389-users August 2009

389-users@lists.fedoraproject.org

24 participants
33 discussions

question
by nima rafiee 18 Aug '09

18 Aug '09

hi I installed fedra-directory server . It worked till I install perl -ol-schema.pl and aldo stupssh.12 to use samba but after I did I couldnt login to fedora-ds console the error is bad : usr and password for directory manager of directoy problem but Im sure that my userid is cn=directory manger and my pass is correct too what should i do I dont know this erro is because of those file that i installed or somthing else

2 1

nsDirectoryServerTask objectClass
by Juan Asensio Sánchez 18 Aug '09

18 Aug '09

Hi I am trying to create a task to update the index database, according to the instructions described here: - http://www.redhat.com/docs/manuals/dir-server/8.1/admin/applying-indexes.ht… - http://directory.fedoraproject.org/wiki/Task_Invocation_Via_LDAP_Design But when I create the task from a Perl script, i get an error about unknown object class: my $entry = Net::LDAP::Entry->new(); $tmp_index_name = 'cn'; my $cn = "$tmp_index_name index task"; $entry->dn("cn=$cn, cn=index, cn=tasks, cn=config"); $entry->add('objectClass' => ['nsDirectoryServerTask']); $entry->add('cn' => $cn); $entry->add('nsindexattribute' => "\"eq:pres\""); my $res = $entry->update($ldap_conn); The error is 'unknown object class "nsDirectoryServerTask"'. Where is that objectClass defined? # rpm -qa | grep -i fedora fedora-ds-admin-1.1.1-1.fc6 fedora-ds-1.1.0-3.fc6 fedora-ds-base-1.1.0-3.fc6 fedora-admin-console-1.1.0-4.fc6 fedora-idm-console-1.1.0-5.fc6 fedora-ds-console-1.1.0-5.fc6 # uname -a Linux grsgscbulp0301.sacyl.es 2.6.18-128.1.10.el5.centos.plusPAE #1 SMP Mon May 11 07:51:33 EDT 2009 i686 i686 i386 GNU/Linux Regards and thanks in advance.

2 6

What is Password Synchronization?
by info＠silkwise.com 18 Aug '09

18 Aug '09

Dear Sir/Madam, SilkWise.com is a popular question answer website. Some of our users asked the above question, and we think you are the domain expert who can provide a great answer to it. Can you help to answer the question or improve the current answer at the following link? <a href="http://www.silkwise.com/content/viewthread_thread,8025">http://www.silkwise.com/content/viewthread_thread,8025</a> Everyone has unique expertise. SilkWise is the place to share your wisdom, build your networks, and market yourself! SilkWise Team To stop future messages from me, visit http://silkwise.com/unsubscribe contact PO BOX 36092 Milpitas,CA

1 0

my email
by nima rafiee 18 Aug '09

18 Aug '09

rafiee.nima(a)gmail.com

1 0

Console error after upgrading to renamed389 packages
by Anthony Joseph Messina 17 Aug '09

17 Aug '09

When I attempt to connect using the 389-console, I get the following errors in the admin-serv/errors log as if the 389-console is still looking for the wrong files: [Sat Aug 15 12:54:49 2009] [error] [client 192.168.1.11] File does not exist: /usr/share/dirsrv/html/java/jars [Sat Aug 15 12:54:49 2009] [error] [client 192.168.1.11] File does not exist: /usr/share/dirsrv/html/java/fedora-admin-1.1.jar [Sat Aug 15 12:54:49 2009] [error] [client 192.168.1.11] File does not exist: /usr/share/dirsrv/html/fedora-admin-1.1.jar Is anyone else having this problem? Any ideas on how to fix it? -- Anthony - http://messinet.com - http://messinet.com/~amessina/gallery 8F89 5E72 8DF0 BCF0 10BE 9967 92DC 35DC B001 4A4E

3 5

LDAP Monitoring CN=Monitor
by Andreas Andersson 17 Aug '09

17 Aug '09

Hi! My name is Andreas and I want to inform you about a little project I've been working with the last couple of months called CN=Monitor. It's about monitoring and verifiying directory servers with focus on 389/RHDS. From single installed servers to large scaled deployments. Its a webbased application where you can: * Verify availability, compare load and performance between servers * Collect historical events for long term analysis (and get weekly reports by mail) * Verify cluster and load balancing functionality * Query several directories at the same time for data consistancy verification ... and a lot more. Project page: http://cnmonitor.sourceforge.net Freshmeat: http://freshmeat.net/projects/cnmonitor Tell me what you think! I'm right now working on version 1.1 so if you have any feature requests let me know! Best regards - Andreas Andersson

2 2

SSH config with FDS
by Prashanth Sundaram 17 Aug '09

17 Aug '09

All, I am having trouble configured SSH access using FDS. I am trying to configure using the host attribute in the directory schema to verify the accesss. I enabled pam_check_host_attr, pam_lookup_policy, pam_login_attribute=uid, pam_password_clear_remove_old and respective uri in ldap.conf. Please note I have not enabled ssl in my DS, I am trying to do this one-step at a time. Is there any extra parameters need to be configured? Since my db is imported from openldap and AD, I have stripped it to basic schema and here it is. Just to see if this has to do anything. dn: uid=username,ou=People,dc=fedorads,dc=net cn: Firstname Lastname gecos: Firstname Lastname gidNumber: 2005 homeDirectory: /home/username loginShell: /bin/bash objectClass: top objectClass: account objectClass: posixAccount uid: amolinaro uidNumber: 2105 userPassword: {MD5}/42DQx3FHKdMlGHAspWv1lFg

