Modify dse.ldif using commands

[Juan Asensio Sánchez]

Hi

To modify some parameters of the conguration, like nsslapd-cachememsize, it
is required to stop the server and manually change the setting in the
dse.ldif. Is there any way/command/utility to modify that file without using
grep and sed? I say this because when doing this, we must be careful to
check if the attribute is defined, if not create or replace its value using
sed; or change that value only for certain databases, not for all. It should
be like an ldapmodify, but not using an LDAP server, just loading the
specified dse.ldif file and applying the changes specified in other ldif
file.

Any suggestion? Regards.

[Rich Megginson]

Juan Asensio Sánchez wrote:
>  Hi
>
>  To modify some parameters of the conguration, like 
>  nsslapd-cachememsize, it is required to stop the server and manually 
>  change the setting in the dse.ldif. Is there any way/command/utility 
>  to modify that file without using grep and sed? I say this because 
>  when doing this, we must be careful to check if the attribute is 
>  defined, if not create or replace its value using sed; or change that 
>  value only for certain databases, not for all. It should be like an 
>  ldapmodify, but not using an LDAP server, just loading the specified 
>  dse.ldif file and applying the changes specified in other ldif file.
>
>  Any suggestion? Regards. 
If you are a perl hacker, you could use the FileConn.pm
perl module 
provided with 389-ds-base.
> ------------------------------------------------------------------------
>
>  --
>  389 users mailing list
>  389-users(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/389-users

Initially logging into the 389 ldap server

[Steven Jones]

Hi,

I have just followed the Redhat 8.1 install guide as pointed to from the 389 project web
site....it seems to have completed OK.

However the "redhat-idm-console" command does not exist...So far I cant actually
find out what I do next....?

What docs are there on doing an initial connection to test the install was successful?

regards

Steven

errors once in the admin console

[Steven Jones]

Hi,

I installed with, "yum -y install 389-ds"

I have started the console with, /usr/bin/389-console

under the Server group folder I have "Administration Server"  and
"Directory Server" (hostname)

Clicking on either of these gives me a class load error saying,

"failed to install a local copy a local copy of 389-ds-1.2.jar or one of its
supporting files...."

or,

"failed to install a local copy a local copy of 389-admin-1.1.jar or one of its
supporting files...."

"Can not connect to http://(hostname):9830"

When I installed the ldap system the 389.ds and 389-admin rpms were installed...

Any ideas please?

Where are the logs kept?

regards

Steven

errors once in the admin console

[Gerrard Geldenhuis]

Hi Steven,
Double check that you are using the correct JVM by using alternatives as stated in the
install guide. I don't know if that is the problem but worth checking. Also double
check the install log of yum for a clean install. Have you run setup-ds-admin.pl script to
setup your directory after installation?

What OS are you using( I am guesing Centos ) what version of 389 have you installed.

The documentation in http://www.redhat.com/docs/manuals/dir-server/ is very comprehensive.
You will find your answer as to where the logs are kept in the Administrator's Guide
almost right at the beginning.

Best Regards

>  -----Original Message-----
>  From: 389-users-bounces(a)lists.fedoraproject.org [mailto:389-users-
>  bounces(a)lists.fedoraproject.org] On Behalf Of Steven Jones
>  Sent: 16 June 2010 03:21
>  To: General discussion list for the 389 Directory server project.
>  Subject: [389-users] errors once in the admin console
>  
>  Hi,
>  
>  I installed with, "yum -y install 389-ds"
>  
>  I have started the console with, /usr/bin/389-console
>  
>  under the Server group folder I have "Administration Server"  and
>  "Directory Server" (hostname)
>  
>  Clicking on either of these gives me a class load error saying,
>  
>  "failed to install a local copy a local copy of 389-ds-1.2.jar or one
>  of its supporting files...."
>  
>  or,
>  
>  "failed to install a local copy a local copy of 389-admin-1.1.jar or
>  one of its supporting files...."
>  
>  "Can not connect to http://(hostname):9830"
>  
>  When I installed the ldap system the 389.ds and 389-admin rpms were
>  installed...
>  
>  Any ideas please?
>  
>  Where are the logs kept?
>  
>  regards
>  
>  Steven
>   
________________________________________________________________________
In order to protect our email recipients, Betfair Group use SkyScan from 
MessageLabs to scan all Incoming and Outgoing mail for viruses.

