[Fedora-directory-users] Re: Re: Re: Missing Objectclasses in a Default install of 1.0.3
by Eric Brown
While I was cleaning up the output from that start I noticed that the
errors were occuring around some schema files that were added by
someone else that I was working with. Those files had entries in them
that modified the values for turning on and requiring SSLv3.
When I asked about these files, we figured out that they entries were
created by a script that was downloaded from the web documentation.
When those entries were removed from the schema files, the directory
server started just fine. Sorry for the trouble and thanks for your
help.
Date: Thu, 09 Nov 2006 12:51:36 -0700
From: Richard Megginson <rmeggins(a)redhat.com>
Subject: Re: [Fedora-directory-users] Re: Re: Missing Objectclasses in
a Default install of 1.0.3
To: "General discussion list for the Fedora Directory server project."
<fedora-directory-users(a)redhat.com>
Message-ID: <455386C8.7030704(a)redhat.com>
Content-Type: text/plain; charset="iso-8859-1"
Eric Brown wrote:
> Ok, I changed that, but I am still getting the errors.
try start-slapd -d 1 > output 2>&1
Post the file output to pastebin.com and post the link here. Be sure to
scrub any sensitive data from the output file first.
>
> From: Richard Megginson <rmeggins(a)redhat.com>
> Subject: Re: [Fedora-directory-users] Re: Missing Objectclasses in a
> Default install of 1.0.3
> To: "General discussion list for the Fedora Directory server project."
> <fedora-directory-users(a)redhat.com>
> Message-ID: <45536439.7040401(a)redhat.com>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Eric Brown wrote:
>> Ok, here are the results of those commands.
>>
>> [root@host ~]# ls -al /opt/fedora-ds/slapd-instance/config
>> total 224
>> drwxr-xr-x 3 ldap ldap 4096 Nov 9 00:27 .
>> drwxr-xr-x 11 ldap root 4096 Nov 9 00:27 ..
>> -rw------- 1 ldap ldap 50292 Nov 9 00:27 dse.ldif
>> -rw------- 2 ldap ldap 50293 Nov 9 00:23 dse.ldif.bak
>> -rw------- 2 ldap ldap 50293 Nov 9 00:23 dse.ldif.startOK
>> -rw------- 1 ldap root 34182 Nov 8 15:51 dse_original.ldif
>> drwxr-xr-x 2 ldap root 4096 Nov 9 00:27 schema
>> -rw-r--r-- 1 ldap root 5400 Nov 8 15:51 slapd-collations.conf
>>
>> [root@host ~]# ls -al /opt/fedora-ds/slapd-instance/config/schema
>> total 964
>> drwxr-xr-x 2 ldap root 4096 Nov 9 00:27 .
>> drwxr-xr-x 3 ldap ldap 4096 Nov 9 00:27 ..
>> -rw-r--r-- 1 root root 69313 Oct 2 12:31 00core.ldif
>> -rw-r--r-- 1 root root 3832 Oct 2 12:31 05rfc2247.ldif
>> -rw-r--r-- 1 root root 2620 Oct 2 12:31 05rfc2927.ldif
>> -rw-r--r-- 1 root root 5204 Oct 2 12:31 10presence.ldif
>> -rw-r--r-- 1 root root 9211 Oct 2 12:31 10rfc2307.ldif
>> -rw-r--r-- 1 root root 6385 Oct 2 12:31 20subscriber.ldif
>> -rw-r--r-- 1 root root 4624 Oct 2 12:31 25java-object.ldif
>> -rw-r--r-- 1 root root 11532 Oct 2 12:31 28pilot.ldif
>> -rw-r--r-- 1 root root 13376 Oct 2 12:31 30ns-common.ldif
>> -rw-r--r-- 1 root root 8374 Oct 2 12:31 50ns-admin.ldif
>> -rw-r--r-- 1 root root 8891 Oct 2 12:31 50ns-calendar.ldif
