[Fedora-directory-users] Importing Linux Users
by Scott Miller
Hello list,
Here's my situation. I currently use Sendmail as my mail transport, and
also have imap capabilities. Recently, we purchased a barracuda Spam
Firewall to help reduce the amount of spam our customers receive. We have 5
domains on our mail server, so basically any user has 5 available e-mail
addresses (ya, not the best way to do it, but that's how it was when I got
here). With the barracuda, in order for it NOT to create a new spam account
(or box) for each of the 5 e-mail addresses our customers have, it requires
our mail server to run LDAP. Well, OK - if that's what it needs.
In my search for building an LDAP server, I came across the Fedora
Directory Server Project. Since I'm in the process of upgrading (replacing)
my servers with Fedora Core 4 (forklift upgrade), I was hoping this might
just be a perfect fit.
Now here's my question. Before I start in on this task, is there an
"easy" way to import normal linux users into the LDAP database on the new
server? Granted, I've only spent a few days researching this question, and
have come up blank everywhere I've looked. The answer is probably out there
somewhere, so if someone could possibly point me in the right direction, it
would be greatly appriciated. I'm hoping to stay away from entering the
information for each and every customer we have.
Thank You,
Scott Miller
18 years, 3 months
[Fedora-directory-users] question about host based access control
by Susan
Hi. I've fds 1.0.1 setup, posixAccount and hostObject classes added (I migrated
/usr/share/doc/nss_ldap-226/ldapns.schema >
/opt/fedora-ds/slapd-localhost/config/schema/61ldapns.ldif).
What's the next step? hostObject is added to the user:
givenName: test
sn: test
loginShell: /bin/bash
gidNumber: 666
uidNumber: 666
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetorgperson
objectClass: posixAccount
objectClass: posixgroup
objectClass: hostobject
uid: test
cn: test test
now what? Where in the console to I list the servers that 'test' is allowed to connect
to?
Thanks!
__________________________________________
Yahoo! DSL Something to write home about.
Just $16.99/mo. or less.
dsl.yahoo.com
18 years, 3 months
RE: [Fedora-directory-users] Problem starting directory server
by Bliss, Aaron
Bastille -r got me back up and running; thanks very much.
-----Original Message-----
From: Pete Rowley [mailto:prowley@redhat.com]
Sent: Wednesday, January 04, 2006 4:12 PM
To: General discussion list for the Fedora Directory server project.
Subject: Re: [Fedora-directory-users] Problem starting directory server
--
Fedora-directory-users mailing list
Fedora-directory-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
www.preferredcare.org
"An Outstanding Member Experience," Preferred Care HMO Plans -- J. D. Power and Associates
Confidentiality Notice:
The information contained in this electronic message is intended for the exclusive use of the individual or entity named above and may contain privileged or confidential information. If the reader of this message is not the intended recipient or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that dissemination, distribution or copying of this information is prohibited. If you have received this communication in error, please notify the sender immediately by telephone and destroy the copies you received.
18 years, 3 months
[Fedora-directory-users] Problem starting directory server
by Bliss, Aaron
I've been running the directory server for a few weeks now, however I've ran
into a problem; when attempting to start the directory console, service
starts and then stops; here's error log:
[Wed Jan 04 15:21:45 2006] [warn] pid file
/opt/fedora-ds/admin-serv/logs/pid overwritten -- Unclean shutdown of
previous Apache run?
[Wed Jan 04 15:21:45 2006] [notice] Apache/2.0 configured -- resuming normal
operations
[Wed Jan 04 15:21:45 2006] [alert] (11)Resource temporarily unavailable:
apr_thread_create: unable to create worker thread
[Wed Jan 04 15:21:56 2006] [alert] Child 2974 returned a Fatal
error...\nApache is exiting!
Just a heads up; I installed bastille on this box today with a script with
the following lines that relate to apache:
# Q: Would you like to disable indexes? [N]
Apache.apacheindex="N"
# Q: Would you like to deactivate the Apache web server? [Y]
Apache.apacheoff="Y"
# Q: Would you like to bind the Web server to listen only to the localhost?
[N]
Apache.bindapachelocal="N"
# Q: Would you like to disable CGI scripts, at least for now? [Y]
Apache.cgi="Y"
# Q: Would you like to deactivate server-side includes? [Y]
Apache.ssi="Y"
# Q: Would you like to deactivate the following of symbolic links? [Y]
Apache.symlink="Y"
Stoping the bastille service, uninstalling had no effect; any thoughts?
