[Fedora-directory-users] Cant't Start Console
by Golden Butler
I've just installed fedora directory server on my fedora core 4 machine. The installation was a breeze, but when I go to start the console, I get the following error:
./startconsole: Your JAVA_HOME environment variable is not set. Please set it appropriately.
I've confirmend that I indeed have java run time installed. Is there some config somewhere that I need to set or is ignoring? Any help or suggestions will be appreciated. Thanks
- Delamatrix
18 years, 5 months
[Fedora-directory-users] Re: a little bit of samba confusion
by Kevin M. Goess
> The samba.schema file was converted with a tool that doesn't avoid
> the "overly picky schema parsing" bug (#170791). You can try the
> new schema conversion script on the website to see if it handles
> this, or for samba.schema the workaround
>
> ./ol-schema-migrate.pl samba.schema | grep -v DESC > 61samba.ldif
Jeez, I spent half a day tracking down that bug on Monday.
Here are some improvements to your migration script so that it handles
objectIdentifier macro expansion
http://www.openldap.org/doc/admin22/schema.html#OID%20Macros and aliases in
names.
If the email mangles the patch, it's also at
http://kevin.goess.org/software/ol-schema-migrate.diff
--- ol-schema-migrate.pl.old 2005-12-07 08:53:49.375263056 -0800
+++ ol-schema-migrate.pl 2005-12-07 09:40:12.609147192 -0800
@@ -18,12 +18,29 @@
my $oc = 0;
my $at_string;
my $oc_string;
+my (%objectidentifier, $objectidentifier_re); #macro replacement
for (@lines)
{
next if (/^\s*\#/); # skip comments
+ if (/^\s*objectidentifier\s+(\S+)\s+(\S+)/)
+ {
+ my $macroname = $1;
+ my $subsval = $2;
+
+ #do the expansion for this one
+ $subsval =~ s/($objectidentifier_re):/$objectidentifier{$1}./;
+
+ $objectidentifier{$macroname} = $subsval;
+
+ $objectidentifier_re = join('|',keys(%objectidentifier));
+
+ next;
+ }
+
+
# going through the loop again
if ($at)
{
@@ -86,8 +103,8 @@
s/\t/ /g; # remove embedded tabs
s/\$ +/\$ /g; # remove multiple spaces after the $ sign
- my $oid = $1 if ( /(\d.+? )/ );
- my $name = $1 if ( /(NAME +'.+?')/ );
+ my $oid = $1 if ( /attributeTypes: \( ([\w:]+) / );
+ my $name = $1 if ( /(NAME +\(?'.+?'\)?)/ );
my $desc = $1 if ( /(DESC +'.+?')/ );
my $obsolete = $1 if ( /(OBSOLETE)/ );
my $sup = $1 if ( /(SUP .+?) / );
@@ -97,6 +114,11 @@
my $syntax = $1 if ( /(SYNTAX .+?) / );
my $single = $1 if ( /(SINGLE-VALUE)/ );
+ #macro expansion
+ $oid =~ s/\b($objectidentifier_re)(:)?/$objectidentifier{$1}.($2?'.':'')/e;
+ $syntax =~ s/\b($objectidentifier_re)(:)?/$objectidentifier{$1}.
($2?'.':'')/e;
+
+
print "attributeTypes: (\n";
print " $oid\n";
print " $name\n";
@@ -123,7 +145,7 @@
#
# OID; NAME; DESC; SUP; (STRUCTURAL|AUXILIARY|ABSTRACT); MUST; MAY
#
- my $oid = $1 if ( /(\d.+?) / );
+ my $oid = $1 if ( /objectClasses: \( ([\w:]+) / );
my $name = $1 if ( /(NAME +'.+?')/ );
my $desc = $1 if ( /(DESC +'.+?')/ );
my $sup = $1 if ( /(SUP .+?) / );
@@ -131,6 +153,9 @@
my $must = $1 if ( /(MUST +\(.+?\))/ );
my $may = $1 if ( /(MAY +\(.+?\))/ );
+ #macro expansion
+ $oid =~ s/\b($objectidentifier_re)(:)?/$objectidentifier{$1}.($2?'.':'')/e;
+
print "objectClasses: (\n";
print " $oid\n";
print " $name\n";
--
Kevin M. Goess
(415) 277-2079
Ensenda, Inc.
18 years, 5 months
[Fedora-directory-users] sharing files
by arun shrimali
Dear All developers,
I love to be work on Linux, but as all my peer works on windows, thus I am surrounded by windows users having eye on me "how Linux works", my major problem is access shared files on other PCs (windows), though samba works well, but I request you to have the user friendly system to access the files on other PCs / Server. (may be, my peers define userfriendliness in light of the way windows shares files)
If this happens I can convenes to switch over to Linux
best wishes
Arun Shrimali
M-9414239074
arunudr(a)sancharnet.in
18 years, 5 months
[Fedora-directory-users] PassSync .. again
by Scott
I am hoping that I can get some clarification on the whole PassSync - SSL
issue. I have reviewed all the archives and I see a number of locations
where it is stated that PassSync will function from a Active Directory
Server - -> Fedora Directory Server without the use of SSL. However, I
also see that is is a must to do any PassSync in any direction. I have
WinSync working fine and want to validate PassSync, but I am just failing
when it comes to configuring certificates on the Windows Active Directory
side. So my hope is I can just validate without the trouble of SSL. Can I
do this? If so is there any un-documented steps that would need to occur?
My testing without SSL seems to validate that it is needed, but I am not
100% on if I completed all the steps to make a "non-SSL" PassSync to
occure.
