Multimaster Replication problem
by 馬小布
Hi, all :
I have two 389 directory server and then want to config the multimater
replication .
I googled for some information and found this website:
http://www.directory.fedora.redhat.com/wiki/Howto:WalkthroughMultimasterSSL
I refer to that, but not successful , I think maybe it is the following
problem:
test@test ~: cat tmp.ldif
dn: cn=replication manager,cn=config
changetype: add
objectclass: top
objectclass: person
cn: Replication Manager
sn: Manager
userPassword: PASSWORD
test@test ~: ldapmodify -x -D "cn=Directory Manager" -w xxx -f tmp.ldif
add new entry "cn=replication manager,cn=config"
I don't see the user being successfully added... it is ok ?
by the way , is there need to create that account to config the replication
?
Thanks in advance.....
13 years
how to sync 389 Directory servers
by 馬小布
Hi, all :
I have two 389 directory servers on different servers , how can I sync the
datas on them ?
like master/slave replication ?
Thanks...
13 years
389 ds packages for EL6?
by Rupert Kolb
Hi,
are there rpm packages to install 386 Directory Server at EL6?
(I found packages for EL5 only)
Thanks
Rupert Kolb
13 years
RHEL6?
by Steven Jones
Hi,
What packages/rpms/debs are needed to build a 389 master with a master to master replication and Microsoft AD password sync capability and on what OS?
I suppose Im asking what would be a recommended or "the best" OS platform to base FDS on?
;]
I need to support a few hundred users, I need business/enterprise class stability so Im assuming Fedora isnt it, (I cant see how it would meet a businesses need for many years of stability? it development is way to fast I suspect?)
I would be happy with RHEL6, Debian6 or Centos X or Ubuntu X as 4 obvious possibilities given I have experience enough on the first two of these in particular.
regards
Steven
13 years
Unable to query anything in DB after import
by brandon
So I am a little at a loss here, perhaps somebody out there has some
insight I am missing (likely obvious, knowing my luck).
I have a 389-ds 1.1.3-5 (redhat epel RPM) / i386 directory server, I ran
db2ldif to export the data. Then on a new host running 389-ds-1.2.1-1 /
x86_64, I ran ldif2db and imported the data. I can see the entries when
I browse it from 389-console, and if I run db2ldif all of the data is
there, but if I do an ldapsearch query, it returns no results, which is
not how it should be. The command:
ldapsearch -D dn.. -W -x -H ldap://newhost uid
This search returns zero results, and no errors. If I point it against
the old server where the data came from, it returns 366 results.
Thoughts?
-Brandon
13 years
Announcing 389 Directory Server version 1.2.8.2 Testing
by Rich Megginson
The 389 Project team is pleased to announce the release of
389-ds-base-1.2.8.2. This release has fixes for bugs found in 1.2.8
testing and bugs from earlier releases.
Installation
yum install --enablerepo=updates-testing 389-ds
# or for EPEL
yum install --enablerepo=epel-testing 389-ds
setup-ds-admin.pl
Upgrade
yum upgrade --enablerepo=updates-testing 389-ds-base
idm-console-framework 389-admin 389-ds-console 389-admin-console
# or for EPEL
yum upgrade --enablerepo=epel-testing 389-ds-base
idm-console-framework 389-admin 389-ds-console 389-admin-console
setup-ds-admin.pl -u
How to Give Feedback
The best way to provide feedback is via the Fedora Update system. Each
update is broken down by package and platform. For example, if you are
using Fedora 13, and you have successfully installed or upgraded all of
the packages, and the console and etc. works, then go to the links below
for Fedora 13 and provide feedback.
