389-users March 2006

389-users@lists.fedoraproject.org

55 participants
89 discussions

[Fedora-directory-users] Cos? or plug-in issue?
by Scott 07 Mar '06

07 Mar '06

I have been working with updating the attributeType 'uid' to conform the a "caseExactMatch" setting. I understand that this does agree with RFC standards, but this Directory Server will not be interacting with any ldap applications. The primary purpose is user authentication. I must be missing something on how the Directory Server (fedora-ds) defines the attributes. I was under the impression I could just update the 00core.ldif entry and the new matching rule would then be applied. This has proven not to be the case, I think it might have to do with the server interacts with the plugins or the CoS which needs to be addressed. Anyone who could educate me on a method to enforce case sensitivity for the attribute uid, it would help me out greatly. I have read everything I can find on the subject and it just does not seem to be documented (not in a direct manner anyway). This is how the attribute appears in the 00core.ldif after I attempted to change the attribute definition but it does not seem to have any effect. attributeTypes: ( 0.9.2342.19200300.100.1.1 NAME ( 'uid' 'userid' ) DESC 'Standard LDAP attribute type' EQUALITY caseExactMatch SUBSTR caseExactSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'RFC 1274' ) Thanks in advance to anyone who can point me in the correct direction, I must be making this more difficult then it needs to be.

6 14

[Fedora-directory-users] Password Syntax Checking
by Bracey Summers 06 Mar '06

06 Mar '06

I just installed Fedora Directory Server 1.02 on my FC4 box and all looks fine. I was able to successfully login using LDAP authentication and change my password. I tested password expiration and notification and that worked fine. However, I am not able to get the password syntax checking to work. I have the "Enable fine-grained password policy" checked under the Configuration tab and I have created a password policy for the subtree of "People" and on an individual user. As user bsmith: -bash-3.00$ passwd Changing password for user bsmith. Enter login(LDAP) password: # previous password blha123 New UNIX password: # new password foo123bar Retype new UNIX password: LDAP password information changed for bsmith passwd: all authentication tokens updated successfully. -bash-3.00$ passwd Changing password for user bsmith. Enter login(LDAP) password: # previous password foo123bar New UNIX password: # new password blha123 which was the password b4 foo123bar Retype new UNIX password: # which suggest password history does not work for command line LDAP password information changed for bsmith passwd: all authentication tokens updated successfully. In both cases above the "Password Syntax" section of the Subtree Password Policy was used. The "Password minimum length" was set to 10 which should have caused a failure above. Minimun required digit, alpha, uppercase and lowercase were all set to 1 which should have caused a failure on upper case in the examples above if I am understanding the usage correctly. I tried to change the password from the web interface and it does error out, but does not provide a descriptive error message. It is probalby something simple that I am leaving out, but I could not find the answers in the archives or in the documentation. Any help would be greatly appreciated. Setup: FC4 with fedora-ds-1.0.2-1.RHEL4.i386.opt.rpm installed. ************************************************************ /etc/ldap.conf pam_lookup_policy yes pam_password exop ssl no pam_password md5 host ds.example.com base dc=example,dc=com tls_cacertdir /etc/openldap/cacerts ************************************************************ -- Bracey Summers

1 0

[Fedora-directory-users] Password Policy Request/Response Control does not work
by Mike Jackson 06 Mar '06

06 Mar '06

Hi, Tested with 7.1.2 and 1.0.2, same result. The Password Policy Request/Response Control does not work. I have written code to test it, as well as tested it with an OpenLDAP 2.3 client tool which supports sending the control request and decoding the control response. The control request is sent to the server, but it is not returned to the client. I enabled the password syntax checking and then tried to change the password to one which would obviously fail. Example test: ldappasswd \ -a foobar \ -s foo \ -h directory.netauth.com \ -D "uid=jacksonm,ou=users,dc=netauth,dc=com" \ -x \ -Z \ -w foobar \ -e ppolicy Result: Constraint violation (19) Additional info: Failed to update password This is only the error from the modify password operation, but nothing from the password policy response. I expected a response equivalent to the corresponsong ASN schema: "passwordTooShort". Is this a bug, or are there some secret switches to toggle to get the password policy controls working? BR, -- Mike

2 1

[Fedora-directory-users] HELP: Error while start startconsole
by Alex aka Magobin 06 Mar '06

06 Mar '06

Hi, I've an error when I try to start console before an Express Installation, the error is not the same of FAQ and I 've correctly installed xorgx11-deprecated.so; It seems that don't find a method..... the error is: ./startconsole -u magobin -a http://ldap.example.com:55087 Warning: -ms8m not understood. Ignoring. Warning: -mx64m not understood. Ignoring. Exception in thread "main" java.lang.NoSuchMethodError: method com.netscape.management.client.util.RemoteImage.setImage was not found. at _Jv_ResolvePoolEntry(java.lang.Class, int) (/usr/lib/libgcj.so.5.0.0) at com.netscape.management.client.util.RemoteImage.RemoteImage(java.lang.String ) (Unknown Source) at com.netscape.management.nmclf.SuiLookAndFeel.initComponentDefaults(javax.swi ng.UIDefaults) (Unknown Source) at com.netscape.management.nmclf.SuiLookAndFeel.getDefaults() (Unknown Source) at javax.swing.UIManager.put(java.lang.Object, java.lang.Object) (/usr/lib/libgcj.so.5.0.0) at com.netscape.management.client.components.FontFactory.initializeLFFonts() (Unknown Source) at com.netscape.management.client.console.Console.common_init(java.lang.String) (Unknown Source) at com.netscape.management.client.console.Console.Console(java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String) (Unknown Source) at com.netscape.management.client.console.Console.main(java.lang.String[]) (Unknown Source) Any help is appreciated Thanks in advance Alex

