Setting up 389 Server !!!
by Ajeet S Raina
Guys,
I have been confused with the overall new 389 DS Server Setup.
All I did upto now is:
yum install 389-ds
and it did all the installation correctly.
Then, I ran:
/usr/sbin/setup-ds.pl
It too went fine.
All I need is Setup 389 Server with SSL.I did went through
http://directory.fedoraproject.org/wiki/Howto:SSL but no Idea how to
proceed.
I am confused with the following points:
1. Do I also need to run *setup-ds-admin.pl* and *setup-ds-dsgw* too?
I tried running setup-ds-admin.pl and it stucked at :
The server 'ldap://389-ds.sap.com:45474/o=NetscapeRoot' is not reachable.
Error: unknown error.
2. When Should I run the setupssl2.sh script? After running the above
setup-* scripts?
What changes I need to make on the script?
14 years, 3 months
How to start 389 Server?
by Ajeet S Raina
I have installed 389 Package through:
#yum install 389-ds
But no idea how to proceed further.
How can I start the directory server?
14 years, 3 months
testing Enforcing password policy
by muzzol
hi,
which attributes are used to hold password policy information?
i want to test it and i tried to change passwordexpirationtime to
force expiration/warning but no success.
regards,
muzzol
--
========================
^ ^
O O
(_ _)
muzzol(a)muzzol.com
========================
jabber id: muzzol(a)jabber.dk
========================
No atribueixis qualitats humanes als ordinadors.
No els hi agrada.
========================
"El gobierno español sólo habla con terroristas, homosexuales y
catalanes, a ver cuando se decide a hablar con gente normal"
Jiménez Losantos
========================
<echelon spamming>
bomb terrorism bush aznar teletubbies
</echelon spamming>
14 years, 3 months
Constructing the Organization Structure
by Ajeet S Raina
Guys,
I have set up 389 server setup with dc=im,dc=logic,dc=com domain component.I
have been assigned work for setting up structure in the following ways:
There are two Location : Noida and Hyderabad ( we need to make it OU.Is it
possible?)
Under Noida there are 5 projects (P1-5) and 7 under Hyderabad(P1-7) whereas
IM is included in the both. There is additional Project called OU=Groups.
The Overall Structure seems in the following ways:
dc=im,dc=logic,dc=com
||
--------------
/ \
Location=> Noida Hyderabad
_______________|__________________
|| | ||
------------------------- |
-----------------------
| | | | | |
| | |
P-1 P-2 P-3 IM OU=Group P-1 P-2 P-3 IM
How Can I design the following organization struture under 389 Server?
14 years, 3 months
/etc/sudoers VS sudo-objects in directory server
by Kenneth Holter
Hi.
We're working on setting up Red Hat Directory Server (RHDS), and need to
make a decision about wether sudo information should be defined as
sudo-objects in the directory server, or if we should stick to /etc/sudoers.
I've played around with sudo-objects in the directory server, and got it
working. But the way I see it, maintaining sudo information in /etc/sudoers
is much easier than to maintain it in a directory server. In the latter
case, I'd either have to use the GUI, or write scripts/ldif files to make
necessary changes to the sudo setup, and they both seem less intuitive than
to simply edit the /etc/sudoers file.
I'd very much like to hear from others on their thoughts on wether to
maintain sudo information in /etc/sudoers or in the directory server, so
please feel free to post a reply.
Best regards,
Kenneth Holter
14 years, 3 months
Unable to configure Replication via command line
by Chun Tat David Chu
Hi All,
I am working on LDIF that will configure replication via command line. I'm
following the direction documented in the Red Hat DS Administration Guide
section 8.7. Particularly I am stuck in step 2 of 8.7.1 when configuring my
suppliers.
http://www.redhat.com/docs/manuals/dir-server/8.1/admin/Managing_Replicat...
Below is the output from my ldapmodify command.
adding new entry "cn=Replication Manager,cn=config"
adding new entry "cn=changelog5,cn=config"
adding new entry "cn=replica,cn="dc=example,dc=com",cn=mapping
tree,cn=config"
ldap_add: No such object (32)
As you can see, I was able to create my replication manager, and enabled the
change log, however, I wasn't able to create the 'dn:
cn=replica,cn="dc=example,dc=com",cn=mapping tree,cn=config' entry. I can
see from the directory console that 'cn="dc=example,dc=com",cn=mapping
tree,cn=config' does exist in my directory console.
Is there anything that I did wrong in my LDIF? Can someone take a look?
Thanks!!!