________________________________________________________________________

errors once in the admin console

[Nathan Kinder]

On 06/15/2010 07:20 PM, Steven Jones wrote:
>  Hi,
>
>  I installed with, "yum -y install 389-ds"
>
>  I have started the console with, /usr/bin/389-console
>
>  under the Server group folder I have "Administration Server"  and
> "Directory Server" (hostname)
>
>  Clicking on either of these gives me a class load error saying,
>
>  "failed to install a local copy a local copy of 389-ds-1.2.jar or one of its
> supporting files...."
>
>  or,
>
>  "failed to install a local copy a local copy of 389-admin-1.1.jar or one of its
> supporting files...."
>
>  "Can not connect to http://(hostname):9830"
>
>  When I installed the ldap system the 389.ds and 389-admin rpms were installed...
>
>  Any ideas please?
>      
Does the server have the 389-ds-console and 389-admin-console rpms 
installed?  Those packages contain the jar files that Console is 
attempting to download from the Administration Server.
>  Where are the logs kept?
>      
/var/log/dirsrv
>  regards
>
>  Steven
>
>
>
>
>
>  --
>  389 users mailing list
>  389-users(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/389-users
>

errors once in the admin console

[Steven Jones]

Hi,

Misconfigured iptables rule...

regards

Steven

-----Original Message-----
From: 389-users-bounces(a)lists.fedoraproject.org
[mailto:[e-mail]] On Behalf Of Gerrard Geldenhuis
Sent: Wednesday, 16 June 2010 8:32 p.m.
To: General discussion list for the 389 Directory server project.
Subject: Re: [389-users] errors once in the admin console

Hi Steven,
Double check that you are using the correct JVM by using alternatives as stated in the
install guide. I don't know if that is the problem but worth checking. Also double
check the install log of yum for a clean install. Have you run setup-ds-admin.pl script to
setup your directory after installation?

What OS are you using( I am guesing Centos ) what version of 389 have you installed.

The documentation in http://www.redhat.com/docs/manuals/dir-server/ is very comprehensive.
You will find your answer as to where the logs are kept in the Administrator's Guide
almost right at the beginning.

Best Regards

>  -----Original Message-----
>  From: 389-users-bounces(a)lists.fedoraproject.org [mailto:389-users-
>  bounces(a)lists.fedoraproject.org] On Behalf Of Steven Jones
>  Sent: 16 June 2010 03:21
>  To: General discussion list for the 389 Directory server project.
>  Subject: [389-users] errors once in the admin console
>  
>  Hi,
>  
>  I installed with, "yum -y install 389-ds"
>  
>  I have started the console with, /usr/bin/389-console
>  
>  under the Server group folder I have "Administration Server"  and
>  "Directory Server" (hostname)
>  
>  Clicking on either of these gives me a class load error saying,
>  
>  "failed to install a local copy a local copy of 389-ds-1.2.jar or one
>  of its supporting files...."
>  
>  or,
>  
>  "failed to install a local copy a local copy of 389-admin-1.1.jar or
>  one of its supporting files...."
>  
>  "Can not connect to http://(hostname):9830"
>  
>  When I installed the ldap system the 389.ds and 389-admin rpms were
>  installed...
>  
>  Any ideas please?
>  
>  Where are the logs kept?
>  
>  regards
>  
>  Steven
>   
________________________________________________________________________
In order to protect our email recipients, Betfair Group use SkyScan from 
MessageLabs to scan all Incoming and Outgoing mail for viruses.

________________________________________________________________________
--
389 users mailing list
389-users(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

[Juan Asensio Sánchez]

OK, I'll take a look.

Thanks.

