389-users July 2005

389-users@lists.fedoraproject.org

47 participants
66 discussions

Start a nNew thread

[Fedora-directory-users] Error in java console
by Marcio Kabke Pinheiro 05 Jul '05

05 Jul '05

2 1

[Fedora-directory-users] Management console: no successful login
by Sam Tran 03 Jul '05

03 Jul '05

Hi all, I managed to install Fedora Directory Server on a debian Sarge box. I created an instance that is now running. Next step I installed the binaries for the management console and admin server. I launch the console and the java login windows apeared. I input the right information but was not able to actually log in. It was hanging ... I read in some of the doc that the admin server needs to be started in order to use the management console. The problem is that I was not able to find the admin server binary or its startup script. What am I missing? Any help would be much appreciated. Thanks. Sam

2 3

[Fedora-directory-users] Integration with postfix
by Gabriele Chervatin 01 Jul '05

01 Jul '05

Hi everyone, first i use Directory Server as a address book, and i tested it whit Thunderbird. It's fine I'm able to search the users an their emails. Now i try to configure postfix with virtual user but i a bit complicated task for me. What are the basic step for the success? I need to add new schema? Follow my Directory content: version: 1 # entry-id: 1 dn: dc=example,dc=com objectClass: top objectClass: domain dc: example creatorsName: cn=directory manager modifiersName: cn=directory manager createTimestamp: 20050629120831Z modifyTimestamp: 20050629120832Z nsUniqueId: 821fc9bf-1dd211b2-8050be72-f5080000 aci: (targetattr!="userPassword")(version 3.0; acl "Enable anonymous access"; allow (read, search, compare)userdn="ldap:///anyone";) aci: (targetattr="carLicense ||description ||displayName ||facsimileTelephoneN umber ||homePhone ||homePostalAddress ||initials ||jpegPhoto ||labeledURL || mail ||mobile ||pager ||photo ||postOfficeBox ||postalAddress ||postalCode | |preferredDeliveryMethod ||preferredLanguage ||registeredAddress ||roomNumbe r ||secretary ||seeAlso ||st ||street ||telephoneNumber ||telexNumber ||titl e ||userCertificate ||userPassword ||userSMIMECertificate ||x500UniqueIdenti fier")(version 3.0; acl "Enable self write for common attributes"; allow (wr ite) userdn="ldap:///self";) aci: (targetattr="*")(version 3.0; acl "Configuration Administrator"; allow (a ll) userdn="ldap:///uid=admin,ou=Administrators, ou=TopologyManagement, o=Ne tscapeRoot";) aci: (targetattr ="*")(version 3.0;acl "Configuration Administrators Group";al low (all) (groupdn = "ldap:///cn=Configuration Administrators, ou=Groups, ou =TopologyManagement, o=NetscapeRoot");) aci: (targetattr ="*")(version 3.0;acl "Directory Administrators Group";allow (all) (groupdn = "ldap:///ou=Directory Administrators, dc=example,dc=c om");) aci: (targetattr = "*")(version 3.0; acl "SIE Group"; allow (all)groupdn = "ld ap:///cn=slapd-centos41, cn=Fedora Directory Server, cn=Server Group, cn=cen tos41.example.com, ou=example.com, o=NetscapeRoot";) # entry-id: 2 dn: cn=Directory Administrators, dc=example,dc=com objectClass: top objectClass: groupofuniquenames cn: Directory Administrators creatorsName: cn=directory manager modifiersName: cn=directory manager createTimestamp: 20050629120831Z modifyTimestamp: 20050629120832Z nsUniqueId: 821fc9c0-1dd211b2-8050be72-f5080000 # entry-id: 3 dn: ou=Groups, dc=example,dc=com objectClass: top objectClass: organizationalunit ou: Groups creatorsName: cn=directory manager modifiersName: cn=directory manager createTimestamp: 20050629120832Z modifyTimestamp: 20050629120832Z nsUniqueId: 821fc9ef-1dd211b2-8050be72-f5080000 # entry-id: 4 dn: ou=People, dc=example,dc=com objectClass: top objectClass: organizationalunit ou: People aci: (targetattr ="userpassword || telephonenumber || facsimiletelephonenumber ")(version 3.0;acl "Allow self entry modification";allow (write)(userdn = "l dap:///self");) aci: (targetattr !="cn || sn || uid")(targetfilter ="(ou=Accounting)")(version 3.0;acl "Accounting Managers Group Permissions";allow (write)(groupdn = "ld ap:///cn=Accounting Managers,ou=groups,dc=example,dc=com");) aci: (targetattr !="cn || sn || uid")(targetfilter ="(ou=Human Resources)")(ve rsion 3.0;acl "HR Group Permissions";allow (write)(groupdn = "ldap:///cn=HR Managers,ou=groups,dc=example,dc=com");) aci: (targetattr !="cn ||sn || uid")(targetfilter ="(ou=Product Testing)")(ver sion 3.0;acl "QA Group Permissions";allow (write)(groupdn = "ldap:///cn=QA M anagers,ou=groups,dc=example,dc=com");) aci: (targetattr !