[Fedora-directory-users] Re: Fedora-directory-users Digest, Vol 7, Issue 6
by Howard Chu
>
> From: David Boreham <david_list(a)boreham.org>
>> > This "just now considering" is wrong. The OpenLDAP code has supported
>> > multi-master replication and in-tree access control since 1999, very
>> > shortly after the Project began.
>>
>
> Howard, this sounds interesting. I wonder if you would mind pointing me
> at the MMR code
> in the source tree ? I've looked for it a few times without success.
>
It's easy to miss - check for SLAPD_MULTIMASTER in the code. The
configure switch to enable it was removed a long time ago, so you need
to manually #define it.
--
-- Howard Chu
Chief Architect, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc
OpenLDAP Core Team http://www.openldap.org/project/
18 years, 4 months
[Fedora-directory-users] Printer Objects
by Márcio Oliveira
Hi there!
How can I add a printer object in the directory server? I was looking
for this type of object in RHDS / FDS schemas but didn't found it...
Thanks.
MO
18 years, 4 months
[Fedora-directory-users] Winsync Problem with NT4
by Hartmut Wöhrle
Hello Everyone,
it seems as if everyone is syncing with AD but not with an NT PDC.... except
of me.
I have a Problem while setting up a connection:
I set up winsync at the PDC (not passwordsync up till now) and I try to
initiate a first init-replication. Then nothing happens and the FDS says
"Loop detected"
But at the PDC side I see an entry in the usersync.log with tells me, which
"uid=...." I'm using to connect.
Maybe it is because I used the wrong password at the first try (PDC side)? I
read in the manual that
"After the service is installed and started the first time the password can
only be changed via an LDAP modify operation, not the configuration file."
Ldapmodify - where?? PDC or FDS side?
But I'm not able to find the place where this PDC information would be stored
in the FDS - so I guess ldapmodify at the PDC?
Or is uninstall and re-install the only chance to fix it?
See U
Hartmut
--
===========================================
Hartmut Woehrle
EMail: hartmut.woehrle(a)mail.pcom.de
18 years, 4 months
[Fedora-directory-users] Calendar server
by Jeff Clowser
I know this is somewhat off topic, though it has come up a couple times
since Red Hat bought the whole suite from Netscape...
http://www.sun.com/smi/Press/sunflash/2005-11/sunflash.20051130.1.html
Looks like Sun is open sourcing JES (which includes the mail and
calendar server as well as the directory server). My hope is that
someone picks this up and adds caldav support to the calendar server,
spuring the caldav efforts on clients like Mozilla Sunbird, Evolution, etc.
Between FDS (which seems to be improving more steadily than Sun's DS),
the JES Calendar + caldav, and JES or other ldap aware mail server
software, I see potential for a real Exchange killer :)
- Jeff
18 years, 4 months
[Fedora-directory-users] Announcing Fedora Directory Server 1.0
by Rich Megginson
We are proud to announce the release of Fedora Directory Server 1.0.
This release marks a significant milestone for the open source
community, who now have access to the code for the console and
administration engine as well as the previously open sourced LDAP
engine. This release uses the Apache httpd engine as its administration
server, and includes mod_nss - a rewrite of mod_ssl which uses the
Mozilla NSS crypto engine. The 1.0 release, in addition to its many
other features such as LDAPv3, Multi-Master Replication, and Windows
Synchronization, includes support for MD5, SHA-256, SHA-384, and SHA-512
password hashing, as well as many bug fixes. Fedora Directory Server 1.0
furthers the evolution and democratization of open source software in
making this powerful, enterprise proven technology available to all. It
is a boon for developers who are now able to port the full package -
LDAP engine, console, and admin engine - to many different platforms.
If you have used the previous version of Fedora Directory Server, we
invite you to try our new version. If you are using another LDAP server,
we invite you to try ours and let us know how it compares - we're always
looking for ways to improve. Our community is already active and
growing, and you are welcome and encouraged to join. There are many
ways: joining the mailing lists, reporting bugs, editing documentation,
writing scripts/patches/plug-ins, and many more.
Try it out! - http://directory.fedora.redhat.com/wiki/Download
Our home page - http://directory.fedora.redhat.com/
Join our community! -
http://directory.fedora.redhat.com/wiki/Ways_to_contribute
mod_nss - http://directory.fedora.redhat.com/wiki/Mod_nss
Drop us a line! - fedora-directory-users(a)redhat.com and
http://directory.fedora.redhat.com/wiki/Mailing_Lists
18 years, 4 months
[Fedora-directory-users] JAVA_HOME
by Daniel Shackelford
I just went and installed FDS 1.0 and it seems to be running fine, but
when I try to start the console it is asking about JAVA_HOME. I cannot
seem to set it to anything that will satisfy it's need for libjava and
libjvm. Any help?
