[Fedora-directory-users] RE: uri2path error
by Rynhard Roos
Hi Rob
I started the admin server today to generate error logs and the error seems
to have disappeared.
I think it might have to do with the server having multiple dns entries
pointing to it's single ip address ?!?
Thanks for you help.
Rynhard
Rynhard Roos wrote:
Hi
I recently installed fedora directory server on centos 4.0.
Thereafter I ran into the imb jdk hyper threading issue when trying to start
the admin server and thus replaced the jdk with sun jdk 1.4.2_08. This
resolved my problem of starting the admin server, but when I try to access
the admin server running on port 9000, I receive the following error:
Internal Error
The administration server was unable to fulfill your request.
Reason: uri2path: Invalid URL!
Is there anything interesting in the error log
(server-root/admin-serv/logs/error)
What URI of the admin server are you attempting to access?
rob
18 years, 9 months
RE: [Fedora-directory-users] Auto-Staring slapd in SSL mode
by Tay, Gary
You wrote:
===
Later, when you start the server on the command line,
this second password is required.
===
I suspect something was not done properly, I may not wrong.
If the slapd-`hostname`-pin.txt has been setup correctly, ./start-slapd
will NOT prompt you for any SSL Security DB private key password.
Pls double check these two points (I am saying this based on my
experience with SUN ONE DS5.2 which is similar to FDS7.1)
1) When you create the PIN text file.
# echo "Internal (Software) Token:secret"
>$FDS_ROOT/alias/slapd-`hostname`-pin.txt
IMPORTANT NOTE: DO NOT LEAVE ANY SPACES after the "Token:" and at the
end of the line or else the password will not be recognized by
"start-slapd".
2) You need to protect this PIN text file with mode 400 or else
"start-slapd" will not be happy to let you go auto.
# chmod 400 $FDS_ROOT/alias/slapd-`hostname`-pin.txt
Rgds
Gary
-----Original Message-----
From: fedora-directory-users-bounces(a)redhat.com
[mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Vsevolod
(Simon) Ilyushchenko
Sent: Thursday, July 14, 2005 3:32 AM
To: General discussion list for the Fedora Directory server project.
Subject: Re: [Fedora-directory-users] Database recreation,automount and
performance
Rich,
Thanks for the quick answer! Perhaps this information should go into the
FAQ - what do you think?
Rich Megginson wrote on 07/13/2005 12:47 PM:
> The IETF LDAP community has decided to deprecated them in favor of the
> new netgroups stuff.
OK, I'll reconfigure my entries. Does Fedora automounter understand the
netgroups structure?
> We don't yet have a way to set an ACI to allow users other than the
> Directory Manager (i.e. cn=Directory Manager, not the admin console
> user) to create the entry for a root suffix. In the console, you can
> Log In As New User, and specify cn=directory manager (or whatever you
> used for your directory manager user when you performed the initial
> installation).
This is very non-trivial. :) Creating the root suffix now works, but I
tried creating top-level entries one by one, as well as creating a new
server in the administration console, and it all failed. I had to delete
the RPM and reinstall it.
By the way, I found out that if I install the RPM a second time, the
admin console tries to connect to port 15918, but the admin server is
running on port 25394. I don't remember what port was used the first
time. :(
This time I successfully created an SSL-enabled directory and was able
to authenticate to it. I followed the steps here:
http://www.redhat.com/docs/manuals/dir-server/ag/7.1/ssl.html#1087158
to create a self-signed certificate.
For archives - the docs don't tell you that after running pk12util in
step 9 you first have to enter the password 'secretpwd' that you've
saved in the file pwdfile.txt, and then you have to create a different
startup password. Later, when you start the server on the command line,
this second password is required.
Simon
--
Simon (Vsevolod ILyushchenko) simonf(a)cshl.edu
http://www.simonf.com
Terrorism is a tactic and so to declare war on terrorism
is equivalent to Roosevelt's declaring war on blitzkrieg.
