389-users February 2010

389-users@lists.fedoraproject.org

40 participants
48 discussions

Multiple LDAP servers - how do you load balance?
by Sean Carolan 07 Feb '10

07 Feb '10

For those of you with multiple servers that use replication, how do you do your load balancing and failover? DNS round robin? Some kind of hardware load balancer like a Netscaler or BigIP F5?

3 2

Crash with segmentation fault after a database reinitialization
by Francesco Fiore 05 Feb '10

05 Feb '10

Hi, I've two directory server in multimaster configuration. I've to reinitialize all databases on 2 nd server (B) using the data of the 1st (A). After the synchronization, server B crash with an segmentation fault. There isn't any relevant message in the error log. If I restart the directory server B, I've the same error. The directory server version is 1.1.3 on Redhat5. I attach the tails of the error log and the /var/log/messages log. [03/Feb/2010:19:20:53 +0100] - import Addressbook2: Workers finished; cleaning up... [03/Feb/2010:19:21:13 +0100] - import Addressbook1: Workers finished; cleaning up... [03/Feb/2010:19:21:13 +0100] - import Addressbook2: Workers cleaned up. [03/Feb/2010:19:21:13 +0100] - import Addressbook2: Indexing complete. Post-processing... [03/Feb/2010:19:21:13 +0100] - import Addressbook1: Workers cleaned up. [03/Feb/2010:19:21:13 +0100] - import Addressbook1: Indexing complete. Post-processing... [03/Feb/2010:19:21:50 +0100] - import Addressbook2: Flushing caches... [03/Feb/2010:19:22:27 +0100] - import Addressbook1: Flushing caches... [03/Feb/2010:19:22:27 +0100] - import Addressbook2: Closing files... [03/Feb/2010:19:22:27 +0100] - import Addressbook1: Closing files... [03/Feb/2010:19:32:27 +0100] - import Addressbook2: Import complete. Processed 3820687 entries in 4957 seconds. (770.77 entries/sec) [03/Feb/2010:19:32:28 +0100] NSMMReplicationPlugin - multimaster_be_state_change: replica o=addressbook2 is coming online; enabling replication [03/Feb/2010:19:32:29 +0100] - import Addressbook1: Import complete. Processed 3820339 entries in 4960 seconds. (770.23 entries/sec) [03/Feb/2010:19:32:29 +0100] NSMMReplicationPlugin - multimaster_be_state_change: replica o=addressbook1 is coming online; enabling replication [03/Feb/2010:19:32:29 +0100] NSMMReplicationPlugin - replica_reload_ruv: Warning: new data for replica o=addressbook1 does not match the data in the changelog. Recreating the changelog file. This could affect replication with replica's consumers in which case the consumers should be reinitialized. Feb 3 19:32:35 mmt-l-al19 kernel: ns-slapd[5575]: segfault at 0000000000000000 rip 000000364fa79140 rsp 0000000056bd3b18 error 4 Have you any idea? Thanks -- Francesco Fiore System Integrator Babel S.r.l. - http://www.babel.it P.zza S.Benedetto da Norcia, 33 - 00040 Pomezia (Roma) CONFIDENZIALE: Questo messaggio ed i suoi allegati sono di carattere confidenziale per i destinatari in indirizzo. Se hai ricevuto questo messaggio per errore sei invitato cortesemente a rispondere immediatamente al mittente e cancellare tutti i suoi contenuti.

4 5

Re: [389-users] Can the authconfig command line tool create home directories?
by Edward Capriolo 04 Feb '10

04 Feb '10

On Thu, Feb 4, 2010 at 5:13 PM, Andrew Commons <andrew.commons(a)bigpond.com> wrote: > Edward Capriolo wrote: > >> Andrew, I have worked with this before. The problem is the home >> directory is done with/by the pam mk_homdir module. > >> 1) You might be missing this module >> 2) some daemons SMB, XWindows do not have a pam.d stack correctly to >> include this module. If your login is via SSH check that you >> /etc/pam.d/ssh includes the mk_home_dir in your stack > > Edward, thanks for that suggestion. I'll investigate further but I don't > think it's the problem. If I just create the user in the 389 directory and I > have "Create home directories on the first login" enabled then the Home > directory _is_ created at first login but Gnome then goes pear-shaped after > that and the directory does not get populated with all the Gnome-related > bits required for the desktop to function. This results in an account that > can authenticate correctly but cannot get past the login screen. > > I'm assuming that creating the Home directory is what pam_mk_homdir is all > about and that after that it's up to whatever desktop display manager you > are using to fill in the gaps. > > Cheers, > Andrew > > -- > 389 users mailing list > 389-users(a)lists.fedoraproject.org > https://admin.fedoraproject.org/mailman/listinfo/389-users > Interesting. If the files that gnome is supposed to create are identical for ALL users then could try to update /etc/skel. The contents of /etc/skel should be copied on user creation. (maybe the homedir module has a switch to turn that on/off)

1 0

Re: [389-users] Can the authconfig command line tool create home directories?
by Andrew Commons 04 Feb '10

