Re: [Fedora-directory-users] problem with unique search on gidNumber
by Jason Beavers
All,
Any thoughts about this? I know i'm missing something but so far i'm still stumped.
----- Original Message ----
From: Jason Beavers <beavrz1(a)yahoo.com>
To: General discussion list for the Fedora Directory server project. <fedora-directory-users(a)redhat.com>
Sent: Wednesday, December 19, 2007 5:22:10 PM
Subject: Re: [Fedora-directory-users] problem with unique search on gidNumber
that search returns ALL results with with ANY gidNumber value set, not just those with "205"
----- Original Message ----
From: Rich Megginson <rmeggins(a)redhat.com>
To: General discussion list for the Fedora Directory server project. <fedora-directory-users(a)redhat.com>
Sent: Friday, December 14, 2007 10:57:40 AM
Subject: Re: [Fedora-directory-users] problem with unique search on gidNumber
Jason Beavers wrote:
> Yep, "gidnumber.db4" is there.
So what does a search for "(gidNumber=205)" return?
>
> ----- Original Message ----
> From: Rich Megginson <rmeggins(a)redhat.com>
> To: General discussion list for the Fedora Directory server project.
> <fedora-directory-users(a)redhat.com>
> Sent: Friday, December 14, 2007 10:19:54 AM
> Subject: Re: [Fedora-directory-users] problem with unique search on
> gidNumber
>
> Jason Beavers wrote:
> > well i cheated (lazy :-) ) and edited the index configuration using
> > the Fedora console, which regenerated the indexes.
> You can check - look in /opt/fedora-ds/slapd-instancename/db/userRoot
> and see if you have a
gidNumber.db4 file.
> > Or so i was lead to believe it would based on the documentation.
> > should i be forcing it by runing the perl scripts instead?
> >
> > ----- Original Message ----
> > From: Rich Megginson <rmeggins(a)redhat.com
<mailto:rmeggins@redhat.com>>
> > To: General discussion list for the Fedora Directory server
project.
> > <fedora-directory-users(a)redhat.com
> <mailto:fedora-directory-users@redhat.com>>
> > Sent: Friday, December 14, 2007 8:08:24 AM
> > Subject: Re: [Fedora-directory-users] problem with unique search on
> > gidNumber
> >
> > Jason Beavers wrote:
> > > I'm trying to get unique searches working for "gidNumber." When
> > > trying a search as below:
> > >
> > > ./ldapsearch -b "dc=mydomain,dc=int"
> > > "(&(objectClass=groupOfNames)(gidNumber=205)(ou:dn:=Groups))" cn
> > gidNumber
> > >
> > >
> > > I'm getting results back with ALL entries with a gidNumber
attribute
> > > set, instead of just the one entry that matches "gidNumber=205."
> > > I've tried adding the gidNumber attribute to the indexes,
> > What steps did you take? You created the index configuration?
Then ran
> > db2index to generate the index files?
> > > however i cannot seem to get it to respond with a unique result.
> > Have you tried just "(gidNumber=205)" - does that work?
> > >
> > > What am I missing?
> > >
> > > Thanks in advance.
> > >
> > > -j
> > >
> > >
>
------------------------------------------------------------------------
> > > Never miss a thing. Make Yahoo your homepage.
> > > <http://us.rd.yahoo.com/evt=51438/*http://www.yahoo.com/r/hs>
> > >
>
------------------------------------------------------------------------
> > >
> > > --
> > > Fedora-directory-users mailing list
> > > Fedora-directory-users(a)redhat.com
> <mailto:Fedora-directory-users@redhat.com>
> > <mailto:Fedora-directory-users@redhat.com
> <mailto:Fedora-directory-users@redhat.com>>
> > > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> > >
> >
> >
> >
> >
------------------------------------------------------------------------
> > Looking for last minute shopping deals? Find them fast with Yahoo!
> > Search.
> >
>
<http://us.rd.yahoo.com/evt=51734/*http://tools.search.yahoo.com/newsearch...>
>
> >
> >
------------------------------------------------------------------------
> >
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users(a)redhat.com
> <mailto:Fedora-directory-users@redhat.com>
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
>
>
>
>
------------------------------------------------------------------------
> Never miss a thing. Make Yahoo your homepage.
