April 2008 - 389-users - Fedora Mailing-Lists

[Fedora-directory-users] Manage Password Policy

by K.Tanaka

i try to set up fedora ds recentry. so, i have one problem. $ /usr/bin/fedora-idm-console & click Directory Server click Directory tab rigth click on People of left panel Manage Password Policy -> For user... or For subtree select display set field but immediately window widget is all grey color, don't work! but new -> user... group... is good. work fine. so, i try to install jdk1.7.0(IcedTea) or jdk1.6.0_10 or jdk1.6.0_05 or jdk1.5.0_15 but, it's same on jdk1.7.0(IcedTea) or jdk1.6.0_10 or jdk1.6.0_05 OS: fedora6(DELL PowerEdge440) or fedora8(DELL PowerEdge840) both is same problem.

16 years

2
1
0 / 0

[Fedora-directory-users] Broken MMR - DB_BUFFER_SMALL: User memory too small for return value

by Richard Hesse

Scenario: two FDS 1.1 servers in a multi-master setup. Working fine for months without a hiccup (except to upgrade from 1.04) then replication suddenly stops working. Checking the logs, I see this: [03/Apr/2008:23:44:00 +0000] NSMMReplicationPlugin - changelog program - agmt="cn=MM aa0-006-8.u.powerset.com" (aa0-006-8:636): Failed to retrieve change with CSN 47f5710d000000010000; db error - -30999 DB_BUFFER_SMALL: User memory too small for return value How should I go about troubleshooting this? Searching for replication conflicts didn't yield anything useful. I tried running template-cl-dump.pl like the documentation suggested, but I couldn't find it anywhere in /usr/share/dirsrv/script-templates (FC6 system). Thanks. -richard

16 years

2
2
0 / 0

[Fedora-directory-users] Search filters with 'tab' (\09)

by Ivanov Andrey (M.)

Hi, I don't know whether it is a bug or a feature. If i make an ldapsearch (or a search by perl LDAP) the ESCAPED tab is not taken into account : the search ldapsearch -x -D... -h <server> -b "<base>" "(uid=\09user1\09)" gives the same result (the entry corresponding to user1) as ldapsearch -x -D... -h <server> -b "<base>" "(uid=user1)" The logs show that the filter makes successfully its way to the ldap core: 07/Apr/2008:16:03:30 +0200] conn=85418 op=3 SRCH base="..." scope=2 filter="(uid=\09user1\09)" attrs=ALL 07/Apr/2008:16:03:45 +0200] conn=85418 op=3 SRCH base="..." scope=2 filter="(uid=user1)" attrs=ALL How do i search then the attribute that starts with the tab symbol (\09)? Thank you!

16 years

2
2
0 / 0

[Fedora-directory-users] Directory merge

by Paulo Estrela

Hi, I work for an university in Brazil and a few months ago, we migrated the passwd files of student's email server to FDS. Until now we had a system that was used to synchronize these two databases (AD and passwd files). Now, I want to sync FDS and AD but the accounts exists in both systems. What will happen if I set up synchronization with these accounts in both systems? I want to preserve FDS information, possibly overwriting AD information. I thought create a new AD domain, but we have some login scripts and GPOs that we must preserve. Did anybody here do this? Thanks everyone, -- Paulo Estrela Administrador de Sistemas Coord. Laboratórios de Informática Universidade Salvador - UNIFACS / www.unifacs.br

16 years

1
0
0 / 0

[Fedora-directory-users] Installing Server Certificates Using certutil

by ggistra＠aol.com

Regarding "Using certutil" section in? the "Managing SSL and SASL" chapter of the Administrator's Guide 7.1: The instructions seem to indicate that one should use the same password to protect ?*? the key and certificate databases ?*? the encryption key ?*? the certificates Is this correct? Is the pwdfile.txt still needed after the certificates are generated? The "Enabling SSL ..." section of the same chapter talks about?creating the password file needed to restart the server automatically. This is presumably the same password used to generate certificates (or is it not?). Is there?a way to?achieve the unattended restart while avoiding placing the password in?a?cleartext file? Thanks, Gabi?

