389-users April 2013

389-users@lists.fedoraproject.org

38 participants
41 discussions

Problem browsing LDAP with Outlook
by Chris Bryant 26 Aug '20

26 Aug '20

When configuring Microsoft Outlook (not Outlook Express) to access an LDAP directory, there is an option to 'Enable Browsing (requires server support)'. If this option is chosen and the directory server supports it, then you should be able to open the LDAP address book and page up and down through the results. I have been unable to get this working properly with 389 DS. When I try to browse from Outlook against the 389 DS directory, I am able to see the first page of results perfectly. However, if I move to the next page, only the first object returned will have any attributes included, and all of the rest of the objects in the page will have no attributes. I have a test perl script that duplicates this functionality as well. I can get this to work properly with an older version of Netscape Directory Server, and I can get it working with OpenDS. Since 389 DS advertises support for the controls that are required for this to work, just like the other two servers, then I would expect it to work there also. Has anyone out there gotten this to work with 389 DS? If so, can you share if there was anything special that you needed to do to get this to work? I'm trying to determine if this is a bug in the server, or if I'm just missing something in the configuration. Thanks, Chris USA.NET You Run Your Business. We'll Run Your Email. This message is for the sole use of the intended recipient(s) and may contain confidential and/or privileged information of USA.NET, Inc. Any unauthorized review, use, copying, disclosure, or distribution is prohibited. If you are not the intended recipient, please immediately contact the sender by reply email and delete all copies of the original message.

3 2

389 Master - Master Replication
by Santos Ramirez 03 Oct '14

03 Oct '14

Good Morning, We have a master - master replication agreement. When we initialize the replication it works perfectly we can see changes to a test user we have set up go up and down from the two servers. However at some point the replication stops and we cannot get replication to start once again. The only way we can get replication to start once again is to recreate the replication agreement and then it fails again. Can anyone please point us in a direction. I am relatively new to 389 so any help would be greatly appreciated. Santos U. Ramirez Linux Systems Administrator National DCP, LLC 150 Depot Street Bellingham, Ma. 02019 Phone: 508-422-3089 Fax: 508-422-3866 Santos.Ramirez(a)natdcp.com<mailto:Santos.Ramirez@natdcp.com> This email and any attachments are intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, do not copy or forward to any unauthorized persons, permanently delete the original and notify the sender by replying to this email.

3 9

AIX
by alexandre 23 May '13

23 May '13

Hello, just to know if somebody try to use an AIX client against 389DS ? I know it's possible with Solaris. It is the same way to use AIX client (nsswitch.conf and pam configuration)? Best regards, Alex

3 6

problems with console when access to ds instance
by Maximiliano de Mattos 06 May '13

06 May '13

Hi, I'm starting with 389ds, and I have installed in a remote server a intance of 389ds. Well... I can connect remotely from 389ds console to this server, but when I want to go in console to items "Administrarion Server" or "Directory Server" I receive the followin error messages: "Failed to install a local copy of 389-admin-1.1.jar or one of its supporting files......" "Failed to install a local copy of 389-ds-1.2.6.jar or one if its supporting files...." But looking for this jar files, I can found them (/usr/share/dirsrv/html/java/) in the local computer with 389ds console.. but I cannot find a log of 389ds console to see whats happend.. :( some ideas? :( thanks in advance! ;) ****

2 7

Posix problem
by alexandre 01 May '13

01 May '13

Hello, I have a 389DS, version 1.2.9.14 install on a redhat 6. I want to synchronize POSIX Attributes for Users and Groups as describe on the documentation below (12.5.1): https://access.redhat.com/site/documentation/en-US/Red_Hat_Directory_Server… But Posix Winsync API Plugin doesn't exist. Do you have any idea ? Best regards, Alex

3 8

SSL/TLS without the Admin Server?
by David Barr 28 Apr '13

28 Apr '13

Good Morning, The Red Hat documentation only describes setting up the DS using the AS as the interface. Google searching, so far, has only boiled down to that documentation again. Does anyone know of documentation to set up SSL/TLS on the DS using ldapadd/ldapmodify? The DS is headless, and I'm not in a place where setting up a remote X server would be well received. Thanks! David -- David - Offbeat http://dafydd.livejournal.com dafydd - Online http://pgp.mit.edu/ Battalion 4 - Black Rock City Emergency Services Department Integrity*Commitment*Communication*Support ----5----1----5----2----5----3----5----4----5----5----5----6----5----7-- Rene Descartes walks into his neighborhood watering hole. The publican sees him and asks, "Will you have your usual, sir?" Descartes ponders a moment and replies, "I think not." And promptly disappears... -- David - Offbeat http://dafydd.livejournal.com dafydd - Online http://pgp.mit.edu/ Battalion 4 - Black Rock City Emergency Services Department Integrity*Commitment*Communication*Support ----5----1----5----2----5----3----5----4----5----5----5----6----5----7-- Rene Descartes walks into his neighborhood watering hole. The publican sees him and asks, "Will you have your usual, sir?" Descartes ponders a moment and replies, "I think not." And promptly disappears...