> <http://us.rd.yahoo.com/evt=51438/*http://www.yahoo.com/r/hs>
>
------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
Looking for last minute shopping deals?
Find them fast with Yahoo! Search.
____________________________________________________________________________________
Never miss a thing. Make Yahoo your home page.
http://www.yahoo.com/r/hs
15 years, 4 months
[Fedora-directory-users] Fedora Directory Server not configuring admin server!
by Dane Shea
Hi, I am on the verge of creating a fedora directory server but I have one
more obstacle in my way. This is what happens when I try to set up the
Fedora Directory Server 1.0.4 in Fedora 8
Please select the install mode:
1 - Express - minimal questions
2 - Typical - some customization (default)
3 - Custom - lots of customization
Please select 1, 2, or 3 (default: 2) 2
Hostname to use (default: localhost.localdomain) daneshea.com
Server user ID to use (default: nobody) SheaServer
Server group ID to use (default: nobody) SheaServer
[slapd-daneshea]: starting up server ...
[slapd-daneshea]: Fedora-Directory/1.0.4 B2006.312.1539
[slapd-daneshea]: daneshea.com:389 (/opt/fedora-ds/slapd-daneshea)
[slapd-daneshea]:
[slapd-daneshea]: [26/Dec/2007:11:17:31 -0600] - Fedora-Directory/1.0.4
B2006.312.1539 starting up
[slapd-daneshea]: [26/Dec/2007:11:17:31 -0600] - slapd started. Listening on
All Interfaces port 389 for LDAP requests
Your new directory server has been started.
Created new Directory Server
Start Slapd Starting Slapd server configuration.
Success Slapd Added Directory Server information to Configuration Server.
Configuring Administration Server...
ERROR: Administration Server configuration failed.
You can now use the console. Here is the command to use to start the
console:
cd /opt/fedora-ds
./startconsole -u admin -a http://daneshea.com:40814/
INFO Finished with setup, logfile is setup/setup.log
[root@daneshea ~]#
If you curious this is what the log file says:
Continue? (yes/no) yes
Please select 1, 2, or 3 (default: 2) 2
getFQDN: hostname = daneshea.com
getFQDN: host daneshea.com = daneshea.com
daneshea.com
daneshea.com
getFQDN: host daneshea.com has length 13
getFQDN: new max host daneshea.com has length 13
getFQDN: host daneshea.com has length 13
getFQDN: host daneshea.com has length 13
getFQDN: host daneshea.com has length 13
getFQDN: host daneshea.com has length 13
getFQDN: host daneshea has length 9
getFQDN: host localhost.localdomain has length 22
getFQDN: new max host localhost.localdomain has length 22
getFQDN: host localhost has length 10
getFQDN: host daneshea has length 9
Hostname to use (default: localhost.localdomain) daneshea.com
Server user ID to use (default: nobody) SheaServer
Server group ID to use (default: nobody) SheaServer
[slapd-daneshea]: starting up server ...
[slapd-daneshea]: Fedora-Directory/1.0.4 B2006.312.1539
[slapd-daneshea]: daneshea.com:389 (/opt/fedora-ds/slapd-daneshea)
[slapd-daneshea]:
[slapd-daneshea]: [26/Dec/2007:11:17:31 -0600] - Fedora-Directory/1.0.4
B2006.312.1539 starting up
[slapd-daneshea]: [26/Dec/2007:11:17:31 -0600] - slapd started. Listening on
All Interfaces port 389 for LDAP requests
Your new directory server has been started.
Created new Directory Server
Start Slapd Starting Slapd server configuration.
Success Slapd Added Directory Server information to Configuration Server.
Configuring Administration Server...
ERROR: Administration Server configuration failed.
You can now use the console. Here is the command to use to start the
console:
cd /opt/fedora-ds
./startconsole -u admin -a http://daneshea.com:40814/
INFO Finished with setup, logfile is setup/setup.log
Thanks in advance guys!
15 years, 4 months
[Fedora-directory-users] Setting up 1.0.4-1 x86_64 on RHES5 64-bit
by Ken Marsh
Hello again,
Thanks for the previous help. As advised, I removed the FC5 binary and
went with FC6 on Red Hat Enterprise Server 5 x86_64. I've now caught up
with where I was before. The Directory Server is running OK but I can't
get the admin server to start. The setup/setup script failed with a
message:
Setting up Administration Server Instance...
