Sorry for the newbie question. I've installed a master FDS server
using setup-ds-admin.pl. I want to install a second server to act as
secondary master (i.e. read-write also). Do I use setup-ds-admin.pl to
install the 2nd machine? Or do I just use setup-ds.pl?
Does each machine have it's own independent o=netscaperoot database,
or do they share that too? I would guess that you'd want all of your
servers to share one netscape root tree. Is there a document that
talks about how to do this?
Thanks in advance
Halloo Communications - WebCall, Make Free Phone Calls - www.halloo.com
First of all I have to mention that Windows Users & Groups were
created before Fedora Directory was installed, so when FDS was
installed I started up with replicated windows users in FDS without
passwords being synchronized. Therefore, the scenario is a Windows
tree with users (with passwords) & groups and FDS with users and
groups replicated without their passwords.
I am trying to define a mechanism to reset every password in both
directories so they begin to work synchronized.
Doing some tests, I realized that a change made in Windows is
replicated into FDS binding as the users subject of change, so as the
entry doesn't have it's password, the following lines are logged in
FDS access log:
[08/Jan/2008:15:51:35 -0300] conn=1033 op=0 BIND
[08/Jan/2008:15:51:35 -0300] conn=1033 op=0 RESULT err=49 tag=97
[08/Jan/2008:15:51:35 -0300] conn=1033 op=1 UNBIND
[08/Jan/2008:15:51:35 -0300] conn=1033 op=1 fd=80 closed - U1
[08/Jan/2008:15:51:35 -0300] conn=1032 op=2 RESULT err=50 tag=103
[08/Jan/2008:15:51:35 -0300] conn=1032 op=3 UNBIND
I haven't found any documentation about inbound changes, specifically
password change, being done as the same user subject of the change. Is
Thanks in advance, and sorry for my bad English
Lic. Christian A. Rodriguez
we need to create a lot of databases and replication confgurations on
our test environment (4 FDS servers configured in Multi Master)
Is there any way to do this via script (ldapmodify or any other utility)
or the only way is via the Fedora Management Console?
Thanks in advance,
Thanks for all your effort.
I always chose "2", some customization, for all install efforts. Should
I be choosing 3?
No errors were logged anywhere, on either server, only the message from
./setup/setup that the Admin hadn't started.
I also got to the point where the new server was recognized by the old
server's admin, but when I tried to manage it, I just got an error that
a .jar couldn't be downloaded.
Thank you everyone for your patience. I was able to get 1.0.1-4 up and
running with Admin working on ES5/64 bit by simply saying "No" to one of
the questions about my 7.1 DS:
Fedora configuration directory server? [No]:
Saying "yes" to this question and entering my 7.1 DS data, causes the
config of the 1.0.1-4 Admin server to fail.
The next question, I can answer No or Yes, so I used Yes.
Do you want to use another directory to store your data? [Yes]:
So now I have a working DS with Admin, I'd like to set up Multi-Master.
Using my 7.1 DS as host 1, I tried:
/usr/local/src/mmr.pl --host1 server1.company.com --host2
server2.company.com --host1_id 1 --host2_id 2 --bindpw 'xxxx' --repmanpw
adding to string.gdrs.com -> cn=changelog5,cn=config
adding to string.gdrs.com -> cn=repman,cn=config
adding to string.gdrs.com ->
adding to ansb16.gdrs.com -> cn=changelog5,cn=config
adding to ansb16.gdrs.com -> cn=repman,cn=config
adding to ansb16.gdrs.com ->
failed to add replica entry: No such object at /usr/local/src/mmr.pl
line 313, <DATA> line 339.
I tailed the error logs of both files as directed. Neither logged
anything through the failure.
I have some questions:
Am I setting the Repository Manager password, or using it? If so, what
is it? I have all my notes on the 7.1 install and don't recall that role
being set up and passworded. Is it the same, or called something else?
Also, any clues as to the failure? I have (I think) PERL::ldap
Besides that, how do I get one Admin to manage the other DS, given that
I didn't allow the script to try?
Is there a reason that the BIND and DHCP integration HOWTO has never
been written? I tried to do this a year ago and failed. I had
difficulty finding and importing an acceptable schema to use. I tried
to convert an OpenLDAP schema and failed. Perhaps I gave up too easily.
I would like to try it again, especially since bind-9.5 has a couple of
features I want to use.
Does anyone have a schema to start with?
Any words of advice?
Any reason not to make a HOWTO?
Date: Tue, 08 Jan 2008 16:30:43 -0700
From: Rich Megginson <rmeggins(a)redhat.com>
Subject: Re: [Fedora-directory-users] Admin server startup errors
1.0.4-1 on RHEWS3
To: "General discussion list for the Fedora Directory server project."
Content-Type: text/plain; charset="windows-1252"
>> This is very frustrating, I have NDS 6.3 (correction: FDS 7.1) I am
heavily reliant on, and
>> very badly need a backup DS so I can do an extended service on that
>> server. Perhaps entering that server's info in the setup/setup script
>> is part of the problem?
As I suspected, THIS IS THE PROBLEM!
I just rpm -e'd fedora 1.0.4-1, rm -fr'd the /opt/fedora-ds directory,
and then reinstalled saying "No" to whether I had another DS and if
there was another DS with configuration information. The Admin server
configured and started up automatically!
So, now we know 1.0.4-1's Admin setup is strongly adverse to using my
7.1 for config.
>Is that server running?
There is no crowd at my door, so, yes. :)
I am going to re-run it again and say "No" to the first other-DS
question and "Yes" to using it as a Config server and see what happens.
This muthu i have installed in fedora core7, i have 50 machine in windows xp and 12 for linux i have windows 2003 server i want change the directory server in Linux how to install and configure the fedora directory server in fc7 please Help me
Thanks & Regards
Never miss a thing. Make Yahoo your homepage.
>From multiple install attempts, I've learned to set this before doing
On ES5 the LD_LIBRARY_PATH is not previously set. On ES3 it is rich with
developer libraries in /usr/local, but the DS path is now first.
As for host names, nslookup and reverse lookup are both OK, for short
name, FQDN and IP. The /etc/hosts file does not conflict with DNS.
This is on Red Hat Enterprise Linux WS release 3 (Taroon Update 6) and
ES5 Update 1 64 bit. I don't know if having the latest Update level
matters. However I'm running out of Red Hat versions to install this on.
They all have the same problem configuring the Admin server.
>What errors did you get during setup?
Pretty much the same behaviour on ES5/64bit end ES3/32bit. The startup
script merely says the Admin server doesn't start. At that point,
/opt/fedora-ds/admin-serv/logs/errors is empty. Later, after I manually
hack up a bunch of httpd.worker config files, it has the AdmldapInfo
error I already reported.
The only real difference between the two is that I can later manually
hack up Apache 2.0 configs on ES3/32, but it's hopeless on the Apache
2.2 of ES5/64, given the lack of mod_auth.so et al.
It seems that in all cases, the Admin server startup script exits early
Looking at the list, it seems I am not the only one with this problem.
This is very frustrating, I have NDS 6.3 I am heavily reliant on, and
very badly need a backup DS so I can do an extended service on that
server. Perhaps entering that server's info in the setup/setup script is
part of the problem?