389-users February 2008

389-users@lists.fedoraproject.org

59 participants
100 discussions

[Fedora-directory-users] Installing on Cent OS 5.1
by Todd Nine 09 Feb '08

09 Feb '08

Hi all, I'd like to install Fedora Directory server 1.1 on Cent OS 5.1 I'm in the process of installing it now, and everything is going well. However, I feel a bit like Alice in Wonderland. I basically want to replace Active Directory functionality with Fedora Core. I *think* I may need to install and integrate Kerberos as well. What I basically need is to allow users to log in via SSH and PAM to Fedora Directory, as well as authenticate our numerous webapps with the LDAP functionality. Are there any good books or tutorials available that I can read? I've read the quick tutorials on the website regarding integrating PAM, but I can't seem to get the user information to work. When a user logs in, their home directory is not created, and their UID and GID aren't downloaded. I'm a bit lost, so any documentation that is at a higher level system architecture would be greatly appreciated, I'm not sure I have all the components I need to build this . I want to build a solid framework to allow us to easily administer users and groups. Thanks, Todd

1 0

[Fedora-directory-users] Replication from Critical Path to FDS 1.0.4
by Branimir 09 Feb '08

09 Feb '08

Hi everyone! I hope someone could give me an advice for the issue described in the subject. I contacted CP support and they suggested that we should buy their Meta Directory server which can process incremental updates between CP and FDS (or any other LDAP) and, initially, to dump our DIT into LDIF and import it to FDS. I created a few shell scripts that manage daily "replication" between two servers using LDIF dump and exporting the dump into FDS. I know that this is far from an elegant solution (especially concerning incremental updates) but before we make a decision to buy CP Meta Directory server, I wonder if we have other options? Thank you in advance! Regards Branimir

1 0

[Fedora-directory-users] One step build for platforms other than Fedora
by Rich Megginson 09 Feb '08

09 Feb '08

I've updated the one step build scripts for Fedora DS 1.1. The new version allows you to pick and choose which components you want to build from source and which you want to just use from the operating system. I don't have a tarball up yet, but you can get it from anonymous CVS: cvs -d :pserver:anonymous@cvs.fedoraproject.org:/cvs/dirsec co dsbuild or if you don't want the CVS directories cvs -d :pserver:anonymous@cvs.fedoraproject.org:/cvs/dirsec export -rHEAD dsbuild FAQ: * How does it work? after checkout/export cd dsbuild/meta/ds make help Help only tells about SASL_SOURCE and SNMP_SOURCE - but if you look at the meta/ds/Makefile you will see that there are many COMPONENT_SOURCE variables (NSPR_SOURCE, NSS_SOURCE, etc.). The script is not smart enough to figure out which components are provided by your OS, so if you want to build something from source you'll have to explicitly specify it. Use make PREFIX=/opt/dirsrv to compile and install directly into /opt/dirsrv Use make PREFIX=/opt/dirsrv DESTDIR=/var/tmp to compile and install into /var/tmp for packaging that at runtime will use /opt/dirsrv e.g. for native system packaging systems * What's missing? All console/java code is still incomplete - jss, ldapjdk, etc. dsbuild/README needs to be updated make help needs to be updated * What platforms are supported? You'll need relatively recent versions of GNU make, sed, wget, bzip2, gzip, tar, patch, md5sum

2 1

[Fedora-directory-users] SSL issue
by Anand Vaddarapu 09 Feb '08

09 Feb '08

Hi, Restarted my FDS as soon as enable SSL service. I try to restarted my dirsrv-admin, its promt me for password. When i enter valid password , the error mesg appers saying "incorrect password". I m damn sure that entered password was correct. When it happened to me first time i tought i forgot password and reinstall the FDS. Again happened second time. Please let me know how can i recover password or any alternative way to restart my dirsrv-admin. Thanks Vivek

