389-users September 2005

389-users@lists.fedoraproject.org

46 participants
53 discussions

RE: [Fedora-directory-users] Problem with solaris & FDS authentication
by Tay, Gary 01 Sep '05

01 Sep '05

Yes it would be a superset containing schema definitions of DUAConfigProfile and nisDomain attributes and objectclasses, ONLY if you have run "idsconfig". When I first tried configuring Solaris8 LDAP Client against FDS I copied over the 99user.ldif from SUN iDS install, and it actually worked. BUT the point is, as George and Rich had pointed up to me in https://www.redhat.com/archives/fedora-directory-users/2005-July/msg0013 8.html is that 99user.ldif may contain all other "customized" schema changes and it is not "proper" to just "blindly copy over" and overwrite the original 99user.ldif of FDS7.1. Looks like you did not perform a fresh re-install of FDS and went from there, make sure you stop slapd and admin server, "rm -f /opt/fedora-ds" and re-install from scratch using static IP for your Solaris8 LDAP Client running OpenSSH server, you may follow my revised HOW-TO: http://web.singnet.com.sg/~garyttt/Configuring%20Solaris%20Native%20LDAP %20Client%20for%20Fedora%20Directory%20Server.htm Gary -----Original Message----- From: fedora-directory-users-bounces(a)redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Igor Sent: Thursday, September 01, 2005 11:49 PM To: General discussion list for the Fedora Directory server project. Subject: RE: [Fedora-directory-users] Problem with solaris & FDS authentication > === > GT: Did you have 61DUAConfigFile.ldif and 62nisDomain.ldif added to > config/schema (and slapd restarted)? They provides all the required > attributes for DUAConfigProfile and nisDomain objects including SSD > (serviceSearchDescriptor). We try not to touch 99user.ldif and the > original 99user.ldif should have a file size of 1321. No, I got the 99user.ldif from an iDS install. I thought it is a superset of 61dua & 62nis LDIFs? ____________________________________________________ Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs -- Fedora-directory-users mailing list Fedora-directory-users(a)redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users

1 0

[Fedora-directory-users] FDS/Samba and password sync
by Sævaldur Arnar Gunnarsson 01 Sep '05

01 Sep '05

I would like to ask the people who are using the Fedora Directory Server as a backend LDAP server to a Samba PDC to see what happens when a user changes a password from the ctrl+alt+del dialog in Windows. (with 'ldap passwd sync = Yes' in smb.conf) This did not work for me the last time I tried FDS (last June) only the Samba related password fields (SambaLMPassword/SambaNTPassword) are changed and not the userPassword field. See this thread: https://www.redhat.com/archives/fedora-directory-users/2005-June/msg00092.h… So I'm kinda curious to see if someone has gotten this to work. -- Sævaldur Arnar Gunnarsson ; RHCE

1 0

RE: [Fedora-directory-users] Problem with solaris & FDS authentication
by Tay, Gary 01 Sep '05

01 Sep '05

=== The system is using dhcp, btw. Could that be the problem? === GT: I do not think it is logical to run an OpenSSH Server on a DHCP Client with possibly varying IP address, please use Static IP. == I dont have SSD attributes. 99user.ldif is in the schema directory but none of those attributes can be added in the properties of default profile. === GT: Did you have 61DUAConfigFile.ldif and 62nisDomain.ldif added to config/schema (and slapd restarted)? They provides all the required attributes for DUAConfigProfile and nisDomain objects including SSD (serviceSearchDescriptor). We try not to touch 99user.ldif and the original 99user.ldif should have a file size of 1321. -rw------- 1 nobody nobody 1321 Jun 3 02:39 99user.ldif -rw-r--r-- 1 root root 3624 Aug 29 02:17 61DUAConfigProfile.ldif -rw-r--r-- 1 root root 264 Aug 29 02:53 62nisDomain.ldif Gary -----Original Message----- From: fedora-directory-users-bounces(a)redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Igor Sent: Thursday, September 01, 2005 3:48 AM To: General discussion list for the Fedora Directory server project. Subject: RE: [Fedora-directory-users] Problem with solaris & FDS authentication started nscd, added debug, still no go. id testdba works. > /etc/pam.conf to observe all possible /var/adm/messages for "sshd" > processing. Aug 31 14:04:02 unknown last message repeated 1 time Aug 31 14:04:02 unknown sshd[413]: [ID 800047 auth.error] error: PAM: Authentication failed for testdba from cnyitsun01.composers.foo.com Aug 31 14:04:07 unknown sshd[413]: [ID 316739 auth.error] pam_ldap: no legal authentication method configured That's all I get. The system is using dhcp, btw. Could that be the problem? > GT: Use Fedord Management Console to add the three SSDs into the > "default" profile, I dont have SSD attributes. 99user.ldif is in the schema directory but none of those attributes can be added in the properties of default profile. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -- Fedora-directory-users mailing list Fedora-directory-users(a)redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users

4 3

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users September 2005