On 12/5/05, Richard Megginson < rmeggins@redhat.com> wrote:

Kevin Kovach wrote:

> Thanks again for the reply Richard.
>
> Can you please advise on how I might best go about recovering from
> this so that I can backup all my data and configuration and rebuild
> FDS?  Now, I'd probably like to go to FDS 1.0 as well.  I'd like to
> get this install up and running just long enough to back everything up
> and then go with a new install of 1.0.
>
> I've tried setting the time on the system back a couple months and
> that did not do the trick.  I've noticed now that there's a pumpkin.pl
> PERL script in the fedora-ds directory?  Is there some thing temporary
> I can do to expend the wick on the bomb for a bit, so that I might run
> for cover before it goes off again? :-)

There's nothing you can do except to rebuild ns-slapd.  This might work:
1) cd ldapserver/ldap/servers/slapd
2) touch main.c
3) make BUILD_BOMB="" PUMPKIN_AGE=0 .... other make args ....
This will rebuild the ns-slapd binary, which is the one with the
problem.   main.c has the bomb code.  This will create a new binary
ldapserver/built/release/<platform>/bin/slapd/server/ns-slapd.  Just
shutdown your old one and replace it with this new one, the restart.
You should be good to go.

>
> Thanks.
>
> - Kevin
>
> On 12/5/05, *Richard Megginson* <rmeggins@redhat.com
> <mailto: rmeggins@redhat.com>> wrote:
>
>     Kevin Kovach wrote:
>
>     > Built this myself from the 7.1 source.  You're thinking this is an
>     > issue with my build in particular, or you've seen this before?
>
>     Yes.  The BUILD_BOMB is enabled by default.  Our 7.1 binary builds had
>     the build bomb disabled.  In order to build with this disabled, use
>     something like this:
>     make PUMPKIN_AGE=0 BUILD_BOMB="" .... other args ....
>     I apologize for this.  We will be updating the wiki Building page
>     ASAP.
>     Future versions of the source code will disable the build bomb by
>     default.
>
>     >
>     > - Kevin
>     >
>     > On 12/5/05, * Richard Megginson* <rmeggins@redhat.com
>     <mailto:rmeggins@redhat.com >
>     > <mailto:rmeggins@redhat.com <mailto:rmeggins@redhat.com>>> wrote:
>     >
>     >     Kevin Kovach wrote:
>     >
>     >     > Thanks for the reply Richard.
>     >     >
>     >     > Are you able to supply any details on the issue?  Is this
>     a known
>     >     > problem that was already being worked on, or is this a
>     brand new
>     >     > issue?  If this has been around for a while, do you have a
>     >     timetable
>     >     > on a fix?
>     >
>     >     Actually, is your problem in the released FDS 7.1 you
>     downloaded from
>     >     the download site, or did you build it yourself?
>     >
>     >     >
>     >     > I've checked the list and have not seen anything regarding
>     this
>     >     error
>     >     > message.  If there's anything I can do to help please let
>     me know.
>     >     >
>     >     > Thanks.
>     >     >
>     >     > - Kevin
>     >     >
>     >     > On 12/5/05, *Richard Megginson* <rmeggins@redhat.com
>     <mailto: rmeggins@redhat.com>
>     >     <mailto: rmeggins@redhat.com <mailto:rmeggins@redhat.com>>
>     >     > <mailto: rmeggins@redhat.com <mailto:rmeggins@redhat.com>
>     <mailto:rmeggins@redhat.com <mailto: rmeggins@redhat.com>>>> wrote:
>     >     >
>     >     >     No, it's not a cert issue.  It's a problem with the core
>     >     server, and
>     >     >     we're working on a fix right now.
>     >     >
>     >     >     Kevin Kovach wrote:
>     >     >
>     >     >     > Hello again,
>     >     >     >
>     >     >     > I'm suspecting more and more that it was a certificate
>     >     issue, since
>     >     >     > the error log references port 636.
>     >     >     >
>     >     >     > However, I've gone over the SSL HOWTO on the FDS
>     wiki and
>     >     I don't
>     >     >     > understand what the problem is.  When I installed FDS
>     >     about 5 months
>     >     >     > ago I used the information provided here,
>     >     >     >
>     >     >
>     >
>     http://www.redhat.com/docs/manuals/dir-server/ag/7.1/ssl.html#1087158
>     <http://www.redhat.com/docs/manuals/dir-server/ag/7.1/ssl.html#1087158 >
>     >     >     > on setting up a self signed certificate.  This link was
>     >     posted
>     >     >     on the
>     >     >     > SSL HOWTO on help with using certutil.
>     >     >     >
>     >     >     > I was able to get FDS up and running with SSL after
>     a couple
>     >     >     emails to
>     >     >     > the list and a couple changes to the FDS wiki regarding
