389-users July 2007

389-users@lists.fedoraproject.org

61 participants
59 discussions

[Fedora-directory-users] Re: Fedora-directory-users Digest, Vol 26, Issue 9
by surendhar surya 11 Jul '07

11 Jul '07

Thank you for information. I have fixed the issue finally once i run the authconfig and configured ldap server details. Now i have a problem! when i try to add windows clinet machine in FDS it give a error message. fedora-directory-users-request(a)redhat.com wrote: Send Fedora-directory-users mailing list submissions to fedora-directory-users(a)redhat.com To subscribe or unsubscribe via the World Wide Web, visit https://www.redhat.com/mailman/listinfo/fedora-directory-users or, via email, send a message with subject or body 'help' to fedora-directory-users-request(a)redhat.com You can reach the person managing the list at fedora-directory-users-owner(a)redhat.com When replying, please edit your Subject line so it is more specific than "Re: Contents of Fedora-directory-users digest..." Today's Topics: 1. Re: Admin Server connecting to two Directory Servers within the same domain (Daryle A. Tilroe) 2. Re: Admin Server connecting to two Directory Servers within the same domain (Richard Megginson) 3. Re: Admin Server connecting to two Directory Servers within the same domain (Daryle A. Tilroe) 4. Re: Admin Server connecting to two Directory Servers within the same domain (Richard Megginson) 5. Regarding fds with samba (surendhar surya) 6. No X (Vampire D) 7. Re: Regarding fds with samba (Ivan Ferreira) 8. Re: No X (Richard Megginson) 9. add new customer to Quickbooks from Directory Server (Darren Fulton - CTI) ---------------------------------------------------------------------- Message: 1 Date: Mon, 09 Jul 2007 10:30:11 -0600 From: "Daryle A. Tilroe" Subject: Re: [Fedora-directory-users] Admin Server connecting to two Directory Servers within the same domain To: "General discussion list for the Fedora Directory server project." Message-ID: <46926293.2070806(a)micralyne.com> Content-Type: text/plain; charset=us-ascii; format=flowed Joel Heenan wrote: > On Sat, 2007-07-07 at 00:14 +1000, Richard Megginson wrote: > >>How did you create your directory server instances? Usually the first >>one you create is your Configuration Directory Server, the one the >>console uses as sort of a network registry (the o=NetscapeRoot suffix). >>Subsequent directory server instance creation should use this one >>instead of creating a new Config DS. The setup program should give you >>these options. I have a closely related question. Is there a correct way in a simple dual multimaster setup to have the two servers both be config servers for the same DB? I tried just replicating NetscapeRoot but I ended up with things messed up. I have not yet tried again but was curious if there was a 'correct' method. Otherwise I was just going to have the two be independent insofar as the config DB went. I require this so either will be completely, and indefinitely, functional when the other is down. -- Daryle A. Tilroe ------------------------------ Message: 2 Date: Mon, 09 Jul 2007 10:29:19 -0600 From: Richard Megginson Subject: Re: [Fedora-directory-users] Admin Server connecting to two Directory Servers within the same domain To: "General discussion list for the Fedora Directory server project." Message-ID: <4692625F.2030205(a)redhat.com> Content-Type: text/plain; charset="iso-8859-1" Daryle A. Tilroe wrote: > Joel Heenan wrote: > >> On Sat, 2007-07-07 at 00:14 +1000, Richard Megginson wrote: >> >>> How did you create your directory server instances? Usually the >>> first one you create is your Configuration Directory Server, the one >>> the console uses as sort of a network registry (the o=NetscapeRoot >>> suffix). Subsequent directory server instance creation should use >>> this one instead of creating a new Config DS. The setup program >>> should give you these options. > > I have a closely related question. Is there a correct way in a simple > dual multimaster setup to have the two servers both be config servers > for the same DB? I tried just replicating NetscapeRoot but I ended up > with things messed up. How so? > I have not yet tried again but was curious > if there was a 'correct' method. Not really. There are too many places where the host:port of the config DS are hard coded, and there is not really a provision for specifying more than one for failover. > Otherwise I was just going to have > the two be independent insofar as the config DB went. I require > this so either will be completely, and indefinitely, functional when > the other is down. > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3245 bytes Desc: S/MIME Cryptographic Signature Url : https://www.redhat.com/archives/fedora-directory-users/attachments/20070709… ------------------------------ Message: 3 Date: Mon, 09 Jul 2007 10:52:05 -0600 From: "Daryle A. Tilroe" Subject: Re: [Fedora-directory-users] Admin Server connecting to two Directory Servers within the same domain To: "General discussion list for the Fedora Directory server project." Message-ID: <469267B5.6090607(a)micralyne.com> Content-Type: text/plain; charset=us-ascii; format=flowed Richard Megginson wrote: > Daryle A. Tilroe wrote: > >> I have a closely related question. Is there a correct way in a simple >> dual multimaster setup to have the two servers both be config servers >> for the same DB? I tried just replicating NetscapeRoot but I ended up >> with things messed up. > > How so? It was a couple weeks