Zbigniew Brzezinski, U.S. national security advisor, 1977-81
--
Fedora-directory-users mailing list Fedora-directory-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
18 years, 9 months
[Fedora-directory-users] Global Address list
by Shawn Bishop
Good Day
I have set up a basic Address book at our company using FDS.
The problem I am now having is that I cant create distibution list
(Global address List), all the users can see the addresses in the
address book, but if I try to create the GAL under groups using
groupOfNames and uniquemember I cant see the uniqueMember of the group.
Please could somebody give me a step by step "dummy" guide on how to do
this ( I am new to FDS)
Kind regards, and much appreciated
Shawn
Read our disclaimer at: http://www.picknpay.co.za/pnp/view/pnp/en/page5093?
If you don't have web access, the disclaimer can be mailed to you on request.
Disclaimer requests to be sent to it-security(a)pnp.co.za
18 years, 9 months
RE: [Fedora-directory-users] Database recreation, automount and performance
by Tay, Gary
I use FDS 7.1 comes with IBM JRE 1.4.2 on my 128MB RAM, PIII RHEL4 PC to
run TWO "startconsole" sessions, ONE from local console, THE OTHER from
a Windows XP PC using VNC viewer over SSH (PuTTY), I have around 200
"dn:" entries in LDAP DIT.
I did not experience any slowness in BOTH X Windows sessions, are you
using RHFC3 or RHEL3 or 2.6.x kernel? I believe older versions/kernels
tend not to shine in X performance.
The followings may be some other means you could explore to speed up
console performance.
0) Use kernel 2.6.x
1) Use VNC over SSH, this is definitely better performing than just SSH
and "startx".
2) Create "Browsing Indexes" for ou=People and ou=group, or whatever you
want to browse.
3) Do a "startconsole -D" and capture the first line to
"my_startconsole", fine tune the "-ms8m -mx64m" JVM memory requirement
footprints, then run "my_startconsole".
4) Check who is the culprit in CPU usage at "top" command and do
something about it.
5) Check and tune RedHat kernel parameters in /etc/sysctl.conf and run
"sysctl", RHEL4 sets default fs.file-max to 65536 it seems.
Rgds
Gary
-----Original Message-----
From: fedora-directory-users-bounces(a)redhat.com
[mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Vsevolod
(Simon) Ilyushchenko
Sent: Thursday, July 14, 2005 3:36 AM
To: General discussion list for the Fedora Directory server project.
Subject: Re: [Fedora-directory-users] Database recreation,automount and
performance
David Boreham wrote on 07/13/2005 02:21 PM:
> Console performance is great for me. There should be
> no performance problems per se on that hardware.
> What operations in particular seem slow ?
Switching tabs and in particular browsing the data. We only have a few
hundred users, and it takes the GUI about 5 seconds to show the first
batch of users (about 15), and the performance does not improve even
after the whole list is loaded - clicking and scrolling take up to 10
seconds to respond. I'll probably stick with other tools for data
administration if I don't find ways to improve the console speed.
Simon
--
Simon (Vsevolod ILyushchenko) simonf(a)cshl.edu
http://www.simonf.com
Terrorism is a tactic and so to declare war on terrorism
is equivalent to Roosevelt's declaring war on blitzkrieg.
Zbigniew Brzezinski, U.S. national security advisor, 1977-81
--
Fedora-directory-users mailing list Fedora-directory-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
18 years, 9 months
[Fedora-directory-users] Problems building on HP-UX 11i
by Marko Asplund
hi
i'm a Fedora directory newbie trying to build the software on a HP-UX
11i (PA-RISC) system. i'm trying to follow the instructions found in
http://directory.fedora.redhat.com/wiki/Building but i'm stuck in the
Netscape NSS build phase.
