389-users July 2005

389-users@lists.fedoraproject.org

47 participants
66 discussions

RE: [Fedora-directory-users] Admin Console fails to start
by Tay, Gary 11 Jul '05

11 Jul '05

I have not tried FDS on RHFC4 yet, anyone could confirm it works as usual? Some points: 1) Use mymachine.mydomain as hostname during installation. 2) If the /etc/hosts appears something like this: 127.0.0.1 localhost.localdomain localhost mymachine I suggest you change it to something like that: 127.0.0.1 localhost.localdomain localhost XXX.XXX.XXX.XXX mymachine mymachine.mydomain Where XXX.XXX.XXX.XXX is the IP of your ldap server. 3) make sure admin server is started. 4) Check the /opt/fedora-ds/admin-serv/logs/error for error info Gary -----Original Message----- From: fedora-directory-users-bounces(a)redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Andreas Krause Sent: Monday, July 11, 2005 4:16 PM To: General discussion list for the Fedora Directory server project. Subject: RE: [Fedora-directory-users] Admin Console fails to start Am Montag, den 11.07.2005, 13:02 +0800 schrieb Tay, Gary: > Did you use "localhost" as the hostname during the installation? > Rather than the FQDN. > I tried all - localhost, localhost.localdomain, mymachine, mymachine.mydomain etc. Any combination did not help. > Did you try "startconsole -D"? The debugging mode, to gather more > info. > no, not yet (cause now it works) :-) > Did you add FQDN of ldap server as an alias to /etc/hosts? in case it > is not resolved by DNS. Yes I did. Andy > > Gary > > -----Original Message----- > From: fedora-directory-users-bounces(a)redhat.com > [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of > Andreas Krause > Sent: Monday, July 11, 2005 5:28 AM > To: fedora-directory-users(a)redhat.com > Subject: Re: [Fedora-directory-users] Admin Console fails to start > > > First of all a Hello to everyone here on the list from a new user. > > After figthing heavily with startconsole after my rpm installation on > FC4, I finally found out, why the console did not want to start. > > I made sure, everything, what needs to be installed is so and I surely > re-configured the whole thing more than 20 times :-) > > Webaccess to the admin port was well, ldap server responded but > startconsole did not want to run - all the time this error with > "unexpected token..." > > I made sure, during the setup I used a FQDN - no chance. > > But then: I simply called ./startconsole -a http://localhost:23711 > > ...and it works! > > I think there is still some bug around, which simply swallows the > domainpart of the hostname, because it still showed > http://mymachine.[none]:27311 when calling ./startconsole without the > "-a" > > Maybe this helps other users to save some time and troubles ;-) > > Greetings > > Andy > > -- > Fedora-directory-users mailing list Fedora-directory-users(a)redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users

1 0

RE: [Fedora-directory-users] Admin Console fails to start
by Tay, Gary 11 Jul '05

11 Jul '05

Did you use "localhost" as the hostname during the installation? Rather than the FQDN. Did you try "startconsole -D"? The debugging mode, to gather more info. Did you add FQDN of ldap server as an alias to /etc/hosts? in case it is not resolved by DNS. Gary -----Original Message----- From: fedora-directory-users-bounces(a)redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Andreas Krause Sent: Monday, July 11, 2005 5:28 AM To: fedora-directory-users(a)redhat.com Subject: Re: [Fedora-directory-users] Admin Console fails to start First of all a Hello to everyone here on the list from a new user. After figthing heavily with startconsole after my rpm installation on FC4, I finally found out, why the console did not want to start. I made sure, everything, what needs to be installed is so and I surely re-configured the whole thing more than 20 times :-) Webaccess to the admin port was well, ldap server responded but startconsole did not want to run - all the time this error with "unexpected token..." I made sure, during the setup I used a FQDN - no chance. But then: I simply called ./startconsole -a http://localhost:23711 ...and it works! I think there is still some bug around, which simply swallows the domainpart of the hostname, because it still showed http://mymachine.[none]:27311 when calling ./startconsole without the "-a" Maybe this helps other users to save some time and troubles ;-) Greetings Andy

2 1

[Fedora-directory-users] Advantages of using FDS vs OpenLDAP?
by Bryan 10 Jul '05

10 Jul '05

This question is probably completely obvious to those more versed in LDAP, which I am not. And since I couldn't find an answer to this in the Wiki, I thought that it didn't hurt to ask. So what are the advantages of using a "specialized" LDAP server, whether Fedora/Red Hat Directory Server, Apache Directory, Open Directory, etc., versus using just OpenLDAP? Increased functionality? Heightened and more security measures?

