May 2007 - 389-users - Fedora Mailing-Lists

RE: [Fedora-directory-users] Restore Master LDAP Server fromSecondary???

by HAWKER, Dan 2 (external)

> > I'd do it using LDIF dumps taken with db2ldif on the slave. > Restore is done with ldif2db on the master host. Then check > errors logs to see if you need to reinitialize replication or > recreate your changelog. > > Cmd-line scripts doc is at: > http://www.redhat.com/docs/manuals/dir-server/cli/scripts.htm# pgfId-18294 Thanks for the tips/info. Have tried it on a VMware test fds box to test, and it seems to work fine. Thanks again Dan -- Dan Hawker Linux System Administrator Astrium http://www.astrium.eads.net -- This email (including any attachments) may contain confidential and/or privileged information or information otherwise protected from disclosure. If you are not the intended recipient, please notify the sender immediately, do not copy this message or any attachments and do not use it for any purpose or disclose its content to any person, but delete this message and any attachments from your system. Astrium disclaims any and all liability if this email transmission was virus corrupted, altered or falsified. --------------------------------------------------------------------- Astrium Limited, Registered in England and Wales No. 2449259 Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS, England

17 years

1
0
0 / 0

RE: [Fedora-directory-users] Restore Master LDAP ServerfromSecondary???

by HAWKER, Dan 2 (external)

> > I've done this before -- you can go into the server's > replication settings and set it to be a master, and then > initialize the consumer to re-replicate. Works fine. > Cool, thanks for the heads up, will give it a go when it gets a bit quiet here later on :) (plus after I've backed up my data again too :) Dan -- Dan Hawker Linux System Administrator Astrium http://www.astrium.eads.net -- This email (including any attachments) may contain confidential and/or privileged information or information otherwise protected from disclosure. If you are not the intended recipient, please notify the sender immediately, do not copy this message or any attachments and do not use it for any purpose or disclose its content to any person, but delete this message and any attachments from your system. Astrium disclaims any and all liability if this email transmission was virus corrupted, altered or falsified. --------------------------------------------------------------------- Astrium Limited, Registered in England and Wales No. 2449259 Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS, England

17 years

1
0
0 / 0

[Fedora-directory-users] view aci attributes as default behavior

by Stipl, Stepan

Hi, is it possible to set Fedora DS to return also aci (access control instruction) attributes as default behavior? I would like to see also aci attributes (if present) when browsing LDAP directory with some ldap browser. Thanks. .stepan

17 years

2
1
0 / 0

[Fedora-directory-users] Restore Master LDAP Server from Secondary???

by HAWKER, Dan 2 (external)

Hi All, I've been happily running FDS (v1.02) for about a year, all fairly good. I have it configured with a Single Master and one backup/slave server. Unfortunately after a series of nasty power failures last weekend, the master is no longer working as expected and after using verify-bd.pl it seems the database(s) are corrupted. I have a backup (on tape), however I was wondering if I could use the still working (why my users can still auth OK) secondary as a means of re-populating the master again. For instance, can I *upgrade* the slave to a master, and then replicate to the *old* master (once I have reinstalled/rebuilt it). Or maybe simply dump the slaves data to LDIF and then re-import into the *old* master. Does that make any sense??? Just wondered if there was a quick way of using the secondary to accomplish this, before I start sifting through tapes... TIA Dan -- Dan Hawker Linux System Administrator Astrium http://www.astrium.eads.net -- This email (including any attachments) may contain confidential and/or privileged information or information otherwise protected from disclosure. If you are not the intended recipient, please notify the sender immediately, do not copy this message or any attachments and do not use it for any purpose or disclose its content to any person, but delete this message and any attachments from your system. Astrium disclaims any and all liability if this email transmission was virus corrupted, altered or falsified. --------------------------------------------------------------------- Astrium Limited, Registered in England and Wales No. 2449259 Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS, England

17 years

3
2
0 / 0

[Fedora-directory-users] Automatically inactivate accounts after a certain time or on a certain date?

by Philip Kime

It looks like this isn't possible at the moment as this plug-in seems to still be in development: http://directory.fedoraproject.org/wiki/Account_Policy_Design Or is there a neat way with roles? It seems tricky, even with a filtered role. PK -- Philip Kime NOPS Systems Architect 310 401 0407

17 years

3
3
0 / 0

[Fedora-directory-users] Can't contact LDAP server during sync

by Luigi Santangelo

Hi all, I'm Luigi In my Fedora Server, I installed the Directory Server (I'm using fedora-ds-1.0.2-FC5). In my Windows 2000 Server, instead, I installed Password Sync, that it works fine. In fact, If I modify an user's password, the password is changed in Fedora server too (only if the user is created in Fedora Server too). I can see the Windows' LDAP tree with the ldp client ( or other LDAP client) using 389 and 636 ports. In the Configuration tab (Directory Server), Replication -> userRoot node, I created new Windows Sync Agreement for my Windows 2000 Server, using port 636. I completed the wizard with no errors. But when I right- click into sync and I initiate full re-syncronization, this error appaers: "The consumer initialization has unsuccesfully completed. The error received by the replica is: '81 - LDAP error: Can't contact LDAP server'". I try to connect it to my server using 389 port, and only the Windows Groups are been synchronized (in the Fedora Directory I see only Windows Groups and no user). Must I install the certificates into Fedora Administrator Server too ? (actually I installed the certs only in Fedora Directory Server). In Windows 2000 server, I only installed the CA's certificate that I installed in Fedora-ds. Must I do other setting in Windows 2000 Server or in Fedora Directory Server? help me, please. Thanks all. Luigi Naviga e telefona senza limiti con Tiscali Scopri le promozioni Tiscali adsl: navighi e telefoni senza canone Telecom http://abbonati.tiscali.it/adsl/