2010/6/15 Rich Megginson <rmeggins(a)redhat.com&gt;

>  Juan Asensio Sánchez wrote:
>  > Hi
>  >
>  > To modify some parameters of the conguration, like
>  > nsslapd-cachememsize, it is required to stop the server and manually
>  > change the setting in the dse.ldif. Is there any way/command/utility
>  > to modify that file without using grep and sed? I say this because
>  > when doing this, we must be careful to check if the attribute is
>  > defined, if not create or replace its value using sed; or change that
>  > value only for certain databases, not for all. It should be like an
>  > ldapmodify, but not using an LDAP server, just loading the specified
>  > dse.ldif file and applying the changes specified in other ldif file.
>  >
>  > Any suggestion? Regards.
>  If you are a perl hacker, you could use the FileConn.pm perl module
>  provided with 389-ds-base.
>  > ------------------------------------------------------------------------
>  >
>  > --
>  > 389 users mailing list
>  > 389-users(a)lists.fedoraproject.org
>  > https://admin.fedoraproject.org/mailman/listinfo/389-users
>
>  --
>  389 users mailing list
>  389-users(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/389-users

[Ulf Weltman]

It's not required to stop the server and manually edit dse.ldif to 
change nsslapd-cachememsize (entry cache size).  Additionally, changing 
this parameter over LDAP takes effect immediately, no restart required.  
Maybe you were thinking of other parameters?

On 6/21/2010 5:07 AM, Juan Asensio Sánchez wrote:
>  OK, I'll take a look.
>
>  Thanks.
>
>  2010/6/15 Rich Megginson <rmeggins(a)redhat.com 
>  <mailto:[e-mail]>>
>
>      Juan Asensio Sánchez wrote:
>      > Hi
>      >
>      > To modify some parameters of the conguration, like
>      > nsslapd-cachememsize, it is required to stop the server and manually
>      > change the setting in the dse.ldif. Is there any way/command/utility
>      > to modify that file without using grep and sed? I say this because
>      > when doing this, we must be careful to check if the attribute is
>      > defined, if not create or replace its value using sed; or change
>      that
>      > value only for certain databases, not for all. It should be like an
>      > ldapmodify, but not using an LDAP server, just loading the specified
>      > dse.ldif file and applying the changes specified in other ldif file.
>      >
>      > Any suggestion? Regards.
>      If you are a perl hacker, you could use the FileConn.pm perl module
>      provided with 389-ds-base.
>      >
>      ------------------------------------------------------------------------
>      >
>      > --
>      > 389 users mailing list
>      > 389-users(a)lists.fedoraproject.org
>      <mailto:[e-mail]>
>      > https://admin.fedoraproject.org/mailman/listinfo/389-users
>
>      --
>      389 users mailing list
>      389-users(a)lists.fedoraproject.org
>      <mailto:[e-mail]>
>      https://admin.fedoraproject.org/mailman/listinfo/389-users
>
>

[Juan Asensio Sánchez]

If this can help somebody, I have posted an example of script to modify the
dse.ldif. The server must be stopped before running the script (before
modifying manually dse.ldif):

http://pastebin.com/QmpHF2n2

Regards.

2010/6/21 Ulf Weltman <ulf.weltman(a)hp.com&gt;

