
-D: BINDDN
-h: HOST
-H: URI
-p: PORT
If those attributes are not set, then those options should default
as follows:
-b: no default
-D: cn=directory manager
-h: localhost
-H: ldap://localhost
-p: 389
Additionally, the -n flag should default to
'slapd-<shorthostname>', where '<shorthostname>' is the short
hostname of the box as returned by `hostname -s`.
If the program requires two or more of any item -- for instance,
ds-mmrtool connects to two Fedora DS servers to negotiate
multimaster agreements -- then it may ask for those items in any
reasonably intuitive manner, and needn't have defaults as specified
above.
2. The program must include 'ds' as the first element in the name; for
instance:
- ds-mmrtool
- ds-schema-migrate
- ds-setup-ssl
3. The name of the program must not include a suffix denoting the
language the program is written in (.sh, .pl, .py, etc.)
4. The program must ONLY produce output a) on errors; or b) with the -v
flag. In the event of successful operation, no output should be
produced at all.
5. The program must be capable of running completely unattended.
6. The program must not restart Fedora DS unbidden. If the program
must restart Fedora DS, it may either a) prompt the user running
the program; or b) provide a --restart command-line flag.
7. All dependencies of the program must be available as RPMs in the
current release of Fedora Linux
8. In order to minimize dependencies, the program must be written in
one of the following languages:
- Perl <= 5.8
- Python <= 2.4
- POSIX-compliant Bourne Shell
- C/C++ or any other common compiled language
9. Programs that have some value but do not yet conform to the
standards may be included in the contrib/ directory of the
fedora-ds-utils package.
Thanks for your input!
Chris St. Pierre
Unix Systems Administrator
Nebraska Wesleyan University
15 years
[Fedora-directory-users] 1.1.0 net-snmp build issues in mock
by Goldschrafe, Jeffrey
Hey there,
I'm trying to build Fedora DS 1.1.0 on my buildsystem, which is mock 0.8.19
on a rather minimal Fedora 8 x86_64 system. Regardless of the distro I try
to build for in mock (I've tried CentOS 5, Fedora 8 and Fedora Core 6), I
hit the following set of build errors:
---SNIP--
/bin/sh ./libtool --tag=CC --mode=link gcc -O2 -g -pipe -Wall
-Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector
--param=ssp-buffer-size=4 -m32 -march=i386 -mtune=generic
-fasynchronous-unwind-tables -o ldclt-bin
ldap/servers/slapd/tools/ldclt_bin-ldaptool-sasl.o
ldap/servers/slapd/tools/ldclt/ldclt_bin-data.o
ldap/servers/slapd/tools/ldclt/ldclt_bin-ldapfct.o
ldap/servers/slapd/tools/ldclt/ldclt_bin-ldclt.o
ldap/servers/slapd/tools/ldclt/ldclt_bin-ldcltU.o
ldap/servers/slapd/tools/ldclt/ldclt_bin-parser.o
ldap/servers/slapd/tools/ldclt/ldclt_bin-port.o
ldap/servers/slapd/tools/ldclt/ldclt_bin-scalab01.o
ldap/servers/slapd/tools/ldclt/ldclt_bin-threadMain.o
ldap/servers/slapd/tools/ldclt/ldclt_bin-utils.o
ldap/servers/slapd/tools/ldclt/ldclt_bin-version.o
ldap/servers/slapd/tools/ldclt/ldclt_bin-workarounds.o -lplc4 -lplds4
-lnspr4 -lssl3 -lnss3 -lsoftokn3 -lssldap60 -lprldap60 -lldap60 -lldif60
-lsasl2
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/main.c:64:
undefined reference to `snmp_log'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/main.c:62:
undefined reference to `snmp_log'
ldap/servers/snmp/ldap_agent_bin-main.o: In function `main':
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/main.c:117:
undefined reference to `netsnmp_ds_set_boolean'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/main.c:120:
undefined reference to `netsnmp_register_loghandler'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/main.c:158:
undefined reference to `snmp_enable_filelog'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/main.c:164:
undefined reference to `snmp_log'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/main.c:167:
undefined reference to `netsnmp_ds_set_boolean'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/main.c:170:
undefined reference to `netsnmp_ds_set_string'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/main.c:174:
undefined reference to `netsnmp_daemonize'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/main.c:189:
undefined reference to `init_agent'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/main.c:191:
undefined reference to `init_snmp'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/main.c:213:
undefined reference to `snmp_log'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/main.c:217:
undefined reference to `agent_check_and_process'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/main.c:221:
undefined reference to `snmp_shutdown'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/main.c:222:
undefined reference to `snmp_log'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/main.c:202:
undefined reference to `snmp_log'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/main.c:206:
undefined reference to `snmp_log'
ldap/servers/snmp/ldap_agent_bin-ldap-agent.o: In function
`send_DirectoryServerStart_trap':
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:72
2: undefined reference to `snmp_log'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:73
1: undefined reference to `snmp_varlist_add_variable'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:73
6: undefined reference to `snmp_varlist_add_variable'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:74
1: undefined reference to `snmp_varlist_add_variable'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:74
6: undefined reference to `snmp_varlist_add_variable'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:75
4: undefined reference to `send_v2trap'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:75
5: undefined reference to `snmp_free_varbind'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:72
6: undefined reference to `snmp_log'
ldap/servers/snmp/ldap_agent_bin-ldap-agent.o: In function
`send_DirectoryServerDown_trap':
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:65
7: undefined reference to `snmp_log'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:66
6: undefined reference to `snmp_varlist_add_variable'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:67
1: undefined reference to `snmp_varlist_add_variable'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:67
6: undefined reference to `snmp_varlist_add_variable'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:68
1: undefined reference to `snmp_varlist_add_variable'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:68
7: undefined reference to `snmp_varlist_add_variable'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:69
5: undefined reference to `send_v2trap'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:69
6: undefined reference to `snmp_free_varbind'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:66
1: undefined reference to `snmp_log'
ldap/servers/snmp/ldap_agent_bin-ldap-agent.o: In function
`dsEntityTable_get_value':
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:62
8: undefined reference to `snmp_log'
/builddir/build/BUILD/fedora-ds-base-1.1.0/ldap/servers/snmp/ldap-agent.c:62
2: undefined reference to `snmp_set_var_typed_value'
---SNIP---
...and then about another page of the same stuff, which I've omitted for
brevity. I noticed that the command doesn't seem to include -lsnmp, which I
imagine it should be including.
Is mock an unsupported build environment for FDS? If not, any idea how to
get this building?
Thanks a lot!
Jeff Goldschrafe <goldschr(a)cshl.edu>
Systems Engineer
Cold Spring Harbor Laboratory
1 Bungtown Road
Cold Spring Harbor, NY 11724
(516) 367-6966
http://cshl.edu
15 years