17 years

1
0
0 / 0

[Fedora-directory-users] NIS to LDAP (N2L) service?

by Ray Van Dolson

Hello all, my company is currently considering moving from NIS to LDAP. I've begun this project using Sun's Directory Server (Sun One or Sun Java One whatever it's called these days). Their NIS server has a useful feature in that one can leave the NIS daemons running and configure them to use your LDAP store as their backend. This would be perfect for us as our network contains many old Unix hosts that cannot do LDAP and will need to rely on legacy NIS for some time. However, we'd like to be able to enjoy the other benefits that LDAP offers and migrate the rest of the clients at a more leisurely pace. You can see details on Sun's N2L setup here: http://docs.sun.com/app/docs/doc/816-4556/6maort2tt?a=view Now, I realize that this may be out of the scope of the FDS project, but I thought someone here surely must have needed to do the same thing. Any suggestions? I guess I could potentially use Sun's N2L setup against a FDS back-end... Thanks in advance... Ray

17 years

5
5
0 / 0

[Fedora-directory-users] Admin console configuration authentication errors

by Frazier, Darrell USA CRC (Contractor)

I have set up RHDS on RHEL4U5. Install went fine. In attempting to install SSL certs, I get the following when going to the Admin server --> Console --> Security --> Manage Certificates: HttpException: Response: HTTP/1.1 401 Unauthorized Status: 401 URL: http://myldapserver:388/admin-serv/tasks/configuration/SecurityOp >From the admin server error log: [21/May/2007:17:17:58] security (28307): for host myldapserver trying to GET /admin-serv/tasks/operation/StatusPing, basic-ncsa reports: user cn=admin-serv-myldapserver, cn=Red Hat Administration Server, cn=Server Group, cn=myldapserver, ou=army.mil, o=NetscapeRoot does not exist in pwfile /opt/redhat-ds/admin-serv/config/admpw I have changed the nsAdminAccessAddresses to * so I am at a loss as to why I am getting these errors. Thanx much in advance for your help!! Darrell J. Frazier Unix System Administrator Contractor - Westar Aerospace and Defense Group CAUTION: This electronic transmission may contain information protected by deliberative process or other privilege, which is protected from disclosure under the Freedom of Information Act, 5 U.S.C. § 552. The information is intended for the use of the individual or agency to which it was sent. If you are not the intended recipient, be aware that any disclosure, distribution or use of the contents of this information is prohibited. Do not release outside of DoD channels without prior authorization from the sender. The sender provides no assurance as to the integrity of the content of this electronic transmission after it has been sent and received by the intended email recipient.

17 years

1
0
0 / 0

[Fedora-directory-users] slapd password

by Gregory P. Ennis

I ma trying to install fedora-ds and am having some beginner problems. The installation was accomplished on a Fedora 5 system from an rpm download off of the fedora-ds site. I originally used a yum install but could not get anything to work so I did a yum remove before I did an rpm install. The setup script seemed to work ok, and now I am trying to load a *.ldif file without success. I do not have a gui on this machine so command line entry is necessary. The command I am using to enter the data is : ldapmodify -a -D cn=Directory Manager,dc=example,dc=com -W -f newdat.ldif The response I am getting is : ldap_sasl_interactive_bind_s: Unknown authentication method (-6) additional info: SASL(-4): no mechanism available: I thought perhaps I memorized the password wrong, but could not find config file that the password is stored. Sorry for the beginner question. Any help would be appreciated. Greg Ennis

17 years

2
9
0 / 0

[Fedora-directory-users] Uninstall/Reinstall ?

by clockwork＠sigsys.org

So I have a problem, actually I have several problems however they are all based around one thing. Replication. I have a single master setup, I am trying to add a read only replica with ssl. I did some work on this a while back, however like most things that get left and returned to after some time has passed the mostly finished result has left me wanting to start over. I run the uninstall script, but that doesnt work. I re-install the rpm and rerun the setup script, however now I am stuck. In the console (gui java thing) under this host I have 2 instances of "Directory Server" and 2 instances of "Administration Server" the administration server's both appear "down" and on the wrong port (which I cannot change ?!). How do I remove the stuff from the console and start over ? Also, I'll raise this issue again ... are there any good (quick, not 500 pages, and not 2 paragraphs of "you will see this") documentation sources out there on FDS/RDS ? The redhat docs are long and read horribly since most of the pages are just links to other pages, which are more links to other pages. I have not yet found a good guide on single master multi slave setups for FDS/RDS. If any such guide exists please let me know.

17 years

2
1
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users May 2007