>   It's not required to stop the server and manually edit dse.ldif
> to change
>  nsslapd-cachememsize (entry cache size).  Additionally, changing this
>  parameter over LDAP takes effect immediately, no restart required.  Maybe
>  you were thinking of other parameters?
>
>
>  On 6/21/2010 5:07 AM, Juan Asensio Sánchez wrote:
>
>  OK, I'll take a look.
>
>  Thanks.
>
>  2010/6/15 Rich Megginson <rmeggins(a)redhat.com&gt;
>
> >  Juan Asensio Sánchez wrote:
> > > Hi
> > >
> > > To modify some parameters of the conguration, like
> > > nsslapd-cachememsize, it is required to stop the server and manually
> > > change the setting in the dse.ldif. Is there any way/command/utility
> > > to modify that file without using grep and sed? I say this because
> > > when doing this, we must be careful to check if the attribute is
> > > defined, if not create or replace its value using sed; or change that
> > > value only for certain databases, not for all. It should be like an
> > > ldapmodify, but not using an LDAP server, just loading the specified
> > > dse.ldif file and applying the changes specified in other ldif file.
> > >
> > > Any suggestion? Regards.
> >  If you are a perl hacker, you could use the FileConn.pm perl module
> > provided with 389-ds-base.
> > > ------------------------------------------------------------------------
> > >
> > > --
> > > 389 users mailing list
> > > 389-users(a)lists.fedoraproject.org
> > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> >
> > --
> > 389 users mailing list
> > 389-users(a)lists.fedoraproject.org
> > https://admin.fedoraproject.org/mailman/listinfo/389-users
>
>
>
>  --
>  389 users mailing list
>  389-users(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/389-users
>

[Rich Megginson]

Juan Asensio Sánchez wrote:
>  If this can help somebody, I have posted an example of script to 
>  modify the dse.ldif. The server must be stopped before running the 
>  script (before modifying manually dse.ldif):
>
>  http://pastebin.com/QmpHF2n2 
You code similar to this in several places:

   1.
              my $entries_count = 1;
   2.
              while ($conn->nextEntry())
   3.
              {
   4.
                  $entries_count++;
   5.
              }
   6.
       
   7.
              if ($entries_count == 1)

I don't think you need to do this, but it shouldn't harm anything.

Otherwise, looks good.
>  Regards.
>
>  2010/6/21 Ulf Weltman <ulf.weltman(a)hp.com <mailto:[e-mail]>>
>
>      It's not required to stop the server and manually edit dse.ldif to
>      change nsslapd-cachememsize (entry cache size).  Additionally,
>      changing this parameter over LDAP takes effect immediately, no
>      restart required.  Maybe you were thinking of other parameters?
>
>
>      On 6/21/2010 5:07 AM, Juan Asensio Sánchez wrote:
> >     OK, I'll take a look.
> >
> >     Thanks.
> >
> >     2010/6/15 Rich Megginson <rmeggins(a)redhat.com
> >     <mailto:[e-mail]>>
> >
> >         Juan Asensio Sánchez wrote:
> >         > Hi
> >         >
> >         > To modify some parameters of the conguration, like
> >         > nsslapd-cachememsize, it is required to stop the server and
> >         manually
> >         > change the setting in the dse.ldif. Is there any
> >         way/command/utility
> >         > to modify that file without using grep and sed? I say this
> >         because
> >         > when doing this, we must be careful to check if the
> >         attribute is
> >         > defined, if not create or replace its value using sed; or
> >         change that
> >         > value only for certain databases, not for all. It should be
> >         like an
> >         > ldapmodify, but not using an LDAP server, just loading the
> >         specified
> >         > dse.ldif file and applying the changes specified in other
> >         ldif file.
> >         >
> >         > Any suggestion? Regards.
> >         If you are a perl hacker, you could use the FileConn.pm perl
> >         module
> >         provided with 389-ds-base.
> >         >
> >         ------------------------------------------------------------------------
> >         >
> >         > --
> >         > 389 users mailing list
> >         > 389-users(a)lists.fedoraproject.org
> >         <mailto:[e-mail]>
> >         > https://admin.fedoraproject.org/mailman/listinfo/389-users
> >
> >         --
> >         389 users mailing list
> >         389-users(a)lists.fedoraproject.org
> >         <mailto:[e-mail]>
> >         https://admin.fedoraproject.org/mailman/listinfo/389-users
> >
> >
>
>      --
>      389 users mailing list
>      389-users(a)lists.fedoraproject.org
>      <mailto:[e-mail]>
>      https://admin.fedoraproject.org/mailman/listinfo/389-users
>
>
>  ------------------------------------------------------------------------
>
>  --
>  389 users mailing list
>  389-users(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/389-users