2 13

[Fedora-directory-users] ldif error on startup
by Ken Marsh 08 Feb '08

08 Feb '08

Hi, Thanks to all the Fedora DS development team for supporting us poor souls and creating a great product. I have a MultiMaster replicated 1.0.4-1 DS running on RHES5 x64. It's worked fine since it was created a few weeks ago. When the host system was rebooted, it refused to come up. This is the reason why: [07/Feb/2008:20:25:41 -0500] dse - The entry cn=schema in file /opt/fedora-ds/slapd-server2/config/schema/99user.ldif is invalid, error code 20 (Type or value exists) - attribute type pamMapMethod: Does not match the O ID "2.16.840.1.113730.3.1.2070". Another attribute type is already using the name or OID. [07/Feb/2008:20:25:41 -0500] dse - Please edit the file to correct the reported problems and then restart the server. Fedora-Directory/1.0.4 B2006.338.2215 <host>:<port> (/opt/fedora-ds/slapd-server2) I edited the file and removed the offending entry, and it restarted. The offending entry which looks like this in file 99user.ldif: attributeTypes: ( 2.16.840.1.113730.3.1.2070 NAME 'pamMapMethod' DESC 'How to map BIND DN to PAM identity' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VAL UE X-ORIGIN ( 'Red Hat Directory Server' 'user defined' ) ) Grepping around, I found the same OID in 60pam-plugin.ldif: attributeTypes: ( 2.16.840.1.113730.3.1.2070 NAME 'pamIDMapMethod' DESC 'How to map BIND DN to PAM identity' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'Red Hat Directory Server' ) My questions are, will my removing this entry break anything? And if so, what? Should I replace the entry with a corrected value? Since removing it from 99user.ldif, the DS seems to be running fine now. This DS was originally populated by replication from a 7.1 DS, if that makes any difference. Thanks and keep up the good work, Ken.

2 1

[Fedora-directory-users] Fedora IDM Console???
by Singh Raina, Ajeet 08 Feb '08

08 Feb '08

I changed the java to java -version but it dint worked. PLs Help?? This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.

2 1

[Fedora-directory-users] Fedora DS Console?
by Singh Raina, Ajeet 08 Feb '08

08 Feb '08

Where can I find resources related to Fedora Directory Console???? This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.

1 0

[Fedora-directory-users] Managing NIS Servers into LDAP?
by Singh Raina, Ajeet 08 Feb '08

08 Feb '08

I want to make it more "clear". Say, I have 300 users on each NIS Users. The overall DS should resemble the following architecture: People -------|----Jupr-------------------------------|---<List of Users belonging to Jupiter NIS Users> |--- Satn--------------------------|---<List of Users belonging to Saturn NIS Users> |----Plo---------------------------|---<List of Users belonging to Pluto NIS Users> This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.

1 0

[Fedora-directory-users] Managing NIS Servers into LDAP?
by Singh Raina, Ajeet 08 Feb '08

08 Feb '08

Hi Guys, I have a fedora DS running on RHEL 4.0.I have 3 NIS Servers - Jupiter, Saturn and Pluto. Each one of them has around 300 users.The users in Jupiter should not have access rights for other Servers. Let me tell you about my attempt and where I am facing problem at: I have migrated all the NIS to Fedora DS through migrate.pl scripts. Now when I use Fedora DS Console it asks for just /tmp/passwd.ldif file and doesn't talk about People/Special Group/Group. All I can see in Directory Server > Directory(TAB) > Click on im > People where I see all the users get updated to. What My Plan is to create three sub-division of People - Jupr, Satn and Plo and restrict one another from accessing the other unrelated projects. Can I know what can help me to particularly migrate the Jupiter NIS Users strictly to Jupr and vice versa Pls Help. This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.

1 0

[Fedora-directory-users] FDS + Samba + machine account
by Satish Patel 07 Feb '08

07 Feb '08

Dear I have setup of samba + fds but i am not able to join machine in samba domain so how to add machine in samba domain with FDS backend >??? $ cat ~/satish/url.txt http://www.linuxbug.org _____________________________________________________________________________________________________ --------------------------------- Bring your gang together - do your thing. Start your group.

2 3

← Newer
1
2
3
4
5
6
7
8
9
10
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users February 2008