[Fedora-directory-users] Need a replica on sles10
by John Griffin-Wiesner
Hello.
I need to set up a replica server for a SLES10 environment which
will connect to a FDS master. I would prefer to do this one of
two ways:
1) Build/install FDS on SLES10; or
2) Have openldap's slurpd talk to the master FDS, and then use
openldap slapd on the SLES10 box to serve ldap.
I've seen in the archives that someone had dsbuild working on
SLES9 last December, but then he was unable to get it to
setup/run properly. Has anyone succeded with this on either
SLES9 or SLES10?
I haven't given slurpd a try yet. Does anyone know if it is
compatible with FDS?
Thanks in advance.
--
John Griffin-Wiesner
Linux Cluster/Unix Systems Administrator
Univ. MN Supercomputing Institute
http://www.msi.umn.edu
17 years, 5 months
[Fedora-directory-users] Problems Setting up 1.0.3
by Steve Rigler
I'm attempting to install 1.0.3 on an x86_64 machine running CentOS 4.4.
Once the rpm is installed, I run the setup script, answer the questions
and then the setup script does nothing (currently it's sitting at a
screen that says "Fedora Project Directory Installation/Uninstallation"
and nothing else).
I can see the following processes:
root 4916 4820 0 11:07 pts/0 00:00:00 /bin/sh /opt/fedora-
ds/setup/setup
root 5004 4916 0 11:07 pts/0 00:00:00 ./ns-config -
f /tmp/setupyd4964 -l /tmp/logMS4919 -m 3
I'm not sure what else to look for at this point. I had previously been
running 1.0.2 on this machine without any issues.
Thanks,
Steve
17 years, 5 months
[Fedora-directory-users] So close to having windows psync working
by Bliss, Aaron
Hi everyone,
I think that I'm very, very close to having this wrapped up; when
initiating a password change from windows, I'm receiving "Insufficient
access" error in the psync logfile; I created a new user in fds outside
of the database -> uid=psync,cn=config ; how do I give this user the
necessary access to modify user passwords? Thanks very much.
Aaron
Confidentiality Notice:
The information contained in this electronic message is intended for the exclusive use of the individual or entity named above and may contain privileged or confidential information. If the reader of this message is not the intended recipient or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that dissemination, distribution or copying of this information is prohibited. If you have received this communication in error, please notify the sender immediately by telephone and destroy the copies you received.
17 years, 5 months
[Fedora-directory-users] Alternatives to Windows sync?
by Philip Kime
I've been trying to get Windows sync installed but it's going to be
impossibel as it means enabling password complexity policies in a large
domain and that isn't going to happen. Does anyone know of any
alternatives to this? I know this is desperate since you have to have
the plain-text password in order to do this right?
PK
--
Philip Kime
NOPS Systems Architect
310 401 0407
17 years, 5 months
[Fedora-directory-users] temp. disable replica
by Diana Shepard
Is there a way to temporarily disable replication
without deleting an entire replication agreement?
I see the "Enable Replica" on the "Replica Settings"
screen via the GUI. Don't see any documentation about
what this actually does if I uncheck it with a multi-master
replication agreement in effect. If I uncheck it on both
the multi-master Supplier/Supplier, will it temporarily disable
replication without deleting the replication agreements?
Diana Shepard
University of Colorado
17 years, 5 months
Re: [Fedora-directory-users] Problem accessing Configuration Directory after upgrade to 1.0.3
by Dan
On Thu, 2006-11-02 at 08:09 -0700, Richard Megginson wrote:
Dan Deighton wrote:
> With FDS 1.0.2, I had setup a Secure Connection under the
> Configuration DS in the Admin Console. Everything was going fine
> until I updated to 1.0.3. After that, the Directory Server would
> start, but the Admin Server would not.
>
> I thought it may have been a problem with the upgrade, so I did a
> fresh install of FDS 1.0.3. As soon as I enabled a Secure Connection
> for the Configuration DS. The problem was back.
Can you post the error log from your admin server? admin-serv/logs/error
If that doesn't have much information in it, try doing start-admin -e debug
>
> I had no problem setting up encryption for the Admin Server and the
> User DS. It only happens with the Configuration DS.
>
> Has anyone else seen this problem? Am I missing something obvious
> that changed with 1.0.3?
>
> Any help would be appreciated.