Thanks very much.
www.preferredcare.org
"An Outstanding Member Experience," Preferred Care HMO Plans -- J. D. Power and Associates
Confidentiality Notice:
The information contained in this electronic message is intended for the exclusive use of the individual or entity named above and may contain privileged or confidential information. If the reader of this message is not the intended recipient or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that dissemination, distribution or copying of this information is prohibited. If you have received this communication in error, please notify the sender immediately by telephone and destroy the copies you received.
18 years, 3 months
RE: [Fedora-directory-users] Problem starting directory server
by Bliss, Aaron
P.S. slapd is running fine, authenticating users, etc; problem seems limited
to server console.
-----Original Message-----
From: Bliss, Aaron
Sent: Wednesday, January 04, 2006 3:37 PM
To: General discussion list for the Fedora Directory server project.
Subject: [Fedora-directory-users] Problem starting directory server
I've been running the directory server for a few weeks now, however I've ran
into a problem; when attempting to start the directory console, service
starts and then stops; here's error log:
[Wed Jan 04 15:21:45 2006] [warn] pid file
/opt/fedora-ds/admin-serv/logs/pid overwritten -- Unclean shutdown of
previous Apache run?
[Wed Jan 04 15:21:45 2006] [notice] Apache/2.0 configured -- resuming normal
operations [Wed Jan 04 15:21:45 2006] [alert] (11)Resource temporarily
unavailable:
apr_thread_create: unable to create worker thread [Wed Jan 04 15:21:56 2006]
[alert] Child 2974 returned a Fatal error...\nApache is exiting!
Just a heads up; I installed bastille on this box today with a script with
the following lines that relate to apache:
# Q: Would you like to disable indexes? [N] Apache.apacheindex="N"
# Q: Would you like to deactivate the Apache web server? [Y]
Apache.apacheoff="Y"
# Q: Would you like to bind the Web server to listen only to the localhost?
[N]
Apache.bindapachelocal="N"
# Q: Would you like to disable CGI scripts, at least for now? [Y]
Apache.cgi="Y"
# Q: Would you like to deactivate server-side includes? [Y] Apache.ssi="Y"
# Q: Would you like to deactivate the following of symbolic links? [Y]
Apache.symlink="Y"
Stoping the bastille service, uninstalling had no effect; any thoughts?
Thanks very much.
www.preferredcare.org
"An Outstanding Member Experience," Preferred Care HMO Plans -- J. D. Power
and Associates
Confidentiality Notice:
The information contained in this electronic message is intended for the
exclusive use of the individual or entity named above and may contain
privileged or confidential information. If the reader of this message is
not the intended recipient or the employee or agent responsible to deliver
it to the intended recipient, you are hereby notified that dissemination,
distribution or copying of this information is prohibited. If you have
received this communication in error, please notify the sender immediately
by telephone and destroy the copies you received.
--
Fedora-directory-users mailing list
Fedora-directory-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
18 years, 3 months
[Fedora-directory-users] Chain On Update problem
by ILoveJython
I have read the document:
Howto:ChainOnUpdate - Fedora Directory Server
<http://directory.fedora.redhat.com/wiki/Howto:ChainOnUpdate>
and have been unable to get it to work. When I attempt a write to the
consumer it makes the change on the
consumer and does not update the master. With the next change on the
master of any kind,
the mapping tree entry for this suffix changes from "nsslapd-state:
backend" to "nsslapd-state: referral on update".
Once this state changes, my client complains that it cannot update,
since it cannot follow referrals.
In addition, there are no log entries on the master to indicate any
activity back from the consumer to the master, i.e.
a proxy login.
18 years, 3 months
[Fedora-directory-users] Samba + Fedora-DS
by Agnaldo Freitas
Hello list,
I followed wiki's tutorial but samba didn't get to contact to Fedora Directory Server !!!!
Samba answers "OK" to "testparm" and FDS is running OK, because i can search / find users from "command line"(also via console) with "ldapsearch" perfectly.
when i try the command net getlocalsid, it returns : failed to bind to server ldap://sei.intranet with dn="cn=Directory Manager" Error can't contact LDAP server (unknown) (Timed out) ...but after that it returns the SID of the domain.
smb.conf:
passdb bakend ldap = ldapsam:ldap://sei.intranet
idmap bakend ldap = ldapsam:ldap://sei.intranet
ldap admin dn = cn=Directory Manager
It is installed:
fedora 4
fedora-ds1.0-2.Linux
samba-3-.0.14a-2
openldap-2.2.23-5 (because it's required in tutorial)
Is there somebody that uses Samba with FDS and can help me?
thankful,
Agnaldo
18 years, 3 months
[Fedora-directory-users] [Fwd: FDS doesn't start]
by Thorsten Scherf
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
anybody knows why a fresh install of the latest FDS doesn't work
properly? The error log is attached. System used is a updated FC3 box.
