389-users July 2005

389-users@lists.fedoraproject.org

47 participants
66 discussions

RE: [Fedora-directory-users] Fedora Dir services working with AD env.
by Talwar, Puneet (NIH/NIAID) 07 Jul '05

07 Jul '05

Yes, something similar to that concept. Would you have any doc on this topic, how to configure and setup synchronization of AD? -----Original Message----- From: David Boreham [mailto:david_list@boreham.org] Sent: Thursday, July 07, 2005 12:34 PM To: 'General discussion list for the Fedora Directory server project.' Subject: Re: [Fedora-directory-users] Fedora Dir services working with AD env. Talwar, Puneet (NIH/NIAID) wrote: >Well I would like to know if can setup Fedora Dir Services on my RHEL v4 to >authenticate my users against the AD env. to implement single sign on (SSO)? > > You can sync your AD users and their passwords with FDS. This means that using the same username and password, a user can authenticate against either AD or FDS (or applications the users themselves use may delegate authentication to either LDAP service). Is that what you're looking to do ? It's possible that you want to proxy LDAP BIND operations submitted to FDS back to your AD service. Not sure if that makes sense because you could simply have the applications use AD directly. Anyway, it might be possible to use kerberos to delegate auth from FDS to AD but I don't think anyone has tried it (partly because it doesn't seem too useful). -- Fedora-directory-users mailing list Fedora-directory-users(a)redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users

1 0

RE: [Fedora-directory-users] Fedora Dir services working with AD env.
by Talwar, Puneet (NIH/NIAID) 07 Jul '05

07 Jul '05

Well I would like to know if can setup Fedora Dir Services on my RHEL v4 to authenticate my users against the AD env. to implement single sign on (SSO)? -----Original Message----- From: David Boreham [mailto:david_list@boreham.org] Sent: Thursday, July 07, 2005 12:20 PM To: General discussion list for the Fedora Directory server project. Subject: Re: [Fedora-directory-users] Fedora Dir services working with AD env. Talwar, Puneet (NIH/NIAID) wrote: > I would like to know if anybody has gotten Fedora Dir Services working > with AD environment. > Could you be more specific about what kind of interoperability with AD you're looking for ? -- Fedora-directory-users mailing list Fedora-directory-users(a)redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users

2 1

[Fedora-directory-users] Fedora Dir services working with AD env.
by Talwar, Puneet (NIH/NIAID) 07 Jul '05

07 Jul '05

I would like to know if anybody has gotten Fedora Dir Services working with AD environment. Thanks,

2 1

[Fedora-directory-users] MD5 for password hashes
by Sam Tran 07 Jul '05

07 Jul '05

Hi all, I compiled FDS from the latest sources. I migrated a user entry from OpenLDAP to FDS as a test. For that user entry I tried different password hash schemes for the userPassword attribute and checked if it was successfully migrated to FDS. Here are the results: {CRYPT} --> OK (MD5} --> FAILED {SMD5} --> FAILED {MD5CRYPT} --> OK {SHA} --> OK {SSHA} --> OK I thought that FDS supported MD5 password hash. Did I miss something? Thanks in advance. Sam

2 3

RE: [Fedora-directory-users] Open-source Management Console and Adminserver
by Tay, Gary 07 Jul '05

