[Fedora-directory-users] FDS + Samba +smbtools
by beto ..
Hello everybody
When I put this command:
#smbldap-useradd -w
I got this error message:
Error: Insufficient 'write' privilege to the 'uidNumber' attribute of entry 'sambadomainname=ejemplo.com,dc=ejemplo,dc=com'.
The configuration for /etc/smbldap-tools/smbldap_bind.conf is:
###########################################
slaveDN="cn=Directory Manager,dc=ejemplo,dc=com"
slavePw="passwd"
masterDN="cn=Directory Manager,dc=ejemplo,dc=com"
masterPw="passwd"
###########################################
Pleasee!!! help me with this problem.
pd: I try to use fdstools but i can't install perl dependencies!!!
If anybody had a manual!! help me please. I'am desperate :S
Sorry for my English, isn't very good.
_________________________________________________________________
Tecnología, moda, motor, viajes,…suscríbete a nuestros boletines para estar siempre a la última
http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenan...
14 years, 9 months
[Fedora-directory-users] directory tree strategy
by Sanga M. Collins
i am planning to move from novell edirectory to fedora ds. i have some questions about deployment strategies.
i would like to have 2 Directory server at a data center doing multi master replication. i would also like to have a directory at all our remote locations (30 sites) that will replicate back to the 2 master servers.
if each site has its own root suffix eg dc=site1, dc=site2, dc=site3, and the masters have their own root suffix eg dc=master1, dc=master2, do i create additional root suffix on the masters with its own database that corresponds with the root suffix of each remote site?
any suggestions are welcome. my deployment strategy is not set in stone, and info from anyone who has done something similar will be very useful
14 years, 9 months
[Fedora-directory-users] MMR issue
by debu
Hi Guys,
I am stuck in a very crucial FDS server issue, it would be great if any one of you can help me somehow.
We are upgrading from Fedora Directory Service from 1.0.4 to 1.1.0-3
We have one existing Server with 1.0.4
Now To one server we have initialized the data base and we were able to load the full DB. But, and when we start the replication we see the following error, and the incremental update is not happening.
We are going for a multi master replication.
Here is the error.
On Supplier: (FDS Version 1.0.4) OS: Red Hat Enterprise Linux ES release 4 (Nahant)
[17/Jun/2008:11:23:35 +051800] NSMMReplicationPlugin - agmt="cn=Replication_to_10.91.X.Y" (10:8888): Unable to acquire replica: Excessive clock skew between the supplier and the consumer. Replication is aborting.
[17/Jun/2008:11:23:35 +051800] NSMMReplicationPlugin - agmt="cn=Replication_to_10.91.X.Y" (10:8888): Incremental update failed and requires administrator action
On consumer: (FD version 1.1.0-3) OS: Red Hat Enterprise Linux Server release 5.1 (Tikanga)
[17/Jun/2008:11:12:59 +051800] NSMMReplicationPlugin - conn=46251 op=1975 replica="o=TejaUsers": Unable to acquire replica: error: excessive clock skew
[17/Jun/2008:11:23:34 +051800] - csngen_adjust_time: adjustment limit exceeded; value - 86401, limit - 86400
[17/Jun/2008:11:23:34 +051800] NSMMReplicationPlugin - conn=46461 op=792 replica="o=TejaUsers": Unable to acquire replica: error: excessive clock skew
Now, My doubt is we succeded in a test environment with the same, with the only diference that we had the same OS in both the server, rest all same. Our servers are perfectly synced with NTP also.
Please help in this scenario..
Regards
~Debajit
14 years, 9 months
[Fedora-directory-users] newbie question - roles AND groups?
by Grzegorz Marszałek
Hello!
I'm newbie to Fedora Directory, but is has two significant features -
acl and nested roles.
But I could find a way to use roles as groups. That is - I'd like to
define role, and then use this to define posix group, which I can use
via nss_ldap on my servers. At first glance it seems that dynamic
groups will do what I want - I just defined filter to include all
users with particular role in group. But unfortunately dynamic groups
aren't resolved by server, you need client aplication to do that :(
So the question is: is there any way to do this without writing my own
slapi plugin?
Thanks!
