January 2007 - 389-users - Fedora Mailing-Lists

[Fedora-directory-users] big searches dont return anything

by Stéphane Konstantaropoulos

Hello, I am moving our old Sun One setup to Fedora Directory server and I am pretty impressed. Just one thing does not work: searches that find a lot of entries: e.g. if I search for "smith", nothing comes back, no error either (from the console). I have around 10 000 users, so I'd say there are a lot of Smith's since this is London... However, if I make the search more precise, like "John Smith", it returns the results. It must have something to do with search limits, I tried a couple of things in the console but no result at all. I think I remember a param called "admin limit" but I cannot find it in the console. I tuned "lookthrough limit" and "size limit" with no luck. Any ideas? This is FDS 1.0.4 running on Fedora Core 6, x86_64. Thanks for helping, -- Stéphane Konstantaropoulos <skonstant(a)sgul.ac.uk> -- Web Developer - Computing Services --- St George's University of London

17 years, 3 months

4
9
0 / 0

[Fedora-directory-users] problem encryption passwd

by Gabriele Di Giambelardini

Hi to all, this is my first time in this mailinglist. we changed the "Passowrd encryptio" from Clear to Crypt, and very things worked fine. In a second time, we changed that setting back to "No Encryption ( Clear )", but the fedora-ds now accepts only the encrypted passords, even after that change. We tried to delete and create again the user, but it didn't work. the fedora-ds version i'm using it's = fedora-ds-1.0.2-1.RHEL4

17 years, 3 months

1
0
0 / 0

[Fedora-directory-users] FDS behind NATed firewall

by Nathaniel Hall

I have a master directory server behind a firewall that uses NAT. I want to place a read only server behind a different firewall. The new server does have a public IP address. Here is my setup: Master <--> Firewall (NAT) <--> Internet <--> Firewall <--> Read-Only My initial thought was to write a script (All done and works) that SSHs to the RO server and creates local and remote SSH tunnels. That would allow me to point the servers to localhost on specific ports so that they would get redirect appropriately and securely. Right now I am having problems getting them work the way I want them to. I had it partially working yesterday, but they were synchronizing like a normal system (out of SSH, over port 389). Does anybody have any ideas how this should be done securely? It is going over the Internet, so security is a must. -- Nathaniel Hall, GSEC GCFW GCIA GCIH GCFA

17 years, 3 months

4
4
0 / 0

Re: [Fedora-directory-users] FDS, SNMP & Cacti...

by Howard Chu

> Date: Tue, 09 Jan 2007 12:10:44 -0700 > From: Richard Megginson <rmeggins(a)redhat.com> >> To use, simply follow the Howto on the wiki, but you'll all need to rename >> *openldap_response_time.txt* to openldap_response_time.pl*. The other two >> files are as required. >> >> Thanks >> Dan >> > Thank you! > http://directory.fedora.redhat.com/download/README.snmp-cacti > http://directory.fedora.redhat.com/download/openldap_response_time.pl I really wish Net::LDAP would just go away and die. People should be using Mozilla::LDAP (or Net::LDAPapi), particularly when they're doing timing measurements. I guess as a monitoring device to say "is it alive" it's not too crucial, but you have to realize that when it says it measures the response time of the LDAP server, 99% of the measured time is actually perl execution, and only 1% is actual network+LDAP time. (That's not an exaggeration; there is a clear 100:1 difference in execution time between Net::LDAP and Mozilla::LDAP / Net::LDAPapi.) -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc OpenLDAP Core Team http://www.openldap.org/project/

17 years, 3 months

4
4
0 / 0

[Fedora-directory-users] Admin server won't start

by Glenn

I'm trying to restart the admin server from the command line in RHDS 7.1. It shuts down o.k., but it responds to the start-admin command with an error message: startup failure: could not bind to port 30838 (Address already in use) This only happens after I connect to the directory server gateway through a web browser using SSL. I can fix it by rebooting the server, but that's not a good option. Is there another way? Thanks again. -G.

17 years, 3 months

2
1
0 / 0

RE: [Fedora-directory-users] FDS, SNMP & Cacti...

by HAWKER, Dan

> > > Thank you! > http://directory.fedora.redhat.com/download/README.snmp-cacti > http://directory.fedora.redhat.com/download/openldap_response_time.pl > http://directory.fedora.redhat.com/download/cacti_host_templat > e_fedora_directory_server.xml > > ##### Thanks Richard, have ammended the howto to reflect the file locations... Dan This email (including any attachments) may contain confidential and/or privileged information or information otherwise protected from disclosure. If you are not the intended recipient, please notify the sender immediately, do not copy this message or any attachments and do not use it for any purpose or disclose its content to any person, but delete this message and any attachments from your system. Astrium disclaims any and all liability if this email transmission was virus corrupted, altered or falsified. --------------------------------------------------------------------- Astrium Limited, Registered in England and Wales No. 2449259 Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS, England

17 years, 3 months

2
1
0 / 0

RE: [Fedora-directory-users] FDS, SNMP & Cacti...

