389-users June 2014

389-users@lists.fedoraproject.org

27 participants
26 discussions

ldap_mod_del - replication issue when removing attribute

by Justin Edmands

Overview of our setup - Our webservers use the PHP plugin "ldap_mod_del" to execute ldap changes. - Our 389 servers are master-master - We are attempting to delete the displayName attribute from a user Run from webserver in PHP: - When performing a modify, everything works. changes are replicated to other masters. - When performing a delete, the delete is successful, yet the change is not replicated to the other master. Run from 389 Console and using "ldapmodify" on cmd line: - Modify - works - Delete - works Although I feel the ldap_mod_del plugin may have something to do with it, replication is replication. In this case the simple replication is not functioning when a node sees new data. Any ideas?

9 years, 11 months

1
0
0 / 0

password policy - user vs subtree

by Elizabeth Jones

I need some help understanding the difference between password policy for user versus subtree and where it needs to be set. Using the 389 console gui, I see that I can set the password policy under the configuration tab in the data section. I am thinking this creates a global policy? - but this did not lock out my test account after I told it to lock out after 5 failed password attempts. So I went to the directory tab, and on the subtree where my test account is located, used the subtree option to set the same password and lockout policy that I set under configuration tab. -- same result, my test account did not lock out. So then in the same directory tab subtree, I tried the user option, and same old same old - no lock out. Can anyone point me to where I am going wrong? If I go to my actual user account, I can lock myself out that way but that will get pretty old for 2000 users. thanks EJ

9 years, 11 months

1
0
0 / 0

Sync from multiple Active Directories and 389 Directory Server

by Artur Oliveira

I have an environment with multiple Active Directories Forests and several UNIX client machines I have another LDAP Directory to authenticate UNIX users. The problem with this implementation is that the users used and passwords used to authenticate in WIndows and Unix machines are different. My idea is to use the Active Directories as main repositories for users and passwords. I want to enable users of Active Directories to login in the UNIX client machines (Solaris, Linux and AIX) using their regular windows users and passwords. I have a requirement to have the UIDs and GIDs of UNIX users consistent across all UNIX machines. I am considering the use of 389 Directory Server to create a unique directory with the users from both Active Directories and configure all the Unix clients to use this directory. I found several references to synchronisation between 389 Directory Server and Active Directory however i found no reference to a configuration with multiple Active Directories. Is this possible ?? Does someone have some kind of suggestion to accomplish this goal ? Thanks in advance Artur

9 years, 11 months

2
1
0 / 0

slapd process is hang

by G, Rajendra Babu (STSD campus)

Hi All, I am using 389 directory server 1.2.11.21 and I have noticed following error message in the error log and slapd process is stop responding in the mulrtimaster environment. Kindly let me know this fix got fixed in any releases, if yes please provide me the bug /url . Error log message: repl5_tot_create_async_result_thread failed. Netscape Portable Runtime error -5974 (Insufficient system resources.) repl5_inc_run: repl5_tot_create_async_result_thread failed; error - -1 Thanks in Advance, Regards, Rajendra

10 years

2
1
0 / 0

password policy doesn't work after few minutes

by Stella LE LOC'H

I'm trying to set up password policy on my ldap 389DS infrastructure which is in a mutilple master Replicated Environment I have enabled password policy trough 389DS console. At frist, I just want to turn on the syntax check (passwordchecksyntax entry) of a user password on a subtree. It works properly and after a few seconds it does not work. Sometimes, I have this message in error log. [19/May/2014:14:10:54 +0200] - Skipping CoS Definition cn=nsPwPolicy_CoS,ou=IR44,ou=Recouvrement,dc=recouv--no CoS Templates found, which should be added before the CoS Definition. [20/May/2014:14:30:25 +0200] - cos_cache_query_attr: failed to normalize dn ou=Org,ou=People,ou=IR44,ou=Recouvrement,dc=recouv. Processing the pre normalized dn. I found some posts about this error but no response. Version : CentOS release 5.5 (Final) 389DS 1.2.8.3 Console 1.1.5 Thank you for your answer and help.

10 years

1
0
0 / 0

need stable version info

by G, Rajendra Babu (STSD campus)

Hi Nhosoi, Need your help: I would like to take 389-ds-base-1.2.11.29 code base for my environment. Kindly let me know "389-ds-base-1.2.11.29" code base is stable version or not. If not , kindly let me know the stable version under 1.2.11 code base. Need correction at 389 web page: I have noticed , under 389 Directory Server 1.2.11 (http://directory.fedoraproject.org/wiki/Source) the adminutil component is available to download 389-adminutil-1.1.15.tar.bz2<http://port389.org/sources/389-adminutil-1.1.14.tar.bz2>, but when I tied to download, it is downloading 389-adminutil-1.1.14.tar.bz2<http://port389.org/sources/389-adminutil-1.1.14.tar.bz2> version instead of 389-adminutil-1.1.15.tar.bz2<http://port389.org/sources/389-adminutil-1.1.14.tar.bz2>. please let me know what version of admintul should I download for 389 Directory Server 1.2.11 codebase. Thanks in Advance, Best Regards, Rajendra

10 years

1
0
0 / 0

← Newer
1
2
3
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users June 2014