>
> Thanks
>
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
--
Fedora-directory-users mailing list
Fedora-directory-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
Without debug:
--------------
admin-serv/logs/error:
---
[Thu Nov 02 10:27:11 2006] [warn] NSSProtocols not set; using: SSLv3 and TLSv1
[Thu Nov 02 10:27:12 2006] [crit] mod_admserv_post_config(): unable to
build user/group LDAP server info: unable to set User/Group baseDN
Configuration Failed
---
--------------
With debug:
--------------
admin-serv/logs/error
---
[Thu Nov 02 10:31:34 2006] [info] done Init: Initializing NSS library
[Thu Nov 02 10:31:34 2006] [warn] NSSProtocols not set; using: SSLv3 and TLSv1
[Thu Nov 02 10:31:35 2006] [debug] mod_admserv.c(760): sslinit:
mod_nss has been started and initialized
[Thu Nov 02 10:31:35 2006] [crit] mod_admserv_post_config(): unable to
build user/group LDAP server info: unable to set User/Group baseDN
Configuration Failed
---
STDOUT:
---
./start-admin -e debug
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module access_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module auth_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
log_config_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module env_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
mime_magic_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module expires_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module deflate_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module headers_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module unique_id_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module setenvif_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module mime_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
vhost_alias_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
negotiation_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module dir_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module actions_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module alias_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module rewrite_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module cache_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
disk_cache_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
file_cache_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module mem_cache_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module cgi_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module restartd_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module nss_module
[Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module admserv_module
[Thu Nov 02 10:31:29 2006] [debug] mod_admserv.c(2382): [22117]
create_server_config [0x9f09370] for (null)
[Thu Nov 02 10:31:29 2006] [debug] mod_admserv.c(2370): [22117]
create_config [0x9f09380] for (null)
[Thu Nov 02 10:31:29 2006] [debug] mod_admserv.c(2431): [22117] Set
[0x9f09370] [ADMCacheLifeTime] to 600
[Thu Nov 02 10:31:29 2006] [debug] mod_admserv.c(2449): [22117] Set
[0x9f09370] [ADMServerVersionString] to Fedora-Administrator/1.0.3
[Thu Nov 02 10:31:29 2006] [debug] mod_admserv.c(2370): [22117]
create_config [0x9f38f88] for /opt/fedora-ds/clients/dsgw/bin/
[Thu Nov 02 10:31:29 2006] [debug] mod_admserv.c(2370): [22117]
create_config [0x9f3a2b0] for /*/[tT]asks/[Oo]peration/*
[Thu Nov 02 10:31:29 2006] [debug] mod_admserv.c(2370): [22117]
create_config [0x9f38878] for /*/[tT]asks/[Cc]onfiguration/*
[Thu Nov 02 10:31:29 2006] [debug] mod_admserv.c(2370): [22117]
create_config [0x9f3b8e0] for
/*/[tT]asks/[Oo]peration/(?i:stop|start|restart|startconfigds|create)$
Please enter password for "internal" token:
---
--------------
17 years, 5 months
Re: [Fedora-directory-users] Problem accessing Configuration Directory after upgrade to 1.0.3
by Dan
On Thu, 2006-11-02 at 09:31 -0700, Richard Megginson wrote:
Dan Deighton wrote:
> > On Thu, 2006-11-02 at 08:09 -0700, Richard Megginson wrote:
> > Dan Deighton wrote:
> >> With FDS 1.0.2, I had setup a Secure Connection under the
> >> Configuration DS in the Admin Console. Everything was going fine
> >> until I updated to 1.0.3. After that, the Directory Server would
> >> start, but the Admin Server would not.
> >>
> >> I thought it may have been a problem with the upgrade, so I did a
> >> fresh install of FDS 1.0.3. As soon as I enabled a Secure Connection
> >> for the Configuration DS. The problem was back.
> > Can you post the error log from your admin server? admin-serv/logs/error
> > If that doesn't have much information in it, try doing start-admin -e
> > debug
> Thanks. The last line of error output is odd:
> > Please enter password for "internal" token:
> Are you using a pin file for the admin server ssl password? No
If not, did
> you type in the password on the command line?
Yes, I typed in the password. This password was created when I first
managed the certificate for the Admin Server. I am prompted for this
password as soon as SSL is enabled for the Admin Server. This works
fine if the configuration DS is not using SSL. As soon as a secure
connection is used for the Configuration DS it fails.
> >>
> >> I had no problem setting up encryption for the Admin Server and the
> >> User DS. It only happens with the Configuration DS.
> >>
> >> Has anyone else seen this problem? Am I missing something obvious
> >> that changed with 1.0.3?
> >>
> >> Any help would be appreciated.