Happy Day.
Thorsten
- -------- Original Message --------
Subject: log
Date: Wed, 4 Jan 2006 01:13:55 +0100
From: root <admin(a)tuxgeek.de>
To: tscherf(a)redhat.com
Fedora-Directory/1.0.1 B2005.342.165
tux1.tuxgeek.de:389 (/opt/fedora-ds/slapd-tux1)
[04/Jan/2006:01:06:21 +0100] - Fedora-Directory/1.0.1 B2005.342.165
starting up
[04/Jan/2006:01:06:21 +0100] - libdb: unable to initialize mutex:
Function not implemented
[04/Jan/2006:01:06:21 +0100] - libdb:
/opt/fedora-ds/slapd-tux1/db/__db.001: unable to initialize environment
lock: Function not implemented
[04/Jan/2006:01:06:21 +0100] - Opening database environment
(/opt/fedora-ds/slapd-tux1/db) failed. err=38: Function not implemented
[04/Jan/2006:01:06:21 +0100] - start: Failed to init database, err=38
Function not implemented
[04/Jan/2006:01:06:21 +0100] - Failed to start database plugin ldbm database
[04/Jan/2006:01:06:21 +0100] - WARNING: ldbm instance userRoot already
exists
[04/Jan/2006:01:06:21 +0100] - WARNING: ldbm instance NetscapeRoot
already exists
[04/Jan/2006:01:06:21 +0100] binder-based resource limits -
nsLookThroughLimit: parameter error (slapi_reslimit_register() already
registered)
[04/Jan/2006:01:06:21 +0100] - start: Resource limit registration failed
[04/Jan/2006:01:06:21 +0100] - Failed to start database plugin ldbm database
[04/Jan/2006:01:06:21 +0100] - Error: Failed to resolve plugin dependencies
[04/Jan/2006:01:06:21 +0100] - Error: postoperation plugin Roles Plugin
is not started
[04/Jan/2006:01:06:21 +0100] - Error: accesscontrol plugin ACL Plugin is
not started
[04/Jan/2006:01:06:21 +0100] - Error: preoperation plugin ACL
preoperation is not started
[04/Jan/2006:01:06:21 +0100] - Error: object plugin Legacy Replication
Plugin is not started
[04/Jan/2006:01:06:21 +0100] - Error: object plugin Multimaster
Replication Plugin is not started
[04/Jan/2006:01:06:21 +0100] - Error: postoperation plugin Class of
Service is not started
[04/Jan/2006:01:06:21 +0100] - Error: object plugin Views is not started
[04/Jan/2006:01:06:21 +0100] - Error: preoperation plugin 7-bit check is
not started
[04/Jan/2006:01:06:21 +0100] - Error: preoperation plugin HTTP Client is
not started
[04/Jan/2006:01:06:21 +0100] - Error: database plugin ldbm database is
not started
[04/Jan/2006:01:07:11 +0100] - Fedora-Directory/1.0.1 B2005.342.165
starting up
[04/Jan/2006:01:07:12 +0100] - libdb: unable to initialize mutex:
Function not implemented
[04/Jan/2006:01:07:12 +0100] - libdb:
/opt/fedora-ds/slapd-tux1/db/__db.001: unable to initialize environment
lock: Function not implemented
[04/Jan/2006:01:07:12 +0100] - Opening database environment
(/opt/fedora-ds/slapd-tux1/db) failed. err=38: Function not implemented
[04/Jan/2006:01:07:12 +0100] - start: Failed to init database, err=38
Function not implemented
[04/Jan/2006:01:07:12 +0100] - Failed to start database plugin ldbm database
[04/Jan/2006:01:07:12 +0100] - WARNING: ldbm instance userRoot already
exists
[04/Jan/2006:01:07:12 +0100] - WARNING: ldbm instance NetscapeRoot
already exists
[04/Jan/2006:01:07:12 +0100] binder-based resource limits -
nsLookThroughLimit: parameter error (slapi_reslimit_register() already
registered)
[04/Jan/2006:01:07:12 +0100] - start: Resource limit registration failed
[04/Jan/2006:01:07:12 +0100] - Failed to start database plugin ldbm database
