[Fedora-directory-users] LAM and FDS
by Andreas Kasenides
Sorry for putting this in the wrong thread. Here it goes again.
The LDAP Account Manager (LAM) is a nifty application for doing LDAP
user management
(http://lam.sourceforge.net/) with some nice features that make life easy.
Has anyone attempted to modify it for use on the FDS?
Apparently it requires the existence of the samba schema in the LDAP
server to
function (which is not at all necessary, at least in my case).
thanks for any help
Andreas Kasenides
16 years, 2 months
[Fedora-directory-users] CPU utilization
by Renato Ribeiro da Silva
I'm having questions about CPU utilization of Directory Server. The process ns-slapd take 99.9% of CPU almost all the time. Is there any way to know why this is happening? Any performance counter ( DS Console ) can show me the answer ? Is is possible to know the apps that are using the Directory in this moment ?
Best Regards,
Renato
> David J. Schnardthorst wrote:
> > I am having issues with replication and need some assistance. I have
> > setup multi-master replication using the mmr.pl script. However,
> > replication is not occurring. I show the following messages in my LDAP
> > error log.
> >
> > [14/Jan/2007:01:02:49 -0600] - Fedora-Directory/1.0.2 B2006.060.1928
> > starting up
> > [15/Jan/2007:00:00:00 -0600] NSMMReplicationPlugin -
> > agmt="cn="Replication to xxxxxx.com"" (xxxxxx:389): Incremental
> > protocol: event update_window_opened should not occur in state
> > wait_for_changes
> > [16/Jan/2007:00:00:00 -0600] NSMMReplicationPlugin -
> > agmt="cn="Replication to xxxxxx.com"" (xxxxxx:389): Incremental
> > protocol: event update_window_opened should not occur in state
> > wait_for_changes
> >
> > Any thoughts would be greatly appreciated.
> What is your replication schedule?
>
16 years, 2 months
[Fedora-directory-users] Request for any additional live experience issues with Fedora Multi-Master replication...
by Kevin McCarthy
Dear All,
After a successful c. 3 month trial period of using Multi-Master (*4)
replication (RHEL4) on our test networks we are planning to progress to live
operation in the near term.
Since this trial went a little too well (.healthy paranoia!?) I would
welcome any feedback with respect to other users' experiences with live
operation, for example:
1) Your preferred approach to replacing a Master DS after underlying
hardware failure, in terms of ensuring that recovery from the other three
Masters is indeed achieved in a very timely manner (e.g. usage of any
variants on forced replication updates?).
2) Replication degradation and eventual recovery where the
intermediate network links degrade appreciably or are completely lost for a
significant period, before returning and allowing the replication to
recover.
Thanks in advance!
Regards,
Kevin
16 years, 2 months
[Fedora-directory-users] Ldap newbie
by Rick Mattier
Hello,
I'm pretty new to ldap. I have installed Fedora Directory Server on
RHEL4. I currently have a NIS server I would like to convert to LDAP.
Also, I would like to know how to configure a client to authenticate to
my ldap server. What would be the prerequisites in doing so?
find / analyze / understand
16 years, 2 months
[Fedora-directory-users] SSL Certs without password
by Michał Droździewicz
Hello,
I know how to generate certs with passwords, but this results in
password prompt at server startup and reboot. Is there a way to generate
SSL certificate without password?
--
xmpp/email: koniczynek(a)uaznia.net
xmpp/email: koniczynek(a)gmail.com
16 years, 2 months
[Fedora-directory-users] group mapping issue
by Brandon Young
I have recently attempted to set up a Fedora Directory Server for
evaluation as a replacement for NIS. Overall, the set up process was
pretty painless. I spent some time reading the Installation Guide,
Administrator's Guide, and Deployment Guide beforehand. Additionally,
I tracked down this wonderful guide
(http://www.csse.uwa.edu.au/~ashley/fedora-ds/fedora-ds-26072006.html)
which seemed like exactly what I needed.
I am trying to (ultimately) set up a directory service which provides
user authentication for Linux and OS X clients.
The problem I have run in to is the following: when I issue the
command `ls`, I see the following:
~$ ls -l
total 1
drwxr-xr-x 2 bky 1676 336 Jan 23 09:12 Desktop
drwxr-xr-x 4 bky 1676 216 Jan 17 10:24 Documents
drwx------ 19 bky 1676 544 Jan 22 12:19 Library
drwxr-xr-x 2 bky 1676 48 Jan 17 08:33 Movies
drwxr-xr-x 3 bky 1676 72 Jan 17 09:45 Music
drwxr-xr-x 2 bky 1676 48 Jan 17 08:30 Pictures
drwxrwxr-x 2 bky 1676 96 Dec 20 14:29 bin
drwxrwxr-x 3 bky 1676 72 Dec 20 15:53 svn
drwxr-xr-x 2 bky 1676 48 Jan 17 09:48 vmware
~$
if I issue the 'groups' command for the user, it tells me:
# groups bky
id: cannot find name for group ID 1676
#
So, it seems obvious to me that group mappings are not configured
correctly. On the client side, I am using a CentOS 4.4 machine,
configured to use ldap using system-config-authentication, and further
tweaking /etc/ldap.conf values for nss_base_passwd, nss_base_shadow,
and nss_base_group. Further, in digging through the mailing list
archives I found a suggestion to make sure pam_member_attribute was
set to uniqueMember -- which I tried, to no avail. I also tried
starting nscd which does not fix it (but I didn't really feel like
that was the problem, anyway).