ago but IIRC the admin server on the second master would not run properly. I will really have to try it again to confirm. >> I have not yet tried again but was curious >> if there was a 'correct' method. > > Not really. There are too many places where the host:port of the config > DS are hard coded, and there is not really a provision for specifying > more than one for failover. So basically I should have my two multimasters run independent admin servers? I did notice that I can admin the other "independent" secondary master with the 'left over' entry in the config DB of the primary (it was left there after I redid the secondary since the I left the primary). This suggests I could probably add each of the two master to each other's config DB manually. I'm not really sure that this is even useful though in a small install. Probably best to leave them as separate admin servers with the userRoot replicated; that seems to work just fine. -- Daryle A. Tilroe ------------------------------ Message: 4 Date: Mon, 09 Jul 2007 10:49:07 -0600 From: Richard Megginson Subject: Re: [Fedora-directory-users] Admin Server connecting to two Directory Servers within the same domain To: "General discussion list for the Fedora Directory server project." Message-ID: <46926703.1040305(a)redhat.com> Content-Type: text/plain; charset="iso-8859-1" Daryle A. Tilroe wrote: > Richard Megginson wrote: > >> Daryle A. Tilroe wrote: >> >>> I have a closely related question. Is there a correct way in a simple >>> dual multimaster setup to have the two servers both be config servers >>> for the same DB? I tried just replicating NetscapeRoot but I ended up >>> with things messed up. >> >> How so? > > It was a couple weeks ago but IIRC the admin server on the second > master would not run properly. I will really have to try it again > to confirm. > >>> I have not yet tried again but was curious >>> if there was a 'correct' method. >> >> Not really. There are too many places where the host:port of the >> config DS are hard coded, and there is not really a provision for >> specifying more than one for failover. > > So basically I should have my two multimasters run independent admin > servers? I did notice that I can admin the other "independent" > secondary master with the 'left over' entry in the config DB of > the primary (it was left there after I redid the secondary since > the I left the primary). This suggests I could probably add each > of the two master to each other's config DB manually. Yes, you could do that too. > I'm not really > sure that this is even useful though in a small install. Probably > best to leave them as separate admin servers with the userRoot > replicated; that seems to work just fine. > > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3245 bytes Desc: S/MIME Cryptographic Signature Url : https://www.redhat.com/archives/fedora-directory-users/attachments/20070709… ------------------------------ Message: 5 Date: Tue, 10 Jul 2007 11:15:46 +0100 (BST) From: surendhar surya Subject: [Fedora-directory-users] Regarding fds with samba To: fedora-directory-users(a)redhat.com Message-ID: <89864.12273.qm(a)web8903.mail.in.yahoo.com> Content-Type: text/plain; charset="iso-8859-1" I have installed fedora directory server and i tried to integreate with samba. When i tried to groupmap using this command. I get a error message. what will be the problem. can anyone provide me a solution.? [root@fds ~]# net groupmap add rid=512 ntgroup="Domain Admins" unixgroup="Domain Admins" Can't lookup UNIX group Domain Admins Thanks and Regard Surendhar P Chennai --------------------------------- Download prohibited? No problem. CHAT from any browser, without download. -------------- next part -------------- An HTML attachment was scrubbed... URL: https://www.redhat.com/archives/fedora-directory-users/attachments/20070710… ------------------------------ Message: 6 Date: Tue, 10 Jul 2007 11:08:13 -0400 From: "Vampire D" Subject: [Fedora-directory-users] No X To: fedora-directory-users(a)redhat.com Message-ID: <4ca8a4870707100808o12705142me70ea9af5cbf7a13(a)mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1" Is there anything you cannot do with FDS when using the HTTP Control Panel rather than using the X Windows Java Control Panel? Is it highly recommended to use the X Windows Java Control Panel in production? -- "Do the actors on Unsolved Mysteries ever get arrested because they look just like the criminal they are playing?" Christopher -------------- next part -------------- An HTML attachment was scrubbed... URL: https://www.redhat.com/archives/fedora-directory-users/attachments/20070710… ------------------------------ Message: 7 Date: Tue, 10 Jul 2007 11:22:30 -0400 From: Ivan Ferreira Subject: Re: [Fedora-directory-users] Regarding fds with samba To: "General discussion list for the Fedora Directory server project." Cc: fedora-directory-users(a)redhat.com, fedora-directory-users-bounces(a)redhat.com Message-ID: Content-Type: text/plain; charset=ISO-8859-1 You have to creaete the "Domain Admins" Unix Group (PosixGroup) in the Directory Server. If you already created id, check if you can list the group with: getent group If you cannot see the "Domain Admins" unix group, then you have a problem with your LDAP client conrfuration, check ldap.conf. Para fedora-directory-users(a)redhat.co m surendhar surya cc .in> Asunto Enviado por: [Fedora-directory-users] fedora-directory-users-b Regarding fds with samba ounces(a)redhat.com Clasificación Uso