2 2

Filters
by Aziza Lichir 25 Apr '13

25 Apr '13

Hello, Is it possible to make a filter to synchronize specific values. For example i don't want to replicate/synchronize this value "cn=Computers". Thanks for your help -- * ___________________________________________________________* *Aziza Lichir* * *

2 2

failure of setup-ds-admin
by Jovan.VUKOTIC＠sungard.com 24 Apr '13

24 Apr '13

Hi, We keep failing to install admin-server by setup-ds-admin script. Installation of dirsrv instance goes well. We use 1-2-11 version of 389 DS on Solaris. Before running the setup script, I removed the previous installation with remove-ds-admin.pl script. Also, some conf files from admin-serv directory I deleted manually. Now, in addition to the failure to create admin-server, console.conf, httpd.conf and nss.conf have not been created. Even the reboot of the machine did not help. Is it possible that the manual removal of the files caused the problem? If not does anybody know what could be the problem? For your reference, I have copied what I think that may be relevant log info from a setup log. Any help will be appreciated. Thank you. [13/04/23:11:32:15] - [Setup] Info This program will set up the 389 Directory and Administration Servers. It is recommended that you have "root" privilege to set up the software. Tips for using this program: - Press "Enter" to choose the default and go to the next screen - Type "Control-B" then "Enter" to go back to the previous screen - Type "Control-C" to cancel the setup program [13/04/23:11:32:15] - [Setup] Info Would you like to continue with set up? [13/04/23:11:32:16] - [Setup] Info yes [13/04/23:11:32:16] - [Setup] Info Your system has been scanned for potential problems, missing patches, etc. The following output is a report of the items found that need to be addressed before running this software in a production environment. 389 Directory Server system tuning analysis version 23-FEBRUARY-2012. NOTICE : System is sparc-sun4v-solaris5.10_s10s_u10wos_17b (2 processors). NOTICE : Solaris version 5.10, as reported by showrev -a, is unrecognized. :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: [13/04/23:11:33:39] - [Setup] Info Are you ready to set up your servers? [13/04/23:11:33:41] - [Setup] Info yes [13/04/23:11:33:41] - [Setup] Info Creating directory server . . . [13/04/23:11:33:43] - [Setup] Info Your new DS instance 'asp-kir' was successfully created. [13/04/23:11:33:43] - [Setup] Info Creating the configuration directory server . . . [13/04/23:11:33:45] - [Setup] Info Beginning Admin Server creation . . . [13/04/23:11:33:45] - [Setup] Info Creating Admin Server files and directories . . . [13/04/23:11:33:45] - [Setup] Info Updating adm.conf . . . [13/04/23:11:33:45] - [Setup] Info Updating admpw . . . [13/04/23:11:33:45] - [Setup] Info Registering admin server with the configuration directory server . . . [13/04/23:11:33:46] - [Setup] Info Updating adm.conf with information from configuration directory server . . . [13/04/23:11:33:46] - [Setup] Info Updating the configuration for the httpd engine . . . Error updating console.conf: Content-type: text/html NMC_Status: 1 NMC_ErrType: NMC_ErrInfo: Cannot open file for reading [13/04/23:11:33:46] - [Setup] Fatal Failed to create and configure the admin server [13/04/23:11:33:46] - [Setup] Fatal Exiting . . . Log file is '/tmp/setup89Dxs7.log' Thanks, Jovan Vukotic Jovan Vukotić * Senior Software Engineer * Ambit Treasury Management * SunGard * Banking * Bulevar Milutina Milankovića 136b, Belgrade, Serbia * tel: +381.11.6555-66-1 * jovan.vukotic(a)sungard.com<mailto:jovan.vukotic@sungard.com> [Description: Description: Description: Description: Description: coc-signature-03-2012]<http://www.capitalize-on-change.com/?email=70150000000Y1Et> Join the online conversation with SunGard's customers, partners and Industry experts and find an event near you at: www.sungard.com/ten<http://www.capitalize-on-change.com/?email=70150000000Y1Et>.

2 3

MemberOf attribute
by Aziza Lichir 24 Apr '13

24 Apr '13

Hello, I would like to understand how can I synchronize the memberOf attribute from AD to DS or if there is another solution by creating an attribute that can find each user's memberships . I've checked this http://directory.fedoraproject.org/wiki/MemberOf_Multiple_Grouping_Enhancem… but all i understood is that it's so complicated for a beginner like me . So i would appreciate any help i can get for this matter . Thanking you in advance. -- * ___________________________________________________________* *Aziza Lichir* * *

1 0

Password expiration 389 + Apache httpd + Subversion
by James Marcus 24 Apr '13

24 Apr '13

Hi, I'm working off this example: http://directory.fedoraproject.org/wiki/Howto:Subversion_Apache_LDAP I would like to test password expiration. I have set http://directory.fedoraproject.org/wiki/Password_Syntax how can I force immediate expiration of my password? How will people be able to update their password, I don't think basic auth supports that? Any ideas would be great. Thanks, James

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users April 2013