[04/Jan/2006:01:07:12 +0100] - Error: Failed to resolve plugin dependencies
[04/Jan/2006:01:07:12 +0100] - Error: preoperation plugin 7-bit check is
not started
[04/Jan/2006:01:07:12 +0100] - Error: accesscontrol plugin ACL Plugin is
not started
[04/Jan/2006:01:07:12 +0100] - Error: preoperation plugin ACL
preoperation is not started
[04/Jan/2006:01:07:12 +0100] - Error: postoperation plugin Class of
Service is not started
[04/Jan/2006:01:07:12 +0100] - Error: preoperation plugin HTTP Client is
not started
[04/Jan/2006:01:07:12 +0100] - Error: database plugin ldbm database is
not started
[04/Jan/2006:01:07:12 +0100] - Error: object plugin Legacy Replication
Plugin is not started
[04/Jan/2006:01:07:12 +0100] - Error: object plugin Multimaster
Replication Plugin is not started
[04/Jan/2006:01:07:12 +0100] - Error: postoperation plugin Roles Plugin
is not started
[04/Jan/2006:01:07:12 +0100] - Error: object plugin Views is not started
[04/Jan/2006:01:08:33 +0100] - Fedora-Directory/1.0.1 B2005.342.165
starting up
[04/Jan/2006:01:08:33 +0100] - libdb: unable to initialize mutex:
Function not implemented
[04/Jan/2006:01:08:33 +0100] - libdb:
/opt/fedora-ds/slapd-tux1/db/__db.001: unable to initialize environment
lock: Function not implemented
[04/Jan/2006:01:08:33 +0100] - Opening database environment
(/opt/fedora-ds/slapd-tux1/db) failed. err=38: Function not implemented
[04/Jan/2006:01:08:33 +0100] - start: Failed to init database, err=38
Function not implemented
[04/Jan/2006:01:08:33 +0100] - Failed to start database plugin ldbm database
[04/Jan/2006:01:08:33 +0100] - WARNING: ldbm instance userRoot already
exists
[04/Jan/2006:01:08:33 +0100] - WARNING: ldbm instance NetscapeRoot
already exists
[04/Jan/2006:01:08:33 +0100] binder-based resource limits -
nsLookThroughLimit: parameter error (slapi_reslimit_register() already
registered)
[04/Jan/2006:01:08:33 +0100] - start: Resource limit registration failed
[04/Jan/2006:01:08:33 +0100] - Failed to start database plugin ldbm database
[04/Jan/2006:01:08:33 +0100] - Error: Failed to resolve plugin dependencies
[04/Jan/2006:01:08:33 +0100] - Error: preoperation plugin 7-bit check is
not started
[04/Jan/2006:01:08:33 +0100] - Error: accesscontrol plugin ACL Plugin is
not started
[04/Jan/2006:01:08:33 +0100] - Error: preoperation plugin ACL
preoperation is not started
[04/Jan/2006:01:08:33 +0100] - Error: postoperation plugin Class of
Service is not started
[04/Jan/2006:01:08:33 +0100] - Error: preoperation plugin HTTP Client is
not started
[04/Jan/2006:01:08:33 +0100] - Error: database plugin ldbm database is
not started
[04/Jan/2006:01:08:33 +0100] - Error: object plugin Legacy Replication
Plugin is not started
[04/Jan/2006:01:08:33 +0100] - Error: object plugin Multimaster
Replication Plugin is not started
[04/Jan/2006:01:08:33 +0100] - Error: postoperation plugin Roles Plugin
is not started
[04/Jan/2006:01:08:33 +0100] - Error: object plugin Views is not started
- --
Thorsten Scherf, RHCA Mobile: ++49 172 61 32 548
GLS EMEA Instructor II Fax: ++49 2064 470 564
GPG KEY: 0x3B9280BB - 92BF AA4C 082B F5DD FB28 47CC C1F9 282D 3B92 80BB
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iD8DBQFDuxPawfkoLTuSgLsRAjtnAKDB3LWqYLJklSmmlXllwZoAYoY2kwCbBEdF
KRFfmKFc9HAXvvUERaJ4ikY=
=zC1R
-----END PGP SIGNATURE-----
18 years, 3 months