> >>
> >> Thanks
> >>
> >> ------------------------------------------------------------------------
> >>
> >> --
> >> Fedora-directory-users mailing list
> >> Fedora-directory-users(a)redhat.com
> >> https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >>
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users(a)redhat.com
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
> >
> >
> > Without debug:
> > --------------
> >
> > admin-serv/logs/error:
> > ---
> > [Thu Nov 02 10:27:11 2006] [warn] NSSProtocols not set; using: SSLv3
> > and TLSv1
> > [Thu Nov 02 10:27:12 2006] [crit] mod_admserv_post_config(): unable to
> > build user/group LDAP server info: unable to set User/Group baseDN
> > Configuration Failed
> > ---
> >
> > --------------
> >
> >
> >
> > With debug:
> > --------------
> >
> > admin-serv/logs/error
> > ---
> >
> > [Thu Nov 02 10:31:34 2006] [info] done Init: Initializing NSS library
> > [Thu Nov 02 10:31:34 2006] [warn] NSSProtocols not set; using: SSLv3
> > and TLSv1
> > [Thu Nov 02 10:31:35 2006] [debug] mod_admserv.c(760): sslinit:
> > mod_nss has been started and initialized
> > [Thu Nov 02 10:31:35 2006] [crit] mod_admserv_post_config(): unable to
> > build user/group LDAP server info: unable to set User/Group baseDN
> > Configuration Failed
> >
> > ---
> >
> > STDOUT:
> > ---
> > ./start-admin -e debug
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > access_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > auth_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > log_config_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > env_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > mime_magic_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > expires_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > deflate_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > headers_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > unique_id_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > setenvif_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > mime_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > vhost_alias_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > negotiation_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > dir_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > actions_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > alias_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > rewrite_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > cache_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > disk_cache_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > file_cache_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > mem_cache_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > cgi_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > restartd_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > nss_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_so.c(247): loaded module
> > admserv_module
> > [Thu Nov 02 10:31:29 2006] [debug] mod_admserv.c(2382): [22117]
> > create_server_config [0x9f09370] for (null)
> > [Thu Nov 02 10:31:29 2006] [debug] mod_admserv.c(2370): [22117]
> > create_config [0x9f09380] for (null)
> > [Thu Nov 02 10:31:29 2006] [debug] mod_admserv.c(2431): [22117] Set
> > [0x9f09370] [ADMCacheLifeTime] to 600
> > [Thu Nov 02 10:31:29 2006] [debug] mod_admserv.c(2449): [22117] Set
> > [0x9f09370] [ADMServerVersionString] to Fedora-Administrator/1.0.3
> > [Thu Nov 02 10:31:29 2006] [debug] mod_admserv.c(2370): [22117]
> > create_config [0x9f38f88] for /opt/fedora-ds/clients/dsgw/bin/
> > [Thu Nov 02 10:31:29 2006] [debug] mod_admserv.c(2370): [22117]
> > create_config [0x9f3a2b0] for /*/[tT]asks/[Oo]peration/*
> > [Thu Nov 02 10:31:29 2006] [debug] mod_admserv.c(2370): [22117]
> > create_config [0x9f38878] for /*/[tT]asks/[Cc]onfiguration/*
> > [Thu Nov 02 10:31:29 2006] [debug] mod_admserv.c(2370): [22117]
> > create_config [0x9f3b8e0] for
> > /*/[tT]asks/[Oo]peration/(?i:stop|start|restart|startconfigds|create)$
> > Please enter password for "internal" token:
> >
> > ---
> >
> > --------------
> >
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users(a)redhat.com
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> --
> Fedora-directory-users mailing list
> Fedora-directory-users(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
17 years, 5 months
[Fedora-directory-users] one problem with upgrade from 1.0.2 to 1.0.3
by Sergey Ivanov
I'm trying to upgrade from fedora-ds-1.0.2 to fedora-ds-1.0.3 at fc-3
x86_64.
The machine has different network interfaces pointing one to local
network and another to global, with real IP.
The slapd-<name>/config/dse.ldif file contains lines bindind ns-slapd to
local IP in dn: cn=config section, like:
---
nsslapd-listenhost: <hostname-for-lan>
nsslapd-securelistenhost: <hostname-for-lan>
---
It was working with fedora-ds-1.0.2
But at upgrade to 1.0.3 server can not be started, I'm getting message:
---
[01/Nov/2006:23:09:53 +0300] createprlistensocket - PR_Bind() on
10.0.0.<ip> port 389 failed: Netscape Portable Runtime error -5967 (TCP
file descriptor is already bound.)
---
It happens even if there is no binding to 389 port at any interface of
this host.
In strace I see the lines:
---
26036 socket(PF_INET6, SOCK_STREAM, IPPROTO_IP) = 6
26036 fcntl(6, F_GETFL) = 0x2 (flags O_RDWR)
26036 fcntl(6, F_SETFL, O_RDWR|O_NONBLOCK) = 0
26036 setsockopt(6, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0
26036 bind(6, {sa_family=AF_INET, sin_port=htons(389),
sin_addr=inet_addr("10.0.0.<ip>")}, 16) = -1 EINVAL (Invalid argument)
---
Please, help me, how to fix this problem.
--
Sergey.
17 years, 5 months
[Fedora-directory-users] Problem accessing Configuration Directory after upgrade to 1.0.3
by Dan
With FDS 1.0.2, I had setup a Secure Connection under the Configuration DS
in the Admin Console. Everything was going fine until I updated to 1.0.3.
After that, the Directory Server would start, but the Admin Server would
not.
I thought it may have been a problem with the upgrade, so I did a fresh
install of FDS 1.0.3. As soon as I enabled a Secure Connection for the
Configuration DS. The problem was back.
I had no problem setting up encryption for the Admin Server and the User
DS. It only happens with the Configuration DS.
Has anyone else seen this problem? Am I missing something obvious that
changed with 1.0.3?
Any help would be appreciated.
Thanks
17 years, 5 months