389-users March 2011

389-users@lists.fedoraproject.org

29 participants
29 discussions

Announcing 389 Directory Server version 1.2.8 Release Candidate 1
by Rich Megginson 03 Mar '11

03 Mar '11

The 389 Project team is pleased to announce the release of 389-ds-base-1.2.8 Release Candidate 1. This release has fixes for bugs found in 1.2.8 alpha testing and bugs from earlier releases. Installation yum install --enablerepo=updates-testing 389-ds # or for EPEL yum install --enablerepo=epel-testing 389-ds setup-ds-admin.pl Upgrade yum upgrade --enablerepo=updates-testing 389-ds-base idm-console-framework 389-admin 389-ds-console 389-admin-console # or for EPEL yum upgrade --enablerepo=epel-testing 389-ds-base idm-console-framework 389-admin 389-ds-console 389-admin-console setup-ds-admin.pl -u How to Give Feedback The best way to provide feedback is via the Fedora Update system. Each update is broken down by package and platform. For example, if you are using Fedora 13, and you have successfully installed or upgraded all of the packages, and the console and etc. works, then go to the links below for Fedora 13 and provide feedback. * 389-ds-base-1.2.8.rc1 ** EL-5 - https://admin.fedoraproject.org/updates/389-ds-base-1.2.8-0.6.rc1.el5 ** Fedora 13 - https://admin.fedoraproject.org/updates/389-ds-base-1.2.8-0.6.rc1.fc13 ** Fedora 14 - https://admin.fedoraproject.org/updates/389-ds-base-1.2.8-0.6.rc1.fc14 ** Fedora 15 - https://admin.fedoraproject.org/updates/389-ds-base-1.2.8-0.6.rc1.fc15 scroll down to the bottom of the page, and click on the Add a comment >> link * select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button If you are using a build on another platform, just send us an email to 389-users(a)lists.fedoraproject.org Reporting Bugs If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389 More Information * Release Notes - http://port389.org/wiki/Release_Notes * Install_Guide - http://port389.org/wiki/Install_Guide * Download - http://port389.org/wiki/Download

1 0

Ciphers persistant after restart
by Gerrard Geldenhuis 03 Mar '11

03 Mar '11

Hi Unfortunately I am stuck with a slightly older version of 389 at the moment so if this is fixed in a later version then great otherwise I include the details to try an reproduce. Versions: 389-admin-1.1.11-1.el5 389-admin-console-1.1.5-1.el5 389-admin-console-doc-1.1.5-1.el5 389-adminutil-1.1.8-4.el5 389-console-1.1.4-1.el5 389-ds-1.2.1-1.el5 389-ds-base-1.2.6.1-2.el5 389-ds-console-1.2.3-1.el5 389-ds-console-doc-1.2.3-1.el5 389-dsgw-1.1.5-1.el5 Problem: Open admin console Select Encryption tab and then click on settings button. Select TLS tab and remove( uncheck) all ciphers below 128bits level Click Ok, and save Exit admin console Restart admin server Log into admin console again. The unchecked ciphers removed a moment ago is checked again... Monitoring the audit log does show that changes are being made, I need to go through it with a fine tooth comb though. Any thoughts on why this is happening, a bug a feature to protect against dumb users maybe? Regards ________________________________________________________________________ In order to protect our email recipients, Betfair Group use SkyScan from MessageLabs to scan all Incoming and Outgoing mail for viruses. ________________________________________________________________________

1 2

Quick Classic CoS question
by James Roman 02 Mar '11

02 Mar '11

I have a classic Class of Service that I want to modify. Currently it applies one attribute on each assigned entry. I have three other attributes that I'd like to have the same CoS apply. I'm not sure how to identify more than one cosattribute. Do I simply add multiple cossattribute attributes to the CoS definition or is there a format for listing multiple attribute values in the cosattribute attributes in the CoS definition?

2 1

advice on ssl cert rotation
by jon heise 02 Mar '11

02 Mar '11

Recently i had ssl certs expire on my directory servers, currently i have one running without using an ssl cert, the secondary server is still set to use the old cert and as such it is not functioning. On the primary server the admin server has been set to use a new self signed cert but we are locked out of that. Is there a way to change what cert the ldap server will load without the use of the admin server ?

4 3

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users March 2011