="cn || sn || uid")(targetfilter ="(ou=Product Development)" )(version 3.0;acl "Engineering Group Permissions";allow (write)(groupdn = "l dap:///cn=PD Managers,ou=groups,dc=example,dc=com");) creatorsName: cn=directory manager modifiersName: cn=directory manager createTimestamp: 20050629120832Z modifyTimestamp: 20050629120832Z nsUniqueId: 821fc9f0-1dd211b2-8050be72-f5080000 # entry-id: 5 dn: ou=Special Users,dc=example,dc=com objectClass: top objectClass: organizationalUnit ou: Special Users description: Special Administrative Accounts creatorsName: cn=directory manager modifiersName: cn=directory manager createTimestamp: 20050629120832Z modifyTimestamp: 20050629120832Z nsUniqueId: 821fc9f1-1dd211b2-8050be72-f5080000 # entry-id: 6 dn: cn=Accounting Managers,ou=groups,dc=example,dc=com objectClass: top objectClass: groupOfUniqueNames cn: Accounting Managers ou: groups description: People who can manage accounting entries creatorsName: cn=directory manager modifiersName: cn=directory manager createTimestamp: 20050629120832Z modifyTimestamp: 20050629120832Z nsUniqueId: 821fc9f2-1dd211b2-8050be72-f5080000 # entry-id: 7 dn: cn=HR Managers,ou=groups,dc=example,dc=com objectClass: top objectClass: groupOfUniqueNames cn: HR Managers ou: groups description: People who can manage HR entries creatorsName: cn=directory manager modifiersName: cn=directory manager createTimestamp: 20050629120832Z modifyTimestamp: 20050629120832Z nsUniqueId: 821fc9f3-1dd211b2-8050be72-f5080000 # entry-id: 8 dn: cn=QA Managers,ou=groups,dc=example,dc=com objectClass: top objectClass: groupOfUniqueNames cn: QA Managers ou: groups description: People who can manage QA entries creatorsName: cn=directory manager modifiersName: cn=directory manager createTimestamp: 20050629120832Z modifyTimestamp: 20050629120832Z nsUniqueId: 821fc9f4-1dd211b2-8050be72-f5080000 # entry-id: 9 dn: cn=PD Managers,ou=groups,dc=example,dc=com objectClass: top objectClass: groupOfUniqueNames cn: PD Managers ou: groups description: People who can manage engineer entries creatorsName: cn=directory manager modifiersName: cn=directory manager createTimestamp: 20050629120832Z modifyTimestamp: 20050629120832Z nsUniqueId: 821fc9f5-1dd211b2-8050be72-f5080000 # entry-id: 10 dn: uid=chervatin,dc=example,dc=com preferredLanguage: it givenName: Gabriele ntUserCreateNewAccount: true objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetorgperson objectClass: ntuser objectClass: posixAccount sn;lang-af: Chervatin facsimileTelephoneNumber: 338 175 1966 uid: chervatin mail: gabriele.chervatin(a)example.com uidNumber: 2000 cn: Gabriele Chervatin ntUserComment: Accoutn Test NT loginShell: /bin/bash telephoneNumber;lang-af: 338 175 1966 gidNumber: 2000 ntUserDomainId: gchervatin cn;lang-af:: R2FicmllbGUgQ2hlcnZhdGluIA== gecos: Gabriele Chervatin givenName;lang-af: Gabriele homeDirectory: /home/ghcervatin sn: Chervatin userPassword: {SSHA}** creatorsName: uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoot modifiersName: uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoo t createTimestamp: 20050629131933Z modifyTimestamp: 20050629131933Z nsUniqueId: 6d483381-1dd211b2-805abe72-f5080000 # entry-id: 15 dn: ou=domains,dc=example,dc=com ou: domains description: domini di posta objectClass: top objectClass: organizationalunit creatorsName: uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoot modifiersName: uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoo t createTimestamp: 20050630140356Z modifyTimestamp: 20050630140356Z nsUniqueId: a9969501-1dd111b2-807fbe72-f5080000 # entry-id: 17 dn: ou=example.com,ou=domains,dc=example,dc=com ou: example.com objectClass: top objectClass: organizationalunit creatorsName: uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoot modifiersName: uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoo t createTimestamp: 20050630140640Z modifyTimestamp: 20050630140640Z nsUniqueId: 14e06701-1dd211b2-807fbe72-f5080000 # entry-id: 18 dn: uid=vtest1,ou=example.com,ou=domains,dc=example,dc=com mail: vtest1(a)example.com givenName: vtest1 objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetorgperson sn: vtest1 cn: vtest1 userPassword: {SSHA}** creatorsName: uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoot modifiersName: uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoo t createTimestamp: 20050630140725Z modifyTimestamp: 20050630142229Z nsUniqueId: 38a3ad01-1dd211b2-807fbe72-f5080000 uid: vtest1 passwordGraceUserTime: 0 # entry-id: 19 dn: uid=vtest2,ou=example.com,ou=domains,dc=example,dc=com mail: vtest2(a)example.com givenName: vtest2 objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetorgperson sn: vtest2 cn: vtest2 userPassword: {SSHA}** creatorsName: uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoot modifiersName: cn=server,cn=plugins,cn=config createTimestamp: 20050630140940Z modifyTimestamp: 20050630142223Z nsUniqueId: 802a3901-1dd211b2-807fbe72-f5080000 uid: vtest2 passwordGraceUserTime: 0 # entry-id: 20 dn: uid=vtest3,ou=example.com,ou=domains,dc=example,dc=com mail: Vtest3(a)example.com givenName: vtest3 objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetorgperson sn: vtest3 cn: vtest3 userPassword: {SSHA}** creatorsName: uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoot modifiersName: cn=server,cn=plugins,cn=config createTimestamp: 20050630141046Z modifyTimestamp: 20050630142312Z nsUniqueId: a3ed7f01-1dd111b2-8080be72-f5080000 uid: vtest3 passwordGraceUserTime: 0 -- Gabriele Chervatin