07 Jul '05

FDS User Folks, I have written a script to help to create a "startconsole.bat". You have to run this script at RedHat server, it expects a "startconsole.txt" which is the output of RedHat "startconsole -D" command, and it generates "startconsole.bat". You should edit "/opt/fedora-ds" in this script to reflect the FDS root directory of your installation. You should edit also "ldap1.example.com" in this script to suit your need and copy "startconsole.bat" over to c:\fedora\java. "startconsole.bat" should be run after "cd c:\fedora\java". Content if "startconsole.txt" /opt/fedora-ds/bin/base/jre/bin/java -ms8m -mx64m -cp .:./mcc70_en.jar:./nmclf70_en.jar:./ldapjdk.jar:./mcc70.jar:./base.jar:./nmclf70.jar:./jss3.jar -Djava.library.path=/opt/fedora-ds/lib/jss -Djava.util.prefs.systemRoot=/opt/fedora-ds/java/.java -Djava.util.prefs.userRoot=/opt/fedora-ds/java com.netscape.management.client.console.Console -D -A http://ldap1.example.com:38900 Content of "cr_startconsole_bat.sh" #! /bin/sh # # cr_startconsole_bat.sh # # input: startconsole.txt # output: startconsole.bat # sed -e 's/\/opt\/fedora-ds\/bin\/base\/jre\/bin\///' \ -e 's/\/opt\/fedora-ds\/java/./g' \ -e 's/\/opt\/fedora-ds\/lib/..\\lib/g' \ -e 's/:/;/g' \ -e 's/\//\\/g' \ -e 's/http;\\\\/http:\/\//' \ -e 's/ldap1.example.com;/ldap1.example.com:/' \ startconsole.txt > startconsole.bat Content of "startconsole.bat" generated by running "cr_startconsole_bat.sh" java -ms8m -mx64m -cp .;.\mcc70_en.jar;.\nmclf70_en.jar;.\ldapjdk.jar;.\mcc70.jar;.\base.jar;.\nmclf70.jar;.\jss3.jar -Djava.library.path=..\lib\jss -Djava.util.prefs.systemRoot=.\.java -Djava.util.prefs.userRoot=. com.netscape.management.client.console.Console -D -A http://ldap1.example.com:38900 Enjoys. Rgds Gary -----Original Message----- From: fedora-directory-users-bounces(a)redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Sam Tran Sent: Wednesday, July 06, 2005 9:47 PM To: General discussion list for the Fedora Directory server project. Subject: Re: [Fedora-directory-users] Open-source Management Console and Adminserver On 7/6/05, Thierry Lanfranchi <thierry.lanfranchi(a)wanadoo.fr> wrote: > Sam Tran a écrit : > On 7/5/05, uffe(a)loop.to <uffe(a)loop.to> wrote: > > > Rich Megginson wrote: > > > > Sam Tran wrote: > > > > On 7/5/05, Rich Megginson <rmeggins(a)redhat.com> wrote: > > > > > Sam Tran wrote: > > > > > > Hi, > > When are you planning to release the management console and admin > server source code? > > > > > > Probably before the end of the year. We can't yet provide dates. > > > > > Rich, > > Are you planning to have a Windows version of the management console? > It would be really convenient for admins who have a Windows box. > > > > I don't know if we will have an "officially supported version" for > Windows, but you will be able to run it on Windows. You can run it > right now if you know the java class and arguments - it's just a > java/swing application. The startconsole binary just sets up the > environment, classpath, ld library path, etc. then invokes java. > > Sam, > with only a little more hassle one can build or download the Win32 > bits of JSS, NSS and NSPR from mozilla.org and get SSL going too. > Those are the only native parts of the Console besides the > startconsole wrapper. That will allow your Console to connect to the > Admin Server via https and the Directory Server via ldaps. It'll also > be less fussy when creating ldaps replication agreements. > > Launch the Console in debug mode with "startconsole -D" to see how to > invoke java to get the Console to run. > > > Thanks Rich and Uffe for your help. > > It would be nice to have a HOWTO for that. > > Sam > > -- > Fedora-directory-users mailing list Fedora-directory-users(a)redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > Hi, > > This is how I proceeded to get the console working under Windows : > > * made a c:\fedora directory on my windows box and copied > /opt/fedora-ds/java and /opt/fedora-ds/lib from red hat box to windows > box > * started console on the red hat box with the -D command line option like > Rich recommended, and obtained the full command line > * created a .BAT in my c:\fedora\java directory on the windows box > > edited the .BAT to : > * modify the path to the java executable > * replace ':' in the -cp option with ';' > * replace the / in the pathes with \ (except for the admin server > url) > > I obtained a .BAT with that line (might be split into several lines > by my mail client, but it's a single command line): java -ms8m -mx64m > -cp > .;.\nmclf70.jar;.\base.jar;.\ldapjdk.jar;.\mcc70.jar;.\nmclf70_en.jar; > .\mcc70_en.jar;.\jss3.jar > -Djava.library.path=..\lib\jss > -Djava.util.prefs.systemRoot=.\.java > -Djava.util.prefs.userRoot=. > com.netscape.management.client.console.Console -D -A > http://myserver:55456 > > (java executable is in my path and the .bat is ran from the > c:\fedora\java > directory) > > working great so far > > Thierry > > Fantastic Thierry! Merci. ;) Sam -- Fedora-directory-users mailing list Fedora-directory-users(a)redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users

