[Fedora-directory-users] Automatically incrementing uidNumber
by Jeff Falgout
Greetings -
I've been moving right along with the new release of fedora-ds on rhel4
using the downloaded 7.1 rpm. I hoping that I just missed this, but is
there a way to automatically increment the uidNumber for posix accounts -
so when a new posix user gets created, the next uidNumber get's assigned
to the new user? I accomplished this with phpLdapAdmin and openldap -
phpLdapAdmin had function that would search for the highest uidNumber and
increment it by 1 and populate the uidNumber attribute. If this doesn't
exist yet, is there any chance of making that a feature request - either
that or a uidNumber pool which keeps track of the last uidNumber used.
Thanks
Jeff
18 years, 10 months
[Fedora-directory-users] PAM authentication
by Thomas Mathiesen
Hi all!
I am happy to see that the communty have got a good-looking directory server.
Soon, I hope I can throw away our M$ active directory, and run fedora
directory instead, but I am having some issue, authenticating linux desktops.
So, here's what I have:
Fedora Directory installed on CentOS 4.0 (redhat EL clone)
Ran the typical install (after reading redhat directory install manual)
I can successfully login to the web-admin interface, and add users (after
binding as Directory Manager).
Due to a java error, I cannot use the console, but I rather use GQ (a gnome
LDAP tool). I can bind (as Directory Manager), and add/remove stuff.
So, here's what I continued doing:
Added a user (using the webinterface).
Added objectclass posixAccount to this user (using GQ)
Turning to my desktop, running Ubuntu Hoary and Openldap, I set it up using
this ldap config:
host ldap.mydomain.com
base dc=mydomain,dc=com
ldap_version 3
timelimit 30
pam_filter objectclass=posixAccount
pam_login_attribute uid
ssl no
#ssl start_tls
#tls_checkpeer no
pam_password ssha
I've tried to use ssl (and tls_checkpeer no), and no ssl.... nothing works.
In my log on the fedora directory server, I see the connection, and it first
tries to find the posixAccount, and returns no error. Then it looks for
shadowAccount, and returns no error (after I added that objectclass as well).
The client worked fine, authenticating with my previous openldap server... and
I can't see why I doesn't authenticate with my new fedora server.
Help would be highly appreciated :)
/Thomas
18 years, 10 months
[Fedora-directory-users] fedora-ds and Samba?
by Ian Bishop
Hello,
I'm interested in setting up Samba to authenticate off fedora-ds. I've
done some reading and it appears as though a Samba specific schema is
required in addition to the default set.
Does anyone have any experience in getting this to work with fedora-ds?
I'm a little surprised that this support isn't included by default (or
am I just not seeing it) as I would have thought this would be a common
requirement for folks out there?
Thanks,
Ian.
--------------------------------------------------------------------------------
IMPORTANT: This email (including any attachments) may contain confidential,
private or legally privileged information and may be protected by copyright. You
may only use it if you are the person(s) it was intended to be sent to and if you
use it in an authorised way. No one is allowed to use, review, alter, transmit,
disclose, distribute, print or copy this e-mail without appropriate authority.
If this e-mail was not intended for you and was sent to you by mistake, please
telephone (07 3842 8888) or e-mail me immediately, destroy any hard copies of
this e-mail and delete it and any copies of it from your computer systems. Any
legal privilege and confidentiality attached to this e-mail is not waived or
destroyed by that mistake.
It is your responsibility to ensure that this e-mail does not contain and is not
affected by computer viruses, defects or interference by third parties or
replication problems (including incompatibility with your computer system).
--------------------------------------------------------------------------------
18 years, 10 months
[Fedora-directory-users] retro changelog issues
by sang jun song
The changes in the Retro-Changelog (RCL) database are not guaranteed to
be in order
even in case of a single server, because the incoming requests are
processed
independently, and the scheduling of the worker threads ? that process
LDAP requests
? is driven by the thread library.
There is a much higher risk for out-of-order changes in the RCL database
in case
replication is deployed (for reasons other than the above mentioned
thread scheduling
issue).