ERROR: Administration Server configuration failed.
The console starts as advised, but there is no Admin server for it to
connect to.
I can't find specific directions for where I'm at now, I guess because
this stuff is supposed to "just work". Striking out on my own, I've
copied over the templates for start-admin and httpd.conf and edited
them. I am using /usr/sbin/http.worker for my web server. After setting
sroot and httpd, it seems to start up OK until it looks for modules.
Here is the error:
[root@ansb16 fedora-ds]# ./start-admin
httpd.worker: Syntax error on line 128 of
/opt/fedora-ds/admin-serv/config/httpd.conf: Cannot load
/opt/fedora-ds/admin-serv/%%%module_dir%%%/modules/mod_access.so into
server:
/opt/fedora-ds/admin-serv/%%%module_dir%%%/modules/mod_access.so: cannot
open shared object file: No such file or directory
I've looked around. I don't see the config file location to set
%%%module_dir%%%, and what is more, the
/opt/fedora-ds/admin-serv/modules directory is empty. I did some finds
on the system and cannot find mod_access.so anywhere. So, even if I did
set it, where do I point it to?
Is there a preferred place to download these modules, or do I need them
at all? Or did I skip some part of the setup process?
Thanks and Happy Holidays,
Ken.
15 years, 4 months
[Fedora-directory-users] Problem with nsview hierarchy
by Fabrice Durand
Hi,
i've got a problem with my nsview organizationalunit hierarchy, and i don't
understand what's wrong.
I use my nsview hierarchie to organize my flat user OU
(ou=People,dc=test,dc=com). All user have an departmentNumber that i use to
filter with nsviewfilter.
The problem is that when a script search all OU in the hierarchy, the
serveur doesn't return all the OU. (perl script, php script).
I put an ldif file of my directory (ou=annuaire,dc=test,dc=com) and the
script i use , to understand what happen.
An exemple when i search with a filter "objectClass=organizationalUnit" in
ou=annuaire,dc=test,dc=com, fedora directory server return only 17 entries.
When i modify the entry ou=annuaire,dc=test,dc=com (delete the value of
nsviewfilter and delete objectclass=nsview), the serveur return all the
entries(45), but all the users disepeared.
I really don't understand what's wrong, sometime when i change an "OU" name,
the number of return entries changes.
If you have an explanation, thank you in advance.
Fabrice Durand
15 years, 4 months
[Fedora-directory-users] getent?
by Paul Fontenot
Hi,
I've searched hi and low and found a couple references to the problem I
have but no solutions.
If I issue 'getent passwd' I can see all the ldap users, if I issue a
getent group I cannot see any of the ldap groups. When I log into one of
my linux boxes I get 'id: cannot find name for group ID 500' (500 is an
ldap group).
What would cause this issue? I've been beating my head against it for a
couple days and decided to turn to the experts.
Thanks,
Paul
15 years, 4 months
[Fedora-directory-users] Setting up 1.0.4-1 x86_64 on RHES5 64-bit
by Ken Marsh
Hello again,
I've made progress- found most of the apache modules in
/usr/lib64/httpd/modules , and linked them in. However, according to
this post:
http://lists.linuxcoding.com/rhl/2006/msg15719.html
the mod_access.so module (and I'm guessing mod_auth.so as well) is no
longer included in Apache 2.2. Commenting them out of httpd.conf, but
allowing the rest of the modules to be loaded with LoadModule, I get the
following error when trying to start the administration server:
# ./start-admin
Syntax error on line 255 of /opt/fedora-ds/admin-serv/config/httpd.conf:
Invalid command 'Order', perhaps misspelled or defined by a module not
included in the server configuration
Is FDS fundamentally incompatible with Apache 2.2? Should I load an
older Apache?
-Ken.
------------------------------
Message: 3
Date: Wed, 2 Jan 2008 10:35:08 -0500
From: "Ken Marsh" <kmarsh(a)gdrs.com>
Subject: [Fedora-directory-users] Setting up 1.0.4-1 x86_64 on RHES5
64-bit
To: <fedora-directory-users(a)redhat.com>
Message-ID:
<5AD9B0E562FEFB4E933861904D7135C5688671(a)gdrs-exchange.gdrs.com>
Content-Type: text/plain; charset="us-ascii"
Hi,
Happy New Year's, everyone!
