389-users February 2009

389-users@lists.fedoraproject.org

46 participants
45 discussions

[Fedora-directory-users] LDAP performances = databases
by Emmanuel BILLOT 17 Feb '09

17 Feb '09

Hi, Since i'm triying to tune our FDS db, i wander if there is a maximum number of entries per db. We've got 20.000 entries stored in 1 db and indexes seems to be well configured, however a quite hard request (ldapsearch -x -h host-b "dc=foo,dc=com" "(|(|(givenname=*doe*)(sn=*doe*)(uid=*doe*)))" has a quite slow result. We use only one db in aim at keeping a simple replication schema. Is there any limitation for databse entries ? Can we tune indexes for better results ? BR, -- ========================================== Emmanuel BILLOT IRD - Orléans Délégation aux Systèmes d'Information (DSI) tél : 02 38 49 95 88 ==========================================

2 1

[Fedora-directory-users] Fedora DS backend
by kheuangkham phothisan 17 Feb '09

17 Feb '09

Dear all, I am very new user in Fedora directory server, and I would like to add the existing database that I have stored in MySQL as user information to Fedora-ds, what should I do for the technical term? please tell me how to do that. Best regards, pKheuang Make Yahoo!7 your homepage and win a trip to the Quiksilver Pro. Find out more

1 0

[Fedora-directory-users] Problems with Numeric String Syntax
by Rocio Quirantes 16 Feb '09

16 Feb '09

Hi! I have installed Fedora DS, and I am extending my schema, I used the ol-schema-migrate.pl script to migrate some openldap schemas. The problem is that when I restart th server, I get an error about the syntax oid of an atributte that is Numeric String 1.3.6.1.4.1.1466.115.121.1.36, but it is supposed to be supported, isn't it? I hope somebody could help. Thanks -- Rocio Quirantes Rodal Área de Seguridad Informática Centro Informático Científico de Andalucía (CICA) Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain) Tfno.: +34 955 056 648 / +34 955 056 600 / FAX: +34 955 056 650 Consejería de Innovación, Ciencia y Empresa Junta de Andalucía -------------------------------------------------- Este mensaje esta firmado digitalmente. Para poder reconocer la firma desde su cliente debera tener instalado el certificado raiz de la CA del CICA en el mismo. Puede descargarlo desde: http://pki.cica.es/cacert/ --------------------------------------------------

3 5

[Fedora-directory-users] LDAP Performances
by Emmanuel BILLOT 16 Feb '09

16 Feb '09

Hi, Is there any tool designed for mesuring LDAP CPU/MEM utilisation ? Or any method ? BR, -- ========================================== Emmanuel BILLOT IRD - Orléans Délégation aux Systèmes d'Information (DSI) tél : 02 38 49 95 88 ==========================================

2 1

[Fedora-directory-users] Dirsrv startup : SSL failure = answer
by Emmanuel BILLOT 16 Feb '09

16 Feb '09

Hi, In reply of [Fedora-directory-users] Dirsrv startup I finally found that my local ntpd process was failing, communication error with the ntpd server (fw acl). After debuuging this error dirsrv startup normaly, no ssl error left. BR, -- ========================================== Emmanuel BILLOT IRD - Orléans Délégation aux Systèmes d'Information (DSI) tél : 02 38 49 95 88 ==========================================

1 0

[Fedora-directory-users] Dirsrv startup
by Emmanuel BILLOT 16 Feb '09

16 Feb '09

Hi, I can't startup dirsrv error after activating SSL : [15/Feb/2009:08:45:14 +0100] - SSL alert: CERT_VerifyCertificateNow: verify certificate failed for cert server-cert of family cn=RSA,cn=encryption,cn=config (Netscape Portable Runtime error -8181 - Peer's Certificate has expired.) [15/Feb/2009:08:45:14 +0100] - SSL failure: None of the cipher are valid [ÃCHOUÃ] *** Warning: 1 instance(s) failed to start What's wrong ? BR -- ========================================== Emmanuel BILLOT IRD - Orléans Délégation aux Systèmes d'Information (DSI) tél : 02 38 49 95 88 ==========================================

2 1

[Fedora-directory-users] Multiple sync agreement between FDS env and Active Directory is possible ?
by Hugo Etievant 11 Feb '09

11 Feb '09

hello, In my architecture, i have 2 fedora directory server configured as multimaster for configuration and user data. One of my directory servers is synchronized to an Active Directory. When an accounting manager change an user's password on the dirsrv sync to AD, password is synchronized. But when user's password is changed on other dirsrv, AD do not receive the new password. My objective is the following : synchronize user's password from all my dirsrv to the AD. But, Manual says that : "WARNING : There can only be a single sync agreement between the Directory Server environment and the Active Directory environment. Multiple sync agreements to the same Active Directory domain can create entry conflicts. " http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Windows_Sync.html How to synchronize password from ALL my dirsrv to AD and obtain failover for the passsync ? regards, -- * Hugo Étiévant * **

2 1

[Fedora-directory-users] Replication: How long does it take until replicated servers are in sync after one of them came up....
by Reinhard Nappert 09 Feb '09

09 Feb '09

Hi, Consider the following scenario: You have a replicated environment, let's say a MMR setup. Now, one of the masters (M2) is down for a period of time and updates were performed against the other master (M1). How long does it take until both boxes are in sync, after M2 is back online. I assume that M1 tries to update M2 throughout the downtime in an interval setting. If this is right, what is this interval and secondly, can this be configured. Thanks, -Reinhard

2 3

[Fedora-directory-users] Directory Server Problems
by Adam Staebler 09 Feb '09

09 Feb '09

Finally got directory server to install by setting permissions on /var/ run/dirsrv to the fedora-ds user I created. Now my problem is when I run setup-ds-admin.pl it stops with: [Setup] Fatal Error: failed to open an LDAP connection to host 'fds.local' port '389' as user 'cn=Directory Manager'. Error: unknown. [Setup] Fatal Failed to create the configuration directory server [Setup] Fatal Exiting . . . I have been trying to get this dir server running for a week without any luck. I am setting up the box for my office to use instead of windows 2008 with Active Directory as I don't like m$ very much. Thanks!

2 1

[Fedora-directory-users] Should the password policy set the shadow* attributes on user add?
by Orion Poplawski 09 Feb '09

09 Feb '09

I've configured a global password policy but when I add a user none of the shadowMax/shadowWarning/etc attributes are set. Is this expected? With this cause a problem? -- Orion Poplawski Technical Manager 303-415-9701 x222 NWRA/CoRA Division FAX: 303-415-9702 3380 Mitchell Lane orion(a)cora.nwra.com Boulder, CO 80301 http://www.cora.nwra.com

3 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users February 2009