>> -rw-r--r-- 1 root root 2866 Oct 2 12:31 50ns-certificate.ldif
>> -rw-r--r-- 1 root root 13514 Oct 2 12:31 50ns-compass.ldif
>> -rw-r--r-- 1 root root 8498 Oct 2 12:31
>> 50ns-delegated-admin.ldif
>> -rw-r--r-- 1 root root 18098 Oct 2 12:31 50ns-directory.ldif
>> -rw-r--r-- 1 root root 2989 Oct 2 12:31 50ns-legacy.ldif
>> -rw-r--r-- 1 root root 10576 Oct 2 12:31 50ns-mail.ldif
>> -rw-r--r-- 1 root root 18969 Oct 2 12:31 50ns-mcd-browser.ldif
>> -rw-r--r-- 1 root root 6452 Oct 2 12:31 50ns-mcd-config.ldif
>> -rw-r--r-- 1 root root 4732 Oct 2 12:31 50ns-mcd-li.ldif
>> -rw-r--r-- 1 root root 22790 Oct 2 12:31 50ns-mcd-mail.ldif
>> -rw-r--r-- 1 root root 2392 Oct 2 12:31 50ns-media.ldif
>> -rw-r--r-- 1 root root 9989 Oct 2 12:31 50ns-mlm.ldif
>> -rw-r--r-- 1 root root 66775 Oct 2 12:31 50ns-msg.ldif
>> -rw-r--r-- 1 root root 4648 Oct 2 12:31 50ns-netshare.ldif
>> -rw-r--r-- 1 root root 3717 Oct 2 12:31 50ns-news.ldif
>> -rw-r--r-- 1 root root 2392 Oct 2 12:31 50ns-proxy.ldif
>> -rw-r--r-- 1 root root 4776 Oct 2 12:31 50ns-value.ldif
>> -rw-r--r-- 1 root root 5207 Oct 2 12:31 50ns-wcal.ldif
>> -rw-r--r-- 1 root root 2865 Oct 2 12:31 50ns-web.ldif
>> -rw-r--r-- 1 root root 13355 Oct 2 12:31 51ns-calendar.ldif
>> -rw-r--r-- 1 root root 4032 Oct 2 12:31 60pam-plugin.ldif
>> -rw-r--r-- 1 root root 986 Oct 2 12:33 61ldapns.ldif
>> -rw-r--r-- 1 root root 683 Oct 23 13:50 70ssl_enable.ldif
>> -rw------- 1 nobody nobody 2568 Oct 25 10:51 99user.ldif
> Is your directory server running as ldap:ldap? If so, the 99user.ldif
> file needs to be owned by ldap:ldap, not nobody:nobody.
>>
>>
>>
>>
>> Eric Brown wrote:
>>> When I install 1.0.3, use the default values for setting it up, and
>>> start it, the following messages are displayed.
>>>
>>> [08/Nov/2006:10:51:44 -0600] - Entry "cn=encryption,cn=config"
>>> required attribute "objectclass" missing
>>> [08/Nov/2006:10:51:45 -0600] - Entry "cn=config" required attribute
>>> "objectclass" missing
>>> [08/Nov/2006:10:51:45 -0600] - Entry "cn=config" required attribute
>>> "objectclass" missing
>>> [08/Nov/2006:10:51:45 -0600] - Entry "cn=encryption,cn=config"
>>> required attribute "objectclass" missing
>> Type the following command:
>> ls -al /opt/fedora-ds/slapd-yourinstance/config
>> also
>> ls -al /opt/fedora-ds/slapd-yourinstance/config/schema
>>>
>>> I have not added or removed anything from the default schema files and
>>> I can't find a message that tells me what object classes are missing.
>>> Any ideas on where to look for more detailed information on these
>>> errors or why they are appearing in the first place.
>>>
>>> Thanks.
>>>
>>> --
>>> Fedora-directory-users mailing list
>>> Fedora-directory-users(a)redhat.com
>>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>> --
>> Fedora-directory-users mailing list
>> Fedora-directory-users(a)redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
17 years, 5 months
[Fedora-directory-users] Re: Re: Missing Objectclasses in a Default install of 1.0.3
by Eric Brown
Ok, I changed that, but I am still getting the errors.