* EL-5 - https://admin.fedoraproject.org/updates/389-ds-base-1.2.8.2-1.el5
* Fedora 13 -
https://admin.fedoraproject.org/updates/389-ds-base-1.2.8.2-1.fc13
* Fedora 14 -
https://admin.fedoraproject.org/updates/389-ds-base-1.2.8.2-1.fc14
* Fedora 15 -
https://admin.fedoraproject.org/updates/389-ds-base-1.2.8.2-1.fc15
scroll down to the bottom of the page, and click on the Add a comment >>
link
* select one of the Works for me or Does not work radio buttons, add
text, and click on the Add Comment button
If you are using a build on another platform, just send us an email to
389-users(a)lists.fedoraproject.org
Reporting Bugs
If you find a bug, or would like to see a new feature, you can enter it
here - https://bugzilla.redhat.com/enter_bug.cgi?product=389
More Information
* Release Notes - http://port389.org/wiki/Release_Notes
* Install_Guide - http://port389.org/wiki/Install_Guide
* Download - http://port389.org/wiki/Download
13 years
help in creating Groups
by perl pra
Hi Gurus,
I am brand new to 389-ds, I have installed 389-ds yesterday. I am able to
create OU and User. Now i have Queries on the following.
1) Hwo to say dirsrv that 'sn' of user should be used to
login.(loginattribute)
2) Hwo to create groups in 389-ds under a OU.
3) Hwo to assign users to a group.
4) Hwo to assign email address to a user.
Please help me with the above queries.
Thanks,
Siva
13 years
PassSync btw ADS and 389DS
by Ashay
Dear All,
I am facing an issue while installing a 389-passsync msi utility on a
Windows 2003 ADS (i386) server so that I can reset
the passwords of users from ADS to the 389-directory service. I
downloaded the utility from http://port389.org 's download link.
The same software is installed on a different ADS server in the same
forest which successfully resets the password on 389 DS.
The problem is when i install and configure the ADS, the SSL gets
configured properly(successfully verified the .crt certificate file and
attempting Ldp.exe connection to 389DS)
but when I reset the password of any user, the ADS doesnt make a
connection attempt to 389DS (checked using tcpdump). Thus the password
on 389DS is not resetted.
On investigating I found that the passhook.dat file is not created on
ADS even after repeated attempts of re-installation of 389-passsync msi
utility. The passsync.log file shows that
the services is successfully started and running.
Can anyone throw some light as to what may be going wrong here?
Let me know in case require anymore information..
Thanks,
Regards,
Ashay.
--
Minute Quote:
###########################################################################
Nietzsche says that we will live the same life, over and over again.
God -- I'll have to sit through the Ice Capades again.
-- Woody Allen, "Hannah and Her Sisters"
###########################################################################
13 years
Replica and Windows Sync
by jean-Noël Chardron
Hello,
In a first time I configured the synchronisation between one AD and one
389DS. it is working fine. Now, I would like to mount a new one 389DS
that will be a replica read-only of the first :
I read this doc :
http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Admin...
http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/7.1/html/Admin...
From this picture I want something more simple like :
Consumer read-only (replica)<-----> Supplier Read-Write <----Sync--->
Windows AD
I don't see how I can configure the replication on the Supplier
The supplier sync with AD a database that contains user and group of the AD
The supplier has one more database with Unix user and group (I can
enable replica on this database and it is working (it is a single
master) , I got the replication of this database on the consumer)
The problem is for the first database (AD) that is a dedicated consumer
for the Windows AD. I dont see how configure as a single master to do
the replication to the consumer.
Support or explanation will help me
Thanks,
--
Jean-Noel Chardron
13 years
Re: [389-users] Error in Replication
by Kamal Batra
Hi,
I have successfully installed the 389DS and able to do ldapsearch the users
on my ldap server. I would like to integrate the 389DS to my bluecoat box
to authenticate users via LDAP.
On my bluecoat box I am also able to browse the my 389DS Ldap server. While
doing the user authentication on my browser, I am not able to authenticate
and my logs in 389DS show as
[12/Apr/2011:14:49:32 +051800] conn=8 op=4 SRCH
base="ou=Delhi,ou=Response,dc=response,dc=com" scope=2
filter="(cn=gpillai2101)" attrs="1.1"
[12/Apr/2011:14:49:32 +051800] conn=8 op=4 RESULT err=0 tag=101 nentries=0
etime=0
Can anybody help me in resolving this issue, so that I can authenticate the
users in Internet Explorer to Bluecoat which is in turn using 389DS as Ldap
server for authentication.
Regards
Kamal Batra
13 years