Interno 10/07/2007 06:15 a.m. Por favor, responda a "General discussion list for the Fedora Directory server project." redhat.com> I have installed fedora directory server and i tried to integreate with samba. When i tried to groupmap using this command. I get a error message. what will be the problem. can anyone provide me a solution.? [root@fds ~]# net groupmap add rid=512 ntgroup="Domain Admins" unixgroup="Domain Admins" Can't lookup UNIX group Domain Admins Thanks and Regard Surendhar P Chennai Download prohibited? No problem. CHAT from any browser, without download. -- Fedora-directory-users mailing list Fedora-directory-users(a)redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users ======================================================================================== AVISO LEGAL: Esta información es privada y confidencial y está dirigida únicamente a su destinatario. Si usted no es el destinatario original de este mensaje y por este medio pudo acceder a dicha información por favor elimine el mensaje. La distribución o copia de este mensaje está estrictamente prohibida. Esta comunicación es sólo para propósitos de información y no debe ser considerada como propuesta, aceptación ni como una declaración de voluntad oficial de NUCLEO S.A. La transmisión de e-mails no garantiza que el correo electrónico sea seguro o libre de error. Por consiguiente, no manifestamos que esta información sea completa o precisa. Toda información está sujeta a alterarse sin previo aviso. This information is private and confidential and intended for the recipient only. If you are not the intended recipient of this message you are hereby notified that any review, dissemination, distribution or copying of this message is strictly prohibited. This communication is for information purposes only and shall not be regarded neither as a proposal, acceptance nor as a statement of will or official statement from NUCLEO S.A. . Email transmission cannot be guaranteed to be secure or error-free. Therefore, we do not represent that this information is complete or accurate and it should not be relied upon as such. All information is subject to change without notice. ------------------------------ Message: 8 Date: Tue, 10 Jul 2007 09:27:12 -0600 From: Richard Megginson Subject: Re: [Fedora-directory-users] No X To: "General discussion list for the Fedora Directory server project." Message-ID: <4693A550.4060309(a)redhat.com> Content-Type: text/plain; charset="iso-8859-1" Vampire D wrote: > Is there anything you cannot do with FDS when using the HTTP Control > Panel rather than using the X Windows Java Control Panel? The HTTP control panel (aka phonebook/gateway or admin express) just allows limited user/group management, server log viewing, and server start/stop. The Java Control Panel (aka console) allows you do perform all aspects of server, user, and group management. > > Is it highly recommended to use the X Windows Java Control Panel in > production? If you require a management GUI, then yes. All administration can be performed via the command line and via LDAP. > > -- > "Do the actors on Unsolved Mysteries ever get arrested because they > look just like the criminal they are playing?" > > Christopher > > ------------------------------------------------------------------------ > > -- > Fedora-directory-users mailing list > Fedora-directory-users(a)redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3245 bytes Desc: S/MIME Cryptographic Signature Url : https://www.redhat.com/archives/fedora-directory-users/attachments/20070710… ------------------------------ Message: 9 Date: Tue, 10 Jul 2007 10:44:29 -0500 From: Darren Fulton - CTI Subject: [Fedora-directory-users] add new customer to Quickbooks from Directory Server To: Fedora-directory-users(a)redhat.com Message-ID: <4693A95D.10409(a)concepttechnologyinc.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Disclaimer: Shot in the dark and possibly off-topic. Situation: We add client contacts to our Fedora Directory Server. The billing department has to also manually add client contacts into Quickbooks to generate bills and such. Goal: Make it so the client contacts only have to be manually added into only one system. Proposed Solutions: Make Quickbooks look for clients in the directory _or_ create a simple way to export from the directory client contact info (I think Quickbooks uses an IIF file). [BTW, wouldn't it be cool if there was a link in Directory Express web app to generate this like the vCard link?] Question for List: Has anybody had any experience getting either of these done that they would like to share? Final Disclaimer: Google searches revealed one or more commercial third-party applications that allow Quickbooks to "integrate" with LDAP. A quick look at these programs didn't impress me, but I have _not_ tested them. Google searches also revealed a Finance::IIF perl module that I will keep in mind. Thank you for any input. -- Best Regards, Darren Fulton Concept Technology, Inc. 1106 17th Avenue South Nashville, TN 37212 Phone - 615.321.6428 Ext. 105 Fax - 615.321.5598 ------------------------------ -- Fedora-directory-users mailing list Fedora-directory-users(a)redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users End of Fedora-directory-users Digest, Vol 26, Issue 9 ***************************************************** Thanks and Regard Surendhar P Chennai --------------------------------- 5, 50, 500, 5000. Store N number of mails in your inbox. Click here.