From: Richard Megginson <rmeggins(a)redhat.com>
Subject: Re: [Fedora-directory-users] Re: Missing Objectclasses in a
Default install of 1.0.3
To: "General discussion list for the Fedora Directory server project."
<fedora-directory-users(a)redhat.com>
Message-ID: <45536439.7040401(a)redhat.com>
Content-Type: text/plain; charset="iso-8859-1"
Eric Brown wrote:
> Ok, here are the results of those commands.
>
> [root@host ~]# ls -al /opt/fedora-ds/slapd-instance/config
> total 224
> drwxr-xr-x 3 ldap ldap 4096 Nov 9 00:27 .
> drwxr-xr-x 11 ldap root 4096 Nov 9 00:27 ..
> -rw------- 1 ldap ldap 50292 Nov 9 00:27 dse.ldif
> -rw------- 2 ldap ldap 50293 Nov 9 00:23 dse.ldif.bak
> -rw------- 2 ldap ldap 50293 Nov 9 00:23 dse.ldif.startOK
> -rw------- 1 ldap root 34182 Nov 8 15:51 dse_original.ldif
> drwxr-xr-x 2 ldap root 4096 Nov 9 00:27 schema
> -rw-r--r-- 1 ldap root 5400 Nov 8 15:51 slapd-collations.conf
>
> [root@host ~]# ls -al /opt/fedora-ds/slapd-instance/config/schema
> total 964
> drwxr-xr-x 2 ldap root 4096 Nov 9 00:27 .
> drwxr-xr-x 3 ldap ldap 4096 Nov 9 00:27 ..
> -rw-r--r-- 1 root root 69313 Oct 2 12:31 00core.ldif
> -rw-r--r-- 1 root root 3832 Oct 2 12:31 05rfc2247.ldif
> -rw-r--r-- 1 root root 2620 Oct 2 12:31 05rfc2927.ldif
> -rw-r--r-- 1 root root 5204 Oct 2 12:31 10presence.ldif
> -rw-r--r-- 1 root root 9211 Oct 2 12:31 10rfc2307.ldif
> -rw-r--r-- 1 root root 6385 Oct 2 12:31 20subscriber.ldif
> -rw-r--r-- 1 root root 4624 Oct 2 12:31 25java-object.ldif
> -rw-r--r-- 1 root root 11532 Oct 2 12:31 28pilot.ldif
> -rw-r--r-- 1 root root 13376 Oct 2 12:31 30ns-common.ldif
> -rw-r--r-- 1 root root 8374 Oct 2 12:31 50ns-admin.ldif
> -rw-r--r-- 1 root root 8891 Oct 2 12:31 50ns-calendar.ldif
> -rw-r--r-- 1 root root 2866 Oct 2 12:31 50ns-certificate.ldif
> -rw-r--r-- 1 root root 13514 Oct 2 12:31 50ns-compass.ldif
> -rw-r--r-- 1 root root 8498 Oct 2 12:31 50ns-delegated-admin.ldif
> -rw-r--r-- 1 root root 18098 Oct 2 12:31 50ns-directory.ldif
> -rw-r--r-- 1 root root 2989 Oct 2 12:31 50ns-legacy.ldif
> -rw-r--r-- 1 root root 10576 Oct 2 12:31 50ns-mail.ldif
> -rw-r--r-- 1 root root 18969 Oct 2 12:31 50ns-mcd-browser.ldif
> -rw-r--r-- 1 root root 6452 Oct 2 12:31 50ns-mcd-config.ldif
> -rw-r--r-- 1 root root 4732 Oct 2 12:31 50ns-mcd-li.ldif
> -rw-r--r-- 1 root root 22790 Oct 2 12:31 50ns-mcd-mail.ldif
> -rw-r--r-- 1 root root 2392 Oct 2 12:31 50ns-media.ldif
> -rw-r--r-- 1 root root 9989 Oct 2 12:31 50ns-mlm.ldif
> -rw-r--r-- 1 root root 66775 Oct 2 12:31 50ns-msg.ldif
> -rw-r--r-- 1 root root 4648 Oct 2 12:31 50ns-netshare.ldif
> -rw-r--r-- 1 root root 3717 Oct 2 12:31 50ns-news.ldif
> -rw-r--r-- 1 root root 2392 Oct 2 12:31 50ns-proxy.ldif
> -rw-r--r-- 1 root root 4776 Oct 2 12:31 50ns-value.ldif
> -rw-r--r-- 1 root root 5207 Oct 2 12:31 50ns-wcal.ldif
> -rw-r--r-- 1 root root 2865 Oct 2 12:31 50ns-web.ldif
> -rw-r--r-- 1 root root 13355 Oct 2 12:31 51ns-calendar.ldif
> -rw-r--r-- 1 root root 4032 Oct 2 12:31 60pam-plugin.ldif
> -rw-r--r-- 1 root root 986 Oct 2 12:33 61ldapns.ldif
> -rw-r--r-- 1 root root 683 Oct 23 13:50 70ssl_enable.ldif
> -rw------- 1 nobody nobody 2568 Oct 25 10:51 99user.ldif
Is your directory server running as ldap:ldap? If so, the 99user.ldif
file needs to be owned by ldap:ldap, not nobody:nobody.