8 15

Re: [Fedora-directory-users] Admin Console fails to start
by Andreas Krause 10 Jul '05

10 Jul '05

First of all a Hello to everyone here on the list from a new user. After figthing heavily with startconsole after my rpm installation on FC4, I finally found out, why the console did not want to start. I made sure, everything, what needs to be installed is so and I surely re-configured the whole thing more than 20 times :-) Webaccess to the admin port was well, ldap server responded but startconsole did not want to run - all the time this error with "unexpected token..." I made sure, during the setup I used a FQDN - no chance. But then: I simply called ./startconsole -a http://localhost:23711 ...and it works! I think there is still some bug around, which simply swallows the domainpart of the hostname, because it still showed http://mymachine.[none]:27311 when calling ./startconsole without the "-a" Maybe this helps other users to save some time and troubles ;-) Greetings Andy

1 0

[Fedora-directory-users] Windows sync not syncing users with passwords
by William Francis 08 Jul '05

08 Jul '05

I have FDS installed on FC3 and configured to talk to a SBS AD server. I believe all is well as far as SSL certificates go and if I leave the "Sync New Windows Users" option off in my Windows replication agreement, I can readily complete full resyncs and incremental. All of my non-regular users (mostly Group and the the likes of the (disabled) Guest account) show up in my FDS directory. No users with passwords show up, though I'm not suggesting that's the reason they don't show up, but that's the only thing in common I can imagine. The AD user that I have the replication agreement setup as is an Administrator, and if I bind to my AD tree via LDAP with another tool I can see all the users just fine. I further believe that I likely have the Password Sync Service setup correctly, as again the user mentioned in the agreement is a valid user and from an external browsing tool works fine. I've used certutil.exe -L and verified the certs in the Redhat Password sync directory are correct (I have both CA and regular cert in there) and trusted. If I install from scratch and do not enable the syncing of all users, complete and incremental updates work just fine. I'm not 100% certain I have my entire FDS configured correctly, but thanks to many people in IRC (notably richm!) I believe it's probably ok. I'm very willing to review possible areas for mistakes there. However, once I enable the 'Sync New Windows Uses' option, updates never finish, the load as shown in top(1) is at 100% usage, and I have to kill the slapd process with -9 to get it to stop (through it's still responsive, but somehow seems stuck on the replication it has not completed) and I see this in strace poll([{fd=24, events=POLLIN}, {fd=8, events=POLLIN}, {fd=9, events=POLLIN}], 3, 250) = 0 gettimeofday({1120864747, 807852}, NULL) = 0 over and over again. Any ideas? I can find me in the IRC channel as 'rasp' thank you

1 0

RE: [Fedora-directory-users] Installation of Fedora Directory Ser vice on RHEL v3 or v4
by Talwar, Puneet (NIH/NIAID) 08 Jul '05

08 Jul '05

Thank you, I manage to download the binary RPM of RHEL 4 on my workstation. Now, I setup the FD to sync with MS AD domain which we have here, but one question I have do I need to have enterprise admin right to sync the FD to the AD DC server to pull user infos and etc? Right now when I want to search a user on the domain I am not able to do that. Can you someone please provide me what I mgiht need to do to search a particular user on the same domain? Thanks, -----Original Message----- From: Brian Jones [mailto:bkjones@gmail.com] Sent: Friday, July 08, 2005 3:37 PM To: General discussion list for the Fedora Directory server project. Subject: Re: [Fedora-directory-users] Installation of Fedora Directory Ser vice on RHEL v3 or v4 Get the binary rpm. It installs just fine on RHEL 3 and 4 as per my testing. On 7/8/05, Kevin Myer <kevin_myer(a)iu13.org> wrote: > Quoting "Talwar, Puneet (NIH/NIAID)" <PTALWAR(a)niaid.nih.gov>: > > > I would like to know when I run the builddsrpm.sh RHEL4 command, I get a > > message saying that it cannot find RHEL4-ds.spec file. > > Just curious - is there a reason you have not downloaded the binary RPM, that > doesn't require you to compile it? > > http://directory.fedora.redhat.com/wiki/Special:Download > > Agree to the license, choose your platform, and download something that is > already prepackaged.. > > Kevin > > -- > Kevin M. Myer > Senior Systems Administrator > Lancaster-Lebanon Intermediate Unit 13 http://www.iu13.org > > > -- > Fedora-directory-users mailing list > Fedora-directory-users(a)redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > -- Fedora-directory-users mailing list Fedora-directory-users(a)redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users

