AD LDIF help
by melvin obiri
I'd like some help in importing this ldif to fds ; how I get errors, am not
sure which ones are supported and required for me to move users credentials
from AD -> FDS;
Anyone with an idea can point me here
************LDIF start******************************
dn: CN=Legal D,OU=staff,DC=my,DC=co,DC=ke
changetype: add
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: Legal D
sn: D
givenName: Legal
distinguishedName: CN=Legal D,OU=staff,DC=my,DC=co,DC=ke
instanceType: 4
whenCreated: 20081031124920.0Z
whenChanged: 20081031124931.0Z
displayName: Legal D
uSNCreated: 53994
uSNChanged: 54001
homeMTA:
CN=Microsoft MTA,CN=MYMSG002,CN=Servers,CN=First Administrative
Group,CN=Admi
nistrative Groups,CN=First Organization,CN=Microsoft
Exchange,CN=Services,CN=C
onfiguration,DC=my,DC=co,DC=ke
proxyAddresses: SMTP:legal@my.co.ke <SMTP%3Alegal(a)my.co.ke>
proxyAddresses: X400:c=US;a= ;p=First Organizati;o=Exchange;s=D;g=Legal;
homeMDB:
CN=Mailbox Store (MYMSG002),CN=First Storage
Group,CN=InformationStore,CN=MY
MSG002,CN=Servers,CN=First Administrative Group,CN=Administrative
Groups,CN=Fi
rst Organization,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=my,DC=
co,DC=ke
mDBUseDefaults: TRUE
mailNickname: legal
name: Legal D
objectGUID:: NXpu+vZD+kum0AMwrajanw==
userAccountControl: 66048
badPwdCount: 2
codePage: 0
countryCode: 0
badPasswordTime: 128873658553906250
lastLogoff: 0
lastLogon: 128854531816093750
pwdLastSet: 128699309609531250
primaryGroupID: 513
objectSid:: AQUAAAAAAAUVAAAATmEHg7SKj5EHC0sq0wUAAA==
accountExpires: 9223372036854775807
logonCount: 8
sAMAccountName: legal
sAMAccountType: 805306368
showInAddressBook:
CN=Default Global Address List,CN=All Global Address Lists,CN=Address Lists
Co
ntainer,CN=First Organization,CN=Microsoft
Exchange,CN=Services,CN=Configurati
on,DC=my,DC=co,DC=ke
showInAddressBook:
CN=All Users,CN=All Address Lists,CN=Address Lists Container,CN=First
Organiza
tion,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=my,DC=co,DC=ke
legacyExchangeDN:
/o=First Organization/ou=First Administrative Group/cn=Recipients/cn=legal
userPrincipalName: legal(a)my.co.ke
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=my,DC=co,DC=ke
textEncodedORAddress: c=US;a= ;p=First Organizati;o=Exchange;s=D;g=Legal;
mail: legal(a)my.co.ke
msExchHomeServerName:
/o=First Organization/ou=First Administrative
Group/cn=Configuration/cn=Server
s/cn=MYAMSG002
msExchALObjectVersion: 49
msExchMailboxSecurityDescriptor::
AQAEgHgAAACUAAAAAAAAABQAAAAEAGQAAQAAAAACFAADAAIAAQEAAAAAAAUKAAAAAAAAAGkAcgBlAG
sAdQAsAE8AVQAAAQAAAAEAAAEAAAAgAAAAQwA9AG0AZgBhACwARABDAD0AZwBvACwARABDAD0AawBl
AAAAAQUAAAAAAAUVAAAATmEHg7SKj5EHC0sq9AEAAAEFAAAAAAAFFQAAAE5hB4O0io+RBwtLKvQBAA
A=
msExchUserAccountControl: 0
msExchMailboxGuid:: AkHm6pJ1Yk+sgMUAU8hb4g==
msExchPoliciesIncluded:
{D3F64A3C-F3D9-4082-9687-C4F00135CABA},{26491CFC-9E50-4857-861B-0CB8DF22B5D7}
***************************end
ldif*************************************************************************
14 years, 8 months
Getent and ldapsearch import from openldap
by Prashanth Sundaram
Hi all,
I am trying to migrate all users from openldap to FDS. The schema and object
class in openldap is pretty messed up and needs lot of massaging. I tried
exporting the schema and running the conversion script but it usually fails
and the db import is not correct.