>
>
>
>
> Eric Brown wrote:
>> When I install 1.0.3, use the default values for setting it up, and
>> start it, the following messages are displayed.
>>
>> [08/Nov/2006:10:51:44 -0600] - Entry "cn=encryption,cn=config"
>> required attribute "objectclass" missing
>> [08/Nov/2006:10:51:45 -0600] - Entry "cn=config" required attribute
>> "objectclass" missing
>> [08/Nov/2006:10:51:45 -0600] - Entry "cn=config" required attribute
>> "objectclass" missing
>> [08/Nov/2006:10:51:45 -0600] - Entry "cn=encryption,cn=config"
>> required attribute "objectclass" missing
> Type the following command:
> ls -al /opt/fedora-ds/slapd-yourinstance/config
> also
> ls -al /opt/fedora-ds/slapd-yourinstance/config/schema
>>
>> I have not added or removed anything from the default schema files and
>> I can't find a message that tells me what object classes are missing.
>> Any ideas on where to look for more detailed information on these
>> errors or why they are appearing in the first place.
>>
>> Thanks.
>>
>> --
>> Fedora-directory-users mailing list
>> Fedora-directory-users(a)redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
17 years, 5 months
Re: [Fedora-directory-users] PAM passthru questions and SecureID
by Howard Chu
> Date: Wed, 08 Nov 2006 15:08:02 -0800
> From: Chris Maresca <ckm(a)olliancegroup.com>
> Richard Megginson wrote:
>> I just don't like overloading the userPassword {foo} syntax, but
>> openldap has a history of doing something similar with {kerberos} and
>> {sasl}, so there is precedent.
They're also strongly deprecated; {kerberos} is no longer supported. The
only real need for them is old clients that only know how to do Simple
Bind. Since that in itself is a security liability, it's better to get
the clients updated.
--
-- Howard Chu
Chief Architect, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc
OpenLDAP Core Team http://www.openldap.org/project/
17 years, 5 months
[Fedora-directory-users] Question about account inactivation
by Radek Hladik
I would like to ask one stupid question about account inactivation. When
I use FDS console to deactivate user, it produces some "magic" with
CoS to add operational attribute nsAccountLock to the specified user
entry. Is there any reason why this is done so complicated? Why the
nsAccountLock attribute can not be specified as optional attribute in
for example posixAccount class? And is this approach possible in case I
need only user account inactivation (I mean no groups or roles)?
I need to provide our account administrators with some easy possibility
to inactivate account via phpldapadmin and I would like to do it in as
standard way as possible. Of course we could change the password hash
specifier i.e. from {SSHA} to {SSHA-disabled} but I consider this as
last resort option.
Radek
17 years, 5 months
[Fedora-directory-users] Problems with SSL, Pam/SSHD Authentication & FDS
by Dave Della Costa
Hi folks,
This isn't strictly a FDS question (I think!) but I'm hoping there are
some people on the list who have significant experience and can offer
advice.