3 2

RE: [Fedora-directory-users] Installation of Fedora Directory Ser vice on RHEL v3 or v4
by Talwar, Puneet (NIH/NIAID) 08 Jul '05

08 Jul '05

I would like to know when I run the builddsrpm.sh RHEL4 command, I get a message saying that it cannot find RHEL4-ds.spec file. Would anyone know where do I get this RHEL4-ds.spec file from? Thanks, _____ From: Talwar, Puneet (NIH/NIAID) Sent: Thursday, July 07, 2005 2:20 PM To: 'General discussion list for the Fedora Directory server project.' Subject: [Fedora-directory-users] Installation of Fedora Directory Service on RHEL v3 or v4 Has anyone successfully installed FD on RHEL? I have been struggling to install it on RHEL. I download the SRC.RPM and the TAR ball file. I guess the doc are not clear on FD web site where I download the app from. Would appreciate if anyone can assist me on this topic? Thanks,

4 3

[Fedora-directory-users] boot time startup requires password
by Brian Jones 08 Jul '05

08 Jul '05

Hi all. I hit a snag yesterday when I rebooted my directory server box (running RHEL 4). The problem is that I'm using SSL/TLS, and that means that every time I restart the directory server I have to provide the password for the certificate database. Now, I *know* that this would never stand in a large production environment, so I can only imagine that I missed some essential piece of documentation on how I can use SSL/TLS, but not be forced to provide a password every time the server starts. Could someone provide a link to the doc that addresses this, or does someone have some clue they could provide for my feeble brain? Thanks.

3 5

Re: [Fedora-directory-users] MD5 for password hashes
by Sam Tran 08 Jul '05

08 Jul '05

On 7/7/05, Sam Tran <stlist(a)gmail.com> wrote: > On 7/7/05, Rich Megginson <rmeggins(a)redhat.com> wrote: > > Sam Tran wrote: > > On 7/7/05, Rich Megginson <rmeggins(a)redhat.com> wrote: > > > > > > Sam Tran wrote: > > > > > > > > Hi all, > > > > I compiled FDS from the latest sources. > > > > I migrated a user entry from OpenLDAP to FDS as a test. For that user > > entry I tried different password hash schemes for the userPassword > > attribute and checked if it was successfully migrated to FDS. Here are > > the results: > > > > > > > > Did you run this script first - > > http://www.directory.fedora.redhat.com/download/openLDAP2Fedora.pl > > - to > > migrate the data that used MD5 passwords? > > > > > > > > {CRYPT} --> OK > > (MD5} --> FAILED > > {SMD5} --> FAILED > > {MD5CRYPT} --> OK > > {SHA} --> OK > > {SSHA} --> OK > > > > I thought that FDS supported MD5 password hash. Did I miss something? > > > > > > > > Not sure. I would have expected {MD5} to work but not {MD5CRYPT}. See > > above. > > > > > > > > Thanks in advance. > > > > Sam > > > > > > You should not need to run this script to do the migration. This > > script just Base64 decodes the userPassword attribute and puts it in > > the form {HASH}xxxxxxxx. FDS apparently understands the Base64 encoded > > version of the password. > > > > For SHA, SSHA, CRYPT and MD5CRYPT I didn't use this script and the > > migration was successful. For MD5 I tried without and with the script: > > it was unsuccessful in both cases. > > > > This is really bizarre, because MD5CRYPT should not work at all - it is not > > supported by FDS. The only thing I can think is that it is interpreting the > > value as clear text. > > > > How did you verify that the migration was successful? > > > > Sam > > > > I simply did a ldapsearch with a binddn: > ./ldapsearch -h localhost -b "dc=example,dc=com" -D > "uid=joesmith,ou=people,dc=example,dc=com" -w - "objectclass=*" I create a new user in FDS with a password I generated using this python module: http://www.sabren.net/code/python/crypt/index.php3 The hash is MD5CRYPT. And it worked. Try for yourself. Don't forget to prepend {CRYPT} to the generated password. Sam

3 3

[Fedora-directory-users] Installation of Fedora Directory Service on RHEL v3 or v4
by Talwar, Puneet (NIH/NIAID) 07 Jul '05

07 Jul '05

Has anyone successfully installed FD on RHEL? I have been struggling to install it on RHEL. I download the SRC.RPM and the TAR ball file. I guess the doc are not clear on FD web site where I download the app from. Would appreciate if anyone can assist me on this topic? Thanks,

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users July 2005