###############################################################################
###############################################################################
# Step 1 - Create Supplier Bind DN Entry
dn: cn=Replication Manager,cn=config
changetype: add
objectclass: top
objectclass: person
userPassword: password
sn: Replication Manager
description: The Replication Manager Account
###############################################################################
###############################################################################
###############################################################################
###############################################################################
# Step 2 - Configuring Suppliers from the Command Line
dn: cn=changelog5,cn=config
changetype: add
objectclass: top
objectclass: extensibleObject
cn: changelog5
nsslapd-changelogdir: /var/lib/dirsrv/slapd-localhost/changelogdb
nsslapd-changelogmaxage: 10d
dn: cn=replica,cn="dc=example,dc=com",cn=mapping tree,cn=config
changetype: add
objectclass: top
objectclass: nsds5replica
objectclass: extensibleObject
cn: replica
nsds5replicaroot: dc=example,dc=com
nsds5replicaid: 1
nsds5replicatype: 3
nsds5flags: 1
nsds5ReplicaPurgeDelay: 604800
nsds5ReplicaBindDN: cn=Replication Manager,cn=config
###############################################################################
###############################################################################
Thanks a lot!
- David
14 years, 3 months
Is changes to the UID attribute on the directory server synced back to AD when using Windows sync?
by Kenneth Holter
Hi.
We're using Windows sync on our (RedHat) directory server to fetch users
from AD, and have a quick question about the UID attribute: It look to me
like the UID attribute that linux ldap clients use for authentication, is a
attribute created when one adds the posixaccount object class to the user
object. In other words, when user "kenneth" is synced over from AD and I add
the posixaccount object class, then the uid attribute is automatically
created and populated with uid value "kenneth" from some (which one? "name"?
"cn"?) AD attribute. Is this correct? If so, can I assume that making
changes to the uid attribute will not be reflected on the AD side?
Best regards,
Kenneth Holter
14 years, 3 months
admin server under solaris not running
by Steffen Blume
Hello,
my admin server (apache/httpd.worker) is not starting under
/OpenSolaris/ (/SunOS 5.11/).
I added the error log below. Log level is debug. The only error msg is
the last line from nss. I compiled 389 DS by myself.
Versions:
nss-3.12.4-with-nspr-4.8
389-ds-base-1.2.4
mod_nss-1.0.8
adminutil-1.1.8
389-admin-1.1.9
--------------------------
[Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2419): Entering
mod_admserv_post_config - pid is [6597] init count is [0]
[Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2248): Entering
do_admserv_post_config - pid is [6597]
[Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2256): Entering
do_admserv_post_config - init count is [1]
[Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2280): [6597] Cache
expiration set to 600 seconds
[Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2383): Added
StartConfigDs task entry
[cn=startconfigds,cn=operation,cn=tasks,cn=admin-serv-ldap,cn=389
administration server,cn=server
group,cn=ldap.mydomain.de,ou=mydomain.de,o=netscaperoot:start_config_ds:]
for user [LocalSuper]
[Wed Jan 06 11:13:55 2010] [notice] Access Host filter is:
*.mst.uni-hannover.de
[Wed Jan 06 11:13:55 2010] [notice] Access Address filter is: *
[Wed Jan 06 11:13:55 2010] [info] mod_unique_id: using ip addr
xxx.xxx.xxx.xxx
Assertion failure: SECSuccess == rv, at sslnonce.c:156
--------------------------
Any advice?
Regards,
Steffen
--
Dipl.-Ing. Steffen Blume Institute of Microelectronic Systems
phone : +49-511-762-19605 Leibniz Universität Hannover
fax : +49-511-762-19601 Appelstr. 4, 30167 Hannover, Germany
mail : sblume(a)ims.uni-hannover.de
14 years, 3 months
How to write a Low Level Plan for 389 Server Setup?
by Ajeet S Raina
Hello All,
I attempted writing Low Level Design for my 389 Server setup:
1 389 Design and architecture
2 Installing CentOS Machine
3 Installing 389 Directory Server
4 Setting up 389 SSL Configuration
5 User Group creation and Restriction on Domains
6 Password Ageing and Account Lockout policy
7 Access Control Usage
8 Creating and Maintaining the Database
9 Setting up 389 Clients(Linux, Solaris etc)
10 Documentation and Backup
11. Replication
I have few suggestion needed for the following points:
1.Setting up 389 SSL Configuration - Is there any script?
2.Setting up 389 Clients(Linux, Solaris etc) - Is there any automatic script
which could be put at boot time on all the clients?
3.Any script which creates organizational structure?
14 years, 3 months