Multiple LDAP servers - how do you load balance?
by Sean Carolan
For those of you with multiple servers that use replication, how do
you do your load balancing and failover? DNS round robin? Some kind
of hardware load balancer like a Netscaler or BigIP F5?
13 years, 3 months
Crash with segmentation fault after a database reinitialization
by Francesco Fiore
Hi,
I've two directory server in multimaster configuration. I've to
reinitialize all databases on 2 nd server (B) using the data of the 1st (A).
After the synchronization, server B crash with an segmentation fault.
There isn't any relevant message in the error log.
If I restart the directory server B, I've the same error.
The directory server version is 1.1.3 on Redhat5.
I attach the tails of the error log and the /var/log/messages log.
[03/Feb/2010:19:20:53 +0100] - import Addressbook2: Workers finished;
cleaning up...
[03/Feb/2010:19:21:13 +0100] - import Addressbook1: Workers finished;
cleaning up...
[03/Feb/2010:19:21:13 +0100] - import Addressbook2: Workers cleaned up.
[03/Feb/2010:19:21:13 +0100] - import Addressbook2: Indexing complete.
Post-processing...
[03/Feb/2010:19:21:13 +0100] - import Addressbook1: Workers cleaned up.
[03/Feb/2010:19:21:13 +0100] - import Addressbook1: Indexing complete.
Post-processing...
[03/Feb/2010:19:21:50 +0100] - import Addressbook2: Flushing caches...
[03/Feb/2010:19:22:27 +0100] - import Addressbook1: Flushing caches...
[03/Feb/2010:19:22:27 +0100] - import Addressbook2: Closing files...
[03/Feb/2010:19:22:27 +0100] - import Addressbook1: Closing files...
[03/Feb/2010:19:32:27 +0100] - import Addressbook2: Import complete.
Processed 3820687 entries in 4957 seconds. (770.77 entries/sec)
[03/Feb/2010:19:32:28 +0100] NSMMReplicationPlugin -
multimaster_be_state_change: replica o=addressbook2 is coming online;
enabling replication
[03/Feb/2010:19:32:29 +0100] - import Addressbook1: Import complete.
Processed 3820339 entries in 4960 seconds. (770.23 entries/sec)
[03/Feb/2010:19:32:29 +0100] NSMMReplicationPlugin -
multimaster_be_state_change: replica o=addressbook1 is coming online;
enabling replication
[03/Feb/2010:19:32:29 +0100] NSMMReplicationPlugin - replica_reload_ruv:
Warning: new data for replica o=addressbook1 does not match the data in
the changelog.
Recreating the changelog file. This could affect replication with
replica's consumers in which case the consumers should be reinitialized.
Feb 3 19:32:35 mmt-l-al19 kernel: ns-slapd[5575]: segfault at
0000000000000000 rip 000000364fa79140 rsp 0000000056bd3b18 error 4
Have you any idea?
Thanks
--
Francesco Fiore
System Integrator
Babel S.r.l. - http://www.babel.it
P.zza S.Benedetto da Norcia, 33 - 00040 Pomezia (Roma)
CONFIDENZIALE: Questo messaggio ed i suoi allegati sono di carattere
confidenziale per i destinatari in indirizzo. Se hai ricevuto questo
messaggio per errore sei invitato cortesemente a rispondere
immediatamente al mittente e cancellare tutti i suoi contenuti.
13 years, 4 months
Re: [389-users] Can the authconfig command line tool create home directories?
by Edward Capriolo
On Thu, Feb 4, 2010 at 5:13 PM, Andrew Commons
<andrew.commons(a)bigpond.com> wrote:
> Edward Capriolo wrote:
>
>> Andrew, I have worked with this before. The problem is the home
>> directory is done with/by the pam mk_homdir module.
>
>> 1) You might be missing this module
>> 2) some daemons SMB, XWindows do not have a pam.d stack correctly to
>> include this module. If your login is via SSH check that you
>> /etc/pam.d/ssh includes the mk_home_dir in your stack
>
> Edward, thanks for that suggestion. I'll investigate further but I don't
> think it's the problem. If I just create the user in the 389 directory and I
> have "Create home directories on the first login" enabled then the Home
> directory _is_ created at first login but Gnome then goes pear-shaped after
> that and the directory does not get populated with all the Gnome-related
> bits required for the desktop to function. This results in an account that
> can authenticate correctly but cannot get past the login screen.
>
> I'm assuming that creating the Home directory is what pam_mk_homdir is all
> about and that after that it's up to whatever desktop display manager you
> are using to fill in the gaps.
>
> Cheers,
> Andrew
>
> --
> 389 users mailing list
> 389-users(a)lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
>
Interesting. If the files that gnome is supposed to create are
identical for ALL users then could try to update /etc/skel. The
contents of /etc/skel should be copied on user creation. (maybe the
homedir module has a switch to turn that on/off)
13 years, 4 months
Re: [389-users] Can the authconfig command line tool create home directories?
by Andrew Commons
Edward Capriolo wrote:
> Andrew, I have worked with this before. The problem is the home
> directory is done with/by the pam mk_homdir module.