2 2

[Fedora-directory-users] Source build failure on Solaris 10
by Graham Leggett 06 Mar '06

06 Mar '06

Hi all, When trying to use the automated dsbuild to try and build DS v1.0.2 on Solaris 10, I get an error with a patch that does not apply cleanly. Does anyone know what this patch is for, or how to get rid of it? bash-3.00# gmake [===== NOW BUILDING: ds-1.0.2 =====] [fetch] complete for ds. [checksum] complete for ds. [extract] complete for ds. [patch] complete for ds. ==> Building ds/mozilla as a dependency gmake[1]: Entering directory `/root/src/ldap/auto/dsbuild-fds102/ds/mozilla' [===== NOW BUILDING: mozilla- =====] [fetch] complete for mozilla. [checksum] complete for mozilla. ==> Extracting download/mozilla-components-1.0.2.tar.gz ==> Copying download/sysfdtable.patch ==> Copying download/sysfdtable2.patch [extract] complete for mozilla. install -d work/mozilla- cat download/sysfdtable.patch download/sysfdtable2.patch | ( cd work ; patch -p0 ) Looks like a unified context diff. Hunk #1 failed at line 159. 1 out of 1 hunks failed: saving rejects to mozilla/nsprpub/pr/include/obsolete/probslet.h.rej The next patch looks like a unified context diff. The next patch looks like a unified context diff. done gmake[1]: *** [post-patch] Error 1 gmake[1]: Leaving directory `/root/src/ldap/auto/dsbuild-fds102/ds/mozilla' gmake: *** [dep-../../ds/mozilla] Error 2 bash-3.00# less mozilla/nsprpub/pr/include/obsolete/probslet.h.rej mozilla/nsprpub/pr/include/obsolete/probslet.h.rej: No such file or directory Regards, Graham --

3 3

[Fedora-directory-users] FDS 1.0.2 and expiring passwords
by Goolsby, Daniel S (Daniel) 06 Mar '06

06 Mar '06

I have been able to use FDS with normal passwords, but have yet to figure out how to implement expiring passwords. I know that is part of just about any standard security policy. I currently have an ldap/Kerberos implementation in place, but would rather have it in one centralized gui'd location, for when I leave it would be easier to hand off-plus it looks cleaner and should work better. Daniel ______________________________________________________________________ This e-mail has been scanned by Verizon Managed Email Content Service, using Skeptic� technology powered by MessageLabs. For more information on Verizon Managed Email Content Service, visit http://www.verizonbusiness.com. ______________________________________________________________________

1 0

[Fedora-directory-users] PIN file for unattended SSL restarts
by Graham Leggett 06 Mar '06

06 Mar '06

Hi all, Does anybody know where the file should live containing the SSL key pin to enable an unattended restart of a server, and what that file should be called? There is a lot of conflicting info on this as found by Google, noen of which works :( Regards, Graham --

4 4

[Fedora-directory-users] Mini Howto: FDS v1.0.2 and Apache v2.2.0
by Graham Leggett 04 Mar '06

04 Mar '06

Hi all, I have had some success getting FDS v1.0.2 built against Apache v2.2.0 from RPM. To get this to work, do the following: - Download and install the latest (v1.2.2) of apr and apr-util, including the development packages. - Download the SRPM of httpd v2.2.0 and install it, or make your own SRPM by running rpmbuild -ts on the httpd-2.2.0.tar.gz file. - Edit the httpd.spec file to add mod_file_cache like so (this should be fixed in the next version of httpd): --enable-cache --enable-disk-cache --enable-file-cache --enable-mem-cache \ - Build the httpd RPM with rpmbuild -bb httpd.spec and install it. - Build FDS from here: http://directory.fedora.redhat.com/wiki/Building#One-Step_Build - Install the resultant FDS RPM, and run setup as normal. Regards, Graham --

1 0

[Fedora-directory-users] NumberFormatException from Fedora console
by Graham Leggett 04 Mar '06

04 Mar '06

Hi all, I am trying to connect to a v1.0.2 admin server via a v1.0.1 FDS console (still to be upgraded), and I am getting a NumberFormatException as described at: https://www.redhat.com/archives/fedora-directory-users/2005-December/msg004… I see no followups to this message, has anybody else encountered this problem, and if so, were there any fixes to it? Regards, Graham --

1 0

[Fedora-directory-users] Understand nsswitch.conf
by Mont Rothstein 04 Mar '06

04 Mar '06

I recently had a problem logging into the admin console because files was listed before dns on the hosts line of my nsswitch.conf file. It was hosts: files dns It now is hosts: dns files I understand that this line specifies the lookup order for host information. What I'd like to know is if this implies that something else is miss-configured on my system, or if this was the root problem? i.e. does FDS simply require that dns be listed first or should it have worked with files first? As far as I know files does a look up in /etc/hosts. My /etc/hosts has a single entry: 192.168.1.115 rheles4rs1.forayadams.foray.com rheles4rs1 Those are the correct IP, FQDN, and server name for my server. Any insight into this would be appreciated. Thanks, -Mont

2 1

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users March 2006