2 1

RE: **Caution-External**: RE: [Fedora-directory-users] Open-source Management Console andAdminserver
by Tay, Gary 07 Jul '05

07 Jul '05

Some more info. I notice that on my RedHat Enterprise Linux 4 FDS Server, I have to punch two holes on FireWall (iptables) before I could get my Windows FDS Console to work. I suspect this is due to the fact that I have SELINUX set to "disabled" BUT SELINUXTYPE set to "targeted" in /etc/sysconfig/selinux, anyone could explain why? # cat /etc/sysconfig/selinux SELINUX=disabled SELINUXTYPE=targeted One hole for port 389 (ldap), the other for port 38900 (admin port for my case). # vi /etc/sysconfig/iptables Add two lines: -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 389 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 38900 -j ACCEPT # service iptables restart BTW, I am happily using J2SDK 1.5.0 on Windows, startconsole.bat seems to run without issue, although J2SDK 1.5.0 is not yet certified to work with FDS. Rgds Gary -----Original Message----- From: fedora-directory-users-bounces(a)redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Tay, Gary Sent: Thursday, July 07, 2005 11:53 AM To: Sam Tran; General discussion list for the Fedora Directory server project. Subject: **Caution-External**: RE: [Fedora-directory-users] Open-source Management Console andAdminserver FDS User Folks, I have written a script to help to create a "startconsole.bat". You have to run this script at RedHat server, it expects a "startconsole.txt" which is the output of RedHat "startconsole -D" command, and it generates "startconsole.bat". You should edit "/opt/fedora-ds" in this script to reflect the FDS root directory of your installation. You should edit also "ldap1.example.com" in this script to suit your need and copy "startconsole.bat" over to c:\fedora\java. "startconsole.bat" should be run after "cd c:\fedora\java". Content if "startconsole.txt" /opt/fedora-ds/bin/base/jre/bin/java -ms8m -mx64m -cp .:./mcc70_en.jar:./nmclf70_en.jar:./ldapjdk.jar:./mcc70.jar:./base.jar:./nmclf70.jar:./jss3.jar -Djava.library.path=/opt/fedora-ds/lib/jss -Djava.util.prefs.systemRoot=/opt/fedora-ds/java/.java -Djava.util.prefs.userRoot=/opt/fedora-ds/java com.netscape.management.client.console.Console -D -A http://ldap1.example.com:38900 Content of "cr_startconsole_bat.sh" #! /bin/sh # # cr_startconsole_bat.sh # # input: startconsole.txt # output: startconsole.bat # sed -e 's/\/opt\/fedora-ds\/bin\/base\/jre\/bin\///' \ -e 's/\/opt\/fedora-ds\/java/./g' \ -e 's/\/opt\/fedora-ds\/lib/..\\lib/g' \ -e 's/:/;/g' \ -e 's/\//\\/g' \ -e 's/http;\\\\/http:\/\//' \ -e 's/ldap1.example.com;/ldap1.example.com:/' \ startconsole.txt > startconsole.bat Content of "startconsole.bat" generated by running "cr_startconsole_bat.sh" java -ms8m -mx64m -cp .;.\mcc70_en.jar;.\nmclf70_en.jar;.\ldapjdk.jar;.\mcc70.jar;.\base.jar;.\nmclf70.jar;.\jss3.jar -Djava.library.path=..\lib\jss -Djava.util.prefs.systemRoot=.\.java -Djava.util.prefs.userRoot=. com.netscape.management.client.console.Console -D -A http://ldap1.example.com:38900 Enjoys. Rgds Gary -----Original Message----- From: fedora-directory-users-bounces(a)redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Sam Tran Sent: Wednesday, July 06, 2005 9:47 PM To: General discussion list for the Fedora Directory server project. Subject: Re: [Fedora-directory-users] Open-source Management Console and Adminserver On 7/6/05, Thierry Lanfranchi <thierry.lanfranchi(a)wanadoo.fr> wrote: > Sam Tran a écrit : > On 7/5/05, uffe(a)loop.to <uffe(a)loop.to> wrote: > > > Rich Megginson wrote: > > > > Sam Tran wrote: > > > > On 7/5/05, Rich Megginson <rmeggins(a)redhat.com> wrote: > > > > > Sam Tran wrote: > > > > > > Hi, > > When are you planning to release the management console and admin > server source code? > > > > > > Probably before the end of the year. We can't yet provide dates. > > > > > Rich, > > Are you planning to have a Windows version of the management console? > It would be really convenient for admins who have a Windows box. > > > > I don't know if we will have an "officially supported version" for > Windows, but you will be able to run it on Windows. You can run it > right now if you know the java class and arguments - it's just a > java/swing application. The startconsole binary just sets up the > environment, classpath, ld library path, etc. then invokes java. > > Sam, > with only a little more hassle one can build or download the Win32 > bits of JSS, NSS and NSPR from mozilla.org and get SSL going too. > Those are the only native parts of the Console besides the > startconsole wrapper. That will allow your Console to connect to the > Admin Server via https and the Directory Server via ldaps. It'll also > be less fussy when creating ldaps replication agreements. > > Launch the Console in debug mode with "startconsole -D" to see how to > invoke java to get the Console to run. > > > Thanks Rich and Uffe for your help. > > It would be nice to have a HOWTO for that. > > Sam > > -- > Fedora-directory-users mailing list Fedora-directory-users(a)redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > Hi, > > This is how I proceeded to get the console working under Windows : > > * made a c:\fedora directory on my windows box and copied > /opt/fedora-ds/java and /opt/fedora-ds/lib from red hat box to windows > box > * started console on the red hat box with the -D command line option like > Rich recommended, and obtained the full command line > * created a .BAT in my c:\fedora\java directory on the windows box > > edited the .BAT to : > * modify the path to the java executable > * replace ':' in the -cp option with ';' > * replace the / in the pathes with \ (except for the admin server > url) > > I obtained a .BAT with that line (might be split into several lines > by my mail client, but it's a single command line): java -ms8m -mx64m > -cp > .;.\nmclf70.jar;.\base.jar;.\ldapjdk.jar;.\mcc70.jar;.\nmclf70_en.jar; > .\mcc70_en.jar;.\jss3.jar > -Djava.library.path=..\lib\jss > -Djava.util.prefs.systemRoot=.\.java > -Djava.util.prefs.userRoot=. > com.netscape.management.client.console.Console -D -A > http://myserver:55456 > > (java executable is in my path and the .bat is ran from the > c:\fedora\java > directory) > > working great so far > > Thierry > > Fantastic Thierry! Merci. ;) Sam -- Fedora-directory-users mailing list Fedora-directory-users(a)redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users -- Fedora-directory-users mailing list Fedora-directory-users(a)redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users