> 1) You might be missing this module
> 2) some daemons SMB, XWindows do not have a pam.d stack correctly to
> include this module. If your login is via SSH check that you
> /etc/pam.d/ssh includes the mk_home_dir in your stack
Edward, thanks for that suggestion. I'll investigate further but I don't
think it's the problem. If I just create the user in the 389 directory and I
have "Create home directories on the first login" enabled then the Home
directory _is_ created at first login but Gnome then goes pear-shaped after
that and the directory does not get populated with all the Gnome-related
bits required for the desktop to function. This results in an account that
can authenticate correctly but cannot get past the login screen.
I'm assuming that creating the Home directory is what pam_mk_homdir is all
about and that after that it's up to whatever desktop display manager you
are using to fill in the gaps.
Cheers,
Andrew
13 years, 4 months
Re: [389-users] Can the authconfig command line tool create home directories?
by Edward Capriolo
On Thu, Feb 4, 2010 at 4:06 PM, Andrew Commons
<andrew.commons(a)bigpond.com> wrote:
> Tom Lanyon wrote:
>
>> Hi Andrew,
>>
>> On 04/02/2010, at 10:58 PM, Andrew Commons wrote:
>>
>>> (1) Create the user normally on the system.
>>
>> Can you define 'normally' ?
>>
>> Regards,
>> Tom
>
> Tom,
>
> I'm using System->Administration->Users & Groups -- aka
> /usr/bin/system-config-users (this is F11).
>
> In the "Create New User" dialogue I add values for User Name, Full Name and
> the password and select a Login Shell. I make sure "Create home directory"
> is checked and I (at present) check "Create a private group for the user". I
> also specify the user ID and group ID manually.
>
> After I have created the user I then login to that user locally and then
> logout. This creates the Home Directory and also populates it with all the
> required Gnome bits (I'm using the Fedora default desktop).
>
> After logging out I then go back into system-config-users and remove the
> users making sure I deselect the option to remove the Home and Mail
> directories.
>
> I now go into the 389 console and add the user into the directory using
> values identical to those I'd used in the original local user create.
>
> In System->Administration->Authentication I have (obviously) enabled LDAP
> for User Information and for Authentication. Under Options I have the (I
> think default) settings of "Use Shadow Password", "Local authorization is
> sufficient for local users", and "Create home directories on the first
> login" checked.
>
>
> Cheers,
> Andrew
>
>
> --
> 389 users mailing list
> 389-users(a)lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
>
Andrew, I have worked with this before. The problem is the home
directory is done with/by the pam mk_homdir module.
1) You might be missing this module
2) some daemons SMB, XWindows do not have a pam.d stack correctly to
include this module. If your login is via SSH check that you
/etc/pam.d/ssh includes the mk_home_dir in your stack
13 years, 4 months
Can the authconfig command line tool create home directories?
by Andrew Commons
Tom Lanyon wrote:
> Hi Andrew,
>
> On 04/02/2010, at 10:58 PM, Andrew Commons wrote:
>
>> (1) Create the user normally on the system.
>
> Can you define 'normally' ?
>
> Regards,
> Tom
Tom,
I'm using System->Administration->Users & Groups -- aka
/usr/bin/system-config-users (this is F11).
In the "Create New User" dialogue I add values for User Name, Full Name and
the password and select a Login Shell. I make sure "Create home directory"
is checked and I (at present) check "Create a private group for the user". I
also specify the user ID and group ID manually.
After I have created the user I then login to that user locally and then
logout. This creates the Home Directory and also populates it with all the
required Gnome bits (I'm using the Fedora default desktop).
After logging out I then go back into system-config-users and remove the
users making sure I deselect the option to remove the Home and Mail
directories.
I now go into the 389 console and add the user into the directory using
values identical to those I'd used in the original local user create.
In System->Administration->Authentication I have (obviously) enabled LDAP
for User Information and for Authentication. Under Options I have the (I
think default) settings of "Use Shadow Password", "Local authorization is
sufficient for local users", and "Create home directories on the first
login" checked.
Cheers,
Andrew
13 years, 4 months
How to use existing SSL cert?
by Sean Carolan
Hi folks:
We already have a wildcard certificate that I want to use with our 389
directory server. I have installed our CA certificate, but when I get
to installing our wildcard cert the GUI is asking for a password to
access the token. Is there no way to install our private key using the
GUI? If not can it be done some other way? I'm not keen on
purchasing an entirely new certificate when we already have one...
Thanks
Sean
13 years, 4 months
version 1.2.5 is not available?
by Peter Schmidt
I see 389-ds-base 1.2.4 in the epel repo and 1.2.6 in the epel-testing
repo. I'm wondering where one can find 1.2.5
Thanks..
peter
13 years, 4 months
Can the authconfig command line tool create home directories?
by Andrew Commons
My experience has been that for users defined in the directory the home
directory is created on first login and then Gnome fails miserably in its
attempt to populate said home directory resulting in a failed session and a
return to the login prompt.
I have a post on this being studiously ignored in the Fedora users list.
My workaround, at present, is as follows:
(1) Create the user normally on the system.
(2) Login to the user and immediately log out.
(3) Remove the user from the system making sure I do not remove the home and
mail directories.
(4) Add the user into LDAP using the same username, UID and GID and home
directory as the temporary system user.
The login now works.
I would be delighted if a better way of doing this could be suggested!
Cheers,
Andrew
13 years, 4 months