16 years

2
1
0 / 0

[Fedora-directory-users] Initial setup

by max

I have just installed directory services and run through the initial setup but i am not able to get the console running. I won't bore anyone with all the silly details just yet. I've already found one goof of mine so I am just planning on starting over from scratch. I really just want a pointer to the most up to date how to for initial installation and setup. I was using this : http://directory.fedoraproject.org/wiki/Install_Guide#Installation_Prereq... Is this still accurate? Is there a better one? I am running F8. Max

16 years

3
3
0 / 0

[Fedora-directory-users] Fedora DS 1.0.2 and RHEL5.1 Compatibility

by Chun Tat David Chu

Hi All, I would like to install Fedora DS 1.0.2 LDAP (64 bits) on RHEL 5.1 (64 bits) using the binary package (fedora-ds-1.0.2-1.FC5.x86_64.opt.rpm) built against the FC5 that can be downloaded from the Fedora DS website ( http://directory.fedoraproject.org/wiki/Download). I installed it, launched the console and ran couple of my Java LDAP tests that use Java Native Directory Interface (JNDI), and it seems to be working happily. When I look at it, it seems like it is compatible. I would like to know if I miss anything obvious that the Fedora DS 1.0.2binary package that built against FC5 will not be compatible with RHEL 5.1? Thanks!! - David

16 years

4
7
0 / 0

[Fedora-directory-users] Problem to reset password

by FAUCONNIER Valery AWL-IT

I installed fedora-ds to authenticate users. the authentication on our servers seems to work fine but there's wrong with the password policies and specificaly with the password change enforcing. I would like to enforce our users to change their password at first logon (or after a reset of the password) All what I get is a "Change After Reset" string appering on the terminal. nothing else is prompted and the session is disconnected . Does anyone can help about this issue? Atos Worldline SA/NV - Chaussee de Haecht 1442 Haachtsesteenweg - 1130 Brussels - Belgium RPM-RPR Bruxelles-Brussel - TVA-BTW BE 0418.547.872 Bankrekening-Compte Bancaire-Bank Account 310-0269424-44 BIC BBRUBEBB - IBAN BE55 3100 2694 2444 "The information contained in this e-mail and any attachment thereto is confidential and may contain information which is protected by intellectual property rights. This information is intended for the exclusive use of the recipient(s) named above. This e-mail does not constitute any binding relationship or offer toward any of the addressees. If you are not one of the addressees , one of their employees or a proxy holder entitled to hand over this message to the addressee(s), any use of the information contained herein (e.g. reproduction, divulgation, communication or distribution,...) is prohibited. If you have received this message in error, please notify the sender and destroy it immediately after. The integrity and security of this message cannot be guaranteed and it may be subject to data corruption, interception and unauthorized amendment, for which we accept no liability."

16 years

2
3
0 / 0

[Fedora-directory-users] 2xMulti-Masters Replicating to 2xDedicated Consumers

by Joel Heenan

Fedora Directory List, I have two Multi-Master replicated servers at our main datacentre replicating between each other. I also have two Dedicated Consumers at our DR site receiving updates. Both Dedicated Consumers receive updates from both Multi-Masters (this is incase one of the Multi-Masters dies for whatever reason). It works - and seems to work well. I imagine in a true DR situation I would change both Dedicated Consumers to be Multi-Masters and set them up to replicate between themselves. My question is - am I following conventional wisdom and best practice by forming this setup arrangement? Thanks Joel The information contained in this e-mail message and any accompanying files is or may be confidential. If you are not the intended recipient, any use, dissemination, reliance, forwarding, printing or copying of this e-mail or any attached files is unauthorised. This e-mail is subject to copyright. No part of it should be reproduced, adapted or communicated without the written consent of the copyright owner. If you have received this e-mail in error please advise the sender immediately by return e-mail or telephone and delete all copies. Fairfax does not guarantee the accuracy or completeness of any information contained in this e-mail or attached files. Internet communications are not secure, therefore Fairfax does not accept legal responsibility for the contents of this message or attached files.

16 years

1
0
0 / 0

[Fedora-directory-users] SSL

by Anand Vaddarapu

Hi, After enabling SSL with console using the procedure * http://directory.fedoraproject.org/wiki/Howto:SSL#Console_SSL_Information* i am getting these following error messages when i am trying to login into directory server in the console. SSL is enabled in both the admin console & the Ldap server >From logs: [27/Mar/2008:14:56:24 +1100] conn=47 fd=66 slot=66 SSL connection from 10.50.5.81 to 10.50.1.24 [27/Mar/2008:14:56:24 +1100] conn=47 op=-1 fd=66 closed - SSL peer cannot verify your certificate. we are these when starting the Ldap server 27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to unwrap key for cipher AES [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher AES in attrcrypt_cipher_init [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in attrcrypt_init [27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to unwrap key for cipher AES [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher AES in attrcrypt_cipher_init [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in attrcrypt_init [27/Mar/2008:14:45:05 +1100] - slapd started. Listening on All Interfaces port 389 for LDAP requests [27/Mar/2008:14:45:05 +1100] - Listening on All Interfaces port 636 for LDAPS requests Console error message: netscape.ldap.LDAPException:JSSSocketFactory.makeSocket devil.wcg.net.au:636, SSL_ForceHandshake failed: (-8054) unknown error (91) Help Appreciated. Thanks

16 years

2
4
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users April 2008