I've gotten FDS set up, I've generated the cert and imported it into my
client machine's /etc/openldap/cacerts directory. When I run
ldapsearch -ZZ
..on the client machine it works fine; this wasn't working correctly
until I did a few tweaks in my /etc/openldap/ldap.conf directory
(specifically, I had an IP address instead of hostname, so I was getting
a 'host doesn't match cert' or something like that error).
So, it seems like SSL is set up and working fine, BUT, I cannot do sshd
authentication via SSL. As soon as I uncomment 'ssl on' I start getting
this in my /var/log/messages:
Nov 9 12:46:47 a sh: nss_ldap: failed to bind to LDAP server
ldap://x.x.com: Can't contact LDAP server
Nov 9 12:46:47 a last message repeated 3 times
Nov 9 12:46:47 a sh: nss_ldap: reconnecting to LDAP server (sleeping 4
seconds)...
Nov 9 12:46:51 a sh: nss_ldap: failed to bind to LDAP server
ldap://x.x.com: Can't contact LDAP server
Nov 9 12:46:51 a sh: nss_ldap: failed to bind to LDAP server
ldap://x.x.com: Can't contact LDAP server
Nov 9 12:46:51 a sh: nss_ldap: reconnecting to LDAP server (sleeping 8
seconds)...
When I turn it back off, it binds to the regular (non-SSL) LDAP port on
the FDS server and authentication happens just fine.
Nov 9 12:47:01 a sshd[8390]: nss_ldap: reconnected to LDAP server
ldap://x.x.com after 1 attempt
Nov 9 12:47:03 a sshd(pam_unix)[8395]: authentication failure; logname=
uid=0 euid=0 tty=ssh ruser= rhost=x.x.x.x user=blap
Nov 9 12:47:03 a sshd[8390]: Accepted keyboard-interactive/pam for blap
from x.x.x.x port 48049 ssh2
Nov 9 12:47:03 a sshd(pam_unix)[8451]: session opened for user blap by
(uid=0)
Nov 9 12:47:03 a sshd[8390]: nss_ldap: reconnected to LDAP server
ldap://x.x.com after 1 attempt
(if you hadn't noticed, I changed all the IPs and hostnames in the above
log examples...).
What the heck could this be? I'm not sure what the proper options in
the /etc/ldap.conf are that perhaps I'm screwing up or forgetting, but
so far I've tried (in addition to 'ssl on') setting sslpath, "ssl
start_tls," tls_cacertfile, and tls_cacertdir. Or is this something
screwed up in my /etc/openldap/ldap.conf? I'm using the howto here:
http://directory.fedora.redhat.com/wiki/Howto:SSL
Any help would be greatly appreciated. Thanks!
Dave D.
17 years, 5 months
Re: [Fedora-directory-users] PAM passthru questions and SecureID
by Howard Chu
> From: Chris Maresca <ckm(a)olliancegroup.com>
> Subject: Re: [Fedora-directory-users] PAM passthru questions and
> SecureID
> Message-ID: <4552F189.9060001(a)olliancegroup.com>
> Richard Megginson wrote:
>> > But this is what SASL was designed to do - isolate applications from the
>> > authentication implementation details. Ideally, it would go like this:
>> > LDAP -> SASL -> sasl auth server plugin -> auth server
> Yes, but there are a very limited number of SASL plugins, basically
> NTLM, Kerberos, GSS and SecurID. Non-plugin auths are done through the
> 'external' method, which uses saslauthd, a hack as it actually requires
> accounts to be created to work properly. Saslauthd also only handles
> passwords in plain text, communicates over an unsecure socket, runs as
> root and is single-threaded....
Rich isn't recommending the use of saslauthd, and developing a SASL
plugin for whatever purpose is pretty easy.
> so the chain winds up being:
>
> LDAP -> SASL -> plaintext sockect connection -> saslauthd -> sasl-auth
> method -> auth server
>
> SASL is quite good, but saslauthd is not so great. It was never
> actually intended for this, but as a proxy to deal with apps that did
> not have SASL natively.