If it turns out that I indeed need SSL, I am hoping someone can point me in
the correct direction for configuring the MS Active Directory side. I have
build a AD using Windows 2003 server. I have attempted to use the MS
documentation on "Requirements for Domain Controllers from a Third-Party
CA", but failed miserably. Is this the correct method and if so does it
work with 2003 svr?
I am sorry, that I am still hitting on the same subject that I have
requested assistance on before, but I am just not making any headway.. If
anyone could point me the documentation or advise me on how I should
research it, it would be appreciated more than you know.. Thank you.
18 years, 5 months
[Fedora-directory-users] Sync not updating
by Dimitri Yioulos
Hello to all.
Firstly, congratulations and a big thank you to the developers and maintainers
of, and contributors to, FDS on version 1.0. Great job all around.
In the past, I'd had problems syncing with a Win2k3 ADS and the previous
version of FDS. Well, with version 1.0, it appears that the initial sync
brought over everything from ADS to FDS (yay!). OK, before I get too
celabratory here, it also appears that updating isn't working. From the
error log, I see this:
NSMMReplicationPlugin - agmt="cn=Rockland Sync1" (rockland: 389): Replica has
no update vector. It has never been initialized.
Since it appears every five minutes, I'm taking a real leap here and guessing
that's my problem. But how do I fix it?
Thanks, again.
Dimitri
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
18 years, 5 months
[Fedora-directory-users] Small error in wiki Howto:Samba
by Plant, Dean
The wiki Samba How to has a missing x in the Domain Guests/Computers
line.
Domain Admins:x:2512:
Domain Users:x:2513:
Domain Guests:2514:
Domain Computers:2515:
Should be
Domain Admins:x:2512:
Domain Users:x:2513:
Domain Guests:x:2514:
Domain Computers:x:2515:
Dean
18 years, 5 months
RE: [Fedora-directory-users] Host Access Based on Group Membership
by Tay, Gary
FDS is very similar to SUN ONE DS5.2, I think netgroup (
<mailto:+@netgroup> +@netgroup <mailto:+@netgroupXXX> XXX in /etc/passwd
and /etc/shadow and "compat" keyword in /etc/nsswitch.conf) LDAP maps
could be setup to achieve what you want, it has been used by many DS5.2
administrators
See:
http://web.singnet.com.sg/~garyttt/Installing%20and%20configuring%20Open
LDAP%20for%20RedHat%20Enterprise%20Linux3.htm
Step 5Y: Configure "netgroup" to work with RedHat or Solaris Native LDAP
Clients
(i.e. controlling user access to host using netgroup LDAP maps)
Also see:
http://swforum.sun.com/jive/thread.jspa?threadID=52764&messageID=223846#
223846
Configuring LDAP netgroups
Gary
-----Original Message-----
From: fedora-directory-users-bounces(a)redhat.com
[mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Jason
Hane
Sent: Thursday, December 08, 2005 3:51 AM
To: fedora-directory-users(a)redhat.com
Subject: [Fedora-directory-users] Host Access Based on Group
Membership
I've been searching everywhere for the past week and haven't
found a solution. I would like to be able to assign access to servers
based upon membership to a group or role. For example, if I create a
group/role called "Web Servers", everyone in that group can access all
the web servers. Everyone in the group/role "Database Servers" would be
allowed to log into the database servers. Users can be part of multiple
groups.
There has to be a way to do this already. All the clients are
running OpenLDAP and can already authenticate to the Directory Server.
To implement this solution, would I have to change ldap.conf or
system-auth?
Thanks,
Jason
18 years, 5 months
[Fedora-directory-users] have you already talked about this?
by Steve Strong
if so, I appologize (I'm a newbie)
I've installed Fedora Directory on an RHEL 4 box. The install went well
(no errors reported) and I can see the server using Directory Express,
but starting the console appears to hang the software. I found a
posting on one of the RedHat sites that said that the behavior I see is
a bug that results in the dialog asking for a login is displayed behind
the splash screen. The posting also said that the bug was reported by
people using 1/5 or greater versions of the java_vm.
Soooo, I went back to 1.4 and when I invoke the console I pass in
another option (-xnologo) that is supposed to supress the splash
screen. But, the behavior is the same.
Any help would be greatly appreciated and thanks!
steve
--
Steve Strong
Math and Computer Science
Washington High School
2205 Forest Dr. SE
Cedar Rapids, IA 52403
http://crwash.org
mailto:sstrong@crwash.org
18 years, 5 months
[Fedora-directory-users] Windows NT4 Password Sync Problem
by Hartmut Wöhrle
Hallo everyone,
so now the Winsync from NT4 PDC -> FDS works fine (thanks to all)
And now the next step gives me a problem.
I do the Password sync without SSL connection (only one problem at a time).
The setup should be correct:
Windows Reg entry:
(Default) (value not set)
Cert Token ""
Hostname "192.168.1.55"
Install Path "C:\Program Files\Red....."
Password "guessmypw"
Password Field "userpassword"
Port Number "389"
Search Base "ou=People,dc=daheim,dc=weil"
User Name "uid=useradmin,ou=Special Users,dc=daheim,dc=weil"
User Name Field "ntuserdomainid"
the bind user has the aci's to change all values in the user tree
But I recive the following error at the PDC:
"The description for event (105) in source (Password Synchronization
Service) could not be found. It contains the following insertion
string(s):."
So in fact nothing happens :(
At the FDS logs I don't see anything, so there seems no communication
between ADS and FDS. The same as a question from
RE: [Fedora-directory-users] AD sync
from Darjo Gregoric at Thu, 3 Nov 2005
Is there anything missing in the setup? Or is something wrong in the
Password Sync Programm. And how should the log at the FDS look like (error
log set to "Replication")?
CU
Hartmut
18 years, 5 months