>     >     SSL.  As I
>     >     >     > said, it's been running well for the past 5 months
>     or so.
>     >     >     >
>     >     >     > My understanding was that the example there created
>     a cert
>     >     that
>     >     >     would
>     >     >     > be valid for 123 months (-v 120) plus the default 3
>     >     months?  I would
>     >     >     > not expect this cert to have expired already.
>     >     >     >
>     >     >     > That said, I went through the same steps to try and
>     >     recreate the CA
>     >     >     > and Server certs for the directory again now.  After
>     doing so
>     >     >     without
>     >     >     > any error messages, I tried to start the directory
>     server
>     >     again and
>     >     >     > I'm getting the same message.
>     >     >     >
>     >     >     > Thanks.
>     >     >     >
>     >     >     > - Kevin
>     >     >     >
>     >     >     > On 12/5/05, *Kevin Kovach* < kovach@gmail.com
>     <mailto:kovach@gmail.com>
>     >     <mailto:kovach@gmail.com <mailto:kovach@gmail.com>>
>     >     >     <mailto: kovach@gmail.com <mailto:kovach@gmail.com >
>     <mailto:kovach@gmail.com <mailto:kovach@gmail.com>>>
>     >     >     > <mailto: kovach@gmail.com <mailto:kovach@gmail.com>
>     <mailto:kovach@gmail.com <mailto:kovach@gmail.com >>
>     >     <mailto:kovach@gmail.com <mailto:kovach@gmail.com>
>     <mailto: kovach@gmail.com <mailto:kovach@gmail.com>>>>> wrote:
>     >     >     >
>     >     >     >     Hello,
>     >     >     >
>     >     >     >     I'm a bit confused this morning.  I woke up and
>     >     realized that my
>     >     >     >     directory was down, and when I tried to restart
>     it I
>     >     got the
>     >     >     >     following message ...
>     >     >     >
>     >     >     >     # ./start-slapd
>     >     >     >     [05/Dec/2005:11:52:28 -0500] - ERROR: ** This beta
>     >     software has
>     >     >     >     expired **
>     >     >     >
>     >     >     >     Does this look familiar to anyone?  I'm
>     continuing to
>     >     look into
>     >     >     >     it, but if it's something simple issue that I'm
>     >     unaware of I'd
>     >     >     >     appreciate any hints as to what the problem is?
>     >     >     >
>     >     >     >     Some background information ...
>     >     >     >
>     >     >     >     I've been running Fedora Directory Server for
>     about 5
>     >     months
>     >     >     >     without any issues.  It's been running great.  I
>     recently
>     >     >     added a
>     >     >     >     root suffix to the directory that went smoothly.  I
>     >     was able to
>     >     >     >     use the new root without any problems after I added
>     >     it.  I
>     >     >     didn't
>     >     >     >     seem to have any issues with that change.  This the
>     >     only thing
>     >     >     >     I've done in the past couple months.
>     >     >     >
>     >     >     >     I've just tired to save my config and back up
>     the db with
>     >     >     >     ./saveconfig, ./db2bak, ./db2ldif, and ./db2dsml
>     and all
>     >     >     attempts
>     >     >     >     result in the same error message.
>     >     >     >
>     >     >     >     Also, the only thing printed to the error log is
>     the same
>     >     >     message.
>     >     >     >
>     >     >     >     # cat errors
>     >     >     >             Fedora-Directory/7.1 B2005.201.2115
>     >     >     >             ldap.hostname.com:636
>     <http://ldap.hostname.com:636>
>     >     <http://ldap.hostname.com:636> < http://ldap.hostname.com:636>
>     >     >     < http://ldap.hostname.com:636>
>     >     >     >     (/opt/fedora-ds/slapd-instname)
>     >     >     >
>     >     >     >     [05/Dec/2005:11:46:07 -0500] - ERROR: ** This beta
>     >     software has
>     >     >     >     expired **
>     >     >     >     [05/Dec/2005:11:47:44 -0500] - ERROR: ** This beta
>     >     software has
>     >     >     >     expired **
>     >     >     >     [05/Dec/2005:11:49:03 -0500] - ERROR: ** This beta
>     >     software has
>     >     >     >     expired **
>     >     >     >     [05/Dec/2005:11:52:28 -0500] - ERROR: ** This beta
>     >     software has
>     >     >     >     expired **
>     >     >     >     [05/Dec/2005:11:57:33 -0500] - ERROR: ** This beta
>     >     software has
>     >     >     >     expired **
>     >     >     >     [05/Dec/2005:11:58:30 -0500] - ERROR: ** This beta
>     >     software has
>     >     >     >     expired **
>     >     >     >     [05/Dec/2005:12:00:11 -0500] - ERROR: ** This beta