Requirement: Only users with uid, gid and homedir needed. Nothing more or
less
So I did this, for Users, uid, gid, homedir import:
#getent passwd
Sample output:
oracle:x:1001:1001:oracle:/home/oracle:/bin/bash
Now, run ./migrate_passwd.pl on the aboveoutput to convert to ldif file.
The result was like below.
Sample output ldif:
dn: uid=oracle,ou=People,dc=fedorads,dc=net uid: oracle cn: oracle
objectClass: account objectClass: posixAccount objectClass: top
userPassword: {crypt}x loginShell: /bin/bash uidNumber: 1001 gidNumber: 1001
homeDirectory: /home/oracle gecos: oracle
For Password import
ldapsearch D BindDN W x uid=* userPassword uidNumber gidNumber
sample
dn: uid=oracle,ou=People,dc=padl,dc=net uidNumber: 1001 gidNumber: 1001
userPassword:: e01ENX1nbDdQNm5iU3FQOGZJOTdVWXM2QXp3PT8H9
Question 1: Please comment on above. Tell me if I could have simplified the
approach. Is there a better way to import the password from OpenLDAP? The
conversion schema is not working for me and it was set default.
Question 2: Now I have two database with user and password separate. Can I
import them separately and have it working?
Question 3: When I imported, I got only 500users in db and rest didn¹t make
it. I am trying to remember which file and what limit needs to be edited for
this issue.
14 years, 8 months
Latest Fedora/389 releases
by Techie
Rich, list,
These are the packages I have installed. Are these the latest for Fedora 9?
Yum upgrade says it cannot find an update match.
Thanks
fedora-ds-base-1.2.0-3.fc9.i386
fedora-ds-admin-1.1.7-3.fc9.i386
fedora-ds-1.1.3-1.fc9.noarch
fedora-ds-dsgw-1.1.2-1.fc9.i386
fedora-ds-admin-console-1.1.3-1.fc9.noarch
fedora-ds-console-1.2.0-1.fc9.noarch
fedora-idm-console-1.1.1-2.fc9.i386
14 years, 8 months
Setting up Fedora Directory Server on Fedora 10 as an LDAP Server
by rahul sen
http://www.burntomlette.in/index.php?title=Openldap_server_client_by_rahu...
please see the above page. I was successful till the last step in that page.
*When i tried Restarting the dirsrv, dirsrv-admin and httpd services by..*
#service httpd restart
#service dirsrv restart
#service dirsrv-admin restart,
then i am getting failure message.
*moreover, when i am **trying tolaunch the Fedora Console Login window*,
i am getting the below mentioned results.....
[root@rahulsen rahulsen]# fedora-idm-console
No protocol specified
Exception in thread "main" java.lang.NoClassDefFoundError: Could not
initialize class sun.awt.X11GraphicsEnvironment
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:186)
at
java.awt.GraphicsEnvironment.getLocalGraphicsEnvironment(GraphicsEnvironment.java:82)
at sun.awt.X11.XToolkit.<clinit>(XToolkit.java:106)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:186)
at java.awt.Toolkit$2.run(Toolkit.java:849)
at java.security.AccessController.doPrivileged(Native Method)
at java.awt.Toolkit.getDefaultToolkit(Toolkit.java:841)
at
sun.swing.SwingUtilities2$AATextInfo.getAATextInfo(SwingUtilities2.java:131)
at
javax.swing.plaf.metal.MetalLookAndFeel.initComponentDefaults(MetalLookAndFeel.java:1564)
at
com.netscape.management.nmclf.SuiLookAndFeel.initComponentDefaults(Unknown
Source)
at com.netscape.management.nmclf.SuiLookAndFeel.getDefaults(Unknown
Source)
at javax.swing.UIManager.setLookAndFeel(UIManager.java:545)
at com.netscape.management.client.console.Console.common_init(Unknown
Source)
at com.netscape.management.client.console.Console.<init>(Unknown Source)
at com.netscape.management.client.console.Console.main(Unknown Source)
Cant proceed... please help!