--
Daniel Shackelford
Systems Administrator
Technology Services
Spring Arbor University
517 750-6648
"For even the Son of Man did not come to be served, but to serve, and to give His life a ransom for many"
Mark 10:45
18 years, 4 months
[Fedora-directory-users] Re: JAVA_HOME
by Daniel Shackelford
I installed the latest JRE from sun, and pointed to that. Console
starts, but hangs at authentication:
Exception in thread "main" java.lang.UnsatisfiedLinkError:
/opt/fedora-ds/lib/libjss3.so: libnss3.so: cannot op
en shared object file: No such file or directory
at java.lang.ClassLoader$NativeLibrary.load(Native Method)
at java.lang.ClassLoader.loadLibrary0(Unknown Source)
at java.lang.ClassLoader.loadLibrary(Unknown Source)
at java.lang.Runtime.loadLibrary0(Unknown Source)
at java.lang.System.loadLibrary(Unknown Source)
at
org.mozilla.jss.CryptoManager.loadNativeLibraries(CryptoManager.java:1330)
at org.mozilla.jss.CryptoManager.initialize(CryptoManager.java:822)
at org.mozilla.jss.CryptoManager.initialize(CryptoManager.java:795)
at
com.netscape.management.client.util.UtilConsoleGlobals.initJSS(Unknown
Source)
at
com.netscape.management.client.comm.HttpsChannel.<clinit>(Unknown Source)
at
com.netscape.management.client.comm.HttpManager.createChannel(Unknown
Source)
at com.netscape.management.client.comm.CommManager.send(Unknown
Source)
at com.netscape.management.client.comm.CommManager.send(Unknown
Source)
at com.netscape.management.client.comm.HttpManager.get(Unknown
Source)
at
com.netscape.management.client.console.Console.invoke_task(Unknown Source)
at
com.netscape.management.client.console.Console.authenticate_user(Unknown
Source)
at com.netscape.management.client.console.Console.<init>(Unknown
Source)
at com.netscape.management.client.console.Console.main(Unknown
Source)
I looked at the libjss3.so and it was not executable. Once I used chmod
on it, there does not seem to be an issue. I switched back to the
original 7.1 install, so when I started up the console it did not see
what it shoudl have due to diffeing versions.
--
Daniel Shackelford
Systems Administrator
Technology Services
Spring Arbor University
517 750-6648
"For even the Son of Man did not come to be served, but to serve, and to give His life a ransom for many"
Mark 10:45
18 years, 4 months
[Fedora-directory-users] FDS 1.0 and Friends
by Aly Dharshi
Hello All,
I hope that you are well. Please forgive me if this is an out there
question, with some of the changes that I read below in Richard's annoucement,
how well will FDS 1.0 play with Sun's DS 5.x ? Anybody with any thoughts on this
? I am referring to replication to and from for instance.
Cheers,
Aly.
Richard Megginson wrote:
> We are proud to announce the release of Fedora Directory Server 1.0.
>
> This release marks a significant milestone for the open source community, who
now have access to the code for the console and administration engine as well as
the previously open sourced LDAP engine. This release uses the Apache httpd
engine as its administration server, and includes mod_nss - a rewrite of mod_ssl
which uses the Mozilla NSS crypto engine. The 1.0 release, in addition to its
many other features such as LDAPv3, Multi-Master Replication, and Windows
Synchronization, includes support for MD5, SHA-256, SHA-384, and SHA-512
password hashing, as well as many bug fixes. Fedora Directory Server 1.0
furthers the evolution and democratization of open source software in making
this powerful, enterprise proven technology available to all. It is a boon for
developers who are now able to port the full package - LDAP engine, console, and
admin engine - to many different platforms.
>
> If you have used the previous version of Fedora Directory Server, we invite
you to try our new version. If you are using another LDAP server, we invite you
to try ours and let us know how it compares - we're always looking for ways to
improve. Our community is already active and growing, and you are welcome and
encouraged to join. There are many ways: joining the mailing lists, reporting
bugs, editing documentation, writing scripts/patches/plug-ins, and many more.
>
> Try it out! - http://directory.fedora.redhat.com/wiki/Download
> Our home page - http://directory.fedora.redhat.com/
> Join our community! - http://directory.fedora.redhat.com/wiki/Ways_to_contribute
> mod_nss - http://directory.fedora.redhat.com/wiki/Mod_nss
> Drop us a line! - fedora-directory-users(a)redhat.com and
http://directory.fedora.redhat.com/wiki/Mailing_Lists
>
>
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-announce mailing list
> Fedora-directory-announce(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-announce
--
Aly S.P Dharshi
aly.dharshi(a)telus.net
"A good speech is like a good dress
that's short enough to be interesting
and long enough to cover the subject"
18 years, 4 months
[Fedora-directory-users] LDAP subagent questions
by Kevin M. Myer
Hello,
I'm working through some of the documentation for the ldap-agent at
http://www.redhat.com/docs/manuals/dir-server/ag/7.1/snmp.html
(although with Fedora Directory Server). I have a simple
ldap-agent.conf file in /opt/fedora-ds/slapd-instance/config. The
documentation states that a config item of "server" should be specified
that points to the log directory of the Directory Server instance to be
monitored. I found that it balked if I did that:
ldap-agent: Error opening server config file:
/opt/fedora-ds/slapd-instance/logs/config/dse.ldif
so I changed the server value to be just /opt/fedora-ds/slapd-instance.
Error message goes away but now when I try to start ldap-agent, I get:
ldap-agent: Not started! Check log file for details.
And if I check the log file for details, I see:
2005-11-30 16:58:21 Starting ldap-agent...
The -D option generates no more additional information.
On the server, net-snmp is running, with agentx support, listening to a
socket in /var/agentx/master. The documentation states that version
5.2.1 is required, but I'm only running 5.1.2.
Now I found that if I disabled iptables on this server, the agent came
up, one time. Thought that was it but then I found if I killed it and
restarted it, it didn't come up. And then with iptables enabled again,
it did come up. And then it didn't. You get the picture - its very
inconsistent :)
So, anyone have this running reliably?
Kevin
--
Kevin M. Myer
Senior Systems Administrator
Lancaster-Lebanon Intermediate Unit 13 http://www.iu13.org
18 years, 4 months