>     >     software has
>     >     >     >     expired **
>     >     >     >
>     >     >     >     I'm really at a loss as to what has
>     expired.  Does the
>     >     >     directory
>     >     >     >     have some kind of license that has expired?  Can
>     this be a
>     >     >     message
>     >     >     >     for an expired cert?  It doesn't really sound
>     like it, but
>     >     >     that's
>     >     >     >     the only thing I can think of off the top of my
>     head.
>     >     >     >
>     >     >     >     Thanks for any help and/or information.
>     >     >     >
>     >     >     >     - Kevin
>     >     >     >
>     >     >     >
>     >     >     >
>     >     >     >
>     >     >     > --
>     >     >     > Take back the web, http://www.switch2firefox.com/
>     >     >     < http://www.switch2firefox.com/>
>     >     >     >
>     >     >
>     >
>     >------------------------------------------------------------------------
>     >     >     >
>     >     >     >--
>     >     >     >Fedora-directory-users mailing list
>     >     >     >Fedora-directory-users@redhat.com
>     <mailto:Fedora-directory-users@redhat.com >
>     >     <mailto: Fedora-directory-users@redhat.com
>     <mailto:Fedora-directory-users@redhat.com >>
>     >     >     <mailto:Fedora-directory-users@redhat.com
>     <mailto:Fedora-directory-users@redhat.com >
>     >     <mailto: Fedora-directory-users@redhat.com
>     <mailto:Fedora-directory-users@redhat.com >>>
>     >     >
>     >https://www.redhat.com/mailman/listinfo/fedora-directory-users
>     >     >     >
>     >     >     >
>     >     >
>     >     >
>     >     >     --
>     >     >     Fedora-directory-users mailing list
>     >     >     Fedora-directory-users@redhat.com
>     <mailto:Fedora-directory-users@redhat.com>
>     >     <mailto: Fedora-directory-users@redhat.com
>     <mailto:Fedora-directory-users@redhat.com>>
>     >     >     <mailto: Fedora-directory-users@redhat.com
>     <mailto:Fedora-directory-users@redhat.com>
>     >     <mailto: Fedora-directory-users@redhat.com
>     <mailto:Fedora-directory-users@redhat.com>>>
>     >     >
>     https://www.redhat.com/mailman/listinfo/fedora-directory-users
>     <https://www.redhat.com/mailman/listinfo/fedora-directory-users >
>     >     >     <
>     >     https://www.redhat.com/mailman/listinfo/fedora-directory-users>
>     >     >
>     >     >
>     >     >
>     >     >
>     >     >
>     >     >
>     >     > --
>     >     > Take back the web, http://www.switch2firefox.com/
>     >     < http://www.switch2firefox.com/>
>     >     >
>     >
>     >------------------------------------------------------------------------
>     >     >
>     >     >--
>     >     >Fedora-directory-users mailing list
>     >     >Fedora-directory-users@redhat.com
>     <mailto:Fedora-directory-users@redhat.com>
>     >     <mailto:Fedora-directory-users@redhat.com
>     <mailto:Fedora-directory-users@redhat.com>>
>     >     > https://www.redhat.com/mailman/listinfo/fedora-directory-users
>     >     >
>     >     >
>     >
>     >
>     >     --
>     >     Fedora-directory-users mailing list
>     >     Fedora-directory-users@redhat.com
>     <mailto:Fedora-directory-users@redhat.com >
>     >     <mailto: Fedora-directory-users@redhat.com
>     <mailto:Fedora-directory-users@redhat.com >>
>     >     https://www.redhat.com/mailman/listinfo/fedora-directory-users
>     >     <
>     https://www.redhat.com/mailman/listinfo/fedora-directory-users>
>     >
>     >
>     >
>     >
>     >
>     >
>     > --
>     > Take back the web, http://www.switch2firefox.com/
>     <http://www.switch2firefox.com/>
>     >
>     >------------------------------------------------------------------------
>     >
>     >--
>     >Fedora-directory-users mailing list
>     >Fedora-directory-users@redhat.com
>     <mailto: Fedora-directory-users@redhat.com>
>     >https://www.redhat.com/mailman/listinfo/fedora-directory-users
>     >
>     >
>
>
>     --
>     Fedora-directory-users mailing list
>     Fedora-directory-users@redhat.com
>     <mailto: Fedora-directory-users@redhat.com>
>     https://www.redhat.com/mailman/listinfo/fedora-directory-users
>     < https://www.redhat.com/mailman/listinfo/fedora-directory-users>
>
>
>
>
>
>
> --
> Take back the web, http://www.switch2firefox.com/
>
>------------------------------------------------------------------------
>
>--
>Fedora-directory-users mailing list
>Fedora-directory-users@redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>

--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users