Agreed, saslauthd is junk.
>> > Then you could just to an LDAP SASL BIND with a mechanism like
>> > "SASL-SECURID" or something like that, and pass in whatever credentials
>> > are required by the auth server in the sasl credentials field.
>
> I don't disagree, but none of the vendors are providing this capability.
> The real world and the ideal situation are not really lining up....
>> > However, if it is more difficult to take the SASL plugin approach, or
>> > the vendors are just not going to make this happen, then we should
>> > figure out how to extend the PAM passthru plugin to handle cases like this.
>
> That's the way it is right now, so yeah, extending PAM passthru would be
> good. SASL may be the long term future, but right now, it's not
> deployable except for one vendor's mechanism.
You've identified a shortcoming but you're going about fixing it the
wrong way. Rich is trying to point you down the proper track; the right
way is to get the desired SASL plugin written.
>> > Would you be able to write up something for the Fedora DS wiki, like an
>> > informal software requirements doc?
>
> Sure, I can do that. I'd even offer to look at some code, but it's been
> years since I authored anything in C and I know nothing of the Fedora DS
> code....
<shameless plug>I work with both the OpenLDAP and Cyrus SASL Projects;
my company Symas Corp. can easily develop what's needed here and submit
it to Cyrus for you. Once you've got the requirements spelled out, come
talk to us.</shameless plug>
--
-- Howard Chu
Chief Architect, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc
OpenLDAP Core Team http://www.openldap.org/project/
17 years, 5 months
[Fedora-directory-users] Questions on Referal/Chaning features
by Ankur Agarwal
Hi,
We have 2 existing directory services set-up with different schemas:
1) Active Directory
2) iPlanet LDAP
Now we want to introduce a third one (Fedora LDAP) where we want to use referal/chaining features to send requests to these already existing servers. Would really appreciate your answers on:
1) Can we modify/update active directory data and iPlanet data with application interfacing only with new Fedora LDAP which will dispatch requests to these servers? Or can referal/chaining be used only for querying other LDAP servers?
2) Can Referal/Chaning be set-up across ActiveDirectory and Fedora with them having different schemas? Similarly between iPlanet and Fedora?
3) If we want to migrate data from iPlanet to Fedora (having diff schema on Fedora) then any issues we must be aware of and any best practices?
Thanks,
Ankur
---------------------------------
Sponsored Link
Talk more and pay less. Vonage can save you up to $300 a year on your phone bill. Sign up now.
17 years, 5 months
[Fedora-directory-users] Re: Missing Objectclasses in a Default install of 1.0.3
by Eric Brown
Ok, here are the results of those commands.
[root@host ~]# ls -al /opt/fedora-ds/slapd-instance/config
total 224
drwxr-xr-x 3 ldap ldap 4096 Nov 9 00:27 .
drwxr-xr-x 11 ldap root 4096 Nov 9 00:27 ..
-rw------- 1 ldap ldap 50292 Nov 9 00:27 dse.ldif
-rw------- 2 ldap ldap 50293 Nov 9 00:23 dse.ldif.bak
-rw------- 2 ldap ldap 50293 Nov 9 00:23 dse.ldif.startOK
-rw------- 1 ldap root 34182 Nov 8 15:51 dse_original.ldif
drwxr-xr-x 2 ldap root 4096 Nov 9 00:27 schema
-rw-r--r-- 1 ldap root 5400 Nov 8 15:51 slapd-collations.conf
[root@host ~]# ls -al /opt/fedora-ds/slapd-instance/config/schema
total 964
drwxr-xr-x 2 ldap root 4096 Nov 9 00:27 .
drwxr-xr-x 3 ldap ldap 4096 Nov 9 00:27 ..