1 0

[Fedora-directory-users] Open-source Management Console and Admin server
by Sam Tran 06 Jul '05

06 Jul '05

Hi, When are you planning to release the management console and admin server source code? Thanks. Sam

4 8

Re: [Fedora-directory-users]Open-source Management Console and Admin server
by Marcio Kabke Pinheiro 06 Jul '05

06 Jul '05

2 1

[Fedora-directory-users] Strange defunct process when running Admin server
by Sam Tran 06 Jul '05

06 Jul '05

Hi All, I have noticed a strange defunct process when I am running the Admin server: root 6907 0.0 0.5 3184 1392 ? Ss Jul03 0:00 ./uxwdog -d /opt/fedora-ds/admin-serv/config root 6908 0.0 2.4 19784 6180 ? S Jul03 0:00 \_ ns-httpd -d /opt/fedora-ds/admin-serv/config root 6909 0.0 10.6 673668 27320 ? S Jul03 0:01 \_ ns-httpd -d /opt/fedora-ds/admin-serv/config root 6910 0.0 0.0 0 0 ? Z Jul03 0:00 \_ [netstat] <defunct> Do you have the same problem? Any clue? Thanks. Sam

2 1

Re: [Fedora-directory-users] Error in java console
by Marcio Kabke Pinheiro 05 Jul '05

05 Jul '05

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users July 2005