[Fedora-directory-users] LDAP performances = databases
by Emmanuel BILLOT
Hi,
Since i'm triying to tune our FDS db, i wander if there is a maximum
number of entries per db.
We've got 20.000 entries stored in 1 db and indexes seems to be well
configured, however a quite hard request (ldapsearch -x -h host-b
"dc=foo,dc=com" "(|(|(givenname=*doe*)(sn=*doe*)(uid=*doe*)))"
has a quite slow result.
We use only one db in aim at keeping a simple replication schema.
Is there any limitation for databse entries ?
Can we tune indexes for better results ?
BR,
--
==========================================
Emmanuel BILLOT
IRD - Orléans
Délégation aux Systèmes d'Information (DSI)
tél : 02 38 49 95 88
==========================================
14 years, 1 month
[Fedora-directory-users] Fedora DS backend
by kheuangkham phothisan
Dear all,
I am very new user in Fedora directory server, and I would like to add the existing database that I have stored in MySQL as user information to Fedora-ds, what should I do for the technical term? please tell me how to do that.
Best regards,
pKheuang
Make Yahoo!7 your homepage and win a trip to the Quiksilver Pro. Find out more
14 years, 1 month
[Fedora-directory-users] Problems with Numeric String Syntax
by Rocio Quirantes
Hi!
I have installed Fedora DS, and I am extending my schema, I used the
ol-schema-migrate.pl script to migrate some openldap schemas.
The problem is that when I restart th server, I get an error about the
syntax oid of an atributte that is Numeric String
1.3.6.1.4.1.1466.115.121.1.36, but it is supposed to be supported, isn't it?
I hope somebody could help.
Thanks
--
Rocio Quirantes Rodal
Área de Seguridad Informática
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 648 / +34 955 056 600 / FAX: +34 955 056 650
Consejería de Innovación, Ciencia y Empresa
Junta de Andalucía
--------------------------------------------------
Este mensaje esta firmado digitalmente. Para poder
reconocer la firma desde su cliente debera tener
instalado el certificado raiz de la CA del CICA en
el mismo. Puede descargarlo desde:
http://pki.cica.es/cacert/
--------------------------------------------------
14 years, 1 month
[Fedora-directory-users] LDAP Performances
by Emmanuel BILLOT
Hi,
Is there any tool designed for mesuring LDAP CPU/MEM utilisation ? Or
any method ?
BR,
--
==========================================
Emmanuel BILLOT
IRD - Orléans
Délégation aux Systèmes d'Information (DSI)
tél : 02 38 49 95 88
==========================================
14 years, 1 month
[Fedora-directory-users] Dirsrv startup : SSL failure = answer
by Emmanuel BILLOT
Hi,
In reply of [Fedora-directory-users] Dirsrv startup
I finally found that my local ntpd process was failing, communication
error with the ntpd server (fw acl).
After debuuging this error dirsrv startup normaly, no ssl error left.
BR,
--
==========================================
Emmanuel BILLOT
IRD - Orléans
Délégation aux Systèmes d'Information (DSI)
tél : 02 38 49 95 88
==========================================
14 years, 1 month
[Fedora-directory-users] Dirsrv startup
by Emmanuel BILLOT
Hi,
I can't startup dirsrv error after activating SSL :
[15/Feb/2009:08:45:14 +0100] - SSL alert: CERT_VerifyCertificateNow:
verify certificate failed for cert server-cert of family
cn=RSA,cn=encryption,cn=config (Netscape Portable Runtime error -8181 -
Peer's Certificate has expired.)
[15/Feb/2009:08:45:14 +0100] - SSL failure: None of the cipher are valid
[ÃCHOUÃ]
*** Warning: 1 instance(s) failed to start
What's wrong ?
BR
--
==========================================
Emmanuel BILLOT
IRD - Orléans
Délégation aux Systèmes d'Information (DSI)
tél : 02 38 49 95 88
==========================================
14 years, 1 month
[Fedora-directory-users] Multiple sync agreement between FDS env and Active Directory is possible ?
by Hugo Etievant
hello,
In my architecture, i have 2 fedora directory server configured as
multimaster for configuration and user data.
One of my directory servers is synchronized to an Active Directory.
When an accounting manager change an user's password on the dirsrv sync
to AD, password is synchronized.
But when user's password is changed on other dirsrv, AD do not receive
the new password.
My objective is the following : synchronize user's password from all my
dirsrv to the AD.
But, Manual says that : "WARNING : There can only be a single sync
agreement between the Directory Server environment and the Active
Directory environment. Multiple sync agreements to the same Active
Directory domain can create entry conflicts. "
http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Windows_Sync.html
How to synchronize password from ALL my dirsrv to AD and obtain failover
for the passsync ?
regards,
--
* Hugo Étiévant *
**
14 years, 1 month
[Fedora-directory-users] Directory Server Problems
by Adam Staebler
Finally got directory server to install by setting permissions on /var/
run/dirsrv to the fedora-ds user I created. Now my problem is when I
run setup-ds-admin.pl it stops with:
[Setup] Fatal Error: failed to open an LDAP connection to host
'fds.local' port '389' as user 'cn=Directory Manager'. Error: unknown.
[Setup] Fatal Failed to create the configuration directory server
[Setup] Fatal Exiting . . .
I have been trying to get this dir server running for a week without
any luck. I am setting up the box for my office to use instead of
windows 2008 with Active Directory as I don't like m$ very much.
Thanks!
14 years, 1 month