I will further mention here that the ldap-client package is installed
and I have not tried to configure SSL or TLS, yet.
So, with that in mind ... what very obvious thing am I missing? Has
anyone seen and resolved this issue for themselves? Any help would be
greatly appreciated.
--
Brandon
16 years, 2 months
[Fedora-directory-users] Custom New User Template in GUI?
by Greg Copeland
For every user I add, I wind up having to customize. Does the GUI use a
template for new user creation which would allow me to customize the
template, thereby easing user creation? What about automatic uid/gid
calculation?
Best Regards,
Greg Copeland
16 years, 2 months
[Fedora-directory-users] Slapd command line usage
by Mike Mueller
Hi all.
I am looking to run the slapd process in the foreground on a Unix
system, so I can be notified immediately if it dies...
Looking at the usage of the "start-slapd" command:
usage: ns-slapd -D instancedir [-d debuglevel] [-i pidlogfile] [-v] [-V]
There's no real guidance as to how the -d option works (i.e. what levels
it supports), but experimentally, we've determined that -d 0 will run
the process and not fork/exit into the background. Is this behavior
known, and should we count on it? Is there a better way to get the
slapd to stay in the foreground? Finally, what debug levels are
available, and what do they mean?
Thanks!
--
Mike Mueller
mike(a)subfocal.net
16 years, 2 months
[Fedora-directory-users] Replication Errors
by David J. Schnardthorst
I am having issues with replication and need some assistance. I have
setup multi-master replication using the mmr.pl script. However,
replication is not occurring. I show the following messages in my LDAP
error log.
[14/Jan/2007:01:02:49 -0600] - Fedora-Directory/1.0.2 B2006.060.1928
starting up
[15/Jan/2007:00:00:00 -0600] NSMMReplicationPlugin -
agmt="cn="Replication to xxxxxx.com"" (xxxxxx:389): Incremental
protocol: event update_window_opened should not occur in state
wait_for_changes
[16/Jan/2007:00:00:00 -0600] NSMMReplicationPlugin -
agmt="cn="Replication to xxxxxx.com"" (xxxxxx:389): Incremental
protocol: event update_window_opened should not occur in state
wait_for_changes
Any thoughts would be greatly appreciated.
--
David Schnardthorst
http://www.wavesco.com
16 years, 2 months
[Fedora-directory-users] FDS Crashing!
by Nicholas Byrne
I'm using 1.0.4-1 release. My configuration fairly basic using "one way"
windows sync (ref:
https://www.redhat.com/archives/fedora-directory-users/2006-December/msg0...).
It's been working well until this morning for going on a month
(fortunately it's not live yet, but was planning to put it live this
weekend - not anymore!). I'm not sure what occurred exactly, a few
password changes and minor updates to a couple of attributes but since a
few hours ago any attempt to write to anything in the userRoot database
fails and slapd crashes. I've looked in the error and access logs but it
doesn't give much away - on restart i see:
[18/Jan/2007:14:48:42 +0000] - Fedora-Directory/1.0.4 B2006.312.435
starting up
[18/Jan/2007:14:48:42 +0000] - Detected Disorderly Shutdown last time
Directory Server was running, recovering database.
[18/Jan/2007:14:48:43 +0000] - slapd started. Listening on All
Interfaces port 389 for LDAP requests
[18/Jan/2007:14:48:43 +0000] - Listening on All Interfaces port 636 for
LDAPS requests
What can do to get more info?
Yesterday i did password change using ldappasswd and i found this issue
(https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179723) just now -
my directory does have a password policy. Is this fixed in 1.0.4?
I have tried a restore from a week old backup (using bak2db) but that
didn't fix the problem so anyone got any idea whats going on and how i
might start fixing this - Help!?
Thanks
Nick
This e-mail is the property of Quadriga Worldwide Ltd, intended for the addressee only and confidential. Any dissemination, copying or distribution of this message or any attachments is strictly prohibited.
If you have received this message in error, please notify us immediately by replying to the message and deleting it from your computer.
Messages sent to and from Quadriga may be monitored.
Quadriga cannot guarantee any message delivery method is secure or error-free. Information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.
We do not accept responsibility for any errors or omissions in this message and/or attachment that arise as a result of transmission.
You should carry out your own virus checks before opening any attachment.
Any views or opinions presented are solely those of the author and do not necessarily represent those of Quadriga.
16 years, 2 months