1 0

[Fedora-directory-users] Posix User
by slamp slamp 10 Jul '07

10 Jul '07

when i create an account and enable the Posix User, I have to supply UID number and GID number and Home Directory. Is there a way to automate this?? I'll be happy if UID can be auto incremented from the last user created.

3 2

[Fedora-directory-users] add new customer to Quickbooks from Directory Server
by Darren Fulton - CTI 10 Jul '07

10 Jul '07

Disclaimer: Shot in the dark and possibly off-topic. Situation: We add client contacts to our Fedora Directory Server. The billing department has to also manually add client contacts into Quickbooks to generate bills and such. Goal: Make it so the client contacts only have to be manually added into only one system. Proposed Solutions: Make Quickbooks look for clients in the directory _or_ create a simple way to export from the directory client contact info (I think Quickbooks uses an IIF file). [BTW, wouldn't it be cool if there was a link in Directory Express web app to generate this like the vCard link?] Question for List: Has anybody had any experience getting either of these done that they would like to share? Final Disclaimer: Google searches revealed one or more commercial third-party applications that allow Quickbooks to "integrate" with LDAP. A quick look at these programs didn't impress me, but I have _not_ tested them. Google searches also revealed a Finance::IIF perl module that I will keep in mind. Thank you for any input. -- Best Regards, Darren Fulton Concept Technology, Inc. 1106 17th Avenue South Nashville, TN 37212 Phone - 615.321.6428 Ext. 105 Fax - 615.321.5598

1 0

[Fedora-directory-users] Regarding fds with samba
by surendhar surya 10 Jul '07

10 Jul '07

I have installed fedora directory server and i tried to integreate with samba. When i tried to groupmap using this command. I get a error message. what will be the problem. can anyone provide me a solution.? [root@fds ~]# net groupmap add rid=512 ntgroup="Domain Admins" unixgroup="Domain Admins" Can't lookup UNIX group Domain Admins Thanks and Regard Surendhar P Chennai --------------------------------- Download prohibited? No problem. CHAT from any browser, without download.

2 1

[Fedora-directory-users] Admin Server connecting to two Directory Servers within the same domain
by Joel Heenan 09 Jul '07

09 Jul '07

Hey, I have successfully setup multi-master replication between two servers using SSL. Life is good. I would like to have a single Administration server that connects to both Directory Servers. Seems to make more sense than running one Admin server per Directory Server instance. I can't work out how I can add two Directory Servers who have the same domain. When I open the Admin Server console it has the domain "blah.example.com" which includes an IP address and port. I can add another domain but both servers are managing the same domain. I couldn't see an easy way to add another server, I poked around trying to do this behind the scenes in the Directory Server backend and I got another IP address and server group to appear but it seems that ip address (the one shown with the computer icon) is only cosmetic and the real IP address it uses to connect is the one in the domain. Am I going about this the wrong way? Guide you can point me to? Thanks -- Joel The information contained in this e-mail message and any accompanying files is or may be confidential. If you are not the intended recipient, any use, dissemination, reliance, forwarding, printing or copying of this e-mail or any attached files is unauthorised. This e-mail is subject to copyright. No part of it should be reproduced, adapted or communicated without the written consent of the copyright owner. If you have received this e-mail in error please advise the sender immediately by return e-mail or telephone and delete all copies. Fairfax does not guarantee the accuracy or completeness of any information contained in this e-mail or attached files. Internet communications are not secure, therefore Fairfax does not accept legal responsibility for the contents of this message or attached files.