04 Feb '10

Edward Capriolo wrote: > Andrew, I have worked with this before. The problem is the home > directory is done with/by the pam mk_homdir module. > 1) You might be missing this module > 2) some daemons SMB, XWindows do not have a pam.d stack correctly to > include this module. If your login is via SSH check that you > /etc/pam.d/ssh includes the mk_home_dir in your stack Edward, thanks for that suggestion. I'll investigate further but I don't think it's the problem. If I just create the user in the 389 directory and I have "Create home directories on the first login" enabled then the Home directory _is_ created at first login but Gnome then goes pear-shaped after that and the directory does not get populated with all the Gnome-related bits required for the desktop to function. This results in an account that can authenticate correctly but cannot get past the login screen. I'm assuming that creating the Home directory is what pam_mk_homdir is all about and that after that it's up to whatever desktop display manager you are using to fill in the gaps. Cheers, Andrew

1 0

Re: [389-users] Can the authconfig command line tool create home directories?
by Edward Capriolo 04 Feb '10

04 Feb '10

On Thu, Feb 4, 2010 at 4:06 PM, Andrew Commons <andrew.commons(a)bigpond.com> wrote: > Tom Lanyon wrote: > >> Hi Andrew, >> >> On 04/02/2010, at 10:58 PM, Andrew Commons wrote: >> >>> (1) Create the user normally on the system. >> >> Can you define 'normally' ? >> >> Regards, >> Tom > > Tom, > > I'm using System->Administration->Users & Groups -- aka > /usr/bin/system-config-users (this is F11). > > In the "Create New User" dialogue I add values for User Name, Full Name and > the password and select a Login Shell. I make sure "Create home directory" > is checked and I (at present) check "Create a private group for the user". I > also specify the user ID and group ID manually. > > After I have created the user I then login to that user locally and then > logout. This creates the Home Directory and also populates it with all the > required Gnome bits (I'm using the Fedora default desktop). > > After logging out I then go back into system-config-users and remove the > users making sure I deselect the option to remove the Home and Mail > directories. > > I now go into the 389 console and add the user into the directory using > values identical to those I'd used in the original local user create. > > In System->Administration->Authentication I have (obviously) enabled LDAP > for User Information and for Authentication. Under Options I have the (I > think default) settings of "Use Shadow Password", "Local authorization is > sufficient for local users", and "Create home directories on the first > login" checked. > > > Cheers, > Andrew > > > -- > 389 users mailing list > 389-users(a)lists.fedoraproject.org > https://admin.fedoraproject.org/mailman/listinfo/389-users > Andrew, I have worked with this before. The problem is the home directory is done with/by the pam mk_homdir module. 1) You might be missing this module 2) some daemons SMB, XWindows do not have a pam.d stack correctly to include this module. If your login is via SSH check that you /etc/pam.d/ssh includes the mk_home_dir in your stack

1 0

Can the authconfig command line tool create home directories?
by Andrew Commons 04 Feb '10

04 Feb '10

Tom Lanyon wrote: > Hi Andrew, > > On 04/02/2010, at 10:58 PM, Andrew Commons wrote: > >> (1) Create the user normally on the system. > > Can you define 'normally' ? > > Regards, > Tom Tom, I'm using System->Administration->Users & Groups -- aka /usr/bin/system-config-users (this is F11). In the "Create New User" dialogue I add values for User Name, Full Name and the password and select a Login Shell. I make sure "Create home directory" is checked and I (at present) check "Create a private group for the user". I also specify the user ID and group ID manually. After I have created the user I then login to that user locally and then logout. This creates the Home Directory and also populates it with all the required Gnome bits (I'm using the Fedora default desktop). After logging out I then go back into system-config-users and remove the users making sure I deselect the option to remove the Home and Mail directories. I now go into the 389 console and add the user into the directory using values identical to those I'd used in the original local user create. In System->Administration->Authentication I have (obviously) enabled LDAP for User Information and for Authentication. Under Options I have the (I think default) settings of "Use Shadow Password", "Local authorization is sufficient for local users", and "Create home directories on the first login" checked. Cheers, Andrew

1 0

How to use existing SSL cert?
by Sean Carolan 04 Feb '10

04 Feb '10

Hi folks: We already have a wildcard certificate that I want to use with our 389 directory server. I have installed our CA certificate, but when I get to installing our wildcard cert the GUI is asking for a password to access the token. Is there no way to install our private key using the GUI? If not can it be done some other way? I'm not keen on purchasing an entirely new certificate when we already have one... Thanks Sean

2 16

version 1.2.5 is not available?
by Peter Schmidt 04 Feb '10

04 Feb '10

I see 389-ds-base 1.2.4 in the epel repo and 1.2.6 in the epel-testing repo. I'm wondering where one can find 1.2.5 Thanks.. peter

3 3

Can the authconfig command line tool create home directories?
by Sean Carolan 04 Feb '10

04 Feb '10

The gui tool has an option for creating home directories for new users. Can the command line authconfig do this?

3 5

Can the authconfig command line tool create home directories?
by Andrew Commons 04 Feb '10

04 Feb '10

My experience has been that for users defined in the directory the home directory is created on first login and then Gnome fails miserably in its attempt to populate said home directory resulting in a failed session and a return to the login prompt. I have a post on this being studiously ignored in the Fedora users list. My workaround, at present, is as follows: (1) Create the user normally on the system. (2) Login to the user and immediately log out. (3) Remove the user from the system making sure I do not remove the home and mail directories. (4) Add the user into LDAP using the same username, UID and GID and home directory as the temporary system user. The login now works. I would be delighted if a better way of doing this could be suggested! Cheers, Andrew

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users February 2010