389-users September 2007

389-users@lists.fedoraproject.org

63 participants
46 discussions

RE: [Fedora-directory-users] Debian client to FDS howto
by Howard Chu 14 Sep '07

14 Sep '07

> Date: Fri, 14 Sep 2007 15:27:01 +1200 > From: "Steven Jones" <Steven.Jones(a)vuw.ac.nz> > Cool....nothing like an explanation of why not to do things. > > Of course lacking any documentation at all....I'm left with > experimentation. If you're lacking documentation, perhaps you should complain to your distro packager. On my system (OpenSUSE) I see: viola:~/OD/hobj/tests> man pam_ldap Reformatting pam_ldap(5), please wait... viola:~/OD/hobj/tests> man nss_ldap Reformatting nss_ldap(5), please wait... viola:~/OD/hobj/tests> man ldap.conf Reformatting ldap.conf(5), please wait... ... -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

2 1

[Fedora-directory-users] Directory Server capabilities
by Clowser, Jeff 14 Sep '07

14 Sep '07

I have a question about capabilities in the Fedora/RH Directory server: First, can it do dynamic groups as Novell eDirectory does (or is there any effort to add this): http://support.novell.com/techcenter/articles/ana20020405.html Basically, it's similar to the groupofURL's that is supported by the RH/Sun directory server, but when the group is retrieved, dn's for entries that match the ldap url dynamic criteria is returned added to the uniquemember attribute, and you can do searches/compares on the uniquemember attribute that includes dynamic members. I realise there are some significant performance considerations with this, but for modest use, it would really be useful. (FWIW, I asked a similar question when FDS first was released, but didn't have another product to point to as a comparable implementation at the time. Haven't looked at FDS for a while, so I'm hoping some things might have changed :) ) Second, can it log to syslog (or some centralized logging facility), rather than local files? I run a load balanced cluster with ~20 Sun Directory server machines in it, and troubleshooting things in access/error logs is a real pain because I have to look at 20 machines to find which server the connection went to so I can find the correct log entries to find out what's going on. Has RH added other options to logging to log to syslog-ng, etc so that we can create one consolidated set of logs? Thanks, - Jeff

1 0

re: [Fedora-directory-users] Debian client to FDS howto
by Howard Chu 13 Sep '07

13 Sep '07

> Date: Fri, 14 Sep 2007 08:45:01 +1200 > From: "Steven Jones" <Steven.Jones(a)vuw.ac.nz> > I have written the below, if it is helpful/correct by all means place it > on FDS wiki. > > > Debian client setup > > Important notes > > There would seem to be at least 2 places (if not three) containing > information for ldap. In order to make Debian 4 work I have deleted 2 > and sym linked. It is possible on patching Debian that these files maybe > restored and LDAP authentication will no longer work. Never symlink the pam/nss_ldap config files with the OpenLDAP libldap config file. There's a reason all of these things are in separate config files - they each have distinct syntaxes. You don't know what you're doing, and you have no guarantees that any particular version of a given library won't barf all over the keywords it doesn't recognize. > There may well be an official method to setup Debian but I have not been > able to locate one via Google. -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

2 1

[Fedora-directory-users] Fedora DS 1.0.4 build on Solaris 10?
by Scott Ding 13 Sep '07

13 Sep '07

Has anyone built Fedora DS 1.0.4 on Solaris 10 (SPARC 32bit)?

3 6

Re: [Fedora-directory-users] FDS schema
by Matthias Dieter Wallnöfer 13 Sep '07

13 Sep '07

> No. The obsolete schema will be gone with the next release. It's > already been removed from CVS HEAD. But if I look in the HEAD branch (http://cvs.fedora.redhat.com/viewcvs/?root=dirsec&only_with_tag=HEAD <http://cvs.fedora.redhat.com/viewcvs/?root=dirsec&only_with_tag=HEAD>) and change to ldapserver/ldap/schema (http://cvs.fedora.redhat.com/viewcvs/ldapserver/ldap/schema/?root=dirsec&on… <http://cvs.fedora.redhat.com/viewcvs/ldapserver/ldap/schema/?root=dirsec&on…>) I see them again. Is this alright? Matthias

2 1

RE: [Fedora-directory-users] Fedora DS 1.0.4 build on Solaris 10?
by Scott Ding 12 Sep '07