14 years, 8 months
MIT Kerberos and FDS integration
by John Robert Mendoza
Hi to all!
I am currently setting up an integration with the FDS and Kerberos.
I have successfully setup both independently and verified them to be working independently.
How do I know that I have successfully binded FDS and kerberos.
How can i verify it.
I am using Fedora 1.2.0 and Kerberos 1.6.3...
John Robert Mendoza
Interested in growing your business? Find out how with Yahoo! Search Marketing! Check it out at http://searchmarketing.yahoo.com/en_SG/arp/internetmarketing.php?o=SG0147
14 years, 8 months
Issues with Starting Admin console
by Scott Kaminski
I'm having a problem with the Admin console and making it work properlly. I
have a CentOS 5.3 machine that i recently installed and setup the Directory
Server on. The rpm's i used are:
fedora-ds-base-1.2.0-2.fc6
fedora-ds-admin-console-1.1.3-1.fc6
fedora-ds-console-1.2.0-1.fc6
fedora-ds-admin-1.1.7-3.fc6
fedora-ds-1.1.3-1.fc6
fedora-ds-dsgw-1.1.2-1.fc6
fedora-idm-console-1.1.3-1.fc6
I used the method that involved downloading and setting up the yum
repositories. I have managed to make the directory server work and
authenticate users. However i seam to have an issue with the management
console. The console locks up and nolonger responds when i attempt to
access the administration server box under server group. I also have a java
console error indicating "java.lang.nullpointerexception".
Initally i would click on directory server or administration server and just
get an error indicating that some jar files are missing in
/usr/share/dirsrv/html/java/ the two missing files are called
centos-admin-8.0.jar and centos-ds-8.0.jar . I created some symlinks to the
fedora versions of these files to correct the problem. The issue appears to
be related to the administration server jar file as deleting the jar dir in
my users home dir and removing the symlink to the admin jar file the error
appears and the lock up goes away however i can't do any server
administration.
So does anyone have any solutions/suggestions to this problem?
-Scott
14 years, 8 months
Checklist for OpenLDAp to FDS migration
by Prashanth Sundaram
Hi All,
Can someone post the checklist for OpenLDAP to FDS migration? I see some bit
and pieces here and there about schema conversion, ldif porting and copying
some files.
It would be great if someone can post a detail message here or direct me to
a link for step-by-step guide.
Here¹s the template:
1.
2.
3.
Thanks,
Prashanth
14 years, 8 months
Adding custom attribute to class
by Leonid Bogdanov
Hello!
How can I add custom attribute to 'inetorgperson' class? Preferably without inheritance. The problem is that I want to have boolean attribute which I can check in my program and tell user that he must change password after admin reset. Something like 'pwdReset' attribute in OpenLDAP.
Thank you!
14 years, 8 months
still wasted :(
by Maurizio Marini
After reinstalling this morning and recovered nigthly backup, i cannot again
access Admin Console
If i use admin/password i get:
netscape.ldap.LDAPException error result(32) No such object
if i try to access using
cn=Directory manage / Password
i am allowed to access, but then there is only "Administration server"
available in the tree, if i click on Directory Server, i get a Red error
telling me that rpm package
fedora-idm-console
was not found and i should reinstall it
i would change my strategy
can i backup an ldif file containing samba objects, only?
I would reinstall everything on another server and after configured samba
domain with Domain
dn: sambaDomainName=DOMAIN,dc=xxxxx,dc=it
and Administrator
i would restore a backup with samba only data
so, apart from
all directory config
domain
administrator
what i would export would be:
samba user
computers
groups
is it sufficient to use a command with a filter like
"(objectclass=sambaSAMAccount)"
?
if yes, could someone please suggest me the db2ldif command line to export
only this data in ldif format file?
tia
-m
14 years, 8 months