[Fedora-directory-users] Host name resolution when connecting to administration server
by François Beretti
Hi,
when you connect with the console to a remote administration server,
the server does a host name based access control. If you want to give
access to any host, you can set the host name mask to "*".
But if the host name DNS resolution fails, even if the mask is "*",
the authorization fails (HTTP 401: authorization required).
In my environment it is a problem to put every client host in the DNS
system used by the server.
How can I bypass the hostname verification of the administration server ?
Thank you
François
18 years, 1 month
Re: [Fedora-directory-users] FDS- Adding New attribute and object class?
by Mike Jackson
> Hai,
> I want to add a new (user defined) attribute and object class to the
> Fedora directory server without using the console?
>
> How i can do it?
>
> I tried to add new attribute/object class through schema/00core.ldif file.
> After that i restarted my directory server,fine, my FDS recognizes the
> new attribute and object class.
>
> Is it the correct way of doing it?
You should make your own files, instead of adding to existing files.
Also, you should use your own OID namespace, instead of using the ones in existing files. You can apply for an OID namespace for your organization, at iana.org.
BR,
Mike
18 years, 1 month
[Fedora-directory-users] FDS- Adding New attribute and object class?
by Hariharan R
Hai,
I want to add a new (user defined) attribute and object class to the
Fedora directory server without using the console?
How i can do it?
I tried to add new attribute/object class through schema/00core.ldif file.
After that i restarted my directory server,fine, my FDS recognizes the
new attribute and object class.
Is it the correct way of doing it?
Is there is any formal method to adding it(without using FDS console)?
Pls advice me.
----
Regards,
Hariharan.R
18 years, 1 month
Re: [Fedora-directory-users] gid number in posix account!
by Mike Jackson
> Yes, but Susan's point was that the generally accepted use of the
> term "uid" ( in systems and operating systems terms ) is a *number*
> that uniquely describes the user. LDAP is different from the norm,
> and "that's just whack".
Maybe. But we are discussing LDAP here :-) It has it's own jargon and methods, a lot of them inherited from X.500...
--
mike
18 years, 1 month
Re: [Fedora-directory-users] gid number in posix account!
by Mike Jackson
>
> what's really strange is that if you're adding a person to multiple groups (really, listing
> multiple memberuid attributes in a posixgroup) you MUST use the text name of the person. Even
> though the attr is called member*uid*, if you put the uid in there, it won't work. Text string
> must be specified. I know it's not FDS's fault but as my kids would say, "that's just whack."
>
uid is a text string username.
uidNumber is an integer user id number.
--
mike
18 years, 1 month
[Fedora-directory-users] gid number in posix account!
by Alex aka Magobin
hi at all,for migration of groups and users from files to Fedora DS I
used LdapImport...it exports groups,passwd and shadow files; I have all
users and groups in my DS...now I have a question:
When I create a new account, in posix tab I have to enter uid and gid
number for new user...is it possible to use name such as "mail" for gid
and is it possible to have an uid number automatically?...more or less
in the same way when you create a new account with adduser; It would be
very useful...in this way I haven't to remember last uid used and number
for that group.
thanks in advance!
Alex
18 years, 1 month
[Fedora-directory-users] FDS to AD sync weirdness ... CN changes, unique constraints.
by Elías Halldór Ágústsson
We are experimenting with Fedora Directory Server and trying to sync it
to AD.
Setting up SSL for both and initiating sync was successful.
However, it seems that DN in AD is constructed from the CN, which is the
full name. However, that's neigh impossible, since DN has a unique
constraint, but full names are seldom unique, and particularly not here
in Iceland. For example, my organization has at least 10 people called
"Kristín Jónsdóttir".
I regard AD as broken by design in this regard. My question is, can this
be fixed? What would be the right way to approach this problem?
--
Elías Halldór Ágústsson | Elias Halldor Agustsson
Unix Kerfisstjóri | Unix Systems Administrator
Reiknistofnun Háskóla Íslands | University of Iceland Computing Services
http://elias.rhi.hi.is/ | +354 525 4903
18 years, 1 month
Re: [Fedora-directory-users] Fedora directory Server 7.1 with BDB/MySQL Backend
by Hariharan R
Hai,
Can any one configured Fedora Directory server7.1 (or any version) with
MySQL as backend?
Is there is any documentation for dong it?
Can anyone pls advise me in this regard.I am in an urgent need of it.
Regards,
Hariharan R
Well let's see...
1. The LDBM/BDB thing is an OpenLDAP-ism. OpenLDAP created the 'BDB'
backend
as the new transacted store, leaving the older LDBM code as it was. FDS is
not OpenLDAP. It forked from the UMich code in 1995. In FDS the name of
the files is still 'ldbm' but the functionality is roughly similar to that
of the 'BDB' backend in OpenLDAP (at least
as far as having ACID properties and using transactions in BekeleyDB
goes).
So you need do absolutely nothing to get 'BDB'.
2. There is no SQL back end for FDS at present. So to change to a MySQL
backend database you'd need to write code.
-------------------
Fedora DS 7.1 by default supports LDBM database as a backend data store.
I want to change the backend database to BDB or MySQL.
How i can make the Fedora DS 7.1 to interface with BDB or MySQL database?
---
Hariharan.R
18 years, 1 month
[Fedora-directory-users] Fedora directory Server 7.1 with BDB/MySQL Backend
by Hariharan R
Hai,
Fedora DS 7.1 by default supports LDBM database as a backend data store.
I want to change the backend database to BDB or MySQL.
How i can make the Fedora DS 7.1 to interface with BDB or MySQL database?
Is there is any documentation for doing it?
Please anyone advice me on this.I am in an urgent need ...
Thanks in advance.
---
Regards,
Hariharan.R
18 years, 2 months
[Fedora-directory-users] Administrating Fedora directory Server through commands
by Hariharan R
Hai,
I am using Fedora Directory Server 7.1 on CentOS 4.3 (SMP kernal).
Now i want to administer FDS from the command line.so i am using
ldapadd,ldapmodify,ldapdelete ... commands.
I have no problem in adding an organizational unit or user to the
directory.
I am getting problem while try to add a new root suffix to the FDS from
the command line.
This is the process i am following to add a new root suffix
1) The ldif file (root.ldif) contains the following attributes
corresponds to the root entry
dn: cn="dc=newroot,dc=com",cn=mapping tree,cn=config
objectclass: dcobject
objectclass: top
objectClass: domain
objectclass: extensibleObject
objectclass: nsMappingTree
nsslapd-state: backend
nsslapd-backend: newdb
cn: dc=newroot,dc=com
dc: newroot
2) Then i am using ldap add command to add the root suffix which is
defined in the ldif file(root.ldif)
ldapadd -x -D "cn=Directory Manager" -w testingdir -f root.ldif
This command is get executed perfectly.Then i opened the FDS console.
Perhaps there is no error in the log file too.
3) Click Directory server > configuration
I have the entry for "newroot" and "newdb" is the database assigned to
the database.
4) Then If i open the Directory server > directory window i am not having
a directory entry for the newly created root suffix.
I don't have any problem if i create the root suffix from the GUI mode.
What could be the problem?
Can anyone pls help me to get rid of the problem?
Is there is any documentation available for administrating the Fedora
Directory server from the command line with trouble shooting
methods.(Now i am using Fedors DS administration guide.)
Thanks in advance.
---
Regards,
Hariharan.R
18 years, 2 months