Re: my 12/21 e-mail (Issue 35), does anyone have any clue as to the
missing files in /opt/fedora-ds/admin-serv/modules , or where to set
%%%module_dir%%% ? I need to get this server up and running.
Thanks,
Ken.
------------------------------
Message: 4
Date: Wed, 2 Jan 2008 11:45:03 -0400
From: kiran madala <kirankmadala(a)hotmail.com>
Subject: [Fedora-directory-users] Windows console
To: <fedora-directory-users(a)redhat.com>
Message-ID: <BLU112-W144AF1FABF125F7B25494BDF520(a)phx.gbl>
Content-Type: text/plain; charset="iso-8859-1"
Hi,
The windows console for 1.1 server does not work it gives me this error
F:\Program Files\Fedora Identity Management Console>echo off
The Java Runtime Environment is installed on this machine, but the
command java.exe is not in your PATH. You can either make sure java.exe
is in the PATH, or edit this script to set JAVA to the full path of
java.exe
Press any key to continue . . .
All my java programs work. The java in my class path and also in my
registry . Any idea whats causing the problem?
_________________________________________________________________
Introducing the City @ Live! Take a tour!
http://getyourliveid.ca/?icid=LIVEIDENCA006
15 years, 4 months
Re: [Fedora-directory-users] Class Loader
by audunroe@tihlde.org
> Audun,
> I connect to my Fedora6 FDS1.0.4 setup from my mac using an X11
> terminal over ssh with forwarding. ssh -XY blah.blah.gov. Then I
> run the console from there and everything in terms of security is done
> lcalhost on the ldap server, my session shows up on my mac tunneled
> entirely through ssh. This gets through any firewall I've had to deal
> with.
>
> I'm not clear on whether this works for you in your set up, but I
> thought I'd add my 2 cents. Good luck.
>
> ED.
This actually does work, although it's rather slow over ~200kb/s VPN.
Still, beats no console at all. Thanks for the suggestion!
An additional question, though:
I've been using the wiki entry on
http://directory.fedoraproject.org/wiki/Howto:WindowsConsole as a
reference. Judging by the requirement to copy the ./lib folder and set
paths/environment vars for it, java.library.path in particular, the
console would seem to use JNI (ie: native calls, not
pure/platform-independent Java) for some of its functionality. If so, how
could it ever work on Windows? Simply copying the native libs as suggested
by the wiki entry would, to the best of my knowledge, accomplish nothing.
An older admin console MSI-installer package I came across actually
included a handful of DLLs, to reinforce the impression that native calls
are used/needed. On the other hand, people seem to have been able to make
it work in Windows by simply following the instructions of the wiki, so
I'm a bit puzzled. If this is the case, it would seem they're not needed.
(To reiterate: I can run the console under Windows and I can connect to
the adm server, but it's functionally crippled. Either due to a certain
firewall that remains closed; JNI, something else entirely, or possibly
all three. Hopefully I'll be able to at least rule out or identify the fw
as the culprit by next week ;)
--
Regards,
Audun
15 years, 4 months
[Fedora-directory-users] Setting up 1.0.4-1 x86_64 on RHES5 64-bit
by Ken Marsh
Jazcek,
Thanks for your help.
The sed I ended up with is:
cd /opt/fedora-ds/admin-serv/config
sed 's#%%%module_dir%%%#/opt/fedora-ds/admin-serv#'
httpd.conf.unconfigured > httpd.conf
This fixed the httpd.conf file, but I still don't have any http server
modules. This is the start-admin error now:
httpd.worker: Syntax error on line 128 of
/opt/fedora-ds/admin-serv/config/httpd.conf: Cannot load
/opt/fedora-ds/admin-serv/modules/mod_access.so into server:
/opt/fedora-ds/admin-serv/modules/mod_access.so: cannot open shared
object file: No such file or directory
Indeed the modules directory is still empty. I did an rpm2cpio on the
fedora-ds-1.0.4-1.FC6.x86_64.opt.rpm file, and there is no mod_access.so
file (or other apache modules) inside. Is this an oversight, or are they
generated during install and that part of the rpm failed, or am I
supposed to acquire them elsewhere?
Thanks,
Ken.
15 years, 5 months