-rw-r--r-- 1 root root 69313 Oct 2 12:31 00core.ldif
-rw-r--r-- 1 root root 3832 Oct 2 12:31 05rfc2247.ldif
-rw-r--r-- 1 root root 2620 Oct 2 12:31 05rfc2927.ldif
-rw-r--r-- 1 root root 5204 Oct 2 12:31 10presence.ldif
-rw-r--r-- 1 root root 9211 Oct 2 12:31 10rfc2307.ldif
-rw-r--r-- 1 root root 6385 Oct 2 12:31 20subscriber.ldif
-rw-r--r-- 1 root root 4624 Oct 2 12:31 25java-object.ldif
-rw-r--r-- 1 root root 11532 Oct 2 12:31 28pilot.ldif
-rw-r--r-- 1 root root 13376 Oct 2 12:31 30ns-common.ldif
-rw-r--r-- 1 root root 8374 Oct 2 12:31 50ns-admin.ldif
-rw-r--r-- 1 root root 8891 Oct 2 12:31 50ns-calendar.ldif
-rw-r--r-- 1 root root 2866 Oct 2 12:31 50ns-certificate.ldif
-rw-r--r-- 1 root root 13514 Oct 2 12:31 50ns-compass.ldif
-rw-r--r-- 1 root root 8498 Oct 2 12:31 50ns-delegated-admin.ldif
-rw-r--r-- 1 root root 18098 Oct 2 12:31 50ns-directory.ldif
-rw-r--r-- 1 root root 2989 Oct 2 12:31 50ns-legacy.ldif
-rw-r--r-- 1 root root 10576 Oct 2 12:31 50ns-mail.ldif
-rw-r--r-- 1 root root 18969 Oct 2 12:31 50ns-mcd-browser.ldif
-rw-r--r-- 1 root root 6452 Oct 2 12:31 50ns-mcd-config.ldif
-rw-r--r-- 1 root root 4732 Oct 2 12:31 50ns-mcd-li.ldif
-rw-r--r-- 1 root root 22790 Oct 2 12:31 50ns-mcd-mail.ldif
-rw-r--r-- 1 root root 2392 Oct 2 12:31 50ns-media.ldif
-rw-r--r-- 1 root root 9989 Oct 2 12:31 50ns-mlm.ldif
-rw-r--r-- 1 root root 66775 Oct 2 12:31 50ns-msg.ldif
-rw-r--r-- 1 root root 4648 Oct 2 12:31 50ns-netshare.ldif
-rw-r--r-- 1 root root 3717 Oct 2 12:31 50ns-news.ldif
-rw-r--r-- 1 root root 2392 Oct 2 12:31 50ns-proxy.ldif
-rw-r--r-- 1 root root 4776 Oct 2 12:31 50ns-value.ldif
-rw-r--r-- 1 root root 5207 Oct 2 12:31 50ns-wcal.ldif
-rw-r--r-- 1 root root 2865 Oct 2 12:31 50ns-web.ldif
-rw-r--r-- 1 root root 13355 Oct 2 12:31 51ns-calendar.ldif
-rw-r--r-- 1 root root 4032 Oct 2 12:31 60pam-plugin.ldif
-rw-r--r-- 1 root root 986 Oct 2 12:33 61ldapns.ldif
-rw-r--r-- 1 root root 683 Oct 23 13:50 70ssl_enable.ldif
-rw------- 1 nobody nobody 2568 Oct 25 10:51 99user.ldif
Eric Brown wrote:
> When I install 1.0.3, use the default values for setting it up, and
> start it, the following messages are displayed.
>
> [08/Nov/2006:10:51:44 -0600] - Entry "cn=encryption,cn=config"
> required attribute "objectclass" missing
> [08/Nov/2006:10:51:45 -0600] - Entry "cn=config" required attribute
> "objectclass" missing
> [08/Nov/2006:10:51:45 -0600] - Entry "cn=config" required attribute
> "objectclass" missing
> [08/Nov/2006:10:51:45 -0600] - Entry "cn=encryption,cn=config"
> required attribute "objectclass" missing
Type the following command:
ls -al /opt/fedora-ds/slapd-yourinstance/config
also
ls -al /opt/fedora-ds/slapd-yourinstance/config/schema
>
> I have not added or removed anything from the default schema files and
> I can't find a message that tells me what object classes are missing.
> Any ideas on where to look for more detailed information on these
> errors or why they are appearing in the first place.
>
> Thanks.
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
17 years, 5 months