by HAWKER, Dan

I am using cacti 8.6.E I got this error: trying to import the template. Error: XML: Hash version does not exist. Should i move to a higher version? Everythign else is working well. Edward To be completely honest Edward, have no idea. I am using 0.8.6i and it all worked fine for me, so, yeah maybe a jump up to a higher version may work. Dan This email (including any attachments) may contain confidential and/or privileged information or information otherwise protected from disclosure. If you are not the intended recipient, please notify the sender immediately, do not copy this message or any attachments and do not use it for any purpose or disclose its content to any person, but delete this message and any attachments from your system. Astrium disclaims any and all liability if this email transmission was virus corrupted, altered or falsified. --------------------------------------------------------------------- Astrium Limited, Registered in England and Wales No. 2449259 Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS, England

17 years, 3 months

1
0
0 / 0

RE: [Fedora-directory-users] FDS, SNMP & Cacti...

by HAWKER, Dan

> If anyone wants my ready FDS-ified cacti templates, send me an email and > I'll forward it on. (or is there a special accessories area on the wiki I > can upload it to???). > >Just send me the files and I'll put them in the download area of the >wiki. Would you be interested in creating a Howto:SNMP or Cacti page? >Doesn't have to be much, maybe just a few "do this" and "don't do that" >with the links to the downloads. Hi Richard, I'll give it a go. I'm no SNMP or Cacti guru in any way, but it was thankfully quite simple to setup and I managed to get it to work, so it can't be that tricky :) Off home here in the UK, but will wrap up the bits and forward you them next week. They'll probably need some instructions for the un-initiated, so I'll have a bash at the how-to also. Have a good weekend :) Dan -- Dan Hawker Linux System Administrator Astrium -- This email (including any attachments) may contain confidential and/or privileged information or information otherwise protected from disclosure. If you are not the intended recipient, please notify the sender immediately, do not copy this message or any attachments and do not use it for any purpose or disclose its content to any person, but delete this message and any attachments from your system. Astrium disclaims any and all liability if this email transmission was virus corrupted, altered or falsified. --------------------------------------------------------------------- Astrium Limited, Registered in England and Wales No. 2449259 Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS, England

17 years, 3 months

2
1
0 / 0

RE: [Fedora-directory-users] How to Reset NT4 LDAP Service Password

by Shaun Daigle

Update: I found this post that shows how to change the default password: http://www.redhat.com/archives/fedora-directory-users/2005-November/msg00..., but unfortunately, I am unable to login as 'uid=admin,ou=system' in order to perform the change. As stated earlier, I am able to bind to the LDAP server anonymously, but I have insuficient rights to change anything. I'm totally locked out of my system. How do I reset it back to normal?If there a default password for 'uid=admin,ou=system'? I know that for ApacheDS, the default password for 'uid=admin,ou=system' is 'secret'. Is there a similar thing for the NT4 LSAP Service?Thanks, Shaun D From: shaundai(a)hotmail.comTo: fedora-directory-users(a)redhat.comDate: Wed, 10 Jan 2007 12:04:23 -0400Subject: [Fedora-directory-users] How to Reset NT4 LDAP Service Password We installed the NT4 LDAP Service (ntds.msi) and have followed instructions as per ds71admin.pdf and we are encountering an issue when authenticating to the LDAP server. Prior to starting the service, we set the password in the usersync.conf file, but it seems that it "did not take". Using various LDAP clients, we receive the following error message when authenticating using "uid=admin,ou=system":[Error 49] Invalid CredentialsLDAP: error code 49 - Bind failureorg.apache.ldap.common.exception.LdapAuthenticationException Oddly, when binding anonymously, we are able to connect normally and browse the contents of the SAM database. We tried authenticating using a number of username/password combinations, but none work. I'm a little worried about being able to bind anonymously... isn't this a security risk? Any way to turn that off? Reading through the guide, I understand that once started, the only way to change the password is by using an "LDAP Modify Operation". If this is the case, how do we do this?Please advise. Thanks, Shaun D Be one of the first to try Windows Live Mail. Windows Live Mail. _________________________________________________________________ Be one of the first to try Windows Live Mail. http://ideas.live.com/programpage.aspx?versionId=5d21c51a-b161-4314-9b0e-...

17 years, 3 months

1
0
0 / 0

[Fedora-directory-users] How to Reset NT4 LDAP Service Password

by Shaun Daigle

We installed the NT4 LDAP Service (ntds.msi) and have followed instructions as per ds71admin.pdf and we are encountering an issue when authenticating to the LDAP server. Prior to starting the service, we set the password in the usersync.conf file, but it seems that it "did not take". Using various LDAP clients, we receive the following error message when authenticating using "uid=admin,ou=system": [Error 49] Invalid Credentials LDAP: error code 49 - Bind failure org.apache.ldap.common.exception.LdapAuthenticationException Oddly, when binding anonymously, we are able to connect normally and browse the contents of the SAM database. We tried authenticating using a number of username/password combinations, but none work. I'm a little worried about being able to bind anonymously... isn't this a security risk? Any way to turn that off? Reading through the guide, I understand that once started, the only way to change the password is by using an "LDAP Modify Operation". If this is the case, how do we do this?Please advise. Thanks, Shaun D _________________________________________________________________ Be one of the first to try Windows Live Mail. http://ideas.live.com/programpage.aspx?versionId=5d21c51a-b161-4314-9b0e-...

17 years, 3 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users January 2007