3 2

[Fedora-directory-users] [Fwd: Re: [LDAP-interop] LDAPv3 NOT search filter behavior]
by Rich Megginson 01 Jul '05

01 Jul '05

-------- Original Message -------- Subject: Re: [LDAP-interop] LDAPv3 NOT search filter behavior Resent-Date: Fri, 1 Jul 2005 17:33:29 +0000 (GMT) Resent-From: richm(a)stanfordalumni.org Date: Fri, 01 Jul 2005 12:33:26 -0500 From: Benjamin Lewis <bhlewis(a)purdue.edu> To: richm(a)stanfordalumni.org, OpenLDAP interoperability list <ldap-interop(a)fini.net> CC: quanah(a)stanford.edu On July 1 2005, Rich Megginson wrote: > What happens if you specify the uid attribute to be returned? The uid attribute is returned for those entries that have one. > ldapsearch "(!(uid=quanah))" uid > ? Does it return only those entries that have a uid attribute? Does > OpenLDAP omit entries from the search results that match the search > filter but do not contain the attribute listed in the attribute list in > the search request? No. You might use something like '(&(uid=*)(!(uid=quanah)))' to return only the entries that have a uid attribute. It would probably be better to use objectClass to restrict the search to the type of objects you're looking for. Perhaps something like '(&(objectclass=posixAccount)(!(uid=quanah)))'. -Ben -- Benjamin Lewis <bhlewis(a)purdue.edu> Security Analyst, Identity and Access Management IT Security and Privacy Purdue University

