389-users June 2016

389-users@lists.fedoraproject.org

15 participants
25 discussions

Out of office
by Fernando Fuentes 07 Jun '16

07 Jun '16

I will be out starting 06/07/16 and coming back 06/14/16, but I will check on my email periodically. Please contact the IS Department for any issues.

1 0

Out of office
by Fernando Fuentes 07 Jun '16

07 Jun '16

I will be out starting 06/07/16 and coming back 06/14/16, but I will check on my email periodically. Please contact the IS Department for any issues.

1 0

Out of office
by Fernando Fuentes 07 Jun '16

07 Jun '16

I will be out starting 06/07/16 and coming back 06/14/16, but I will check on my email periodically. Please contact the IS Department for any issues.

1 0

User can not change password
by Todor Petkov 06 Jun '16

06 Jun '16

Hello (again), my setup: 389-ds server, Centos6 Various clients - Centos5/6, Fedora, Debian For some reason users can no longer change their passwords. They log in via ssh, run "passwd", but then it says: Password change failed. Server message: Insufficient access rights In the server I can see: [06/Jun/2016:14:30:14 +0300] conn=1750620 fd=182 slot=182 SSL connection from 172.16.18.52 to 172.16.18.254 [06/Jun/2016:14:30:14 +0300] conn=1750620 TLS1.2 256-bit AES [06/Jun/2016:14:30:14 +0300] conn=1750620 op=0 BIND dn="uid=username,ou=People,dc=dom,dc=com" method=128 version=3 [06/Jun/2016:14:30:14 +0300] conn=1750620 op=0 RESULT err=0 tag=97 nentries=0 etime=0.007000 dn="uid=username,ou=people,dc=dom,dc=com" [06/Jun/2016:14:30:14 +0300] conn=1750620 op=1 EXT oid="1.3.6.1.4.1.4203.1.11.1" name="passwd_modify_extop" [06/Jun/2016:14:30:14 +0300] conn=1750620 op=1 RESULT err=50 tag=120 nentries=0 etime=0.001000 [06/Jun/2016:14:30:14 +0300] conn=1750620 op=2 UNBIND [06/Jun/2016:14:30:14 +0300] conn=1750620 op=2 fd=182 closed - U1 I have "passwordChange: on" in the DS configuration? I have also checked the ACI for self-entry modifications and the users have the rights: (targetattr = "userPassword || telephoneNumber || facsimileTelephoneNumber") (version 3.0; acl "Allow self entry modification"; allow (write) (userdn = "ldap:///self") ;) What am I missing here? Thanks

1 0

Can not connect via ldaps from Fedora
by Todor Petkov 06 Jun '16

06 Jun '16

Hello all, I have the following setup: 2 servers, Centos6, latest 389-ds packets. 1 client, Fedora23, SSSD configured I have upgraded the Fedora recently with the latest packets and I can not authenticate any longer. In the 389-ds logs I can see the following: [06/Jun/2016:11:58:36 +0300] conn=1709954 fd=142 slot=142 SSL connection from 172.16.18.52 to 172.16.18.254 [06/Jun/2016:11:58:36 +0300] conn=1709954 op=-1 fd=142 closed - Encountered end of file. Same is when I run ldapsearch from command line. Search via ldap is fine, but ldaps fails. I have "ldap_tls_reqcert = never" in the sssd.conf, also "TLS_REQCERT never" in /etc/openldap/ldap.conf, but it does not help. Can someone give a hint what else needs to be changed? Other clients (Centos/Redhat/Debian machines) are working. Regards,

2 2

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users June 2016