the compiler section on the build instructions page states that i
need to have the:
+ HP/UX - ANSI-C compliant compiler (aCC) (usually found in /opt/ansic)
which compiler does this refer to exactly? the 'HP C/ANSI C compiler'
lives in /opt/ansic by default while the 'HP aC++ Compiler' (a.k.a.
aCC) lives in /opt/aCC). what about compiler version numbers?
here's what happens when i try to run the build command:
nebbiolo% gmake BUILD_OPT=1 USE_64=1 nss_build_all
cd ../coreconf ; gmake
gmake[1]: Entering directory `/home/aspa/ldap/mozilla/security/coreconf'
cd nsinstall; gmake export
gmake[2]: Entering directory `/home/aspa/ldap/mozilla/security/
coreconf/nsinstall'
gmake[2]: Nothing to be done for `export'.
gmake[2]: Leaving directory `/home/aspa/ldap/mozilla/security/
coreconf/nsinstall'
cd nsinstall; gmake libs
gmake[2]: Entering directory `/home/aspa/ldap/mozilla/security/
coreconf/nsinstall'
true -m 775 HP-UXB.11.11_64_OPT.OBJ/nsinstall ../../../dist/HP-UXB.
11.11_64_OPT.OBJ/bin
gmake[2]: Leaving directory `/home/aspa/ldap/mozilla/security/
coreconf/nsinstall'
gmake[1]: Leaving directory `/home/aspa/ldap/mozilla/security/coreconf'
../coreconf/nsinstall/HP-UXB.11.11_64_OPT.OBJ/nsinstall -D ../../
nsprpub/HP-UXB.11.11_64_OPT.OBJ
cd ../../nsprpub/HP-UXB.11.11_64_OPT.OBJ ; \
sh ../configure \
--disable-debug --enable-optimize --enable-64bit \
--with-dist-prefix='/home/aspa/ldap/mozilla/security/nss/../../dist/
HP-UXB.11.11_64_OPT.OBJ' \
--with-dist-includedir='/home/aspa/ldap/mozilla/security/nss/../../
dist/HP-UXB.11.11_64_OPT.OBJ/include'
loading cache ./config.cache
checking host system type... hppa2.0w-hp-hpux11.11
checking target system type... hppa2.0w-hp-hpux11.11
checking build system type... hppa2.0w-hp-hpux11.11
checking for whoami... /usr/bin/whoami
checking for c++... aCC
checking whether the C++ compiler (aCC ) works... no
configure: error: installation or configuration problem: C++ compiler
cannot create executables.
gmake: *** [../../nsprpub/HP-UXB.11.11_64_OPT.OBJ/config.status] Error 1
br. aspa
18 years, 9 months
[Fedora-directory-users] LDAP aliases
by George Holbert
I've noticed that FDS and other Netscape-derived directory servers (like
Sun's) do not have support for LDAP aliases.
At one point there was an IETF draft for LDAP aliases which can still be
found here:
http://www.watersprings.org/pub/id/draft-byrne-ldap-alias-00.txt
Based on documentation snippets I've run across, it looks like some LDAP
servers (IBM, Novell) still support the alias schema suggested in the draft.
I'm wondering why the alias schema is not included in FDS? My guess is
that LDAP aliases turned out to be a bad idea for various reasons, but
I'm not exactly sure what these reasons are.
Does anyone have any philosophies to share about LDAP aliases and/or why
they aren't included in FDS?
Thanks very much,
-- George
18 years, 9 months
[Fedora-directory-users] uri2path error
by Rynhard Roos
Hi
I recently installed fedora directory server on centos 4.0.
Thereafter I ran into the imb jdk hyper threading issue when trying to start
the admin server and thus replaced the jdk with sun jdk 1.4.2_08. This
resolved my problem of starting the admin server, but when I try to access
the admin server running on port 9000, I receive the following error:
Internal Error
The administration server was unable to fulfill your request.
Reason: uri2path: Invalid URL!
Any help would be appreciated.
Thanks
Rynhard
18 years, 9 months