3 7

[Fedora-directory-users] Migration from 1.0 and 7.1 to 1.1
by Rich Megginson 09 Jul '07

09 Jul '07

With the new FHS paths and new configuration options, there is quite a bit of stuff that has to happen to migrate old servers. The current Fedora pre-release version 1.1 has a migrateTo11 script that handles most of these, and CVS HEAD has some newer scripts to handle both directory server and admin server/console migration. We've created this page - http://directory.fedoraproject.org/wiki/DS_Admin_Migration - to plan our migration strategy. One of the big issues is cross platform migration e.g. going from FC-5 i386 to F7 x86_64. There are a number of issues involved with this. We are trying to figure out the best way to do this and we need your help. If you could, please read the section about cross platform migration - http://directory.fedoraproject.org/wiki/DS_Admin_Migration#Cross_platform - and let us know what you think, especially if you are an admin who will actually be using this in a production environment.

3 4

[Fedora-directory-users] window policy manager, again doesn't appear
by Maurizio Marini 09 Jul '07

09 Jul '07

i am astonished on this incredible but true issue :( after some hours of testing on login and password changes (nothing of strange), now window policy manager (title: Subtree Password Policy), does appear for a fraction of second, then disappear lasting the window empty with the grey background and a small square in center of it :( m.

2 1

[Fedora-directory-users] window policymanager, problem solved
by Maurizio Marini 06 Jul '07

06 Jul '07

the problem was: "when i select "For user" or "For subtree.", the Password Policy window appears, and after a second all the content disappear; i can see only a small grey square on the center of the window." Solution: the window appear empty due my notebook screen resolution, very narrow (1280x880); the server fds is on a vmware on this notebook, even more narrow!, 1024x768; the window that should appear, instead, is very height, i could see it on another pc fyi Maurizio

1 0

[Fedora-directory-users] web administration unable to connect to ldap server
by Maurizio Marini 05 Jul '07

05 Jul '07

Hi, after a fresh installation of 2 fds server, i put them on replica; after, i tested that all was ok, i connect by web administration and i dicovered that : An error occurred while contacting the LDAP server. (Can't connect to the LDAP server) A connection to the server could not be opened. Contact your server administrator for assistance. whatever i do; on logs there is nothing expecial; all 2 server suffer the same issue; now i re-installed one of them and all is ok, on this one. On the other, the access and error logs under slapd-serverid/logs doesn't report anything during web acces Domain Manager login, on the admin-serv/logs i see: tail -f access 192.168.45.1 - - [04/Jul/2007:16:08:23 +0200] "GET /clients/dsgw/bin/lang?context=dsgw&file=clear.gif HTTP/1.1" 302 306 192.168.45.1 - - [04/Jul/2007:16:08:23 +0200] "GET /clients/dsgw/html/clear.gif HTTP/1.1" 200 43 192.168.45.1 - - [04/Jul/2007:16:08:21 +0200] "POST /clients/dsgw/bin/doauth HTTP/1.1" 200 798 192.168.45.1 - - [04/Jul/2007:16:08:31 +0200] "GET /favicon.ico HTTP/1.1" 403 282 192.168.45.1 - - [04/Jul/2007:16:08:31 +0200] "GET /favicon.ico HTTP/1.1" 403 282 tail -f error Wed Jul 04 16:08:31 2007] [notice] [client 192.168.45.1] admserv_host_ip_check: ap_get_remote_host could not resolve 192.168.45.1 [Wed Jul 04 16:08:31 2007] [error] [client 192.168.45.1] client denied by server configuration: /opt/fedora-ds/favicon.ico [Wed Jul 04 16:08:31 2007] [notice] [client 192.168.45.1] admserv_host_ip_check: ap_get_remote_host could not resolve 192.168.45.1 [Wed Jul 04 16:08:31 2007] [error] [client 192.168.45.1] client denied by server configuration: /opt/fedora-ds/favicon.ico these same eror are on the server ok. So, i argue that really admin-server is unable to contact ldap server in any way. What can be happened? Maurizio

2 1

[Fedora-directory-users] Problem with users' passwords
by Saied W. Andalib 05 Jul '07

05 Jul '07

I've migrated some users from openldap to fds-1.0.4. I got the ldif file with ldapsearch. Then, the resulting user ldif file was transferred to fds through the Directory Server Console via the "Import Databases" option under the "Tasks" tab. Everything seems fine. All users' data are imported to fds which can be verified in the Console. There's one problem, however. None of these users can log in. Their passwords are rejected with invalid credentials error. However, if I change their passwords manually in the Directory Console, they can log in fine! Is there a way to transfer their passwords correctly?! Thanks in advance, SWA

4 6

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users July 2007