Invalid Changelog Entries
The contents of the RCL database cannot be fully trusted, because RCL
plugin
records the changes received by the directory server and not the changes
applied to
the database by the directory server. Typically, the URP code (update
reconciliation
protocol) may modify the received change and the RCL plugin may record
false
changes in the RCL database.
Is solved it?
<http://www.korea.com>
<http://event.korea.com/main/moviepreview.asp>
18 years, 10 months
[Fedora-directory-users] PAM authentication
by Thomas Mathiesen
Hi all!
I am happy to see that the communty have got a good-looking directory server.
Soon, I hope I can throw away our M$ active directory, and run fedora
directory instead, but I am having some issue, authenticating linux desktops.
So, here's what I have:
Fedora Directory installed on CentOS 4.0 (redhat EL clone)
Ran the typical install (after reading redhat directory install manual)
I can successfully login to the web-admin interface, and add users (after
binding as Directory Manager).
Due to a java error, I cannot use the console, but I rather use GQ (a gnome
LDAP tool). I can bind (as Directory Manager), and add/remove stuff.
So, here's what I continued doing:
Added a user (using the webinterface).
Added objectclass posixAccount to this user (using GQ)
Turning to my desktop, running Ubuntu Hoary and Openldap, I set it up using
this ldap config:
host ldap.mydomain.com
base dc=mydomain,dc=com
ldap_version 3
timelimit 30
pam_filter objectclass=posixAccount
pam_login_attribute uid
ssl no
#ssl start_tls
#tls_checkpeer no
pam_password ssha
I've tried to use ssl (and tls_checkpeer no), and no ssl.... nothing works.
In my log on the fedora directory server, I see the connection, and it first
tries to find the posixAccount, and returns no error. Then it looks for
shadowAccount, and returns no error (after I added that objectclass as well).
The client worked fine, authenticating with my previous openldap server... and
I can't see why I doesn't authenticate with my new fedora server.
Help would be highly appreciated :)
/Thomas
--
LinProfs
Phone: +31703521193 & +31652572454
Web: www.linprofs.com & www.linprofs.nl
Email: thomas(a)linprofs.com
-
"Microsoft is to operating systems & security ....
.... what McDonalds is to gourmet cooking"
18 years, 10 months
[Fedora-directory-users] x86_64 support
by D Canfield
I'm trying to run FDS on an x86_64, and I believe I'm having trouble
with a couple of missing 32-bit libraries. I've installed 3-4 32-bit
libraries already,based on error messages I received while trying to
setup the system. I'm no longer receiving error messages but the
systems still won't start, and based on testing with my other boxes, I'm
about 95% sure it's due to some more missing 32-bit libraries. Does
anyone have a list of what libraries would be needed in order to run
this. I'm fairly new to x86_64, so if there's an easy way to discover
this for all apps, I'd be greatful for that information as well.
And BTW, any chance of a native 64-bit build anytime soon?
Thanks
DC
18 years, 10 months
[Fedora-directory-users] migration from openldap-servers?
by Joshua Daniel Franklin
Hello,
We are using LDAP for login and automount, currently with the
openldap-servers rpm. I'm assuming that the eventual plan is to
migrate Fedora and Red Hat Enterprise Linux to the Fedora
Directory Server, though this may not happen until FC5 and
perhaps RHEL 5 or 6.
I am curious what the migration path will look like. I assume
that I can just do an LFIF dump and then import, but has
anyone tried it?
I'd also be very interested to know whether any of the
management tools will work with openldap--right now all I use
is the Java LDAPbrowser which is very minimal.
18 years, 10 months
Re: [Fedora-directory-users] How to Start the Admin Server Daemon?
by Steve Mahaffey
Leif Hedstrom wrote:
> Did you actually create an Admin and DS instance (using .../setup/setup)
? I don't think those scripts are created until you run the setup.
I followed the Install Guide where it says to do this:
cd serverroot/bin/slapd/admin/bin
perl ds_newinst.pl /full/path/to/install.inf
I haven't fully scrutinized what the perl script does, but maybe it
doesn't do all the things that the setup script that you've referenced
does. Perhaps I should try to start over and use that one?
Looks like the setup shell scrip overwrites the install.inf file also. So
if both need to run it looks like order may be important.
18 years, 10 months