[Fedora-directory-users] samba + PDC + FDS
by Satish Patel
dear all
it is possible to implement samba as PDC + FDS and it will give fully functionality like Win 2003 DC ??
Regards
$ cat ~/satish/url.txt
http://www.linuxbug.org
_____________________________________________________________________________________________________
---------------------------------
Forgot the famous last words? Access your message archive online. Click here.
15 years, 7 months
[Fedora-directory-users] How can you monitor replication?
by Ian Meyer
Hello,
We have a decent sized env. (1 master, 16 slaves in different
datacenters across the world) and we're trying to find a way to
effectively monitor the status of replication. When was the last
update? How many changes were made? How long did it take from start to
finish? I know you can get most of this information from the gui, but
we need to tie it in to our monitoring application. Is this
information stored in a db anywhere? In ldap itself? Any insight would
be appreciated.
Thanks in advance!
- Ian
15 years, 8 months
[Fedora-directory-users] glibc errors
by Bjorn Oglefjorn
I am trying to track down the cause of some errors that have been occurring
on a number of our servers using LDAP. We have noticed that when a certain
LDAP group exceeds 65 users we begin seeing glibc errors for users in the
group. Users that are not in the group do not exhibit this behavior.
We have seen this issue on machines running Centos 4.5 x86 & x86_64 with
glibc-2.3.4-2.36 and RH4 x86_64 running glibc-2.3.4-2.25. We are running
Fedora Directory Server 1.0.4 on Centos 4.5. We have added a 3rd FDS slave
and turned up debugging but have not seen anything that appears to be
relevant in the logs on the 3rd slave.
This problem is not a 65 user limit as we have other groups with well over
65 members that do not display this behavior. We also created a new group
with identical users and it did not display this problem.
1) With 66 users in the massweb group
[root@megalon ~]# getent group massweb
*** glibc detected *** free(): invalid next size (normal): 0x09a225b0 ***
Aborted
2) After removing any user from the massweb group to reduce the total
members to 65
[root@megalon ~]# getent group massweb
massweb:x:3016:afaxon,ashairza,ccrump,jhorowit,mmarum,morendai,usmall,adroffne,afaxon,amurphre,aoliver,ayellipe,bdonohue,bdunn,beckert,blarsen,bwphilli,catanis,ccrump,chaynes,clyons,cwong,dbarber,dmuse,dnicol,edougher,egallant,ekubosia,evizcain,feeddrop,gtulonen,halokush,hbraverm,jbartus,jbrown,jhobbs,jking,jlederma,jpecora,jthayer,kbalbedi,kbeam,kginn,mbuonfig,mcrawfor,mlarsen,mlong,mwalsh,osedano,proche,prondeau,pweinber,rhorriga,rkersey,rskutins,sasaro,sbrodeur,sculver,smoriart,support,swestenh,tbaltimo,torgelfi,usmall,vvalenti
Has anyone encountered a similar problem? Any suggestions would be most
welcome.
Best regards
15 years, 8 months
[Fedora-directory-users] libatomic.o missing; Solaris 8 Build
by Jason
hello,
I'm trying to compile FDS 1.0.4 on a 280R running Solaris 8. After getting
all of the prerequisites installed (gnu make, apr, ant, sun workshop
compiler, etc) I started following the directions located here:
http://www.directory.fedora.redhat.com/wiki/Building#External_Requirements
I created my ldap directory, and downloaded the mozilla components tarball
linked.
I successfully compiled NSS via 'gmake nss_build all'
I successfully compiled SVRCORE
Next, I attempted to compile LDAPSDK (mozilla/directory/c-sdk) but I get a
File not found error when it tries to link libatomic.o.
About the only thing I've been able to learn from a few hours of google is
that it appears that libatomic.o should come from NSPR, which, in theory,
was compiled during the gmake nss_build_all according to the build
documentation. Unfortunately, I cannot find libatomic.o anywhere on the
system.
Is there a way to get past this problem? Am I crazy for expecting this to
compile on solaris even though solaris support is listed? Is there a better
build guide I should be following?
I've copied the compile errors below, in case it helps anyone see what's
going on. Any help that can be provided is greatly appreciated!