1 0

[Fedora-directory-users] [Fwd: Re: [LDAP-interop] LDAPv3 NOT search filter behavior]
by Rich Megginson 01 Jul '05

01 Jul '05

-------- Original Message -------- Subject: Re: [LDAP-interop] LDAPv3 NOT search filter behavior Resent-Date: Fri, 1 Jul 2005 17:10:21 +0000 (GMT) Resent-From: richm(a)stanfordalumni.org Date: Fri, 01 Jul 2005 11:10:01 -0600 From: Rich Megginson <richm(a)netscape.net> Reply-To: richm(a)stanfordalumni.org To: quanah(a)stanford.edu CC: richm(a)stanfordalumni.org, OpenLDAP interoperability list <ldap-interop(a)fini.net> References: <42C5750A.4040601(a)netscape.net> <E3F6EE46A3648FC1E5DF39B9(a)[0.1.0.4]> quanah(a)stanford.edu wrote: > > > --On Friday, July 01, 2005 10:53 AM -0600 Rich Megginson > <richm(a)netscape.net> wrote: > >> Does search using a NOT filter imply the presence of that attribute? >> Specifically: >> >> (!(someAttr=abc)) >> >> Should this return those entries which have the someAttr attribute >> present AND whose someAttr value != abc? Or should this return entries >> which do not have the someAttr attribute? > > > This should return all entries that don't have someAttr=abc. I.e., if > the entry has someAttr=joe, it will be returned. If the entry doesn't > have any occurrence of someAttr, it will be returned. What happens if you specify the uid attribute to be returned? Is this specified in X.500? If so, where? > > For example: > > tribes:~> ldapsearch "(!(uid=quanah))" | more e.g. what happens if you do ldapsearch "(!(uid=quanah))" uid ? Does it return only those entries that have a uid attribute? Does OpenLDAP omit entries from the search results that match the search filter but do not contain the attribute listed in the attribute list in the search request? > SASL/GSSAPI authentication started > SASL username: quanah(a)stanford.edu > SASL SSF: 56 > SASL installing layers > # extended LDIF > # > # LDAPv3 > # base <> with scope sub > # filter: (!(uid=quanah)) > # requesting: ALL > # > > # stanford.edu > dn: dc=stanford,dc=edu > objectClass: dcObject > objectClass: organization > o: Stanford University > dc: stanford > l: Palo Alto > > # Manager, stanford.edu > dn: cn=Manager,dc=stanford,dc=edu > objectClass: organizationalRole > cn: Manager > > # People, stanford.edu > dn: cn=People,dc=stanford,dc=edu > objectClass: top > objectClass: organizationalRole > cn: People > > > --Quanah > > -- > Quanah Gibson-Mount > Principal Software Developer > ITSS/Shared Services > Stanford University > GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html > > "These censorship operations against schools and libraries are stronger > than ever in the present religio-political climate. They often focus on > fantasy and sf books, which foster that deadly enemy to bigotry and blind > faith, the imagination." -- Ursula K. Le Guin > >

1 0

[Fedora-directory-users] ldapsearch issue, FDS vs. OL
by Brian K. Jones 01 Jul '05

01 Jul '05

Hi all, I'm getting some odd behavior from FDS when I do an ldapsearch using the openldap "ldapsearch" command line tool. Basically, if I do a search like this one: ldapsearch -x -LLL '(!(roomNumber=10*))' uid I should get back the uid's of those whose room numbers do not start with "10". When I do this search against openldap, I get what I would expect. The data I asked for, and nothing else. A list of uid's. Under FDS, I'm getting a list of every single distinguished name for every user. If that user matches the search term, I also get the uid. If they don't, I just get the dn. Why is this? I don't want the dn unless it matches. I feel like I've had this issue before, but I don't remember exactly, and I certainly don't remember how I fixed it. Any clues are hereby solicited. brian.

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users July 2005