12 Sep '07

I got the FDS installed on Solaris 10 by calling ds_newinst.pl with a inf file. However, when I tried to start the FDS, I got the following error. It looks like I did not set up SSL correctly. Can anyone help? [11/Sep/2007:16:05:13 -0700] - SSL alert: Security Initialization: NSS initialization failed (Netscape Portable Runtime error -8174 - security library: bad database.): path: /home/dings/fds/alias/, certdb prefix: slapd-lsctsol06-, keydb prefix: slapd-lsctsol06-. [11/Sep/2007:16:05:13 -0700] - ERROR: NSS Initialization Failed. -----Original Message----- From: Scott Ding Sent: Tuesday, September 11, 2007 2:50 PM To: General discussion list for the Fedora Directory server project. Subject: RE: [Fedora-directory-users] Fedora DS 1.0.4 build on Solaris 10? Rob, We got the FDS compiled on Solaris 10 with NET-SNMP 5.4.1. The compiled result contains the following files: LICENSE.txt README.txt disktune slapd.tar.gz After I untar slapd.tar.gz, I got the following: alias manual shared bin - slapd - admin - server - install - property -lib lib plugins I checked the Installation Guide. The instructions are based on RedHat. Are there any installation instructions based on Solaris? Regards, Scott -----Original Message----- From: fedora-directory-users-bounces(a)redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Rob Crittenden Sent: Tuesday, September 11, 2007 7:25 AM To: General discussion list for the Fedora Directory server project. Subject: Re: [Fedora-directory-users] Fedora DS 1.0.4 build on Solaris 10? Scott Ding wrote: > Has anyone built Fedora DS 1.0.4 on Solaris 10 (SPARC 32bit)? > In theory this should work ok. I spent a little time many months ago to try to build it on Solaris 10 x86 and nearly got there before running out of time and I never got back to it because I needed to reclaim the disk space :-( I would recommend the manual build process defined at http://directory.fedoraproject.org/wiki/Building . I would avoid the "one-step build" because I suspect this is going to be very iterative and while the auto-fetching is nice developing in that environment just adds another layer of pain. It is possible to build on Solaris with gcc, the trick is figuring out the magic to tell the various components to use it. I think things like NSS, NSPR and FDS itself use the env variable NS_USE_GCC. Set that to 1 and give it a go. There may be other tweaks required. And note that the manual instructions just cover the server itself. For console, the plugins, etc there is more to do. rob

4 8

[Fedora-directory-users] FDS crash - happened after adding views
by Dave Augustus 12 Sep '07

12 Sep '07

Hello all, On Centos 5 x86_64, we have fedora-ds-1.0.4-1.FC6.x86_64 installed. We are in the painful process of migrating from OpenLDAP to FDS. After adding around 40 views. The server crashed and won't restart. Running slapd-server -d 1 provides no clues until the last statement: [11/Sep/2007:16:42:33 -0500] views-plugin - <-- views_cache_build_view_list ./start-slapd: line 33: 14540 Segmentation fault ./ns-slapd - D /opt/fedora-ds/slapd-ldap1-server1 -i /opt/fedora-ds/slapd-ldap1- server1/logs/pid -w $STARTPIDFILE "$@" Is there a limit to views? The changelog shows that it has been around for awhile. How do I recover? I have an ldif export but if I import the data with these views will I run into the same problems? Thanks, Dave

2 4

[Fedora-directory-users] FDS schema
by Matthias Dieter Wallnöfer 12 Sep '07

12 Sep '07

Hi all! On a FDS installation I notice many installed schema files that are used by the old Netscape or SUN enterprise services (50ns-*). I think they aren't necessary for many environments and shouldn't be installed by default anymore. For the next release I would propose an advanced option for this issue. Would this be possible or is there a special reason for keeping them? Matthias

2 1

[Fedora-directory-users] Active directory users sync with Fedora DS
by Peter Santiago 10 Sep '07

10 Sep '07

Hi everyone, Among the features of Fedora DS that interest me is the Active Directory user and group synchronization. However I still haven't found any documentation that could help in making use of this feature. Can someone point out how to implement this especially syncing users from ADS to a newly installed FDS. Thanks, -- Peter Santiago peters(a)psinergybbs.com My website: www.psinergybbs.com My spamtrap address: r34987y(a)psinergybbs.com ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

3 2

[Fedora-directory-users] MMR: Directory updates on same object
by Reinhard Nappert 07 Sep '07

07 Sep '07

I have a working Multi-Master Replication setup with two masters (Fedora Directory Server 1.0.4). The setup works fine as long as I do not update the same object via both Masters. When the later happens (application driven), one of the Master crashes. This server does not generate a core dump, nor can I find any unusual in the access and error log files. I am pretty sure that it has to do something with the conflict resolution, but I am stuck now. Did anybody experience a similar behavior? Thanks, -Reinhard

2 7

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users September 2007