[Fedora-directory-users] server fails to start
by Marco Strullato
Hi all, last year I set up a authentication system based on two fedora ds
server set up with multimaster replica.
Now a node is down:from errors I have
[09/Jun/2008:15:04:07 +0200] - Fedora-Directory/1.0.4 B2006.312.1539
starting up
[09/Jun/2008:15:04:07 +0200] - Detected Disorderly Shutdown last time
Directory Server was running, recovering database.
[09/Jun/2008:15:04:07 +0200] - attrcrypt_unwrap_key: failed to unwrap key
for cipher AES
[09/Jun/2008:15:04:07 +0200] - Failed to retrieve key for cipher AES in
attrcrypt_cipher_init
[09/Jun/2008:15:04:07 +0200] - Failed to initialize cipher AES in
attrcrypt_init
[09/Jun/2008:15:04:07 +0200] - attrcrypt_unwrap_key: failed to unwrap key
for cipher AES
[09/Jun/2008:15:04:07 +0200] - Failed to retrieve key for cipher AES in
attrcrypt_cipher_init
[09/Jun/2008:15:04:07 +0200] - Failed to initialize cipher AES in
attrcrypt_init
I mean, the only thing I did is moving the node from a hypervisor to another
(it's a virtual machine)
>From logs I read that there's a problem with keys but I really don't know
what to check. What do you suggest?
Thanks
Marco Strullato
14 years, 9 months
[Fedora-directory-users] fedora on production enviroment
by Israel Garcia
Hi everybody, I have to migrate several users from productions serves
to a ldap server.. I have some questions?
1. Is fedora-ds ready and stable to work on productions servers?
2. If you have to do this migration of users, do you think in
fedora-ds as a ldap server or think in another directory services?
thanks in advance
Regards;
Israel Garcia
14 years, 10 months
[Fedora-directory-users] Importing LDIF file from AD
by Kenneth Holter
Hi.
We're trying to populate our DS with users from AD. Our plan is to build and
populate the database with entries from AD, and thereafter set up Windows
Sync to maintain the database.
I import the LDIF file using the ldif2db.pl perl script. One issue I've come
across is that the script finishes with "modifcation complete" regardless of
success or failure. How can I get the script to report errors? Or are there
maybe smarter ways of importing LDIF files on the command line?
Furthermore, are there any issues with AD LDIF import I should be aware of`?
Regards,
kenneho
14 years, 10 months
[Fedora-directory-users] Windows Kerberos authentication
by Khoon Seang Kang
Hi all,
Pardon me if this is the wrong mailing list/channel. I have no idea where can I get experts across domain (M$ and Linux).
We need to create a Windows applications, but the application has to do Kerberos authentication with a DS on Fedora (ok, I am testing out the FreeIPA). However, the windows desktop is not authenticated with my Kerberos Realm: in another word, we are trying to run a trusted-application on a untrusted-machine.
Any advice? If fact, we are looking for consultant/professional service in this authentication/ACL infrastructure. If your company is offering this service, do drop me an email. (ok, I tried sending an email to Redhat professional service, but till now still no reply. I guess they are not familiar with M$?)
Thank you in advance.
KhoonSeang
14 years, 10 months
[Fedora-directory-users] Fedora DS 1.04 and Samba 3.0.25b
by Alan Orlič Belšak
Hello,
I found out something unusual, first, here is the part of smb.conf:
ldap admin dn = cn=Directory Manager
ldap group suffix = ou=Groups
ldap machine suffix = ou=Computers
ldap passwd sync = Yes
ldap suffix = dc=zd-lj,dc=lan
ldap user suffix = ou=People
And here is the error:
[04/Jun/2008:08:38:56 +0200] conn=38162 fd=67 slot=67 connection from
192.168.200.253 to 192.168.220.6
[04/Jun/2008:08:38:56 +0200] conn=38162 op=0 BIND dn="cn=Directory
manager" method=128 version=3
[04/Jun/2008:08:38:56 +0200] conn=38162 op=0 RESULT err=0 tag=97
nentries=0 etime=0 dn="cn=directory manager"
[04/Jun/2008:08:38:56 +0200] conn=38162 op=1 MOD
dn="uid=majdac$,ou=uprava,ou=computers,dc=zd-lj,"
[04/Jun/2008:08:38:56 +0200] conn=38162 op=1 RESULT err=32 tag=103
nentries=0 etime=0
[04/Jun/2008:08:38:56 +0200] conn=38162 op=2 UNBIND
[04/Jun/2008:08:38:56 +0200] conn=38162 op=2 fd=67 closed - U1
If you noticed, in smb.conf I have ldap suffix = dc=zd-lj,dc=lan, error
is caused because in ldap modify comes only part of the suffix,
dc=zd-lj. I tried to put ldap suffix into quotas (double - "), but then
I got smbd error (doesn't start). Any ideas?
Bye, Alan
14 years, 10 months
[Fedora-directory-users] console breaks after installing libnss-ldap and libpam-ldap
by Sanga M. Collins
I have successfully installed Fedora ds 1.0.4 on Ubuntu 8.04. I run into
some issues when configuring Pam and Nss for the samba portion. On my
first test server I was able to complete the setup without an y major
problems. On all subsequent servers. I install FDS and successfully
start the console and add one posix user.
I then begin installing Pam and Libnss by using the auth-client-config
to automatically configure the files in /etc/pam.d/ as well as the
nssswith.conf. after I do this, I can no longer log in to the console,
and the error logs get filled with the following error.
[Mon May 19 00:43:26 2008] [notice] child pid 10675 exit signal
Segmentation fault (11)
Can anyone point me in the right direction?
Sanga M. Collins
Network Engineering
~~~~~~~~~~~~~~~~~~~~~~~
IT Management LLC
6491 Sunset Strip #5,
Sunrise Fl, 33313
Tel: (954) 572 7411,
Fax: (435) 578 7411
14 years, 10 months
[Fedora-directory-users] Command Line Setup of SSL
by Joe Sheehan
Sorry to bother everyone for a trivial question but what's the easiest way
to setup "Enable SSL for this server", etc via the command line. Is there documentation of this somewhere?
Thanks
Joe
14 years, 10 months
[Fedora-directory-users] groups and ou behaviour
by Sanga M. Collins
After successful install there are 4 groups under domain example.com
when browsing the tree in directory server.
Accounting managers
HR managers
QA managers
PD managers
When in the 'users and groups' tab of the main management console. A
search for any of these groups does not return any results.
When browsing the tree in the directory server, 3 organizational units
can be seen under the domain example.com.
Groups
People (5 acis)
Special Users
>From the users and groups tab in the main management console, I would
like to create a new user in the organizational unit 'People' I would
also like to create a new group in the organization unit 'Groups'
neither one of these ou's are listed as locations that I can create
users under. How can this be fixed
14 years, 10 months