~Jason
======= making ./libldap60.so
gcc -shared -Wl,-soname -Wl,libldap60.so -f libatomic.so -o
libldap60.so./abandon.o ./add.o ./bind.o ./cache.o ./charray.o
./charset.o ./compare.o
./compat.o ./control.o ./countvalues.o ./delete.o ./disptmpl.o ./dsparse.o
./error.o ./extendop.o ./free.o ./freevalues.o ./friendly.o ./getattr.o
./getdn.o ./getdxbyname.o ./getentry.o ./getfilter.o ./getoption.o
./getvalues.o ./memcache.o ./message.o ./modify.o ./open.o
./os-ip.o./proxyauthctrl.o ./psearch.o ./pwmodext.o ./referral.o
./regex.o ./rename.o
./request.o ./reslist.o ./result.o ./saslbind.o ./sbind.o ./search.o
./setoption.o ./sort.o ./sortctrl.o ./srchpref.o ./tmplout.o ./ufn.o
./unbind.o ./unescape.o ./url.o ./utf8.o ./vlistctrl.o ./saslio.o
-L../../../../../dist/lib -llber60
gcc: libatomic.so: No such file or directory
gmake[3]: *** [libldap60.so] Error 1
gmake[3]: Leaving directory
`/root/ldap/mozilla/directory/c-sdk/ldap/libraries/libldap'
gmake[2]: *** [export] Error 2
15 years, 8 months
[Fedora-directory-users] fds vs passsync vs AD
by Paolo Barbato
Hi all!
I've succesfully installed fds and passync msi on windows AD. I admit
that some probem have arisen since documentation is a bit poor on SSL
part, especially on AD, but then finally I was able to make things
works.
I'm facing an odd problem that I'm not able to understand, but
probably already discussed on the list.
I'm able to take in sync password in AD and FDS when I change
password from AD, but not viceversa. Really from Windows event log
things seem go right: it tell me that pasword has been succesfully
updated (passwd is issued from linux). But that stored password is
somewhat different . Could be an encryption problem ? Any hints ?
Regards,
Paolo.
--
------------------------------------------------------------------------------------------------
Paolo Barbato email: mailto:paolo.barbato@igi.cnr.it
Network Administrator phone: (39-049)-829-5097
(39-049)-829-5000
Corso Stati Uniti,4 www: http://www.igi.cnr.it
35127 Camin-Padova PGP:
http://www.igi.cnr.it/wwwpgp/rfx_paolo_barbato.pgp
ITALY JabberID: rfx_paolo_barbato(a)messenger.efda.org
------------------------------------------------------------------------------------------------
15 years, 8 months
[Fedora-directory-users] Active Directory Password Question
by Dusty Herrman
I work for a University where Microsoft and Unix/Linux products are both
heavily present. We currently have both MS Active Directory servers and
OpenLDAP servers. We are currently looking at upgraded both of these
technologies.
Currently we store all the user's passwords in LDAP (encrypted). Using
the "Windows Sync" feature of Fedora DS, is there a way to push the
encrypted passwords into Active Directory? Or is it only a AD -> LDAP
password push?
Thanks in advance,
Dusty Herrman
KEAS Authentication/Directory Engineer
Kansas State University
djh5983(a)k-state.edu
15 years, 8 months
[Fedora-directory-users] white space at the end of attributes that refuses to go away
by Edward Capriolo
I am having an issue that may be related to multi-master replication,
or it may be related to a non viewable ascii value in an attribute.
We have a custom schema. We have a multivalued attribute
departalloweddomain
this attribute has three values inside it.
"a.com"
"b.com "
"c.com "
My goal is to remove the trailing white space. Which may be a space or
a weird character.
I have tried deleting the individual values and re-adding them.
I attempted to delete the entire attribute and re-add.
The value keeps appearing like so.
"b.com "
Any ideas on how to clean this up. We do thousands of add and remove
operations a day and this has happened a few times.
15 years, 8 months
[Fedora-directory-users] Dynamic Groups and PAM/NSS _ldap
by Rubin
Hi Group,
A while ago there was a discussion here about dynamic groups and the
fact that the client(s) needs to handle this.
I've been working with RHDS in combination with HP's LDAP-UX, where the
client side of LDAP-UX does something smart to get dynamic groups
working as posix groups, which is really really cool. Essentially, you
get dynamic posix groups and a getent group (or grget on hp-ux) return
the group including all dynamic (memberURL) and static (memberuid)
members of a group.
I'm trying to get a conclusive answer about if this is possible under
linux. I thought pam_member_attribute would come to the rescue in this
case, but that does not seem to work.
So: is it possible to have dynamic members in a posix group under linux
using nss_ldap and pam_ldap so a "getent group" returns dynamic members?
If not, is there somebody working on it? or maybe even a commercial
tool/add-on?
Kind regards,
Rubin.
15 years, 8 months
[Fedora-directory-users] Five-way MMR
by Kimmo Koivisto
Hello
I have five servers with FDS 1.0.4 and I would like to use multimaster
replication in those servers.
I know that there is some kind of limit for the number of servers in MMR,
four servers is the maximun if I remember correctly.
So, can I add replication agreements to five servers, is there a hardcoded
limit for four servers or what? What happends if I add those agreements?
Regards,
Kimmo Koivisto
15 years, 8 months