---
Grzegorz Marszałek
graf0(a)post.pl
14 years, 9 months
[Fedora-directory-users] Replication messages
by DANIEL CRISTIAN CRUZ
Hi all,
I had some error messages that I don't understood:
[17/Jun/2008:14:39:11 -0300] NSMMReplicationPlugin - changelog program -
agmt="cn=m1-m2-xxx" (m2:389): Failed to retrieve change with CSN
4857f6db000000010000; db error - -30999 DB_BUFFER_SMALL: User memory too
small for return value[17/Jun/2008:14:39:11 -0300] NSMMReplicationPlugin -
agmt="cn=m1-m2-xxx" (m2:389): A changelog database error was
encountered[17/Jun/2008:14:39:11 -0300] NSMMReplicationPlugin - changelog
program - agmt="cn=m1-c1-xxx" (c1:389): Failed to retrieve change with CSN
4857f6db000000010000; db error - -30999 DB_BUFFER_SMALL: User memory too
small for return value[17/Jun/2008:14:39:11 -0300] NSMMReplicationPlugin -
agmt="cn=m1-c1-xxx" (c1:389): A changelog database error was
encountered[17/Jun/2008:14:39:11 -0300] NSMMReplicationPlugin - changelog
program - agmt="cn=m1-c2-xxx" (c2:389): Failed to retrieve change with CSN
4857f6db000000010000; db error - -30999 DB_BUFFER_SMALL: User memory too
small for return value[17/Jun/2008:14:39:11 -0300] NSMMReplicationPlugin -
agmt="cn=m1-c2-xxx" (c2:389): A changelog database error was
encountered[17/Jun/2008:14:39:11 -0300] NSMMReplicationPlugin - changelog
program - agmt="cn=m1-c3-xxx" (c3:389): Failed to retrieve change with CSN
4857f6db000000010000; db error - -30999 DB_BUFFER_SMALL: User memory too
small for return value[17/Jun/2008:14:39:11 -0300] NSMMReplicationPlugin -
agmt="cn=m1-c3-xxx" (c3:389): A changelog database error was
encountered</pre>
My schema has two multi masters: m1 and m2, and many consumers c1, c2, c3,
..., cX.
There are replication agreements between m1 and m2.
There are replication agreements from each master to all consumers.
It's the second time I saw the problem, and I need to make a full initialize
from m1 to all others, where the log above were taken from m1. m1 receive
updates from m2, even after this error.
After initializing m2 from m1: I saw the message on m2:
[17/Jun/2008:15:02:04 -0300] NSMMReplicationPlugin - replica_reload_ruv:
Warning: new data for replica ou=foo,o=bar does not match the data in the
changelog. Recreating the changelog file. This could affect replication with
replica's consumers in which case the consumers should be
reinitialized.</pre>
In a test environment I didn't got this problem.
Is there something wrong in my structure (two masters and many consumers)?
Is any configuration missing (some gotchas)?
Any help would be apreciated.
Regards,
--
<span style="color: #000080">Daniel Cristian Cruz
</span>Administrador de Banco de Dados
Direção Regional - Núcleo de Tecnologia da Informação
SENAI - SC
Telefone: 48-3239-1422 (ramal 1422)
14 years, 9 months
[Fedora-directory-users] LDAP Load Tools
by Michael Brown
Hello All
Can anyone point me to load generation tools specific to LDAP? Do they even exist? I'm working with an RHDS customer (currently RHDS 7.1sp3, hopefully moving to sp6 soon, or RHDS 8) with large attribute requirements (some attributes 25-30 Mbytes) who wants to do some modeling of performance in the lab so that memory sizing and configuration is less of a issue in production. Ideally the tool(s) would incorporate multiple threads, and configurable simultaneous writes and reads/searches of multiple nodes. However, I will settle for anything less than ideal at this point.
Thanks
14 years, 9 months
[Fedora-directory-users] Displaying User Password
by ggistra@aol.com
Hi all,
When displaying a user in the Property Editor window of the admin console, ?is the Password field always masked, or only when?the password is stored encrypted?
Thanks,
Gabi
14 years, 9 months
[Fedora-directory-users] password security
by Zahra Bahar
Hi,
I have freeradius server using ldap DS for aaa. my radius supports vpn users and uses PAP.
what is the best way for secure user_passwords in connection between ldap server to user?
14 years, 9 months