389-users September 2015

389-users@lists.fedoraproject.org

17 participants
19 discussions

Problem browsing LDAP with Outlook
by Chris Bryant 26 Aug '20

26 Aug '20

When configuring Microsoft Outlook (not Outlook Express) to access an LDAP directory, there is an option to 'Enable Browsing (requires server support)'. If this option is chosen and the directory server supports it, then you should be able to open the LDAP address book and page up and down through the results. I have been unable to get this working properly with 389 DS. When I try to browse from Outlook against the 389 DS directory, I am able to see the first page of results perfectly. However, if I move to the next page, only the first object returned will have any attributes included, and all of the rest of the objects in the page will have no attributes. I have a test perl script that duplicates this functionality as well. I can get this to work properly with an older version of Netscape Directory Server, and I can get it working with OpenDS. Since 389 DS advertises support for the controls that are required for this to work, just like the other two servers, then I would expect it to work there also. Has anyone out there gotten this to work with 389 DS? If so, can you share if there was anything special that you needed to do to get this to work? I'm trying to determine if this is a bug in the server, or if I'm just missing something in the configuration. Thanks, Chris USA.NET You Run Your Business. We'll Run Your Email. This message is for the sole use of the intended recipient(s) and may contain confidential and/or privileged information of USA.NET, Inc. Any unauthorized review, use, copying, disclosure, or distribution is prohibited. If you are not the intended recipient, please immediately contact the sender by reply email and delete all copies of the original message.

3 2

Announcing 389 Windows Console 1.1.15
by Noriko Hosoi 23 Feb '16

23 Feb '16

389 Windows Console 1.1.15 The 389 Directory Server team is proud to announce 389-console-win version 1.1.15. Windows installers are available to download from Download 389 Windows Console (32-bit) <http://www.port389.org/binaries/389-Console-1.1.15-i386.msi> and Download 389 Windows Console (64-bit) <http://www.port389.org/binaries/389-Console-1.1.15-x86_64.msi>. Highlights in 389-console-win-1.1.15 * Windows Console now has the same bug fixes and enhancements made for the Fedora 389-console. Installation and Upgrade See Download <http://www.port389.org/docs/389ds/download.html> for information about setting up your yum repositories. To install and update, use Programs and Features on Control Panel. Feedback We are very interested in your feedback! If you find a bug, or would like to see a new feature, file it in our Trac instance: https://fedorahosted.org/389 Detailed Changelogs Please refer 389-console-1.1.19, 389-admin-console-1.1.10 release notes <http://www.port389.org/docs/389ds/releases/release-console-1-1-9.html> and 389-ds-console-1.2.12 and idm-console-framework-1.1.14 release notes <http://www.port389.org/docs/389ds/releases/release-ds-console-1-2-12.html>. http://www.port389.org/docs/389ds/releases/release-windows-console-1-1-15.h…

2 2

Random dirsrv freezes and high CLOSE_WAITs
by Prashant Bapat 13 Oct '15

13 Oct '15

Hi, We have been using 389-ds as part of FreeIPA. In one of our environments, we have 2 389-ds installations with replication. Randomly, the 389-ds on either of them completely freezes and there are high number of CLOSE_WAITs on tcp/389 port. Only way to recover from this situation is to either reboot or "kill -9" the ns-slapd process. Graceful restarts get stuck indefinitely. One curious thing when this happens, a search using "ldapsearch" command seems to work but a search using a python-ldap client does not. FreeIPA does not work either. Any pointers on troubleshooting this would be appreciated. Thanks. --Prashant

4 9

Performance with macro acis
by Adrian Damian 01 Oct '15

01 Oct '15

Hi There, The scenario is simple: we have a subtree in the DIT with a few thousand children node. The parent node of the subtree has a few acis including a couple of macro acis that apply to each of the child nodes. We've observed a significant performance degradation when trying to list all the children in the presence of the macro acis. Profiling on the client code show that although the first few child nodes were fetched quite fast there is a clear delay buildup as the retrieval progresses. The buildup is not present when the macro acis are removed. Also, it is faster to split the list in chunks and retrieve them sequentially. Is it possible that as the macro acis are resolved they are added to the list of acis of the parent node so that the last nodes are evaluated against many more acis than the first ones and hence the observed delay in their retrieval? Is there a workaround for this? Thank you, Adrian