1 0

Post upgrade to 389-ds* from fedora-ds*
by Anthony Joseph Messina 16 Aug '09

16 Aug '09

The upgrade has beem quite rough as seen by my previous email today. I am now able to use the 389-console to access my upgraded 389ds server and admin server. Most of the issues seem to relate to the fact that I had SSL enabled on my admin server which is a problem if you attempt to upgrade via the instructions here: http://www.redhat.com/docs/manuals/dir-server/8.1/install/upgrade.html the setup-ds-admin.pl -u command wants you to enter a new CA cert, even though I already had one in there. Also, once I finally got around that, I now am not able to use the "Manage Certificates" task/utility as it appears that I don't have the netscape pkcs#11 internal security module installed, though I can access the server just fine with TLS/SSL. I also cannot configure the admin server via the console with a message: "no protocol: asmin-serv/tasks/Configuration/ServerSetup" See the attached screenshots. Any help is appreciated. I had done a lot of reading about updating before I did this and it turned out to be a disaster anyway. -- Anthony - http://messinet.com - http://messinet.com/~amessina/gallery 8F89 5E72 8DF0 BCF0 10BE 9967 92DC 35DC B001 4A4E

1 0

Disable SSL in Administration server from command line?
by Wolf Siedler 14 Aug '09

14 Aug '09

Hi, I probably caused a major hiccup in my system - I can't log onto anymore by the Java console to the Administration Server. Unfortunately, my direcory server knowledge is not yet very deep so I got lost now. Last action I had done before that the attempted removal of SSL encryption from the Administration Server. Originally, I had connected with SSL encryption to the Admin Server. I then went to Configuration - Encryption, unchecked "Enable SSL for this server" saved everything and restarted dirsrv-admin on the command line. The outcome was as desired: Originally I connected the console by "https://admin.example.com:20126". After this change, connecting via "http://admin.example.com":20126" worked. In both cases, I connected from a remote PC. But then I goofed by rechecking "Enable SSL for this server" and saving the settings (nothing else was changed, in particular not the previously working certificate settings). After I few distractions I had forgotten about this and restarted the dirsrv-admin. Since then I can't log on via fedora-idm-console anymore. Neither "https://admin.example.com:20126" nor "http://admin.example.com":20126" works anymore. For https://admin.example.com:20216, I get the error: Cannot connect to the Admin Server "https://admin.example.com:20126" The URL is not correct or the server is not working. For http://admin.example.com:20216, I get this error: Cannot log on because of an incorrect User ID, Incorrect password or Directory problem. java.io.EOFException: Connection lost OK, the second failure I expected, but not the first one. I ca not believe that it is a typing error in URL, user name or password as all this information comes from a script and except for https/http, there were no modifications at all to this script. For both attempts, /var/log/dirsrv/admin-serv/error shows > [Fri Aug 14 16:19:05 2009] [error] SSL Library Error: -12268 Cannot > connect: SSL is disabled > [Fri Aug 14 16:19:25 2009] [error] SSL Library Error: -12268 Cannot > connect: SSL is disabled > [Fri Aug 14 16:32:39 2009] [error] SSL Library Error: -12268 Cannot > connect: SSL is disabled > [Fri Aug 14 16:35:26 2009] [error] SSL Library Error: -12268 Cannot > connect: SSL is disabled So it seems to me as if during the attempted reenabling of SSL on the Admin Server, something went really wrong. Hence my question: Is it possible to force SSL usage from the Admin Server by command line? I saw http://directory.fedoraproject.org/wiki/Howto:SSL#Starting_the_Server_with_… and hoped that something similar is possible in reverse direction? Is there any way to overcome this problem? It would be most appreciated is a complete reinstallation could be avoided. I was on the way to a full backup (I do have an LDIF export) when I encountered problems and messed up things while trying to get the backup done. Any advice would be highly appreciated! Regards, Wolf PS: Installed versions are: fedora-ds-1.1.2-1.fc6 fedora-idm-console-1.1.1-1.fc6 fedora-ds-dsgw-1.1.1-1.fc6 fedora-ds-admin-console-1.1.2-1.fc6 fedora-ds-base-1.1.3-2.fc6 fedora-ds-console-1.1.2-1.fc6 fedora-ds-admin-1.1.6-1.fc6

2 1

Disable SSL in Administration server from command line?
by Wolf Siedler 14 Aug '09

14 Aug '09

As a follow-up: The console also doesn't work (same errors) locally on the machine where the directory server is installed. I would also consider most helpful any advice on how to properly enable SSL from command line (again) for the Admin Server. Either way - as long as I can get the console operational again... Many thanks for any advice! Regards, Wolf

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users August 2009