3 10

Expired Passwords still work on replica some replica consumers, not on others
by Ryan Langford 30 Sep '15

30 Sep '15

Hello, I have a curious situation with our LDAP ecosystem at work. I have 2 LDAP hosts in one data center (one is a replication supplier, one is a consumer) and 1 consumer host in a separate data center(DC-B). The issue is expired users can still successfully authenticate against the consumer host DC-B, even though LDAP shows that the password is expired. I've compiled outputs from each host into the following paste: https://paste.fedoraproject.org/273218/44362838/ We are using an old version of 389-ds (as you can see from the paste), version 1.2.9.9, and as far as I can tell (i'm a relative LDAP neophyte) our configuration and replication properties are as expected, but I'm not sure if there might be a permissions issue, some other issue, or a bug in the old version we're using. What else should I check next? Thanks, Ryan

2 2

Kerberos KDC
by Joshua Brodie 25 Sep '15

25 Sep '15

Hi All: On a large 389 implementation - where downtime is not an option - are there pros/cons to having the KDC on same server as 389 (sharing the database) - or having the KDC on separate, redundant, servers? Thanks.

2 1

can't recreate root suffix
by Chase Miller 22 Sep '15

22 Sep '15

Hello All, I deleted my root suffix, and now, in the admin console, I can't recreate the suffix, tells me it already exists. Any ideas what file I can go edit to clean up any orphaned references to it of it? I have recycled the server, I have done a restore from backup. cm

2 1

Ldap Virtual Account creation
by vinay garg 19 Sep '15

19 Sep '15

Dear Team, I have multiple domain in my scenario, for that i have configure virtual domain(vd). I require open-source web-console for creation user. 389-console is not sufficient. According to requirement, if i create any user for one domain, for other domain same should be create as i press submit button. Have their any solution.. -- *RegardsVinay Garg* *Keen & Able Comp. Pvt. ltd.* *9990770734*

1 0

performance indexes questions
by ghiureai 17 Sep '15

17 Sep '15

Hi Gurus, we are trying to understand are performance issues and start investigating the ACI's and indexes , I need to know if all "default indexes" showing in 389-console admin are necessary beside the one which we create for our application requirement : - there are a 1/2 dozen of default indexes which are were there with DS installation aka: mailalternateAddress, ntUserDomain, ntUserDomainid, seeAlso,numsubordinates etc... Can we just go an remove this indexes from DS ( using admin console?) , are they been used internally by database ? -Is there a way to export all indexes in ldif file same we are doing with ACI's , how? We are seeing running a ldapsearc cmd line for count of groups ( 7000 entries with memberOf plugin enabled) takes aprox 17-18 sec with server cfg fro multimaster replication and this is not acceptable by our users. we are running 389DS version with OS :Linux proc5-02 2.6.32-431.el6.x86_64 #1 SMP Thu Nov 21 13:35:52 CST 2013 x86_64 x86_64 x86_64 GNU/Linu 389-ds-1.2.2-1.el6.noarch 389-ds-base-libs-1.2.11.15-34.el6_5.x86_64 389-ds-console-doc-1.2.6-1.el6.noarch 389-ds-base-cadc-1.3.3.3-sl6_00.x86_64 389-dsgw-1.1.11-1.el6.x86_64 389-ds-console-1.2.6-1.el6.noarch 389-ds-base-1.2.11.15-34.el6_5.x86_64 Thank you Isabella

3 6

Recommended method to remove DB path?
by Striker Leggette 17 Sep '15

17 Sep '15

Greetings, What is the recommended way to remove a database with the following example path?: 5G /db/slapd-389/db/testentry Would it be simply stopping slapd, remove the path and start slapd? -- Striker

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users September 2015